Dependency-Track unofficial
GET/v1/analysis

Retrieves an analysis trail

Requires permission VIEW_VULNERABILITY

3 parameters
projectstringoptional
The UUID of the project
componentstringrequired
The UUID of the component
vulnerabilitystringrequired
The UUID of the vulnerability

4 status codes
200An analysis trail
analysisCommentsarray<object>required
Audit trail of analysis comments
analysisDetailsstringoptional
Free-form details of the analysis decision
analysisJustificationstringoptional
The justification of the analysis decision
Allowed:CODE_NOT_PRESENTCODE_NOT_REACHABLEREQUIRES_CONFIGURATIONREQUIRES_DEPENDENCYREQUIRES_ENVIRONMENTPROTECTED_BY_COMPILERPROTECTED_AT_RUNTIMEPROTECTED_AT_PERIMETERPROTECTED_BY_MITIGATING_CONTROLNOT_SET
analysisResponsestringoptional
The vendor response to the vulnerability
Allowed:CAN_NOT_FIXWILL_NOT_FIXUPDATEROLLBACKWORKAROUND_AVAILABLENOT_SET
analysisStatestringrequired
The state of the analysis decision
Allowed:EXPLOITABLEIN_TRIAGEFALSE_POSITIVENOT_AFFECTEDRESOLVEDNOT_SET
cvssV2Scorenumberoptional
CVSS v2 score assigned by the analysis
cvssV2Vectorstringoptional
CVSS v2 vector assigned by the analysis
cvssV3Scorenumberoptional
CVSS v3 score assigned by the analysis
cvssV3Vectorstringoptional
CVSS v3 vector assigned by the analysis
cvssV4Scorenumberoptional
CVSS v4 score assigned by the analysis
cvssV4Vectorstringoptional
CVSS v4 vector assigned by the analysis
isSuppressedbooleanrequired
Whether the finding is suppressed
owaspScorenumberoptional
OWASP Risk Rating score assigned by the analysis
owaspVectorstringoptional
OWASP Risk Rating vector assigned by the analysis
severitystringoptional
Severity assigned by the analysis
Allowed:CRITICALHIGHMEDIUMLOWINFOUNASSIGNED
401Unauthorized
403Access to the requested project is forbidden
detailstringrequired
Human-readable explanation specific to this occurrence of the problem
instancestringoptional
Reference URI that identifies the specific occurrence of the problem
statusintegerrequired
HTTP status code generated by the origin server for this occurrence of the problem
titlestringrequired
Short, human-readable summary of the problem type
typestringoptional
A URI reference that identifies the problem type
404The project, component, or vulnerability could not be found

Error handling

A 401 is returned: Unauthorized. A 403 is returned: Access to the requested project is forbidden. A 404 is returned: The project, component, or vulnerability could not be found.