verify

Verify Exported Sbom

Check the Ed25519 signature on a CycloneDX SBOM exported by Badge.

Public (a buyer's security team has no Badge account). Flag off -> 404. A bad signature is a 200 with valid=false and no identity fields: the answer to "is this document authentic" must not echo unauthenticated content back as if it were trusted.

post/api/v1/verify/sbom

Request

  • Base URL: https://api.badgeia.com
  • URL: https://api.badgeia.com/api/v1/verify/sbom
  • Auth: none declared

Response

Successful Response

validboolean required
key_idstring nullable
agent_idstring nullable
signed_atstring nullable
reasonstring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.