Get a technology
Returns one library version with every advisory that affects it, the version ranges each advisory covers, and the scripts on the website that carry it. key is the identifier a list row carries.
Requires the viewer role on the website and the sbom plan feature.
AuthorizationBearer <JWT>An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.
workspaceId*stringThe workspace's id.
websiteId*stringThe website's id.
key*stringThe opaque key a list row carries. Treat it as a string; it is not a library name.
A detected library version with its advisories and the scripts that carry it.
application/json- response
key*stringOpaque identifier of this product version on the website. Pass it to the detail and history endpoints.
productKey*stringStable identifier of the product across versions, useful to group rows by library.
name*stringDisplay name of the library.
version*|The version detected from the script's contents, or null when only the library was recognized. A version-less row appears only while no versioned build of the same library is detected.
versionStatus*TechnologyStatusWhere the detected version sits in the library's lifecycle. good is current, outdated has a newer release, dormant has not been released for a long time, superseded is on an older major line than the one the library still releases, deprecated is no longer maintained, and unknown means the version could not be determined.
"good""outdated""dormant""superseded""deprecated""unknown"vulnerable*booleanWhether at least one known vulnerability affects this version.
cveCount*|How many distinct advisories affect this version.
0 <= valuemaxSeverity*|The highest severity among the advisories, or null when there are none.
iconUrl*|URL of the library's icon, when one is known.
productHomePage*|The library's home page, when one is known.
releaseName*|The release line the version belongs to, or null when it is not known.
latestVersion*|The latest release of the version's own release line, or null when it is not known.
currentLineLatest*|The latest release of the latest (newest maintained) release line, or null when it is not known.
productLatest*|The latest stable release of the library, whichever release line it belongs to, even one that reached end of life. Known even when the detected version is not. null when it is not known yet.
upgradeTo*|The version CentralCSP recommends upgrading to. It is always newer than the detected version and no known advisory affects it. null when no upgrade is recommended or the version is not known.
upgradeReason*|Why upgradeTo was chosen, or null when there is none. replace comes with no upgradeTo: no line of the library is maintained anymore, so it should be replaced with an alternative.
firstSeen*stringWhen a script carrying this version was first reported.
date-timelastSeen*stringWhen a script carrying this version was last reported.
date-timecves*array<>The advisories affecting this version.
scripts*array<>The scripts on the website that carry this version, most recently seen first.
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/websites/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/technologies/string'{ "key": "eyJwIjoianF1ZXJ5IiwidiI6IjMuNS4xIn0", "productKey": "jquery", "name": "jQuery", "version": "3.5.1", "versionStatus": "good", "vulnerable": true, "cveCount": 2, "maxSeverity": "low", "iconUrl": "https://cdn.centralcsp.com/icons/jquery.svg", "productHomePage": "https://jquery.com", "releaseName": "3.x", "latestVersion": "3.7.1", "currentLineLatest": "4.0.0", "productLatest": "4.0.0", "upgradeTo": "3.7.1", "upgradeReason": "fixed", "firstSeen": "2019-08-24T14:15:22Z", "lastSeen": "2019-08-24T14:15:22Z", "cves": [ { "ids": [ "CVE-2020-11022", "GHSA-gxr4-xjj5-5px2" ], "severity": "low", "summary": "Passing HTML from untrusted sources to jQuery DOM methods may execute code.", "cwe": [ "CWE-79" ], "below": "3.5.0", "atOrAbove": "1.2.0", "excludes": [ "string" ], "infoUrls": [ "string" ], "fixedIn": "3.5.0", "lastAffected": "9.0.73", "links": [ { "id": "CVE-2020-11022", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11022" } ] } ], "scripts": [ { "url": "https://code.jquery.com/jquery-3.5.1.min.js", "hash": "sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=", "fileSize": 89476, "firstSeen": "2019-08-24T14:15:22Z", "lastSeen": "2019-08-24T14:15:22Z" } ]}List scripts' technologies GET
Lists the library versions detected in each of the given scripts, named by their hash. Each row is the same as in the list, and its key opens the technology.
List a technology's history GET
Lists what changed for this library version on the website, newest first: when it was detected or removed, when new advisories were published for it, and when...