---
title: "POST request to resolve vulnerable symbols"
method: POST
path: "/api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols"
tags: ["Static Analysis"]
---

# POST request to resolve vulnerable symbols

`POST /api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `code_analysis_read`

## Request body

- ResolveVulnerableSymbolsRequest: The top-level request object for resolving vulnerable symbols in a set of packages.
  - `data` ResolveVulnerableSymbolsRequestData: The data object in a request to resolve vulnerable symbols, containing the package PURLs and request type.
    - `attributes` ResolveVulnerableSymbolsRequestDataAttributes: The attributes of a request to resolve vulnerable symbols, containing the list of package PURLs to check.
      - `purls` string[]: The list of Package URLs (PURLs) for which to resolve vulnerable symbols.
    - `id` string: An optional identifier for this request data object.
    - `type` 'resolve-vulnerable-symbols-request', required: The type identifier for requests to resolve vulnerable symbols.

## Response `200`

OK

- ResolveVulnerableSymbolsResponse: The top-level response object returned when resolving vulnerable symbols for a set of packages.
  - `data` ResolveVulnerableSymbolsResponseData: The data object in a response for resolving vulnerable symbols, containing the result attributes and response type.
    - `attributes` ResolveVulnerableSymbolsResponseDataAttributes: The attributes of a response containing resolved vulnerable symbols, organized by package.
      - `results` ResolveVulnerableSymbolsResponseResults[]: The list of resolved vulnerable symbol results, one entry per queried package.
        - `purl` string: The Package URL (PURL) uniquely identifying the package for which vulnerable symbols are resolved.
        - `vulnerable_symbols` ResolveVulnerableSymbolsResponseResultsVulnerableSymbols[]: The list of vulnerable symbol groups found in this package, organized by advisory.
          - `advisory_id` string: The identifier of the security advisory that describes the vulnerability.
          - `symbols` ResolveVulnerableSymbolsResponseResultsVulnerableSymbolsSymbols[]: The list of symbols that are vulnerable according to this advisory.
            - `name` string: The name of the vulnerable symbol.
            - `type` string: The type classification of the vulnerable symbol (e.g., function, class, variable).
            - `value` string: The value or identifier associated with the vulnerable symbol.
    - `id` string: The unique identifier for this response data object.
    - `type` 'resolve-vulnerable-symbols-response', required: The type identifier for responses containing resolved vulnerable symbols.

## Other responses

- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)