Remediation

Generate remediation (fix) plans and query vulnerabilities

Generate remediation plans

post

Issue an /explain call to the Lineaje GPT (AI) service to generate fix plans. The first call returns a guid and "Request is Queued". Poll the same endpoint with that guid (about every 20 seconds) until the response is ready; this can take several minutes. The completed response contains three plans: basic_plan (compatible update), balanced_plan (minor update), and comprehensive_plan (major update).

Authorizations

bearerAuth

AuthorizationstringRequired

Use the accessToken returned by the login endpoint as a Bearer token.

Body

application/json

querystringRequiredExample: Recommend fix plans

sbom_idstringRequiredExample: <SBOM-ID>

guidstringOptional

Include the guid returned by the first call to poll for the result.

Example: fea930da-2e1e-11ef-993f-0a58a9feac02

Responses

200

Queued, not-ready, or completed remediation response (same schema in all three states).

application/json

response_timenumberOptionalExample: 0

answerstring · nullableOptional

Markdown summary of the three fix plans. Null until the response is ready.

graphqlany · nullableOptional

query_suggestionsany · nullableOptional

view_detailsany · nullableOptional

columnany · nullableOptional

view_schemaany · nullableOptional

Greetingany · nullableOptional

guidstring · nullableOptionalExample: fea930da-2e1e-11ef-993f-0a58a9feac02

messagestring · nullableOptionalExample: Request is Queued

errorbooleanOptionalExample: false

post/api/v1/explain

HTTPcURLJavaScriptPython

POST /api/v1/explain HTTP/1.1
Host: lineaje-gpt-service.v2.prod.veedna.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 99

{
  "query": "Recommend fix plans",
  "sbom_id": "<SBOM-ID>",
  "guid": "fea930da-2e1e-11ef-993f-0a58a9feac02"
}

200

Queued, not-ready, or completed remediation response (same schema in all three states).

{
  "response_time": 0,
  "answer": "text",
  "graphql": null,
  "query_suggestions": null,
  "view_details": null,
  "meta_data": {
    "total_components": 779,
    "initial_irl": 5.5,
    "direct_dependencies": {
      "total": 1,
      "oss": 1,
      "private": 1,
      "tp": 1,
      "unknown": 1
    },
    "transitive_dependencies": {
      "total": 1,
      "oss": 1,
      "private": 1,
      "tp": 1,
      "unknown": 1
    },
    "direct_vulnerabilities": {
      "total": 1,
      "oss": 1,
      "private": 1,
      "tp": 1,
      "unknown": 1
    },
    "transitive_vulnerabilities": {
      "total": 1,
      "oss": 1,
      "private": 1,
      "tp": 1,
      "unknown": 1
    },
    "total_vulnerability_count": 71,
    "total_components_with_vulnerabilities": 35,
    "vulnerable_components_with_fixes_in_basic_plan": 15,
    "vulnerable_components_with_fixes_in_balanced_plan": 17,
    "vulnerabilities_with_fixes_in_basic_plan": 23,
    "vulnerabilities_with_fixes_in_balanced_plan": 35,
    "basic_plan_component_vulnerability_fixes": [
      {
        "current_package_id": "SPDX-PACKAGE-01b70cdf-17af-5d4a-a71d-980d29dabac1",
        "current_sbom_id": "SPDXRef-DOCUMENT-vdna_Bw0y37wDsQRX1gUV-4058612-4058613",
        "target_hub_package_id": null,
        "target_hub_sbom_id": null,
        "current_component_purl": "pkg:maven/org.springframework/[e-mail]-javadoc",
        "target_component_purl": "pkg:maven/org.springframework/[e-mail]",
        "fixed_vuln": 2
      }
    ],
    "balanced_plan_components_vulnerability_fixes": [
      {
        "current_package_id": "SPDX-PACKAGE-01b70cdf-17af-5d4a-a71d-980d29dabac1",
        "current_sbom_id": "SPDXRef-DOCUMENT-vdna_Bw0y37wDsQRX1gUV-4058612-4058613",
        "target_hub_package_id": null,
        "target_hub_sbom_id": null,
        "current_component_purl": "pkg:maven/org.springframework/[e-mail]-javadoc",
        "target_component_purl": "pkg:maven/org.springframework/[e-mail]",
        "fixed_vuln": 2
      }
    ],
    "comprehensive_plan_components": [
      {
        "current_package_id": "SPDX-PACKAGE-01b70cdf-17af-5d4a-a71d-980d29dabac1",
        "current_sbom_id": "SPDXRef-DOCUMENT-vdna_Bw0y37wDsQRX1gUV-4058612-4058613",
        "target_hub_package_id": null,
        "target_hub_sbom_id": null,
        "current_component_purl": "pkg:maven/org.springframework/[e-mail]-javadoc",
        "target_component_purl": "pkg:maven/org.springframework/[e-mail]",
        "fixed_vuln": 2
      }
    ],
    "basic_plan_inherent_risk_level": 5.41,
    "basic_plan_updated_vulnerability_count": 52,
    "balanced_plan_inherent_risk_level": 5.4,
    "balanced_plan_updated_vulnerability_count": 45,
    "comprehensive_plan_inherent_risk_level": 5.38,
    "comprehensive_plan_updated_vulnerability_count": 22
  },
  "column": null,
  "view_schema": null,
  "Greeting": null,
  "guid": "fea930da-2e1e-11ef-993f-0a58a9feac02",
  "message": "Request is Queued",
  "error": false
}

