Projects

Create and list projects, and query project components

Add private image configuration

post

Add a configuration with a name and description. Provide the registry ID and access key for the private application. The returned configurationId is used to add projects (repositories).

Authorizations

bearerAuth

AuthorizationstringRequired

Use the accessToken returned by the login endpoint as a Bearer token.

Body

application/json

namestringRequiredExample: <configuration-name>

descriptionstringRequiredExample: <configuration-description>

registryIdstringRequired

AWS account ID

Example: <aws account id>

accessKeystringRequiredExample: <access key>

secretKeystringRequiredExample: <aws secret key>

regionstringRequired

AWS ECR region

Example: <aws ecr region>

Responses

201

Configuration saved successfully.

application/json

post/integrations/image/api/v1/aws/configuration/save

HTTPcURLJavaScriptPython

POST /integrations/image/api/v1/aws/configuration/save HTTP/1.1
Host: scm-service.v2.prod.veedna.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 193

{
  "name": "<configuration-name>",
  "description": "<configuration-description>",
  "registryId": "<aws account id>",
  "accessKey": "<access key>",
  "secretKey": "<aws secret key>",
  "region": "<aws ecr region>"
}

201

Configuration saved successfully.

{
  "status": {
    "type": "SUCCESS",
    "message": "Configuration saved successfully",
    "code": 201
  },
  "data": {
    "createdBy": "CLOUD_ADAPTER_SERVICE",
    "createdAt": "2024-04-22 07:00:56",
    "updatedAt": "2024-04-22 07:00:56",
    "modifiedBy": "CLOUD_ADAPTER_SERVICE",
    "configurationId": 1700,
    "tenantId": "<tenant_id>",
    "companyId": "<company_id>",
    "userRoles": "<function>",
    "configurationName": "<configuration name>",
    "configurationDescription": "<configuration description>",
    "connectorId": "AWS",
    "registryId": "<aws account id>",
    "accessKey": "<aws access id>",
    "secretKey": "<aws secret id>",
    "region": "<aws registry region>"
  }
}

Add private image project

post

Add a private image project (repository) using the configurationId returned by the configuration/save call.

Authorizations

bearerAuth

AuthorizationstringRequired

Use the accessToken returned by the login endpoint as a Bearer token.

Body

application/json

configurationIdintegerRequiredExample: 1700

Responses

201

Repositories saved successfully.

application/json

post/integrations/image/api/v1/aws/configuration/repository

HTTPcURLJavaScriptPython

POST /integrations/image/api/v1/aws/configuration/repository HTTP/1.1
Host: scm-service.v2.prod.veedna.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 270

{
  "configurationId": 1700,
  "repositoryDtoList": [
    {
      "repository_name": "<image repository name>",
      "image repository arn": "<image repository arn>",
      "repository_uri": "<image repository uri>",
      "project_name": "<project name>",
      "project_version": "<project version>",
      "is_private": true
    }
  ]
}

201

Repositories saved successfully.

{
  "status": {
    "type": "SUCCESS",
    "message": "Configuration saved successfully",
    "code": 201
  },
  "data": {
    "createdBy": "CLOUD_ADAPTER_SERVICE",
    "createdAt": "2024-04-22 07:00:56",
    "updatedAt": "2024-04-22 07:00:56",
    "modifiedBy": "CLOUD_ADAPTER_SERVICE",
    "configurationId": 1700,
    "tenantId": "<tenant_id>",
    "companyId": "<company_id>",
    "userRoles": "<function>",
    "configurationName": "<configuration name>",
    "configurationDescription": "<configuration description>",
    "connectorId": "AWS",
    "registryId": "<aws account id>",
    "accessKey": "<aws access id>",
    "secretKey": "<aws secret id>",
    "region": "<aws registry region>",
    "cloudRepository": [
      {
        "createdBy": "CLOUD_ADAPTER_SERVICE",
        "createdAt": "2024-04-22 06:37:07",
        "updatedAt": "2024-04-22 06:37:07",
        "modifiedBy": "CLOUD_ADAPTER_SERVICE",
        "repositoryId": 1698,
        "repository_arn": "<image repository arn>",
        "repository_name": "<image repository name>",
        "repository_uri": "<image repository uri>",
        "tag_full_size": 0,
        "is_private": true,
        "project_name": "<project name>",
        "project_version": "<project version>"
      }
    ],
    "cloudPublicRepositoryEntities": [
      {}
    ]
  }
}

List projects

get

List projects for the authenticated tenant. Requires the Bearer access token from the login prerequisite. REVIEW: In the source PDF this request also sends a separate "token" header whose value duplicates the access token. It is included below as an optional header; confirm whether it is actually required.

Authorizations

bearerAuth

AuthorizationstringRequired

Use the accessToken returned by the login endpoint as a Bearer token.

