Graph API Reference

Field	Value
Source spec	`graph/openapi/v1.json`
OpenAPI version	`3.1.1`
API version	`1.0.0`
Operations	83
Path filter	All paths

Operations

`GET /api/graph/v1/assets`

Property	Value
Operation ID	-
Tags	`AssetRegistryEndpoints`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/assets/export`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/assets/query`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/assets/{assetId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`assetId`	`path`	yes
`includeLineage`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/assets/{assetId}/snapshot`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`assetId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/builds`

Build the caller’s tenant graph from one SbomService SBOM version

Reads the exact SBOM document (sbomId = SbomService subject reference, sbomVersionId = ledger version id, sbomDigest = SbomService ledger digest, the upload response’s digest) from SbomService for the authenticated principal’s tenant, verifies that ledger digest (SHA-256 of the document’s compact JSON re-serialization, not of the stored bytes), maps the CycloneDX JSON and runs the SBOM ingest, which writes artifact, SBOM and component nodes. Requires graph:write. The tenant is never taken from the body: a body naming tenantId or tenant returns 400. The response carries the terminal status: 200 completed only after the nodes are written; a failed build returns its error code with 404 (sbom_not_found, including another tenant’s SBOM), 422 (sbom_digest_mismatch, sbom_too_large, sbom_format_unsupported, sbom_malformed), 502 (sbom_owner_unavailable, sbom_owner_rejected) or 500 (graph_write_failed). 409 means the same build is running; a completed build is answered from its record. 501 GRAPH_FEATURE_UNAVAILABLE means the SbomService owner read is not configured.

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`401`	Unauthorized	`application/json`
`403`	Forbidden	`application/json`
`404`	Not Found	`application/json`
`409`	Conflict	`application/json`
`422`	Unprocessable Entity	`application/json`
`500`	Internal Server Error	`application/json`
`501`	Not Implemented	`application/json`
`502`	Bad Gateway	`application/json`

`GET /api/graph/v1/builds/{jobId}`

Read the status of one of the caller’s tenant graph builds

Returns the build record (running, completed or failed, with node and edge counts or the error code) for the authenticated principal’s tenant. Requires graph:write. Records are held in process memory, bounded to the 1,024 most recent builds; another tenant’s job id, an unknown id or any id after a restart returns 404 BUILD_NOT_FOUND.

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`jobId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`401`	Unauthorized	`application/json`
`403`	Forbidden	`application/json`
`404`	Not Found	`application/json`

`GET /api/graph/v1/graph/asset-registry/events`

Graph asset-registry event catch-up feed

Returns the global cross-tenant graph.asset_registry_events log ordered by (recordedAt, eventId) after an exclusive cursor, with explicit stream epoch and head signals. Consumers partition admitted events by the tenant inside each event.

Property	Value
Operation ID	`graph.asset-registry.events.feed.consolidated`
Tags	`AssetRegistry`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`afterEventId`	`query`	no
`afterRecordedAt`	`query`	no
`limit`	`query`	no
`maxBytes`	`query`	no
`streamEpoch`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`409`	Conflict	`application/json`
`503`	Service Unavailable	`application/json`

`POST /api/graph/v1/graph/diff`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graph/edges/by-evidence`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`evidenceRef`	`query`	yes
`evidenceType`	`query`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graph/edges/by-reason/{reason}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`reason`	`path`	yes
`cursor`	`query`	no
`limit`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graph/edges/metadata`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graph/edges/path/{sourceNodeId}/{targetNodeId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`sourceNodeId`	`path`	yes
`targetNodeId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graph/edges/{edgeId}/metadata`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`edgeId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graph/export`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graph/export/{jobId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`jobId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graph/lineage`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graph/paths`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graph/query`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graph/search`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graphs`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graphs/{graphId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graphs/{graphId}/export`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes
`format`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graphs/{graphId}/saved-views`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graph/v1/graphs/{graphId}/saved-views`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`DELETE /api/graph/v1/graphs/{graphId}/saved-views/{viewId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes
`viewId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/graphs/{graphId}/tiles`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes
`includeOverlays`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/nodes/{nodeId}/adjacency`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`nodeId`	`path`	yes
`graphId`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/paths`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`graphId`	`query`	no
`maxDepth`	`query`	no
`source`	`query`	yes
`target`	`query`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graph/v1/search`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`graphId`	`query`	no
`kinds`	`query`	no
`pageSize`	`query`	no
`q`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`POST /api/graphs/builds`

Build the caller’s tenant graph from one SbomService SBOM version

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`401`	Unauthorized	`application/json`
`403`	Forbidden	`application/json`
`404`	Not Found	`application/json`
`409`	Conflict	`application/json`
`422`	Unprocessable Entity	`application/json`
`500`	Internal Server Error	`application/json`
`501`	Not Implemented	`application/json`
`502`	Bad Gateway	`application/json`

`GET /api/graphs/builds/{jobId}`

Read the status of one of the caller’s tenant graph builds

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`jobId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`401`	Unauthorized	`application/json`
`403`	Forbidden	`application/json`
`404`	Not Found	`application/json`

`POST /api/graphs/overlays`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/graphs/overlays/{jobId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`jobId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /api/v1/buildinfo`

API alias for /buildinfo.json (same payload).