Apply a fix plan (PLACEHOLDER — details pending)

post

PLACEHOLDER requested by Mudit (2026-06-23 call): the "Apply a fix plan" (autofix) API runs after Generate remediation plans. The path, HTTP method, request body, and response shown here are NOT confirmed — they are pending from the SME (Srinidhi / Mudit). Do not publish this operation until the real details are supplied.

Authorizations

bearerAuth

AuthorizationstringRequired

Use the accessToken returned by the login endpoint as a Bearer token.

Body

application/json

REVIEW: request body is a placeholder pending SME details.

sbom_idstringOptionalExample: <SBOM-ID>

planstring · enumOptional

REVIEW: confirm plan identifiers.

Example: basic_planPossible values:

Responses

200

REVIEW: response is a placeholder pending SME details.

application/json

objectOptional

post/PLACEHOLDER/apply-fix-plan

HTTPcURLJavaScriptPython

POST /PLACEHOLDER/apply-fix-plan HTTP/1.1
Host: lineaje-gpt-service.v2.prod.veedna.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 43

{
  "sbom_id": "<SBOM-ID>",
  "plan": "basic_plan"
}

200

REVIEW: response is a placeholder pending SME details.

{}

Query vulnerability (RiskLens)

get

Retrieve vulnerability details for a CVE from RiskLens.

Path parameters

cveIdstringRequiredExample: CVE-2024-27263

Responses

200

Vulnerability details.

application/json

cachedbooleanOptionalExample: true

get/api/cve/{cveId}

HTTPcURLJavaScriptPython

GET /api/cve/{cveId} HTTP/1.1
Host: risklens.lineaje.com
Accept: */*

200

Vulnerability details.

{
  "vulnerability": {
    "id": "CVE-2024-27263",
    "doc_created": "2025-03-12T10:07:03.000Z",
    "doc_updated": "2025-03-11T09:54:54.000Z",
    "osv": {
      "id": "CVE-2024-27263",
      "modified": "2025-03-04T21:58:00.000Z",
      "published": "2025-01-28T01:15:00.000Z",
      "details": "IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniques.",
      "severity": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "base_score": 5.3,
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "package": {
            "ecosystem": "IBM",
            "name": "Sterling B2B Integrator",
            "purl": "text"
          },
          "versions": [
            "6.2.0.0",
            "6.0.0.0"
          ]
        }
      ],
      "references": [
        {
          "url": "https://www.ibm.com/support/pages/node/7176072",
          "tags": [
            "Vendor Advisory"
          ],
          "source": "[e-mail]"
        }
      ]
    },
    "kev": null,
    "epss": {
      "cve": "CVE-2024-27263",
      "epss": 0.00049,
      "percentile": 0.2118
    },
    "ai": null
  },
  "cached": true
}