fossa_get_release_group_attribution_report
Generate a release group attribution or SBOM report synchronously for a given release. Choose from formats like Markdown, CSV, or SPDX to inspect dependencies, licenses, and vulnerabilities.
Instructions
Generate and return an attribution or SBOM report for one release in a FOSSA release group, synchronously.
Read-only. The report is streamed back rather than queued, and the portal
publishing switch this endpoint also offers is deliberately not exposed here
because publishing is a write; use fossa_queue_release_group_attribution_report
for that. PDF is not offered because the response is decoded as text.
exclude_package_labels drops every dependency carrying any of the named
package labels.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | MD | |
| preview | No | ||
| release_id | Yes | ||
| release_title | No | ||
| release_group_id | Yes | ||
| release_group_url | No | ||
| release_group_title | No | ||
| include_file_matches | No | ||
| include_license_list | No | ||
| include_license_scan | No | ||
| exclude_package_labels | No | ||
| include_copyright_list | No | ||
| include_package_labels | No | ||
| dependency_info_options | No | ||
| include_license_headers | No | ||
| include_project_license | No | ||
| include_deep_dependencies | No | ||
| include_dependency_summary | No | ||
| include_fossa_dependencies | No | ||
| include_direct_dependencies | No | ||
| include_open_vulnerabilities | No | ||
| include_closed_vulnerabilities | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||