---
title: "Download Vex"
method: GET
path: "/snapshots/{snapshot_id}/security/vex"
tags: ["security"]
---

# Download Vex

`GET /snapshots/{snapshot_id}/security/vex`

Download a CycloneDX 1.6 VEX document
(`{repo}-{shortsha}.vex.cdx.json`).

Unlike the SBOM (raw syft passthrough), VEX is generated fresh from
the tables at download time — it carries our *analysis* (triage,
reachability, user statuses mapped to CycloneDX impact-analysis
states), and the analysis changes as users triage.

## Path parameters

- `snapshot_id` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/repowise/repowise-hosted-api/revisions/40167ba9ab58/schema)