Searching SBOM Data

What to Use Today

Until the search API is released, use the list endpoints with their built-in filter parameters:

• Filter apps by name — GET /apps?name=<exact-name>. See Creating and Managing Apps.
• List the versions of an app — GET /apps/{app_id}/versions. See Creating and Managing App Versions.
• Filter assets within a version — GET /apps/{app_id}/versions/{version_id}/assets?name=<filter>. See Managing Assets in an App Version.
• Pivot across a version’s contents — use the assets-by-package endpoint to answer cross-asset package questions about a single release. See Viewing an App Version’s SBOM. For the packages-by-vulnerability pivot, see Scan an App Version.