--- title: "GET /componentRelease/{uuid}" method: GET path: "/componentRelease/{uuid}" tags: ["TEA Component Release"] --- # GET /componentRelease/{uuid} `GET /componentRelease/{uuid}` Get the TEA Component Release with its latest collection ## Path parameters - `uuid` string, uuid, required — A UUID ## Response `200` Requested TEA Component Release and its latest Collection found and returned - ComponentReleaseWithCollection — A TEA Component Release combined with its latest collection - `release` Release, required — A TEA Component Release - `uuid` string, uuid, required — A UUID - `component` string, uuid — A UUID - `componentName` string — Name of the TEA Component this release belongs to - `version` string, required — Version number - `createdDate` string, date-time, required — Timestamp - `releaseDate` string, date-time — Timestamp - `preRelease` boolean — A flag indicating pre-release (or beta) status. May be disabled after the creation of the release object, but can't be enabled after creation of an object. - `identifiers` Identifier[] — List of identifiers for the component - `idType` 'CPE' | 'TEI' | 'PURL' — Enumeration of identifiers types - `idValue` string — Identifier value - `distributions` ReleaseDistribution[] — List of different formats of this component release - `distributionType` string — Unique identifier for the distribution type. - `description` string — Free-text description of the distribution. - `identifiers` Identifier[] — List of identifiers specific to this distribution. - `idType` 'CPE' | 'TEI' | 'PURL' — Enumeration of identifiers types - `idValue` string — Identifier value - `url` string, url — Direct download URL for the distribution. - `signatureUrl` string, url — Direct download URL for the distribution's external signature. - `checksums` Checksum[] — List of checksums for the distribution. - `algType` 'MD5' | 'SHA-1' | 'SHA-256' | 'SHA-384' | 'SHA-512' | 'SHA3-256' | 'SHA3-384' | 'SHA3-512' | 'BLAKE2b-256' | 'BLAKE2b-384' | 'BLAKE2b-512' | 'BLAKE3' — Checksum algorithm - `algValue` string — Checksum value - `cle` Cle — Common Lifecycle Enumeration (CLE) object based on ECMA-428 TC54 TG3 CLE Specification v1.0.0. Contains lifecycle events and optional reusable definitions for a component or product. - `events` CleEvent[], required — Ordered array of CLE Event objects representing lifecycle events. MUST be ordered by ID in descending order (newest events with highest IDs first). - `id` integer, required — A unique, auto-incrementing integer identifier for the event - `type` 'released' | 'endOfDevelopment' | 'endOfSupport' | 'endOfLife' | 'endOfDistribution' | 'endOfMarketing' | 'supersededBy' | 'componentRenamed' | 'withdrawn', required — The type of CLE lifecycle event - `effective` string, date-time, required — ISO 8601 timestamp (UTC) when the event takes effect - `published` string, date-time, required — ISO 8601 timestamp (UTC) when the event was first published - `version` string — Version string (used by released event type) - `versions` CleVersionSpecifier[] — List of version specifiers affected by this event - `version` string — A specific version string - `range` string — A version range in vers format (e.g. "vers:npm/>=1.0.0|<2.0.0") - `supportId` string — Reference to a support policy ID defined in the definitions section - `license` string — License identifier (used by released event type) - `supersededByVersion` string — Version string that supersedes the affected versions (used by supersededBy event type) - `identifiers` Identifier[] — New identifiers for the component (used by componentRenamed event type) - `idType` 'CPE' | 'TEI' | 'PURL' — Enumeration of identifiers types - `idValue` string — Identifier value - `eventId` integer — ID of the event being withdrawn (used by withdrawn event type) - `reason` string — Human-readable explanation (used by withdrawn event type) - `description` string — Human-readable description of the event - `references` string[] — List of URLs to supporting documentation - `definitions` CleDefinitions — Container for reusable CLE policy definitions - `support` CleSupportDefinition[] — List of support policies - `id` string, required — Unique identifier for the support policy - `description` string, required — Human-readable description of the policy - `url` string, uri — URL to detailed documentation about this support policy - `latestCollection` Collection, required — A collection of security-related documents - `uuid` string, uuid — A UUID - `version` integer — TEA Collection version, incremented each time its content changes. Versions start with 1. - `date` string, date-time — Timestamp - `belongsTo` 'COMPONENT_RELEASE' | 'PRODUCT_RELEASE' — Indicates whether a collection belongs to a component release or a product release - `updateReason` CollectionUpdateReason — Reason for the update to the TEA collection - `type` 'INITIAL_RELEASE' | 'VEX_UPDATED' | 'ARTIFACT_UPDATED' | 'ARTIFACT_ADDED' | 'ARTIFACT_REMOVED' — Type of TEA collection update - `comment` string — Free text description - `artifacts` Artifact[] — List of TEA Artifact objects. - `uuid` string, uuid — A UUID - `name` string — Name of TEA Artifact - `type` 'ATTESTATION' | 'BOM' | 'BUILD_META' | 'CERTIFICATION' | 'FORMULATION' | 'LICENSE' | 'RELEASE_NOTES' | 'SECURITY_TXT' | 'THREAT_MODEL' | 'VULNERABILITIES' | 'OTHER' — Specifies the type of external reference. - `distributionTypes` string[] — List of component distributions types that this TEA Artifact applies to. If absent, the TEA Artifact applies to all distributions. - `formats` ArtifactFormat[] — List of objects with the same content, but in different formats. The order of the list has no significance. - `mediaType` string — The MIME type of the document - `description` string — A free text describing the TEA Artifact - `url` string, url — Direct download URL for the TEA Artifact - `signatureUrl` string, url — Direct download URL for an external signature of the TEA Artifact - `checksums` Checksum[] — List of checksums for the TEA Artifact - `algType` 'MD5' | 'SHA-1' | 'SHA-256' | 'SHA-384' | 'SHA-512' | 'SHA3-256' | 'SHA3-384' | 'SHA3-512' | 'BLAKE2b-256' | 'BLAKE2b-384' | 'BLAKE2b-512' | 'BLAKE3' — Checksum algorithm - `algValue` string — Checksum value ## Other responses - `400` — Request was Invalid - `404` — Object requested by identifier not found ## Changes - **2026-02-10** `ff2cb26a75bf` — 1 info - added the optional property `release/cle` to the response with the `200` status - **2026-01-16** `4598a8ef6a77` — 1 warning, 1 info - removed the optional property `latestCollection/artifacts/items/formats/items/mimeType` from the response with the `200` status - added the optional property `latestCollection/artifacts/items/formats/items/mediaType` to the response with the `200` status - **2025-12-13** `91acb892bca0` — 4 warning, 4 info - removed the optional property `latestCollection/artefacts` from the response with the `200` status - added the new `ARTIFACT_ADDED` enum value to the `latestCollection/updateReason/type` response property for the response status `200` - added the new `ARTIFACT_REMOVED` enum value to the `latestCollection/updateReason/type` response property for the response status `200` - added the new `ARTIFACT_UPDATED` enum value to the `latestCollection/updateReason/type` response property for the response status `200` - …4 more - …earlier changes not shown [Full history](https://skmtc.dev/cyclonedx/apis/transparency-exchange-api/changes/componentRelease/:uuid/get.md) --- [API](https://skmtc.dev/cyclonedx/apis/transparency-exchange-api.md) · [All operations](https://skmtc.dev/cyclonedx/apis/transparency-exchange-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cyclonedx/transparency-exchange-api/revisions/ff2cb26a75bf/schema)