DependencyTrack / DependencyTrack/dependency-track
Single API endpoint for uploading multiple scans/BOMs for a single project
Open
enhancement
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
For some projects I am using multiple scanners (OWASP Dependency check and retire.js and possibly also nsp). I would like to have the ability to upload multiple BOMs and scans in one go. The total would define the current state of the project, so if any dependencies are upgraded the old versions should be removed.
`PUT /api/v1/bomsandscans`
```
{
"project":"416ac246-e7ac-49ff-93b4-f7e94d997e6b",
"boms":[ ...base64encoded boms... ],
"scans":[ ...base64encoded scans... ]
}
```
Contributor guide
Assessment
This issue has not been assessed yet.