Package Vulnerabilities

Sync all Package Vulnerabilities

To send us data related to package vulnerabilities. Note that you must first sync VulnerableComponent resources before sending us this data, and this sync should reference the uniqueId field in the VulnerableComponent resource.

This call replaces ALL existing PackageVulnerabilityConnectors resources for the given app and source_id - this is a “state of the world” sync. In other words, if a PackageVulnerabilityConnectors resource is sent for a user in a previous sync_all call, but is not included in a later sync_all call for that customer, it is assumed to no longer exist and is deleted in Vanta.

** Headers **

Authorization: Bearer <access_token>

** Scopes **

connectors.self:write-resource

** Schema **

Expand the resources array below for the schema of PackageVulnerabilityConnectors.

PUT

resources

package_vulnerability_connectors

Sync all Package Vulnerabilities

curl --request PUT \
  --url https://api.vanta.com/v1/resources/package_vulnerability_connectors \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "resourceId": "<string>",
  "resources": [
    {
      "displayName": "<string>",
      "uniqueId": "<string>",
      "externalUrl": "<string>",
      "packageName": "<string>",
      "packageVersion": "<string>",
      "severity": 123,
      "vulnerableComponentUniqueId": "<string>",
      "description": "<string>",
      "isResolvable": true,
      "remediationInstructions": "<string>",
      "isReachable": true,
      "cveId": "<string>",
      "cvss3Vector": "<string>",
      "cvss3Score": 123
    }
  ]
}
'

import requests

url = "https://api.vanta.com/v1/resources/package_vulnerability_connectors"

payload = {
    "resourceId": "<string>",
    "resources": [
        {
            "displayName": "<string>",
            "uniqueId": "<string>",
            "externalUrl": "<string>",
            "packageName": "<string>",
            "packageVersion": "<string>",
            "severity": 123,
            "vulnerableComponentUniqueId": "<string>",
            "description": "<string>",
            "isResolvable": True,
            "remediationInstructions": "<string>",
            "isReachable": True,
            "cveId": "<string>",
            "cvss3Vector": "<string>",
            "cvss3Score": 123
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    resourceId: '<string>',
    resources: [
      {
        displayName: '<string>',
        uniqueId: '<string>',
        externalUrl: '<string>',
        packageName: '<string>',
        packageVersion: '<string>',
        severity: 123,
        vulnerableComponentUniqueId: '<string>',
        description: '<string>',
        isResolvable: true,
        remediationInstructions: '<string>',
        isReachable: true,
        cveId: '<string>',
        cvss3Vector: '<string>',
        cvss3Score: 123
      }
    ]
  })
};

fetch('https://api.vanta.com/v1/resources/package_vulnerability_connectors', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.vanta.com/v1/resources/package_vulnerability_connectors",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'resourceId' => '<string>',
    'resources' => [
        [
                'displayName' => '<string>',
                'uniqueId' => '<string>',
                'externalUrl' => '<string>',
                'packageName' => '<string>',
                'packageVersion' => '<string>',
                'severity' => 123,
                'vulnerableComponentUniqueId' => '<string>',
                'description' => '<string>',
                'isResolvable' => true,
                'remediationInstructions' => '<string>',
                'isReachable' => true,
                'cveId' => '<string>',
                'cvss3Vector' => '<string>',
                'cvss3Score' => 123
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vanta.com/v1/resources/package_vulnerability_connectors"

	payload := strings.NewReader("{\n  \"resourceId\": \"<string>\",\n  \"resources\": [\n    {\n      \"displayName\": \"<string>\",\n      \"uniqueId\": \"<string>\",\n      \"externalUrl\": \"<string>\",\n      \"packageName\": \"<string>\",\n      \"packageVersion\": \"<string>\",\n      \"severity\": 123,\n      \"vulnerableComponentUniqueId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"isResolvable\": true,\n      \"remediationInstructions\": \"<string>\",\n      \"isReachable\": true,\n      \"cveId\": \"<string>\",\n      \"cvss3Vector\": \"<string>\",\n      \"cvss3Score\": 123\n    }\n  ]\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://api.vanta.com/v1/resources/package_vulnerability_connectors")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"resourceId\": \"<string>\",\n  \"resources\": [\n    {\n      \"displayName\": \"<string>\",\n      \"uniqueId\": \"<string>\",\n      \"externalUrl\": \"<string>\",\n      \"packageName\": \"<string>\",\n      \"packageVersion\": \"<string>\",\n      \"severity\": 123,\n      \"vulnerableComponentUniqueId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"isResolvable\": true,\n      \"remediationInstructions\": \"<string>\",\n      \"isReachable\": true,\n      \"cveId\": \"<string>\",\n      \"cvss3Vector\": \"<string>\",\n      \"cvss3Score\": 123\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.vanta.com/v1/resources/package_vulnerability_connectors")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"resourceId\": \"<string>\",\n  \"resources\": [\n    {\n      \"displayName\": \"<string>\",\n      \"uniqueId\": \"<string>\",\n      \"externalUrl\": \"<string>\",\n      \"packageName\": \"<string>\",\n      \"packageVersion\": \"<string>\",\n      \"severity\": 123,\n      \"vulnerableComponentUniqueId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"isResolvable\": true,\n      \"remediationInstructions\": \"<string>\",\n      \"isReachable\": true,\n      \"cveId\": \"<string>\",\n      \"cvss3Vector\": \"<string>\",\n      \"cvss3Score\": 123\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "success": true
}

Authorizations

Authorization

string

header

required

The access token received from the authorization server in the OAuth 2.0 flow.

