--- title: "UpdateAssuredPackageVersion" method: PATCH path: "/v1/namespaces/{object.tenant_meta.namespace}/assured-package-versions" tags: ["AssuredPackageVersionService"] --- # UpdateAssuredPackageVersion `PATCH /v1/namespaces/{object.tenant_meta.namespace}/assured-package-versions` ## Request - Base URL: `https://api.endorlabs.com` - URL: `https://api.endorlabs.com/v1/namespaces/{object.tenant_meta.namespace}/assured-package-versions` - Auth: none declared Updates a specified assured package version. ## Path parameters - `object.tenant_meta.namespace` string, required ## Request body - AssuredPackageVersionServiceUpdateAssuredPackageVersionBody: Request to update the assured package version. - `object` object: AssuredPackageVersion is a package version that have been built, tested, and patched by Endor Labs. It includes details on how the version was built, tested, and patched, as well as information on the vulnerabilities that have been addressed through the patches. - `context` V1Context: Contexts keep objects from different scans separated. - `id` string, required: The context ID, such as a pull request ID or branch reference. - `tags` string[]: A list of tags applied to a context. Used primarily for CI and SBOM contexts. - `type` 'CONTEXT_TYPE_UNSPECIFIED' | 'CONTEXT_TYPE_MAIN' | 'CONTEXT_TYPE_EXTERNAL' | 'CONTEXT_TYPE_CI_RUN' | 'CONTEXT_TYPE_SBOM' | 'CONTEXT_TYPE_REF', required: - CONTEXT_TYPE_MAIN: Objects from a scan of the default branch. All objects in the oss namespace are in the main context. The context id is always "default". - CONTEXT_TYPE_EXTERNAL: Indicates that this object is a copy/temporary value of an object in another project. Used for same-tenant dependencies. In source code reference this is equivalent to "vendor" folders. Package versions in the external context are only scanned for call graphs. No other operations are performed on them. - CONTEXT_TYPE_CI_RUN: Objects from a PR scan. The context id is the PR UUID. Objects in this context are deleted after 30 days. - CONTEXT_TYPE_SBOM: Objects from an SBOM scan. The context id is the SBOM serial number or some other unique identifier. - CONTEXT_TYPE_REF: Objects from a scan of a specific branch. The context id is the branch reference name. - `will_be_deleted_at` string, date-time: Time that all objects in this context will be deleted. This field is deprecated and will be removed in the future. Please use the meta.will_be_deleted_at field instead. - `meta` V1Meta: Common fields for all Endor Labs resources. - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller. - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key. - `description` string: Resource description. Must be less than 1024 bytes. - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object. - `data` string[] - `search_score` number, float: search_score is the score of the resource for search. Internal use only. - `tenant` string - `will_be_deleted_at` string, date-time: Time that the resource will be deleted. - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name(). - `name` string, required: Resource name. Must be 63 characters or less. - `parent_kind` string: Parent object resource kind, for example, Project. - `parent_uuid` string: Parent object UUID. - `references` object: Map of objects referenced in a query API. - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less. - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509. - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `version` string: Message version. - `processing_status` V1ProcessingStatus - `analytic_time` string, date-time: Last time a project was analyzed. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `deactivated` boolean: Indicates whether the project is deactivated. Deactivated projects are not scanned and are not visible to users in the UI by default. - `disable_automated_scan` boolean: This is a private package and it must not be scanned by the background scheduler. It will be scanned by an endorctl client instead. Default: false. - `metadata` V1ProcessingStatusMetadata - `full_history_scan_time` string, date-time - `queue_time` string, date-time: Last time a project was queued. