---
title: "Get Sbom Diff"
method: GET
path: "/repos/{repo_id}/security/sbom-diff"
tags: ["security"]
---

# Get Sbom Diff

`GET /repos/{repo_id}/security/sbom-diff`

Added / removed / version-changed dependencies between two snapshots
of the same repo. Pure SQL over `snapshot_dependencies` — no SBOM
parsing. Both snapshots go through the same read-access + tier gate as
every other security read.

## Path parameters

- `repo_id` string, required

## Query parameters

- `from` string, required
- `to` string, required

## Response `200`

Successful Response

- SbomDiffResponse
  - `from_snapshot_id` string, required
  - `to_snapshot_id` string, required
  - `added` SbomDiffEntry[]
    - `ecosystem` string, required
    - `name` string, required
    - `version` string, required
  - `removed` SbomDiffEntry[]
    - `ecosystem` string, required
    - `name` string, required
    - `version` string, required
  - `changed` SbomDiffChange[]
    - `ecosystem` string, required
    - `name` string, required
    - `from_version` string, required
    - `to_version` string, required
  - `counts` object

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/repowise/repowise-hosted-api/revisions/1e57283a9737/schema)