CentralCSP
APITechnologies

List scripts' technologies

Lists the library versions detected in each of the given scripts, named by their hash. Each row is the same as in the list, and its key opens the technology.

Requires the viewer role on the website and the sbom plan feature.

GET
/v1/workspaces/{workspaceId}/websites/{websiteId}/technologies/by-script

Authorization

headerAuthorizationBearer <JWT>

An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.

Path Parameters

workspaceId*string

The workspace's id.

websiteId*string

The website's id.

Query Parameters

hash*array<>

A script's hash, as the script inventory and the CSP hash reports show it. Repeat it for several scripts, up to 100.

Items1 <= items <= 100

Response Body

The libraries detected in scripts on the website.

application/json
  1. response
data*array<>

One entry per hash, in the order they were asked for.

Example Request
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/websites/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/technologies/by-script?hash=sha256-9%2FaliU8dGd2tb6OSsuzixeV4y%2FfaTqgFtohetphbbj0%3D'
Example Response
{  "data": [    {      "hash": "sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=",      "technologies": [        {          "key": "eyJwIjoianF1ZXJ5IiwidiI6IjMuNS4xIn0",          "productKey": "jquery",          "name": "jQuery",          "version": "3.5.1",          "versionStatus": "good",          "vulnerable": true,          "cveCount": 2,          "maxSeverity": "low",          "scripts": 1,          "iconUrl": "https://cdn.centralcsp.com/icons/jquery.svg",          "productHomePage": "https://jquery.com",          "releaseName": "3.x",          "latestVersion": "3.7.1",          "currentLineLatest": "4.0.0",          "upgradeTo": "3.7.1",          "upgradeReason": "fixed",          "firstSeen": "2019-08-24T14:15:22Z",          "lastSeen": "2019-08-24T14:15:22Z"        }      ]    }  ]}

Export technologies as CSV GET

Downloads the technology inventory as CSV, with the same filters and order as the list endpoint and no pagination.

Get a technology GET

Returns one library version with every advisory that affects it, the version ranges each advisory covers, and the scripts on the website that carry it.