Skip to main content

Supply Chain Security APIs

The Supply Chain Security APIs provide programmatic access to the Spectra Assure Community platform. These APIs allow you to search for software packages and retrieve detailed analysis reports.

TCA-0701: Supply Chain Security API​

The TCA-0701 Supply Chain Security API provides three main endpoints for interacting with the Spectra Assure Community platform:

  • Search for Packages: Search the catalogue by package URL (purl) or hash to find matching packages
  • Show Package Details: Retrieve metadata, version history, and analysis summaries for a specific package
  • Show Version Report: Get detailed analysis reports for a specific package version, including vulnerabilities, licenses, and quality metrics

Common Use Cases​

  • Package Discovery: Search the Spectra Assure Community catalogue by package URL (purl) or hash
  • Package Analysis: Retrieve detailed information about specific packages and their versions
  • Risk Assessment: Access quality metrics, vulnerability data, and threat classifications
  • Compliance Monitoring: Review license information and policy violations

Available APIs​