--- title: "Post dependencies for analysis" method: POST path: "/api/v2/static-analysis-sca/dependencies" tags: ["Static Analysis"] --- # Post dependencies for analysis `POST /api/v2/static-analysis-sca/dependencies` ## Request body - ScaRequest — The top-level request object for submitting a Software Composition Analysis (SCA) scan result. - `data` ScaRequestData — The data object in an SCA request, containing the dependency graph attributes and request type. - `attributes` ScaRequestDataAttributes — The attributes of an SCA request, containing dependency graph data, vulnerability information, and repository context. - `commit` ScaRequestDataAttributesCommit — Metadata about the commit associated with the SCA scan, including author, committer, and branch information. - `author_date` string — The date when the commit was authored. - `author_email` string — The email address of the commit author. - `author_name` string — The full name of the commit author. - `branch` string — The branch name on which the commit was made. - `committer_email` string — The email address of the person who committed the change. - `committer_name` string — The full name of the person who committed the change. - `sha` string — The SHA hash uniquely identifying the commit. - `dependencies` ScaRequestDataAttributesDependenciesItems[] — The list of dependencies discovered in the repository. - `exclusions` string[] — A list of patterns or identifiers that should be excluded from analysis for this dependency. - `group` string — The group or organization namespace of the dependency (e.g., Maven group ID). - `is_dev` boolean — Indicates whether this is a development-only dependency not used in production. - `is_direct` boolean — Indicates whether this is a direct dependency (as opposed to a transitive one). - `language` string — The programming language ecosystem of this dependency (e.g., java, python, javascript). - `locations` ScaRequestDataAttributesDependenciesItemsLocationsItems[] — The list of source file locations where this dependency is declared. - `block` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition — A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `file_name` string — The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `name` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition — A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `file_name` string — The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `namespace` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition — A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `file_name` string — The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `version` ScaRequestDataAttributesDependenciesItemsLocationsItemsFilePosition — A range within a file defined by a start and end position, along with the file name. - `end` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `file_name` string — The name or path of the file containing this location. - `start` ScaRequestDataAttributesDependenciesItemsLocationsItemsPosition — A specific position (line and column) within a source file. - … - `name` string — The name of the dependency package. - `package_manager` string — The package manager responsible for this dependency (e.g., maven, pip, npm). - `purl` string — The Package URL (PURL) uniquely identifying this dependency. - `reachable_symbol_properties` ScaRequestDataAttributesDependenciesItemsReachableSymbolPropertiesItems[] — Properties describing symbols from this dependency that are reachable in the application code. - `name` string — The name of the reachable symbol property. - `value` string — The value of the reachable symbol property. - `version` string — The version of the dependency. - `env` string — The environment context in which the SCA scan was performed (e.g., production, staging). - `files` ScaRequestDataAttributesFilesItems[] — The list of dependency manifest files found in the repository. - `name` string — The name or path of the file within the repository. - `purl` string — The Package URL (PURL) associated with the dependency declared in this file. - `relations` ScaRequestDataAttributesRelationsItems[] — The dependency relations describing the inter-component dependency graph. - `depends_on` string[] — The list of BOM references that this component directly depends on. - `ref` string — The BOM reference of the component that has dependencies. - `repository` ScaRequestDataAttributesRepository — Information about the source code repository being analyzed. - `url` string — The URL of the repository. - `service` string — The name of the service or application being analyzed. - `tags` object — A map of key-value tags providing additional metadata for the SCA scan. - `vulnerabilities` ScaRequestDataAttributesVulnerabilitiesItems[] — The list of vulnerabilities identified in the dependency graph. - `affects` ScaRequestDataAttributesVulnerabilitiesItemsAffectsItems[] — The list of components affected by this vulnerability. - `ref` string — The BOM reference identifying the affected component. - `bom_ref` string — The unique BOM reference identifier for this vulnerability entry. - `id` string — The vulnerability identifier (e.g., CVE ID or similar). - `id` string — An optional identifier for this SCA request data object. - `type` 'scarequests', required — The type identifier for SCA dependency analysis requests. ## Response `200` OK ## Other responses - `429` — Too many requests --- [API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)