Sign in

v1

latestOpenAPI 3.0.02026-07-26193332.3 KB
REST API - HFW

Get a fast dependency verdict for GitHub Action scans

Public, fast-mode HFW verdict proxy. This endpoint is intentionally scoped to feed-backed verdicts and can be moved behind X-Api-Key later.

get/hfw/verdict/{ecosystem}/{packageName}

Query parameters

versionstring required

Package version to check

wait_secondsnumber

Seconds to wait for an upstream verdict. Fast mode normally returns immediately.

Response

status'ready' | 'pending' | 'scanning' required
ecosystem'npm' | 'pypi' required
packagestring required
versionstring required
level'clean' | 'suspicious' | 'malicious' | 'unknown' required
confidencestring required
summarystring required
findingsobject[] required
sourcestring
osv_idstring