security
Download Vex
Download a CycloneDX 1.6 VEX document ({repo}-{shortsha}.vex.cdx.json).
Unlike the SBOM (raw syft passthrough), VEX is generated fresh from the tables at download time — it carries our analysis (triage, reachability, user statuses mapped to CycloneDX impact-analysis states), and the analysis changes as users triage.
get/snapshots/{snapshot_id}/security/vex
Path parameters
snapshot_idstring required
Response
Successful Response
{"stackTrail":"paths:/snapshots/{snapshot_id}/security/vex:get:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}
Changes
No recorded changes to this endpoint across all 1 revision of this API.