Public API and contract downloads
Documentation / bundle version: 1.3.0 · API 1.0
Use the GET endpoints below at this service’s HTTPS address to read available information.
Unknown or duplicate query parameters are rejected. Page limits are 1–50 (default 50); use next_cursor with unchanged filters. Issue API search allows 256 characters / 1024 UTF-8 bytes; web search uses 200 / 800. A successful or empty response does not establish project safety, complete collection or feed publication.
Accepted parameters and bounds
GET /api/v1/public/capabilities—GET /api/v1/public/issuesq; confirmation=candidate; source_state=active|corrected|withdrawn|conflicting; modified_after=RFC3339; limit=1…50; cursorGET /api/v1/public/issues/{id}revision ≥ 1GET /api/v1/public/issues/{id}/investigation-promptrevision ≥ 1 (required) → JSONGET /api/v1/public/issues/{id}/investigation-prompt.txtrevision ≥ 1 (required) → text/plain; charset=utf-8GET /api/v1/public/status—GET /api/v1/public/status/collectionlimit=1…50; cursorGET /api/v1/public/status/noticescomponent=query|feed|collection; locale=en|ko|ja|zh-Hans|es|fr|ru|pt-PT; limit=1…50; cursorGET /api/v1/public/status/notices/{id}revision ≥ 1GET /api/v1/public/vendor-newsq ≤ 200 characters / 800 UTF-8 bytes; vendor=gitlab|railway|vercel|supabase; kind=incident|patch|advisory|outage; deployment=saas|self_hosted|mixed|unknown; product_id; origin_locale=en|ko|ja|zh-Hans|es|fr|ru|pt-PT|und; limit=1…50; cursorGET /api/v1/public/vendor-news/{id}revision ≥ 1GET /api/v1/public/contracts/{version}version=current|1.0.0|1.1.0|1.2.0|1.3.0GET /api/v1/public/contracts/{version}/{artifact}version=current|1.0.0|1.1.0|1.2.0|1.3.0; artifact: public-contracts.openapi.json, issue-page.schema.json, feed-manifest.schema.json, feed-record.schema.json, feed-record-v1.1.schema.json, feed-record-v1.2.schema.json, feed-recovery.schema.json, feed-record-v1.3.schema.json, issue-page-v1.3.schema.json, public-api.openapi.v1.0.0.json, feed-record-v1.4.schema.json, issue-page-v1.4.schema.json, public-api.openapi.v1.1.0.json
Request examples (relative to this HTTPS service)
GET /api/v1/public/capabilitiesGET /api/v1/public/issues?limit=10GET /api/v1/public/statusGET /api/v1/public/vendor-news?vendor=gitlab&limit=10
Errors and recovery
404: unavailable, unsupported or no longer public; return to current information. 422: fix parameters. 409: cursor scope changed; restart the query. 410: cursor expired; restart. 429: wait for Retry-After. 503: retry later. Errors include error.code and request_id when provided; retain them when requesting help. These reads never start a model or remediation.
Download exact contract files
Bundle 1.3.0 is current; immutable 1.0.0, 1.1.0 and 1.2.0 remain available. It adds feed record / issue page 1.4 with advisory types and public API OpenAPI 1.1.0. Bundle versions, read API 1.0 and feed records 1.0 / 1.1 / 1.2 / 1.3 / 1.4 are separate. Pin a bundle version and verify SHA-256 before parsing; schema checks alone do not verify feed signatures, freshness or rollback protection.
Use public-api.openapi.v1.0.0.json for the available public API endpoints. Match each response to its schema and version. Feed schemas describe feed data, not the HTTP issue list.
Download versioned catalogue · 1.3.0public-contracts.openapi.json
- Documentation / bundle version
- 1.3.0
- SHA-256
36ba19502d350ccdc99d44ceab5406be3f42f12f93cc5b480c929478fda7417e- UTF-8 bytes
- 8401
- Schema ID
urn:si:public-contract-downloads:1.3.0
issue-page.schema.json
- Documentation / bundle version
- 1.0
- SHA-256
f66e753ac0d795b4e9fb15e87be6bc7e102dba75309a27bd54dfbd628dd76135- UTF-8 bytes
- 5467
- Schema ID
urn:si:issue-page:1.0
feed-manifest.schema.json
- Documentation / bundle version
- 1.0
- SHA-256
931c10b40728820feef73d8afd4c2b9bacefdc1bad890d2d04bc3693b3e186d6- UTF-8 bytes
- 3658
- Schema ID
https://security-intelligence.invalid/contracts/feed-manifest/1.0
feed-record.schema.json
- Documentation / bundle version
- 1.0
- SHA-256
b005175eb305d5faf7191ccc96d57a96ef523e3076d8f860ec37e676910542b1- UTF-8 bytes
- 4350
- Schema ID
https://security-intelligence.invalid/contracts/feed-record/1.0urn:si:feed-record:1.0
feed-record-v1.1.schema.json
- Documentation / bundle version
- 1.1
- SHA-256
608faebb3521b52a00e06440f547a327ea16469652912371504cef70e0230709- UTF-8 bytes
- 13630
- Schema ID
urn:si:feed-record:1.1
feed-record-v1.2.schema.json
- Documentation / bundle version
- 1.2
- SHA-256
917bae2b55717c84530b875bad771a500c5030ca8d5d4e23df26146d47e78733- UTF-8 bytes
- 16801
- Schema ID
urn:si:feed-record:1.2
feed-recovery.schema.json
- Documentation / bundle version
- 1.0
- SHA-256
12e6ef875a04eb42e3852a5b480888d46537dfa529757bafcb81ef5ee6f9569e- UTF-8 bytes
- 4935
- Schema ID
urn:si:feed-recovery:1.0
feed-record-v1.3.schema.json
- Documentation / bundle version
- 1.3
- SHA-256
43c7d19b82f97bfc4603b482d9db8acba79be2438a2614af9422cf26db8270ce- UTF-8 bytes
- 16804
- Schema ID
urn:si:feed-record:1.3
issue-page-v1.3.schema.json
- Documentation / bundle version
- 1.3
- SHA-256
1cbc1b456c0ed65c43d44b3e5a7c99c2d2a7a0a63070e5052a2f15c647e7b188- UTF-8 bytes
- 5675
- Schema ID
urn:si:issue-page:1.3
public-api.openapi.v1.0.0.json
- Documentation / bundle version
- 1.0.0
- SHA-256
d3d0a3c859b46d88b9163c2c1b52f4eb6b9072603db6c2583d1cfb93472c74a3- UTF-8 bytes
- 261700
- Schema ID
urn:si:public-api:1.0.0
feed-record-v1.4.schema.json
- Documentation / bundle version
- 1.4
- SHA-256
8b2c92c0211439b319a81c88e5f4d1647add5e3d13b10c5f9c6959acde843aa5- UTF-8 bytes
- 16999
- Schema ID
urn:si:feed-record:1.4
issue-page-v1.4.schema.json
- Documentation / bundle version
- 1.4
- SHA-256
96edf09f6f5c085029914408a12cd8860b19c3a21a996dae9d9435b0fd82ec38- UTF-8 bytes
- 5883
- Schema ID
urn:si:issue-page:1.4
public-api.openapi.v1.1.0.json
- Documentation / bundle version
- 1.1.0
- SHA-256
d5bfd2b566d7be5e89591ade32a8a74464f79f9b0612ede378c844057147af53- UTF-8 bytes
- 262420
- Schema ID
urn:si:public-api:1.1.0