API enhancements

For more information on API requests, please refer to the REST API Developers Guide available in Black Duck.

Deprecation of the component vulnerabilities API endpoint

The following API endpoint is now marked as deprecated:

  • GET /api/components/<component-id>/vulnerabilities

To enhance accuracy, vulnerabilities are more effectively mapped to:

  • Component versions:

    GET /api/components/<component-id>/versions/<version-id>/vulnerabilities

  • Component origins:

    GET /api/components/<component-id>/versions/<version-id>/origin/<origin-id>/vulnerabilities

As a result, we recommend that customers transition their usage to the documented endpoints for component version vulnerabilities and component origin vulnerabilities. A future version will limit the amount of data returned from the deprecated endpoint, followed by a subsequent version that will fully remove the API. Users are encouraged to update their implementations accordingly to ensure continued access to vulnerability data.