GitHub Dependency Graph API

The GitHub Dependency Graph API lets you view and submit dependency information for a repository. It provides endpoints to export the software bill of materials (SBOM) for a repository and to submit dependency snapshots from build tools or package managers, enabling GitHub to generate Dependabot alerts for vulnerable dependencies.

API entry from apis.yml

apis.yml Raw ↑
aid: github:github-dependency-graph-api
name: GitHub Dependency Graph API
tags:
- Dependencies
- Security
- Supply Chain
baseURL: https://api.github.com
humanURL: https://docs.github.com/en/rest/dependency-graph?apiVersion=2022-11-28
properties:
- url: https://docs.github.com/en/rest/dependency-graph
  type: Documentation
description: The GitHub Dependency Graph API lets you view and submit dependency information for a repository.
  It provides endpoints to export the software bill of materials (SBOM) for a repository and to submit
  dependency snapshots from build tools or package managers, enabling GitHub to generate Dependabot alerts
  for vulnerable dependencies.