HALOWERKSicherwerk
cve check
Queries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and summary, and the single figure that decides what to do next: the lowest version that fixes all of them, derived from the fixed-version events in the affected ranges.
POST https://sicher.halowerk.com/v1/cve-checkEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| packages | array | Ja | The packages to check. |
| ecosystem | string | Nein | Default ecosystem for entries that do not name one. |
| min_severity | string | Nein | Only report findings at or above this severity. |
| include_details | boolean | Nein | Fetch summary and severity per finding. Off is faster but returns ids only. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"packages"
],
"additionalProperties": false,
"properties": {
"packages": {
"type": "array",
"minItems": 1,
"maxItems": 100,
"description": "The packages to check.",
"items": {
"type": "object",
"required": [
"name",
"version"
],
"additionalProperties": false,
"properties": {
"name": {
"type": "string",
"minLength": 1,
"maxLength": 200,
"description": "Package name as the ecosystem spells it."
},
"version": {
"type": "string",
"minLength": 1,
"maxLength": 60,
"description": "Exact installed version."
},
"ecosystem": {
"type": "string",
"maxLength": 30,
"description": "Ecosystem, e.g. npm, PyPI, Go. Defaults to the top-level value."
}
}
}
},
"ecosystem": {
"type": "string",
"maxLength": 30,
"default": "npm",
"description": "Default ecosystem for entries that do not name one."
},
"min_severity": {
"type": "string",
"enum": [
"low",
"medium",
"high",
"critical"
],
"description": "Only report findings at or above this severity."
},
"include_details": {
"type": "boolean",
"default": true,
"description": "Fetch summary and severity per finding. Off is faster but returns ids only."
}
}
}Veröffentlichtes Eingabebeispiel
{
"packages": [
{
"name": "lodash",
"version": "4.17.21",
"ecosystem": "npm"
}
],
"include_details": false
}Ergebnis & Dokumentation
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
hash reputation
POSThttps://sicher.halowerk.com/v1/hash-reputationQueries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict.
- Sicherwerk0,002 USDC
jwt verify
POSThttps://sicher.halowerk.com/v1/jwt-verifyDecodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: