TItidelift
Projects
Attestations

Create a new project with an initial scan, using the provided SBOM file as the manifest.

Changed on
post/v1/{org_name}/projects/import-sbom

Request

  • Base URL
    https://api.tidelift.com/external-api
  • Auth
    HTTP bearer

Path parameters

org_namestring required
Example:My-Company

The name of the Organization.

Request body multipart/form-data

filestring binary required

An SBOM file of type: SPDX tag/value, CycloneDX JSON or CycloneDX XML.

project_namestring

Can be used to set project name if a name is not detected in the SBOM file.

groupsstring[]

List of group slugs or names to associate the project with

catalogstring

Catalog to align to. Required if mulitple catalogs are in use

Response

Project that was created

namestring required
catalogstring
groupsstring[] nullable required

List of group slugs associated with the project

branching_behavior'specified_branch' | 'latest_aligned_branch' required

Controls how the project's default branch is determined. specified_branch uses the branch set in default_branch. latest_aligned_branch automatically updates to the most recently aligned branch.

default_branchstring required
external_identifierstring nullable required

An optional custom identifier that can be set that corresponds to something outside of Tidelift

using_catalogstring nullable
dot_tideliftstring
attestation_report_urlstring

Changes

  • 5f36bed372bbRevision changes
    • info

      added the required property //// to the response with the status