HALOWERKSicherwerk
sbom
Parses package-lock.json, package.json, requirements.txt, go.mod and Cargo.lock and emits a bill of materials in CycloneDX 1.5 or SPDX 2.3, with a package URL per component. The distinction that decides whether the document is worth anything is made explicit: a lockfile names the versions actually installed, a manifest only names ranges, and a bill of materials built from ranges describes what might be installed rather than what is.
POST https://sicher.halowerk.com/v1/sbomEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| files | array | Ja | The manifest or lock files. |
| format | string | Nein | Output format. |
| include_dev | boolean | Nein | Include development-only dependencies. |
| project_name | string | Nein | Name for the document metadata. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"files"
],
"additionalProperties": false,
"properties": {
"files": {
"type": "array",
"minItems": 1,
"maxItems": 10,
"description": "The manifest or lock files.",
"items": {
"type": "object",
"required": [
"content"
],
"additionalProperties": false,
"properties": {
"filename": {
"type": "string",
"maxLength": 300,
"description": "File name; the type is detected from content if absent."
},
"content": {
"type": "string",
"maxLength": 4194304,
"description": "File contents as text."
}
}
}
},
"format": {
"type": "string",
"enum": [
"cyclonedx",
"spdx",
"plain"
],
"default": "cyclonedx",
"description": "Output format."
},
"include_dev": {
"type": "boolean",
"default": false,
"description": "Include development-only dependencies."
},
"project_name": {
"type": "string",
"maxLength": 200,
"default": "unnamed-project",
"description": "Name for the document metadata."
}
}
}Veröffentlichtes Eingabebeispiel
{
"files": [
{
"filename": "package-lock.json",
"content": "{\"name\": \"synthetic-example\", \"lockfileVersion\": 3, \"packages\": {\"\": {\"name\": \"synthetic-example\"}, \"node_modules/lodash\": {\"version\": \"4.17.21\"}}}"
}
],
"format": "cyclonedx",
"project_name": "synthetic-example"
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://sicher.halowerk.com/v1/sbom/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
cve check
POSThttps://sicher.halowerk.com/v1/cve-checkQueries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and
- Sicherwerk0,005 USDC
hash reputation
POSThttps://sicher.halowerk.com/v1/hash-reputationQueries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict.