DevGuard Compliance API
The Compliance API reports how your software measures up against the policies attached to it. It answers two questions: whether something is compliant overall, and — for a named policy — exactly which checks passed or failed.
The endpoints mirror the DevGuard hierarchy. Ask at project level for a roll-up across every asset, at asset level for the default branch, or at asset-version level to evaluate one specific branch or tag. Results are computed from the current state rather than stored, so they always reflect the latest scan.
These endpoints are read-only. Creating and enabling the policies they evaluate is done through the Policies API.
Related Documentation
- Policies API — defining the policies evaluated here
- Compliance Postures API — mapping results onto a framework control
- Compliance as Code — the model behind these checks
- Attestation Policies — writing a policy
- Why Compliance Matters — background
- Use the DevGuard API — authentication and conventions
- DevGuard API Reference