Scopes

connectors.self:read-resource

Read data from your account.

connectors.self:write-resource

Send data to your account.

Body

application/json

List of resources to sync

resourceId

string

required

Vanta generated identifier for the given resource, and can be found on the developer console page. See the list of registered resources and their IDs on https://app.vanta.com/settings/developer-console/<app_id>?tab=resources

resources

object[]

required

Show child attributes

Response

200 - application/json

The current resources synced.

success

boolean

required

⌘I

Sync all Package Vulnerabilities

curl --request PUT \
  --url https://api.vanta.com/v1/resources/package_vulnerability_connectors \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "resourceId": "<string>",
  "resources": [
    {
      "displayName": "<string>",
      "uniqueId": "<string>",
      "externalUrl": "<string>",
      "packageName": "<string>",
      "packageVersion": "<string>",
      "severity": 123,
      "vulnerableComponentUniqueId": "<string>",
      "description": "<string>",
      "isResolvable": true,
      "remediationInstructions": "<string>",
      "isReachable": true,
      "cveId": "<string>",
      "cvss3Vector": "<string>",
      "cvss3Score": 123
    }
  ]
}
'

import requests

url = "https://api.vanta.com/v1/resources/package_vulnerability_connectors"

payload = {
    "resourceId": "<string>",
    "resources": [
        {
            "displayName": "<string>",
            "uniqueId": "<string>",
            "externalUrl": "<string>",
            "packageName": "<string>",
            "packageVersion": "<string>",
            "severity": 123,
            "vulnerableComponentUniqueId": "<string>",
            "description": "<string>",
            "isResolvable": True,
            "remediationInstructions": "<string>",
            "isReachable": True,
            "cveId": "<string>",
            "cvss3Vector": "<string>",
            "cvss3Score": 123
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    resourceId: '<string>',
    resources: [
      {
        displayName: '<string>',
        uniqueId: '<string>',
        externalUrl: '<string>',
        packageName: '<string>',
        packageVersion: '<string>',
        severity: 123,
        vulnerableComponentUniqueId: '<string>',
        description: '<string>',
        isResolvable: true,
        remediationInstructions: '<string>',
        isReachable: true,
        cveId: '<string>',
        cvss3Vector: '<string>',
        cvss3Score: 123
      }
    ]
  })
};

fetch('https://api.vanta.com/v1/resources/package_vulnerability_connectors', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.vanta.com/v1/resources/package_vulnerability_connectors",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'resourceId' => '<string>',
    'resources' => [
        [
                'displayName' => '<string>',
                'uniqueId' => '<string>',
                'externalUrl' => '<string>',
                'packageName' => '<string>',
                'packageVersion' => '<string>',
                'severity' => 123,
                'vulnerableComponentUniqueId' => '<string>',
                'description' => '<string>',
                'isResolvable' => true,
                'remediationInstructions' => '<string>',
                'isReachable' => true,
                'cveId' => '<string>',
                'cvss3Vector' => '<string>',
                'cvss3Score' => 123
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.vanta.com/v1/resources/package_vulnerability_connectors"

	payload := strings.NewReader("{\n  \"resourceId\": \"<string>\",\n  \"resources\": [\n    {\n      \"displayName\": \"<string>\",\n      \"uniqueId\": \"<string>\",\n      \"externalUrl\": \"<string>\",\n      \"packageName\": \"<string>\",\n      \"packageVersion\": \"<string>\",\n      \"severity\": 123,\n      \"vulnerableComponentUniqueId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"isResolvable\": true,\n      \"remediationInstructions\": \"<string>\",\n      \"isReachable\": true,\n      \"cveId\": \"<string>\",\n      \"cvss3Vector\": \"<string>\",\n      \"cvss3Score\": 123\n    }\n  ]\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://api.vanta.com/v1/resources/package_vulnerability_connectors")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"resourceId\": \"<string>\",\n  \"resources\": [\n    {\n      \"displayName\": \"<string>\",\n      \"uniqueId\": \"<string>\",\n      \"externalUrl\": \"<string>\",\n      \"packageName\": \"<string>\",\n      \"packageVersion\": \"<string>\",\n      \"severity\": 123,\n      \"vulnerableComponentUniqueId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"isResolvable\": true,\n      \"remediationInstructions\": \"<string>\",\n      \"isReachable\": true,\n      \"cveId\": \"<string>\",\n      \"cvss3Vector\": \"<string>\",\n      \"cvss3Score\": 123\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.vanta.com/v1/resources/package_vulnerability_connectors")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"resourceId\": \"<string>\",\n  \"resources\": [\n    {\n      \"displayName\": \"<string>\",\n      \"uniqueId\": \"<string>\",\n      \"externalUrl\": \"<string>\",\n      \"packageName\": \"<string>\",\n      \"packageVersion\": \"<string>\",\n      \"severity\": 123,\n      \"vulnerableComponentUniqueId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"isResolvable\": true,\n      \"remediationInstructions\": \"<string>\",\n      \"isReachable\": true,\n      \"cveId\": \"<string>\",\n      \"cvss3Vector\": \"<string>\",\n      \"cvss3Score\": 123\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "success": true
}

API Basics

Manage API

Integrations API

Audit API

Webhooks

Sync all Package Vulnerabilities

Authorizations

Scopes

Body

Response