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `scan_state` 'SCAN_STATE_UNSPECIFIED' | 'SCAN_STATE_NOT_PROCESSED' | 'SCAN_STATE_IDLE' | 'SCAN_STATE_INGESTING' | 'SCAN_STATE_ANALYTIC' | 'SCAN_STATE_UNREACHABLE' | 'SCAN_STATE_REQUEST_FULL_RESCAN' | 'SCAN_STATE_REQUEST_INCREMENTAL_RESCAN' | 'SCAN_STATE_QUEUED' | 'SCAN_STATE_QUARANTINED': Scan state for a project or package version. - SCAN_STATE_NOT_PROCESSED: Object has not been processed by the system yet. Set when the project or package is created for the first time. A new project or package version is automatically placed in this state. - SCAN_STATE_IDLE: Object has been scanned at least once. - SCAN_STATE_INGESTING: Object is being scanned. - SCAN_STATE_ANALYTIC: Object is being analyzed. - SCAN_STATE_UNREACHABLE: Object cannot be ingested because it is not reachable from the scheduler. - SCAN_STATE_REQUEST_FULL_RESCAN: Object is marked for a complete rescan. This only applies to OSS projects. - SCAN_STATE_REQUEST_INCREMENTAL_RESCAN: Object is marked for an incremental rescan, where only new packages discovered in the scan are added. Indicates that this project should be rescanned with a higher priority. Often because it is used by a customer and we need any new packages to be discovered and scanned with higher priority. If the project is put in this state, we will scan any new packages at high priority but we will not re-scan older packages. - SCAN_STATE_QUEUED: Object is queued to be scanned. - SCAN_STATE_QUARANTINED: Scan scheduling was unsuccessful due to a system errors. Object is quarantined from additional scheduling. Potentially object is an orphan or similar situations. - `scan_time` string, date-time: Last time a project was ingested. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt - `spec` V1AssuredPackageVersionSpec - `build_attestation` SpecBuildAttestation - `commands` string[]: Commands used to build the package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the build logs. This is a signed URL valid only for four hours. - `deploy_attestation` SpecDeployAttestation - `commands` string[]: Commands used to deploy the package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the deploy logs. This is a signed URL valid only for four hours. - `ecosystem` 'ECOSYSTEM_UNSPECIFIED' | 'ECOSYSTEM_GO' | 'ECOSYSTEM_MAVEN' | 'ECOSYSTEM_PYPI' | 'ECOSYSTEM_CARGO' | 'ECOSYSTEM_NPM' | 'ECOSYSTEM_GEM' | 'ECOSYSTEM_NUGET' | 'ECOSYSTEM_PACKAGIST' | 'ECOSYSTEM_SBOM' | 'ECOSYSTEM_RPM' | 'ECOSYSTEM_DEBIAN' | 'ECOSYSTEM_GITHUB_ACTION' | 'ECOSYSTEM_COCOAPOD' | 'ECOSYSTEM_APK' | 'ECOSYSTEM_CONTAINER' | 'ECOSYSTEM_HUGGING_FACE' | 'ECOSYSTEM_C' | 'ECOSYSTEM_GIT' | 'ECOSYSTEM_AI_MODEL' | 'ECOSYSTEM_SWIFT' | 'ECOSYSTEM_CONAN' | 'ECOSYSTEM_VSCODE': - ECOSYSTEM_GO: GoLang. - ECOSYSTEM_MAVEN: Maven. - ECOSYSTEM_PYPI: Python. - ECOSYSTEM_CARGO: Rust. - ECOSYSTEM_NPM: Javascript. - ECOSYSTEM_GEM: Ruby. - ECOSYSTEM_NUGET: Dotnet. - ECOSYSTEM_PACKAGIST: PHP. - ECOSYSTEM_SBOM: SBOMs. - ECOSYSTEM_RPM: RPM. - ECOSYSTEM_DEBIAN: Debian. - ECOSYSTEM_GITHUB_ACTION: GitHub Actions. - ECOSYSTEM_COCOAPOD: Cocoapods. - ECOSYSTEM_APK: APK (alpine et.al). - ECOSYSTEM_CONTAINER: Containers. - ECOSYSTEM_HUGGING_FACE: Hugging Face. - ECOSYSTEM_C: C/C++. - ECOSYSTEM_GIT: ecosystem GIT for GIT repository dependencies. This can be used for package name of the resolved dependencies when a given repository has dependencies to other GIT repositories. Currently we use this to represent vulnerabilities for the given GIT repository. ex: git submodules, C/C++ dependencies. - ECOSYSTEM_AI_MODEL: AI models. - ECOSYSTEM_SWIFT: Ecosystem Swift consists of native Swift packages, which are defined using the Package.swift manifest file and managed by the Swift Package Manager. There is a separate ecosystem for Cocoapod packages called ECOSYSTEM_COCOAPOD, which is an alternative package manager for Swift packages. - ECOSYSTEM_CONAN: Ecosystem Conan for C/C++ packages managed by the Conan 2.x package manager. - ECOSYSTEM_VSCODE: VS Code editor extensions, distributed via the Microsoft Visual Studio Marketplace. - `package_name` string: The name of the package of this assured package version. It is calculated automatically from the assured package version name. - `reproducible_build_source_code_upload_content` string, byte - `reproducible_build_source_code_url` string: The URL to download the source code to reproduce the build of the package version. This is a signed URL valid only for four hours. - `security_attestation` SpecSecurityAttestation - `patches` SecurityAttestationPatch[]: The list