Get repository supply-chain summary
Counts for the resolved scope. Pull-request and merge-request scans keep no SBOM snapshot, so scoping to one of those jobs with job_id serves component_count, finding_count, malicious_count, suspicious_count, vulnerable_count, and severity_counts from the job’s stored scan result. For those scopes latest_snapshot is null and ecosystem_counts is empty, because neither can be derived without stored component rows. A change-scan job that ran before scan results were stored reports zero counts.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
UUID of the repository. Use the id field of a repository from listRepositories.
Query Parameters
Scope the view to a specific supply-chain job.
Scope the view to a specific SBOM snapshot.
Response
Repository supply-chain summary for the resolved scope.
The response is of type object.