Sonatype Lifecycle API
The Sonatype Lifecycle Public REST API (v1.201.0) provides 188 endpoints for managing applications, organizations, policies, policy violations, waivers, vulnerability analysis, SBOM generation (SPDX, CycloneDX), scan management, component search, reports, source control integration, users, roles, and user tokens. Used by DevSecOps teams to automate software supply chain security and compliance workflows.
Documentation
Specifications
Schemas & Data
JSONSchema
https://raw.githubusercontent.com/api-evangelist/sonatype/refs/heads/main/json-schema/sonatype-application-schema.json
JSONSchema
https://raw.githubusercontent.com/api-evangelist/sonatype/refs/heads/main/json-schema/sonatype-policy-violation-schema.json
Other Resources
OpenAPI
#Software Supply Chain
#Security
#Policy
#Vulnerability Management
#SBOM
#Software Composition Analysis
#Applications
#Organizations