of all new patches applied to the assured package version. - `description` string: The patches description. - `fix_type` 'FIX_TYPE_UNSPECIFIED' | 'FIX_TYPE_BUILD' | 'FIX_TYPE_TEST' | 'FIX_TYPE_VULN': - FIX_TYPE_UNSPECIFIED: Fix type is undefined. - FIX_TYPE_BUILD: Signifies that this patch was used to fix the build. - FIX_TYPE_TEST: Signifies that this patch was used to fix a test. - FIX_TYPE_VULN: Signifies that this patch was used to fix vulnerabilities. - `fixed_vulns` SecurityAttestationPatchVulnerability[]: The list of fixed vulnerabilities, such as GHSAs, in the assured package version. - `aliases` string[]: The list of aliases of the vulnerability. - `name` string: Name of the vulnerability, such as GHSA-qmqc-x3r4-6v39. - `uuid` string: The UUID of the corresponding Vuln message in the database that contains the vulnerability details. - `included_commits` SecurityAttestationPatchCommit[]: Stores all the included commit information. - `author` string: The author of the commit. - `commit_date` string, date-time: The date on which the commit was made. - `commit_type` 'COMMIT_TYPE_UNSPECIFIED' | 'COMMIT_TYPE_UPSTREAM' | 'COMMIT_TYPE_MANUAL', required: - COMMIT_TYPE_UNSPECIFIED: Commit type is undefined. - COMMIT_TYPE_UPSTREAM: Signifies that the commit is taken directly from an upstream commit that has not been manually modified by Endor Labs. - COMMIT_TYPE_MANUAL: Signifies that manual changes were made by Endor Labs. - `commit_url` string: The URL to the original commit, such as a GitHub link. - `message` string: The commit message. - `sha` string - `patch_files` string[]: Stores the content of the patch's files. - `validations` SecurityAttestationValidation[]: The list of validations performed on the assured package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the validation logs. This is a signed URL valid only for four hours. - `validated_with_unittest` boolean: validated_with_unittest is set to true if the exploit was tested through an unittest. - `vulnerability_name` string: The name of the vuln fixed. - `sha256` string: SHA-256 of the assured package version. For Java, this is the SHA of the jar file. - `test_attestation` SpecTestAttestation - `are_tests_run` boolean: Flag to identify whether the tests were executed or not. - `commands` string[]: Commands used to test the package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the test logs. This is a signed URL valid only for four hours. - `upgrade_summary` SpecUpgradeSummary: UpgradeInfo contains the summary of the impact of the upgrade of the package. - `are_tests_run` boolean: The flag to identify whether the test were executed or not. - `fixed_vulns` object - `line_added` integer: The number of line added with the patches. - `line_removed` integer: The number of line removed with the patches. - `number_of_endor_patches` integer: The number of patches written by Endor Labs. - `number_of_original_patches` integer: The number of patches from the original source. - `version_type` 'VERSION_TYPE_UNSPECIFIED' | 'VERSION_TYPE_PINNED' | 'VERSION_TYPE_LATEST' | 'VERSION_TYPE_AUTO', required: - VERSION_TYPE_UNSPECIFIED: Version type is undefined. - VERSION_TYPE_PINNED: Signifies that the version is pinned. For instance v1.2.3-endor-2024-01-01. - VERSION_TYPE_LATEST: Signifies that the version is latest. For instance v1.2.3-endor-latest. - VERSION_TYPE_AUTO: Signifies that the version is auto. For instance v1.2.3. - `tenant_meta` object: Git repositories are associated with a tenant. - `uuid` string: The UUID of the assured package version. - `request` V1UpdateRequest: Message used for all update requests. - `force` boolean: Force will force the update of the resource if any checks fail. - `update_mask` string: Fields to update. Defaults to all fields. ## Response `200` A successful response. - V1AssuredPackageVersion: AssuredPackageVersion is a package version that have been built, tested, and patched by Endor Labs. It includes details on how the version was built, tested, and patched, as well as information on the vulnerabilities that have been addressed through the patches. - `context` V1Context, required: Contexts keep objects from different scans separated. - `id` string, required: The context ID, such as a pull request ID or branch reference. - `tags` string[]: A list of tags applied to a context. Used primarily for CI and SBOM contexts. - `type` 'CONTEXT_TYPE_UNSPECIFIED' | 'CONTEXT_TYPE_MAIN' | 'CONTEXT_TYPE_EXTERNAL' | 'CONTEXT_TYPE_CI_RUN' | 'CONTEXT_TYPE_SBOM' | 'CONTEXT_TYPE_REF', required: - CONTEXT_TYPE_MAIN: Objects from a scan of the default branch. All objects in the oss namespace are in the main context. The context id is always "default". - CONTEXT_TYPE_EXTERNAL: Indicates that this object is a copy/temporary value of an object in another project. Used for same-tenant dependencies. In source code reference this is equivalent to "vendor" folders. Package versions in the external context are only scanned for call graphs. No other operations are performed on them. - CONTEXT_TYPE_CI_RUN: Objects from a PR scan. The context id is the PR UUID. Objects in this context are deleted after 30 days. - CONTEXT_TYPE_SBOM: Objects from an SBOM scan. The context id is the SBOM serial number or some other unique identifier. - CONTEXT_TYPE_REF: Objects from a scan of a specific branch. The context id is the branch reference name. - `will_be_deleted_at` string, date-time: Time that all objects in this context will be deleted. This field is deprecated and will be removed in the future. Please use the meta.will_be_deleted_at field instead. - `meta` V1Meta, required: Common fields for all Endor Labs resources. - `annotations` object: Annotations can be used to attach metadata to a resource message. Annotation values can be small or large, structured or unstructured, and may include characters not permitted by labels. The keys may contain alphanumerics, underscores (_), dots (.) and dashes (-). The values of an annotation must be 16384 bytes or smaller. - `create_time` string, date-time: Time the resource was created. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `created_by` string: Name and authentication source of the user who created the object, for example, ewok@endor.ai@google@api-key. - `description` string: Resource description. Must be less than 1024 bytes. - `index_data` V1IndexData: IndexData is used to index the resource for search. It's an internal object. - `data` string[] - `search_score` number, float: search_score is the score of the resource for search. Internal use only. - `tenant` string - `will_be_deleted_at` string, date-time: Time that the resource will be deleted. - `kind` string: Resource kind, for example, HelloResponse. Auto-generated using the protobuf message proto.MessageName().Name(). - `name` string, required: Resource name. Must be 63 characters or less. - `parent_kind` string: Parent object resource kind, for example, Project. - `parent_uuid` string: Parent object UUID. - `references` object: Map of objects referenced in a query API. - `tags` string[]: List of tags attached to the resource. Tags can be used to select objects and to find collections of objects that satisfy certain conditions. A tag must be 255 characters or less. - `update_time` string, date-time: Time the resource was last updated. Note: Updated on all create/patch/delete operations. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `updated_by` string: Name and authentication source of the last user who updated the object, for example, vulnerabilityingestor@endor.ai@x509. - `upsert_time` string, date-time: Time the resource was last upserted. Note: create_time is only set the first time the resource is created. upsert_time is set every time the resource is upseted. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `version` string: Message version. - `processing_status` V1ProcessingStatus - `analytic_time` string, date-time: Last time a project was analyzed. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `deactivated` boolean: Indicates whether the project is deactivated. Deactivated projects are not scanned and are not visible to users in the UI by default. - `disable_automated_scan` boolean: This is a private package and it must not be scanned by the background scheduler. It will be scanned by an endorctl client instead. Default: false. - `metadata` V1ProcessingStatusMetadata - `full_history_scan_time` string, date-time - `queue_time` string, date-time: Last time a project was queued. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt. - `scan_state` 'SCAN_STATE_UNSPECIFIED' | 'SCAN_STATE_NOT_PROCESSED' | 'SCAN_STATE_IDLE' | 'SCAN_STATE_INGESTING' | 'SCAN_STATE_ANALYTIC' | 'SCAN_STATE_UNREACHABLE' | 'SCAN_STATE_REQUEST_FULL_RESCAN' | 'SCAN_STATE_REQUEST_INCREMENTAL_RESCAN' | 'SCAN_STATE_QUEUED' | 'SCAN_STATE_QUARANTINED': Scan state for a project or package version. - SCAN_STATE_NOT_PROCESSED: Object has not been processed by the system yet. Set when the project or package is created for the first time. A new project or package version is automatically placed in this state. - SCAN_STATE_IDLE: Object has been scanned at least once. - SCAN_STATE_INGESTING: Object is being scanned. - SCAN_STATE_ANALYTIC: Object is being analyzed. - SCAN_STATE_UNREACHABLE: Object cannot be ingested because it is not reachable from the scheduler. - SCAN_STATE_REQUEST_FULL_RESCAN: Object is marked for a complete rescan. This only applies to OSS projects. - SCAN_STATE_REQUEST_INCREMENTAL_RESCAN: Object is marked for an incremental rescan, where only new packages discovered in the scan are added. Indicates that this project should be rescanned with a higher priority. Often because it is used by a customer and we need any new packages to be discovered and scanned with higher priority. If the project is put in this state, we will scan any new packages at high priority but we will not re-scan older packages. - SCAN_STATE_QUEUED: Object is queued to be scanned. - SCAN_STATE_QUARANTINED: Scan scheduling was unsuccessful due to a system errors. Object is quarantined from additional scheduling. Potentially object is an orphan or similar situations. - `scan_time` string, date-time: Last time a project was ingested. Format: 2017-01-15T01:30:15.01Z RFC 3339: https://www.ietf.org/rfc/rfc3339.txt - `spec` V1AssuredPackageVersionSpec, required - `build_attestation` SpecBuildAttestation - `commands` string[]: Commands used to build the package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the build logs. This is a signed URL valid only for four hours. - `deploy_attestation` SpecDeployAttestation - `commands` string[]: Commands used to deploy the package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the deploy logs. This is a signed URL valid only for four hours. - `ecosystem` 'ECOSYSTEM_UNSPECIFIED' | 'ECOSYSTEM_GO' | 'ECOSYSTEM_MAVEN' | 'ECOSYSTEM_PYPI' | 'ECOSYSTEM_CARGO' | 'ECOSYSTEM_NPM' | 'ECOSYSTEM_GEM' | 'ECOSYSTEM_NUGET' | 'ECOSYSTEM_PACKAGIST' | 'ECOSYSTEM_SBOM' | 'ECOSYSTEM_RPM' | 'ECOSYSTEM_DEBIAN' | 'ECOSYSTEM_GITHUB_ACTION' | 'ECOSYSTEM_COCOAPOD' | 'ECOSYSTEM_APK' | 'ECOSYSTEM_CONTAINER' | 'ECOSYSTEM_HUGGING_FACE' | 'ECOSYSTEM_C' | 'ECOSYSTEM_GIT' | 'ECOSYSTEM_AI_MODEL' | 'ECOSYSTEM_SWIFT' | 'ECOSYSTEM_CONAN' | 'ECOSYSTEM_VSCODE': - ECOSYSTEM_GO: GoLang. - ECOSYSTEM_MAVEN: Maven. - ECOSYSTEM_PYPI: Python. - ECOSYSTEM_CARGO: Rust. - ECOSYSTEM_NPM: Javascript. - ECOSYSTEM_GEM: Ruby. - ECOSYSTEM_NUGET: Dotnet. - ECOSYSTEM_PACKAGIST: PHP. - ECOSYSTEM_SBOM: SBOMs. - ECOSYSTEM_RPM: RPM. - ECOSYSTEM_DEBIAN: Debian. - ECOSYSTEM_GITHUB_ACTION: GitHub Actions. - ECOSYSTEM_COCOAPOD: Cocoapods. - ECOSYSTEM_APK: APK (alpine et.al). - ECOSYSTEM_CONTAINER: Containers. - ECOSYSTEM_HUGGING_FACE: Hugging Face. - ECOSYSTEM_C: C/C++. - ECOSYSTEM_GIT: ecosystem GIT for GIT repository dependencies. This can be used for package name of the resolved dependencies when a given repository has dependencies to other GIT repositories. Currently we use this to represent vulnerabilities for the given GIT repository. ex: git submodules, C/C++ dependencies. - ECOSYSTEM_AI_MODEL: AI models. - ECOSYSTEM_SWIFT: Ecosystem Swift consists of native Swift packages, which are defined using the Package.swift manifest file and managed by the Swift Package Manager. There is a separate ecosystem for Cocoapod packages called ECOSYSTEM_COCOAPOD, which is an alternative package manager for Swift packages. - ECOSYSTEM_CONAN: Ecosystem Conan for C/C++ packages managed by the Conan 2.x package manager. - ECOSYSTEM_VSCODE: VS Code editor extensions, distributed via the Microsoft Visual Studio Marketplace. - `package_name` string: The name of the package of this assured package version. It is calculated automatically from the assured package version name. - `reproducible_build_source_code_upload_content` string, byte - `reproducible_build_source_code_url` string: The URL to download the source code to reproduce the build of the package version. This is a signed URL valid only for four hours. - `security_attestation` SpecSecurityAttestation - `patches` SecurityAttestationPatch[]: The list of all new