We are currently working with the REST APIs to obtain SBOM data for our agent based scans (https://api.veracode.com/srcclr/sbom/v1/targets/{projectGuid}/cyclonedx?type=agent).

We also require to be able to view previous scans as available from the "Project Scan History" in the UI. Ideally, we would have this as an SBOM, but library and license information is what we require.

The /scans endpoint, https://api.veracode.com/srcclr/scans/{scan_id}, requires a guid (the UI displays a large int (?)), and it only returns basic date/tag/commit info.

We can obtain commit id, tag, or scan guid from our pipeline run. Our scan also outputs a text file which details the types of licenses, but we still need the details of each one.

Could someone please help:

• is there an endpoint to retrieve historical scan information for an SCA/agent project (library / license information)?
• or, perhaps - could we adjust the agent scan output to include more detail?

Many thanks,

Jo