Get repository supply-chain summary
Counts for the resolved scope. Pull-request and merge-request scans keep no SBOM snapshot, so scoping to one of those jobs with job_id serves component_count, finding_count, malicious_count, suspicious_count, vulnerable_count, and severity_counts from the job’s stored scan result. For those scopes latest_snapshot is null and ecosystem_counts is empty, because neither can be derived without stored component rows. A change-scan job that ran before scan results were stored reports zero counts.
Authorizations
API token obtained from the Tokens endpoint. Include as Authorization: Bearer <token>.
Path Parameters
Query Parameters
Scope the view to a specific supply-chain job.
Scope the view to a specific SBOM snapshot.
Response
Repository supply-chain summary for the resolved scope.
The response is of type object.