patches applied to the assured package version. - `description` string: The patches description. - `fix_type` 'FIX_TYPE_UNSPECIFIED' | 'FIX_TYPE_BUILD' | 'FIX_TYPE_TEST' | 'FIX_TYPE_VULN': - FIX_TYPE_UNSPECIFIED: Fix type is undefined. - FIX_TYPE_BUILD: Signifies that this patch was used to fix the build. - FIX_TYPE_TEST: Signifies that this patch was used to fix a test. - FIX_TYPE_VULN: Signifies that this patch was used to fix vulnerabilities. - `fixed_vulns` SecurityAttestationPatchVulnerability[]: The list of fixed vulnerabilities, such as GHSAs, in the assured package version. - `aliases` string[]: The list of aliases of the vulnerability. - `name` string: Name of the vulnerability, such as GHSA-qmqc-x3r4-6v39. - `uuid` string: The UUID of the corresponding Vuln message in the database that contains the vulnerability details. - `included_commits` SecurityAttestationPatchCommit[]: Stores all the included commit information. - `author` string: The author of the commit. - `commit_date` string, date-time: The date on which the commit was made. - `commit_type` 'COMMIT_TYPE_UNSPECIFIED' | 'COMMIT_TYPE_UPSTREAM' | 'COMMIT_TYPE_MANUAL', required: - COMMIT_TYPE_UNSPECIFIED: Commit type is undefined. - COMMIT_TYPE_UPSTREAM: Signifies that the commit is taken directly from an upstream commit that has not been manually modified by Endor Labs. - COMMIT_TYPE_MANUAL: Signifies that manual changes were made by Endor Labs. - `commit_url` string: The URL to the original commit, such as a GitHub link. - `message` string: The commit message. - `sha` string - `patch_files` string[]: Stores the content of the patch's files. - `validations` SecurityAttestationValidation[]: The list of validations performed on the assured package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the validation logs. This is a signed URL valid only for four hours. - `validated_with_unittest` boolean: validated_with_unittest is set to true if the exploit was tested through an unittest. - `vulnerability_name` string: The name of the vuln fixed. - `sha256` string: SHA-256 of the assured package version. For Java, this is the SHA of the jar file. - `test_attestation` SpecTestAttestation - `are_tests_run` boolean: Flag to identify whether the tests were executed or not. - `commands` string[]: Commands used to test the package version. - `logs_upload_content` string, byte - `logs_url` string: The URL to download the test logs. This is a signed URL valid only for four hours. - `upgrade_summary` SpecUpgradeSummary: UpgradeInfo contains the summary of the impact of the upgrade of the package. - `are_tests_run` boolean: The flag to identify whether the test were executed or not. - `fixed_vulns` object - `line_added` integer: The number of line added with the patches. - `line_removed` integer: The number of line removed with the patches. - `number_of_endor_patches` integer: The number of patches written by Endor Labs. - `number_of_original_patches` integer: The number of patches from the original source. - `version_type` 'VERSION_TYPE_UNSPECIFIED' | 'VERSION_TYPE_PINNED' | 'VERSION_TYPE_LATEST' | 'VERSION_TYPE_AUTO', required: - VERSION_TYPE_UNSPECIFIED: Version type is undefined. - VERSION_TYPE_PINNED: Signifies that the version is pinned. For instance v1.2.3-endor-2024-01-01. - VERSION_TYPE_LATEST: Signifies that the version is latest. For instance v1.2.3-endor-latest. - VERSION_TYPE_AUTO: Signifies that the version is auto. For instance v1.2.3. - `tenant_meta` V1TenantMeta: Tenant related data for the tenant containing the resource. - `namespace` string, required: Namespaces are a way to organize organizational units into virtual groupings of resources. Namespaces must be a fully qualified name, for example, the child namespace of namespace "endor.prod" called "app" is called "endor.prod.app". - `uuid` string: The UUID of the assured package version. ## Other responses - `default`: An unexpected error response. ## Changes - **2026-11-03** `4acd9fe15140`: 1 info - endpoint added [Operation history](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/changes/v1/namespaces/:object.tenant_meta.namespace/assured-package-versions/patch.md) --- [API](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference.md) - [All operations](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/endorlabs/apis/endor-labs-rest-api-reference/revisions/9c1a64674369?raw)