Skip to main content
POST
Post SCA results

Authorizations

X-API-KEY
string
header
required

Headers

X-Gable-Payload-Encoding
enum<string>

Required when uploading gzip-compressed SCA results with Content-Type application/octet-stream. Do not use HTTP Content-Encoding for compressed SCA uploads.

Available options:
gzip
X-Gable-Chunk-Session
string

Stable upload session id shared by every chunk. When this header is present, X-Gable-Chunk-Index and X-Gable-Chunk-Count are also required, and the request body must contain a base64-encoded slice of the full SCA results request body.

X-Gable-Chunk-Index
integer

1-based chunk position for a header-based chunked upload.

Required range: x >= 1
X-Gable-Chunk-Count
integer

Total chunk count for a header-based chunked upload.

Required range: x >= 1
X-Gable-Strand-Bundle
enum<string>

Marks a complete referenced artifact bundle. tar-v2 includes explicit analysis coverage and may represent partial analysis. X-Gable-Strand-Manifest is also required, and malformed marked requests never fall back to legacy JSON parsing.

Available options:
tar-v1,
tar-v2
X-Gable-Strand-Manifest
string<byte>

Base64-encoded manifest describing the exact files in a referenced strand bundle; version 1 has three files and version 2 adds the bounded analysis coverage artifact.

Maximum string length: 8192

Body

Send a complete SCA results payload or referenced strand bundle, or send base64-encoded chunks of that payload with the X-Gable-Chunk-* headers.

Union type for uploading SCA results - can be code lineage paths, data store metadata, edge definitions, raw prime, AI augmentation strand output, or compliance results

paths
object[]
required
run_id
string
required

The ID of the run that the paths belong to. Must be a UUIDv7.

Pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-7[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
type
enum<string>
required

The type of data being uploaded

Available options:
CODE
upload_context
object
external_component_id
string

Optional ID of the external component that was analyzed

metadata
object

Additional metadata for the component.

name
string

The name of the component that was analyzed

Response

SCA results

Response from posting SCA results.

runId
string
required

The run ID associated with this upload.

createdJob
boolean
required

Whether this request created the backing job for the run.

status
enum<string>

Whether a chunk was accepted or the referenced artifact upload is committed. This describes ingestion, not analysis completeness.

Available options:
chunk_received,
complete
analysis_status
enum<string>

Analysis completion asserted by the immutable tar-v2 coverage artifact. Not supplied for legacy uploads.

Available options:
partial,
complete