CentralCSP
APITechnologies

List technologies

Lists the libraries detected on the website, one row per library version, with its lifecycle status, how many known vulnerabilities affect it and the highest severity among them. A library recognized without a version is listed only while no versioned build of it is detected. Detection reads the scripts browsers report loading, so a library appears a short while after its script is first seen. Filter by status, vulnerability or minimum severity, and match part of a library name with q.

Requires the viewer role on the website and the sbom plan feature.

GET
/v1/workspaces/{workspaceId}/websites/{websiteId}/technologies

Authorization

AuthorizationBearer <token>

An OpenID Connect access token issued by Keycloak, acting as the signed-in user.

In: header

Path Parameters

workspaceId*string
websiteId*string

Query Parameters

cursor?string

The nextCursor of the previous page. Omit it to start from the beginning. A cursor encodes a position and is not meant to be built by hand.

limit*|

How many items to return, from 1 to 200.

Range1 <= value <= 200
Default50
q?string

Match part of the library name.

Lengthlength <= 255
status?string

Comma-separated version statuses to keep: good, outdated, dormant, deprecated or not_found. Unknown values are ignored.

Lengthlength <= 128
vulnerable?boolean

Only vulnerable, or only clean, technologies.

minSeverity?string

Only technologies whose highest severity is at least this.

Value in

  • "low"
  • "medium"
  • "high"
  • "critical"
sort?string

What to order rows by. severity is the default and ranks by the highest severity, then by whether the row is vulnerable at all. status ranks by how much the version needs attention, from up to date through to deprecated. Rows that tie are ordered by name.

Value in

  • "severity"
  • "name"
  • "firstSeen"
  • "lastSeen"
  • "cveCount"
  • "status"
order?string

Which direction to read sort in. Left out, name runs A to Z and every other sort leads with the rows that need attention first.

Value in

  • "asc"
  • "desc"

Response Body

application/json

curl -X GET "https://example.com/v1/workspaces/string/websites/string/technologies?limit=50"
{  "data": [    {      "key": "eyJwIjoianF1ZXJ5IiwidiI6IjMuNS4xIn0",      "productKey": "jquery",      "name": "jQuery",      "version": "3.5.1",      "versionStatus": "good",      "vulnerable": true,      "cveCount": 2,      "maxSeverity": "low",      "scripts": 1,      "iconUrl": "https://cdn.centralcsp.com/icons/jquery.svg",      "productHomePage": "https://jquery.com",      "firstSeen": "2019-08-24T14:15:22Z",      "lastSeen": "2019-08-24T14:15:22Z"    }  ],  "pagination": {    "nextCursor": "string",    "hasMore": true,    "total": 0  }}

Analyze a policy value POST

Reviews a Content-Security-Policy header value on its own and reports what each directive does and where the policy is weak, for example an unsafe keyword or...

Get the technologies summary GET

Returns how many library versions are detected on the website, how many are vulnerable, and their breakdown by severity and lifecycle status.