I am looking into getting the "reverse dependencies" of an artifact from the Rest API of Artifactory. The information is already present in the "Builds" section of the artifact. I dug a bit deeper and the call to the UI API is exactly what I would be looking for ([root]/artifactory/ui/artifactbuilds?...), but this is not an official endpoint.
How would I get the "raw" information from the "official" Rest API ?
Thank you
You can use the following AQL query for getting all the builds an artifact is part of:
builds.find({"module.artifact.name":{"$eq":"my-artifact.jar"}})
To run the query use the AQL search REST API method
Related
1.Is X-ray report generation possible using API Calls at the disired page in the Jfrog artifactory?
2.Scenario:Application dev team uploads the Build/Repository of their application into the Jfrog artifactory an xray scans it automatomatically. Suppose if we find vunerable Jars in perticular build -question-"can we corelate the vunerable jars to the respective builds and depedend builds and extract the same information in the report??
For Example: Vunerable Jar 'X' is used by build1 but the artifactory contains N no of Builds.
can we fetch the information if the same Vunerable Jar 'X' is used by multiple other build present in the artifactory. And is there any other way to intimate the build owners about this Vulnerable Jar 'X' which might be used on their application or Build.
Please find the answers to your queries below.
Yes, the report generation is possible through API calls made against the Xray service. [Xray REST API - Reports]
For the collection of data in accordance with the scenarios described in the second query, I believe this API call would be helpful.
Yes - This is documented in the Xray REST API documentation under the Reports section.
Yes, this is also specified in the Reports documentation, you can define the required scope and select multiple builds or repositories.
As for notifying build owners - This can be done by creating a rule for the policy that contains automatic action with the ability to inform the deployer and the watch recipients. This is triggered when there is a violation of the policy (which was previously created) Xray will generate a violation (for example jar X contains vulnerability with severity high)and it does not meet the policy and then Xray will generate notifications.
See relevant documentation.
Someone knows how I can GET the PROJECT's branching model via REST API. Not the repository. I can not find how to do it anywhere.
In bitbucket server I find it via web at https://mybitbucket.com/plugins/servlet/branchmodel/projects/{project-key}
I found it:
Is not in the actual version of REST API Documentation
(https://docs.atlassian.com/bitbucket-server/rest/5.14.0/bitbucket-rest.html)
Then, you can do GET request to:
https://mybitbucket.com/rest/branch-utils/1.0/projects/{project-key}/branchmodel/configuration
I have some build artifacts that have some debug information in them that I would like to display in a build summary. However, the only APIs I'm seeing for getting artifacts is as a zip file. If you go to the artifact screen and explore the artifacts, then copy the download URL, you get an API as:
https://{account}/_apis/resources/Containers/{container}?itemPath={file_name}
However, I can't seem to find a REST Client API to utilize this function in my ts script in the extension.
Any thoughts on how to get the actual files from this? The TS script needs to just grab the file and display it in the browser.
There isn’t such REST client API to do it.
You can call that API through HTTP request directly. To get container’s Id, you can use Get build artifacts REST API (in resource > data value).
There is an article about make http request.
5 Ways to Make HTTP Requests in Node.js
On the other hand, you don’t need to do it through extension, just call Logging Command (call command during build/release) to add additional information to build/release summary. (##vso[task.uploadsummary]local file path)
Is there any way to list artifact in Nexus v3.0, other that using rest API?
As the rest API for this version have not been implemented yet.
At this time, the REST API has been released as beta. You can get more information and give us feedback by going to this link: http://blog.sonatype.com/nexus-repository-new-beta-rest-api-for-content
It should address this use case, as well!
No luck over at the Atlassian Q/A board.
I'm trying to access bamboo project build version info via the REST API with the endpoint format:
http://bambooprod01.mysite.com:8085/rest/api/latest/plan/PROD-myproject?expand=variableContext
which returns an outdated version. When I view the information on bamboo I see the correct version of the build under the meta data tab, and above the info fields it states
"The following parameters have been manually overridden."
QUESTION: Is there a way to access the overridden variable info via a REST endpoint and if so what would the path be?
Got a response via Atlassian.
Atlassian Post
Unfortunately, this response has not being implemented and there is an
improvement request filed for that BAM-13511 - Expose the build
variables via the REST API OPEN.