Endpoint groups¶
The v2 API has 118 operations. These pages group them by topic. Each page lists the operations of its group with a short description and the key scopes that may call them, plus notes on behaviour that the specification does not spell out.
The specification¶
The OpenAPI specification is the reference for request and response schemas. These pages explain what the operations are for; they do not repeat the schemas. You can read the specification as interactive documentation in the app: select the API documentation icon in the right-hand icon bar. See API Documentation Browser.
The base URL is https://api.trustsource.io/v2. Paths on these pages never contain the version. Send your key in the x-api-key header.
Groups¶
| Group | Path prefix | Operations |
|---|---|---|
| Authorization | /account |
1 |
| Projects | /core |
12 |
| Modules | /core |
9 |
| Products | /core |
16 |
| Scans | /core |
6 |
| Imports (CycloneDX, SPDX) | /core |
5 |
| OBOM | /core |
3 |
| Tests (SARIF) | /core |
4 |
| Reports | /core |
8 |
| Risks | /core |
20 |
| Threat models | /core |
5 |
| Users | /core |
2 |
| Compliance check | /compliance |
2 |
| Compliance approvals | /compliance |
5 |
| Compliance releases | /compliance |
4 |
| CSAF documents | /compliance |
1 |
| CSAF feed | /compliance |
2 |
| Company FOSS | /compliance |
1 |
| Repository (DeepScan) | /repository |
3 |
| Vulnerabilities | /vulnerabilities |
4 |
| EUVD & EPSS | /euvd, /epss |
4 |
| PSIRT | /psirt |
1 |