Query parameters

pageintegerOptionalDefault: 0Example: 0

sizeintegerOptionalDefault: 2000Example: 2000

projectFilterstringOptional

timestampintegerOptionalExample: 120

Header parameters

tokenstringOptional

REVIEW: Duplicates the Bearer access token in the source PDF.

Responses

200

Project list.

application/json

total_countintegerOptionalExample: 17

current_pageintegerOptionalExample: 0

total_pagesintegerOptionalExample: 0

page_sizeintegerOptionalExample: 2000

get/scim/api/v2/projects/

HTTPcURLJavaScriptPython

GET /scim/api/v2/projects/ HTTP/1.1
Host: scim-service.v2.prod.veedna.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

200

Project list.

{
  "results": {
    "projects": [
      {
        "projectName": "<project_name>",
        "projectVersion": "main",
        "orgName": "<org_name>",
        "projectStatus": "Successful",
        "generationType": "GITHUB",
        "sbomJobs": [
          {
            "projectId": 4780694,
            "name": "<project_name>",
            "version": "main",
            "jobId": 4780695,
            "sbomId": "<sbom_id>",
            "tenantId": "vdna_QyJ4rym5blQhtJrH",
            "uniqueOrgId": "vdna_QyJ4rym5blQhtJrH",
            "sbomType": "pkg",
            "crawlerType": "veeUI",
            "jobStatus": "Ready for review",
            "jobMessage": "Successfully transformed the data and persisted into opensearch",
            "projectGroup": "null",
            "userEmail": "<user_email>",
            "orgName": "<org_name>",
            "generationMethod": "SCM",
            "generationType": "GITHUB",
            "created_by": "b4b32539-5703-4a24-86c5-3061eca3e0bb",
            "modified_by": "b4b32539-5703-4a24-86c5-3061eca3e0bb",
            "created_date": "2025-02-24T19:04:26.162+00:00",
            "modified_date": "2025-02-24T20:44:42.743+00:00"
          }
        ]
      }
    ]
  },
  "total_count": 17,
  "current_page": 0,
  "total_pages": 0,
  "page_size": 2000
}

List project components using LQL

post

Query a project's components with Lineaje Query Language (LQL). Run this once the project's job status is "Ready for review". Requires the Bearer access token from the login prerequisite and the sbom_id from the project list. This is one LQL example; for the full set of queries and use cases see the LQL documentation linked under externalDocs. REVIEW (per Mudit, 2026-06-23): replace the LQL documentation link with the published URL once available (draft expected end of day 2026-06-23).

Authorizations

bearerAuth

AuthorizationstringRequired

Use the accessToken returned by the login endpoint as a Bearer token.

Body

application/json

lqlstringRequired

Lineaje Query Language statement. Substitute <sbom_id> with the project's sbom_id.

Example: project.id=<sbom_id> $and vulnerability.severity=all $and code_quality.severity=all $and security_posture.severity=all $and provenance.country.code = all $and source_code.languages=all| stats count(project.id)

limitintegerOptionalExample: 1

valueschemastringOptionalExample: componentSchema

product_idintegerOptionalExample: 1

Responses

200

Component query result. The top-level key is the LQL query string and its value is an array of component objects.

application/json

The single top-level property is the LQL query string; its value is an array of component objects. Modeled as a free-form object because the key is dynamic. See the example for the full shape returned by the API.

Other propertiesanyOptional

post/api/v1/lql/components

HTTPcURLJavaScriptPython

POST /api/v1/lql/components HTTP/1.1
Host: data-service-v2-apigw.v2.prod.veedna.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 276

{
  "lql": "project.id=<sbom_id> $and vulnerability.severity=all $and code_quality.severity=all $and security_posture.severity=all $and provenance.country.code = all $and source_code.languages=all| stats count(project.id)",
  "limit": 1,
  "valueschema": "componentSchema",
  "product_id": 1
}

200

Component query result. The top-level key is the LQL query string and its value is an array of component objects.

{
  "project.id=SPDXRef-DOCUMENT-vdna_QyJ4rym5blQhtJrH-4780694-4780695 $and vulnerability.severity=all $and code_quality.severity=all $and security_posture.severity=all $and provenance.country.code = all $and source_code.languages=all": [
    {
      "_id": "052a1624-e1d9-5cb6-a117-ef04d66ab1ef",
      "tenant_id": "<tenant_id>",
      "company_id": "<company_id>",
      "category": "OSS",
      "attestation_level": 2,
      "package": {
        "name": "debian:ca-certificates:20240203",
        "version": "20240203",
        "pkg_manager": "deb",
        "purl": "pkg:deb/debian/ca-certificates@20240203?arch=all&distro=debian",
        "total_vulnerability_count": 0
      },
      "is_root": false
    }
  ]
}