What is GOS API?

The Lineaje GOS workflow is fully automatable via REST APIs. The following table documents the three core API calls required to execute a complete GOS remediation cycle within a CI/CD pipeline.

All API calls require a Bearer token obtained via one of two authentication methods:

  • Username / Password: POST credentials to the identity service to receive an access token (valid 24 hours).

  • API Key: Contact Lineaje Supportarrow-up-right to provision a long-lived API key for service-to-service authentication.

How it works

The API follows a three-step flow:

  1. Authenticate: Exchange your Lineaje credentials for a Bearer token.

  2. Get your project list: Retrieve your scanned projects and capture the sbom_id for the project you want to remediate.

  3. Request and poll for a fix plan: Submit the sbom_id to the fix plan endpoint and poll until the plan status returns as available.

Last updated