Property	Value
Operation ID	`StellaOpsBuildInfoApi`
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`GET /assets/{assetId}/snapshot`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`assetId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /buildinfo.json`

Image build provenance (module, gitSha, gitCommitTime, imageBuiltAt, branch) for drift detection.

Property	Value
Operation ID	`StellaOpsBuildInfoFile`
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`GET /doctor/graph-api/checks`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/asset-registry/events`

Graph asset-registry event catch-up feed

Property	Value
Operation ID	`graph.asset-registry.events.feed`
Tags	`AssetRegistry`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`afterEventId`	`query`	no
`afterRecordedAt`	`query`	no
`limit`	`query`	no
`maxBytes`	`query`	no
`streamEpoch`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`409`	Conflict	`application/json`
`503`	Service Unavailable	`application/json`

`GET /graph/assets`

Property	Value
Operation ID	-
Tags	`AssetRegistryEndpoints`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/assets/export`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/assets/query`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/assets/{assetId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`assetId`	`path`	yes
`includeLineage`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/diff`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/edges/by-evidence`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`evidenceRef`	`query`	yes
`evidenceType`	`query`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/edges/by-reason/{reason}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`reason`	`path`	yes
`cursor`	`query`	no
`limit`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/edges/metadata`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/edges/path/{sourceNodeId}/{targetNodeId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`sourceNodeId`	`path`	yes
`targetNodeId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/edges/{edgeId}/metadata`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`edgeId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/export`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graph/export/{jobId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`jobId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/lineage`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/paths`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/query`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graph/search`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graphs`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graphs/{graphId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graphs/{graphId}/export`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes
`format`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graphs/{graphId}/saved-views`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`POST /graphs/{graphId}/saved-views`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	`application/json`

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`DELETE /graphs/{graphId}/saved-views/{viewId}`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes
`viewId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /graphs/{graphId}/tiles`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`graphId`	`path`	yes
`includeOverlays`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /healthz`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	-

`GET /nodes/{nodeId}/adjacency`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`nodeId`	`path`	yes
`graphId`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`GET /paths`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`graphId`	`query`	no
`maxDepth`	`query`	no
`source`	`query`	yes
`target`	`query`	yes

Responses:

Status	Description	Content types
`200`	OK	-

`GET /search`

Property	Value
Operation ID	-
Tags	`StellaOps.Graph.Api`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`graphId`	`query`	no
`kinds`	`query`	no
`pageSize`	`query`	no
`q`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	-

`POST /v1/cve-mappings`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`201`	Created	`application/json`
`400`	Bad Request	`application/json`

`POST /v1/cve-mappings/analyze-patch`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`

`GET /v1/cve-mappings/by-package`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`purl`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	`application/json`

`GET /v1/cve-mappings/by-symbol`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`language`	`query`	no
`symbol`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	`application/json`

`GET /v1/cve-mappings/stats`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	-

Responses:

Status	Description	Content types
`200`	OK	`application/json`

`GET /v1/cve-mappings/{cveId}`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`cveId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`404`	Not Found	`application/json`

`POST /v1/cve-mappings/{cveId}/enrich`

Property	Value
Operation ID	-
Tags	`CveMapping`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`cveId`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`404`	Not Found	`application/json`

`POST /v1/reachability/batch`

Property	Value
Operation ID	-
Tags	`Reachability`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`

`POST /v1/reachability/hybrid`

Property	Value
Operation ID	-
Tags	`Reachability`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`

`POST /v1/reachability/runtime`

Property	Value
Operation ID	-
Tags	`Reachability`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`

`POST /v1/reachability/static`

Property	Value
Operation ID	-
Tags	`Reachability`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`
`404`	Not Found	`application/json`

`POST /v1/reachgraphs`

Property	Value
Operation ID	-
Tags	`ReachGraph`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`201`	Created	`application/json`
`400`	Bad Request	`application/json`
`401`	Unauthorized	`application/json`
`429`	Too Many Requests	`application/json`

`GET /v1/reachgraphs/by-artifact/{artifactDigest}`

Property	Value
Operation ID	-
Tags	`ReachGraph`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`artifactDigest`	`path`	yes
`limit`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	`application/json`

`POST /v1/reachgraphs/replay`

Property	Value
Operation ID	-
Tags	`ReachGraph`
Auth	Not declared
Request body	`application/*+json`, `application/json`, `text/json`

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`400`	Bad Request	`application/json`

`GET /v1/reachgraphs/{digest}`

Property	Value
Operation ID	-
Tags	`ReachGraph`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`digest`	`path`	yes

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`404`	Not Found	`application/json`

`DELETE /v1/reachgraphs/{digest}`

Property	Value
Operation ID	-
Tags	`ReachGraph`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required	Description
`digest`	`path`	yes

Responses:

Status	Description	Content types
`204`	No Content	`application/json`
`403`	Forbidden	`application/json`
`404`	Not Found	`application/json`

`GET /v1/reachgraphs/{digest}/slice`

Property	Value
Operation ID	-
Tags	`ReachGraph`
Auth	Not declared
Request body	-

Parameters:

Name	In	Required
`digest`	`path`	yes
`cve`	`query`	no
`depth`	`query`	no
`direction`	`query`	no
`entrypoint`	`query`	no
`file`	`query`	no
`q`	`query`	no

Responses:

Status	Description	Content types
`200`	OK	`application/json`
`404`	Not Found	`application/json`