--- title: "Post dependencies for analysis" method: POST path: "/api/v2/static-analysis-sca/dependencies" tags: ["Static Analysis"] --- # Post dependencies for analysis `POST /api/v2/static-analysis-sca/dependencies` ## Request - Base URL: `https://api.datadoghq.com` - URL: `https://api.datadoghq.com/api/v2/static-analysis-sca/dependencies` - Auth: one of: - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY` - OAuth 2 - Authorization code: `/oauth2/v1/authorize` - Token URL: `/oauth2/v1/token` scopes: `code_analysis_read` ## Request body - ScaRequest: The top-level request object for submitting a Software Composition Analysis (SCA) scan result. - `data` ScaRequestData: The data object in an SCA request, containing the dependency graph attributes and request type. - `attributes` ScaRequestDataAttributes: The attributes of an SCA request, containing dependency graph data, vulnerability information, and repository context. - `commit` ScaRequestDataAttributesCommit: Metadata about the commit associated with the SCA scan, including author, committer, and branch information. - `author_date` string: The date when the commit was authored. - `author_email` string: The email address of the commit author. - `author_name` string: The full name of the commit author. - `branch` string: The branch name on which the commit was made. - `committer_email` string: The email address of the person who committed the change. - `committer_name` string: The full name of the person who committed the change. - `sha` string: The SHA hash uniquely identifying the commit. - `dependencies` ScaRequestDataAttributesDependenciesItems[]: The list of dependencies discovered in the repository. - `exclusions` string[]: A list of patterns or identifiers that should be excluded from analysis for this dependency. - `group` string: The group or organization namespace of the dependency (e.g., Maven group ID). - `is_dev` boolean: Indicates whether this is a development-only dependency not used in production. - `is_direct` boolean: Indicates whether this is a direct dependency (as opposed to a transitive one). - `language` string: The programming language ecosystem of this dependency (e.g., java, python, javascript). - `locations` ScaRequestDataAttributesDependenciesItemsLocationsItems[]: The list of source file locations where this dependency is declared. - `block` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition: A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `file_name` string: The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `name` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition: A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `file_name` string: The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `namespace` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition: A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `file_name` string: The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `version` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition: A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `file_name` string: The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition: A specific position (line and column) within a source file. - … - `name` string: The name of the dependency package. - `package_manager` string: The package manager responsible for this dependency (e.g., maven, pip, npm). - `purl` string: The Package URL (PURL) uniquely identifying this dependency. - `reachable_symbol_properties` ScaRequestDataAttributesDependenciesItemsReachableSymbolPropertiesItems[]: Properties describing symbols from this dependency that are reachable in the application code. - `name` string: The name of the reachable symbol property. - `value` string: The value of the reachable symbol property. - `version` string: The version of the dependency. - `env` string: The environment context in which the SCA scan was performed (e.g., production, staging). - `files` ScaRequestDataAttributesFilesItems[]: The list of dependency manifest files found in the repository. - `name` string: The name or path of the file within the repository. - `purl` string: The Package URL (PURL) associated with the dependency declared in this file. - `relations` ScaRequestDataAttributesRelationsItems[]: The dependency relations describing the inter-component dependency graph. - `depends_on` string[]: The list of BOM references that this component directly depends on. - `ref` string: The BOM reference of the component that has dependencies. - `repository` ScaRequestDataAttributesRepository: Information about the source code repository being analyzed. - `url` string: The URL of the repository. - `service` string: The name of the service or application being analyzed. - `tags` object: A map of key-value tags providing additional metadata for the SCA scan. - `vulnerabilities` ScaRequestDataAttributesVulnerabilitiesItems[]: The list of vulnerabilities identified in the dependency graph. - `affects` ScaRequestDataAttributesVulnerabilitiesItemsAffectsItems[]: The list of components affected by this vulnerability. - `ref` string: The BOM reference identifying the affected component. - `bom_ref` string: The unique BOM reference identifier for this vulnerability entry. - `id` string: The vulnerability identifier (e.g., CVE ID or similar). - `id` string: An optional identifier for this SCA request data object. - `type` 'scarequests', required: The type identifier for SCA dependency analysis requests. ## Response `200` OK ## Other responses - `429`: Too many requests --- [API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)