DevGuard Components API
Components are the individual packages that make up your software — everything DevGuard discovered while building the SBOM for an asset version. This API reads that inventory.
Listing components for an asset version is paged, since a real dependency tree runs to thousands of entries. The license distribution endpoint summarises the same inventory by license, which is the quickest way to see what you are shipping without walking every package.
The project-level search answers the opposite question: given a component, where does it occur? That is the endpoint to reach for when a new CVE lands and you need to know which of your projects actually pull the affected package in.
Related Documentation
- Component Search — the same search in the UI
- View Dependency Tree — how components relate to each other
- License Risk API — acting on the licenses found here
- Transitive Dependencies — why the inventory is larger than your manifest
- Software Composition Analysis — how the inventory is built
- Artifacts API — the artifacts these components come from
- Use the DevGuard API — authentication and conventions
- DevGuard API Reference