TEA Artifact

Download the content of the latest TEA Artifact revision

Download the content of the latest revision of a specific TEA Artifact.

Equivalent to the versioned download endpoint, resolving to the revision with the greatest published version — the same revision /artifact/{uuid}/latest reports. The content this returns changes when a new revision is published, so unlike the versioned endpoint the response is not immutable: caches shall revalidate it via ETag for the HTTP representation selected after negotiation. The Content-Location header is an absolute versioned URL including the API base, version path, and mediaType query parameter. That URL identifies the revision and format; HTTP content coding can still be negotiated.

When serving the content itself (200), servers shall return a strong ETag for the HTTP representation selected after negotiation, including content coding, and shall honor If-None-Match with 304. ETag is the only conditional validator for these downloads. Servers that support HEAD for this operation shall return the same headers as GET without a response body. 302 redirects are outside conditional semantics: If-None-Match applies only to the TEA-hosted download response, not to following an external Location.

get/artifact/{uuid}/latest/download

Path parameters

uuidstring uuid required

A UUID in lower case (RFC 9562)

UUID of TEA Artifact in the TEA server

Query parameters

mediaTypestring

Example:application/vnd.cyclonedx+json

Selects which of the artifact revision's formats to return, by its mediaType. The parameter value is the media type itself (for example application/vnd.cyclonedx+json), not a pre-encoded wire form. Clients shall apply query-parameter serialization once. Servers shall interpret the value after one query-decoding step.

Matching against a format's mediaType is case-insensitive for the type and subtype. Parameter names are compared case-insensitively; parameter values require exact equality. When omitted, the server selects a format using the request's Accept header per RFC 9110 section 12, and falls back to a format of its choice when Accept does not constrain the result. In either case the Content-Type of the response states which format was returned. An explicit mediaType can remove variation by Accept when it completely determines the format. When it does not, the server shall include Accept in Vary if changing or removing Accept could change the selected format, including when Accept is absent or contains */*. A mediaType query parameter does not eliminate variation by Accept-Encoding; see artifact-vary.

Example after serialization: .../download?mediaType=application%2Fvnd.cyclonedx%2Bjson

Headers

If-None-Matchstring

Conditional request validator (RFC 9110). For artifact and signature downloads, ETag is the only defined validator. Servers evaluate If-None-Match with the weak comparison function (RFC 9110 section 13.1.2) against the ETag of the representation selected after negotiation, including content-coding negotiation, and answer 304 when it matches. The corresponding 304 shall carry that representation's validator and shall carry Vary when the 200 would. When present, that ETag is a strong validator. Other validators are not defined for these operations.

Response

The content of the selected format of the latest revision of the TEA Artifact, as resolved at the time of the request.

Identical to artifact-content except for its cache policy: the latest revision changes when a new revision is published, so the response is not immutable and a cache shall revalidate it before reuse. Servers shall return a strong ETag for the selected HTTP representation. Revalidation returns 304 Not Modified when If-None-Match matches that representation's validator. Content-Location identifies the revision and format. Vary follows the same rules as artifact-content.

Changes

Changed in 18 of the 136 revisions of this API.71630

Sep 23, 20264f09e14d1ee01See the full diff
- ●
  the optional response header Content-Encoding removed for the status 200
  optional-response-header-removed
Sep 23, 202603c7ffdc11d01See the full diff
- ●
  the optional response header Content-Encoding removed for the status 200
  optional-response-header-removed
Sep 20, 2026f698addb5d2b10See the full diff
- ○
  added the optional property to the response with the status
  response-optional-property-added
- ○
  added the optional property to the response with the status
  response-optional-property-added
- ○
  added the optional property to the response with the status
  response-optional-property-added
- ○
  added the optional property to the response with the status
  response-optional-property-added
- ○
  added the optional property to the response with the status
  response-optional-property-added
- ○
  removed the OBJECT_NOT_SHAREABLE enum value from the response property for the response status
  response-property-enum-value-removed
- ○
  removed the OBJECT_NOT_SHAREABLE enum value from the response property for the response status
  response-property-enum-value-removed
- ○
  removed the OBJECT_NOT_SHAREABLE enum value from the response property for the response status
  response-property-enum-value-removed
- ○
  removed the OBJECT_NOT_SHAREABLE enum value from the response property for the response status
  response-property-enum-value-removed
- ○
  removed the OBJECT_NOT_SHAREABLE enum value from the response property for the response status
  response-property-enum-value-removed
Sep 20, 202656e8a714854913See the full diff
- ▲
  removed the media type application/octet-stream for the response with the status
  response-media-type-removed
- ○
  added the new optional header request parameter If-None-Match
  new-optional-request-parameter
- ○
  added the media type */* for the response with the status
  response-media-type-added
- ○
  added the non-success response with the status
  response-non-success-status-added
Sep 20, 202676f1dba21cda122See the full diff
- ▲
  removed the media type */* for the response with the status
  response-media-type-removed
- ●
  the optional response header Vary removed for the status 200
  optional-response-header-removed
- ●
  deleted the header request parameter If-None-Match
  request-parameter-removed
- ○
  added the media type application/octet-stream for the response with the status
  response-media-type-added
- ○
  removed the non-success response with the status
  response-non-success-status-removed
Sep 18, 202694dbf123cf8821See the full diff
- ▲
  the response header ETag became optional for the status
  response-header-became-optional
- ▲
  removed the media type application/octet-stream for the response with the status
  response-media-type-removed
- ○
  added the media type */* for the response with the status
  response-media-type-added
Sep 18, 20268d5f545b992011See the full diff
- ▲
  removed the media type */* for the response with the status
  response-media-type-removed
- ○
  added the media type application/octet-stream for the response with the status
  response-media-type-added
Sep 18, 2026ca2281a2667913See the full diff
- ▲
  removed the media type application/octet-stream for the response with the status
  response-media-type-removed
- ○
  added the new optional header request parameter If-None-Match
  new-optional-request-parameter
- ○
  added the media type */* for the response with the status
  response-media-type-added
- ○
  added the non-success response with the status
  response-non-success-status-added
Sep 18, 2026772035fe69178See the full diff
- ●
  added the new INVALID_PAGE_TOKEN enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new INVALID_PAGE_TOKEN enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new INVALID_REQUEST enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new INVALID_REQUEST enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new NO_ACCEPTABLE_FORMAT enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new NO_ACCEPTABLE_FORMAT enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new SIGNATURE_NOT_FOUND enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new SIGNATURE_NOT_FOUND enum value to the response property for the response status
  response-property-enum-value-added
Sep 18, 20265cbc102ffdf92See the full diff
- ●
  added the new NOT_IMPLEMENTED enum value to the response property for the response status
  response-property-enum-value-added
- ●
  added the new NOT_IMPLEMENTED enum value to the response property for the response status
  response-property-enum-value-added

Full history (18 revisions)