SBOM

This document uses the REST API. For more details, see the Authentication for API page.

Get a project’s SBOM document

get

This endpoint lets you retrieve the SBOM document of a software project. It supports the following formats:

• CycloneDX version 1.6 in JSON (set format to cyclonedx1.6+json).
• CycloneDX version 1.6 in XML (set format to cyclonedx1.6+xml).
• CycloneDX version 1.5 in JSON (set format to cyclonedx1.5+json).
• CycloneDX version 1.5 in XML (set format to cyclonedx1.5+xml).
• CycloneDX version 1.4 in JSON (set format to cyclonedx1.4+json).
• CycloneDX version 1.4 in XML (set format to cyclonedx1.4+xml).
• SPDX version 2.3 in JSON (set format to spdx2.3+json).

By default it will respond with an empty JSON:API response.

Authorizations

APITokenBearerAuth

Path parameters

org_idstring · uuidRequired

Unique identifier for an organization

project_idstring · uuidRequired

Unique identifier for a project

Query parameters

versionstringRequired

Requested API version

Example: 2021-06-04Pattern: ^(wip|work-in-progress|experimental|beta|((([0-9]{4})-([0-1][0-9]))-((3[01])|(0[1-9])|([12][0-9]))(~(wip|work-in-progress|experimental|beta))?))$

formatstring · enumOptional

The desired SBOM format of the response.

Example: cyclonedx1.6+jsonPossible values:

Responses

application/jsonapplication/vnd.api+jsonapplication/vnd.cyclonedx+jsonapplication/vnd.cyclonedx+xml

get

HTTPcURLJavaScriptPython

GET /rest/orgs/{org_id}/projects/{project_id}/sbom HTTP/1.1
Host: api.snyk.io
Authorization: YOUR_API_KEY
Accept: */*

{
  "ANY_ADDITIONAL_PROPERTY": "anything"
}