Mend Policies - Organization API

openapi: 3.2.0
info:
  title: Mend Policies - Organization API
  description: 'Mend''s enhanced SCA API enables automation of workflows in a REST compliant format. The API features:

    + Access for any user with Mend credentials, via a user key available in the user''s profile page in the Mend App.

    + Improved security with a JWT token per organization, which expires every 10 minutes.

    + Added scalability with support for pagination, filtering and sorting search results.

    + Broader functionality available programmatically.

    + New standard API documentation for easy navigation and search.


    **Note:** To help you get started with the Mend SCA API 2.0, we recommend reviewing our onboarding guide -> Getting Started with Mend SCA API 2.0.

    This resource covers initial setup, authentication instructions, and helpful tips to help you successfully begin working with the Mend SCA API 2.0. If you have a dedicated instance of Mend, contact your Mend representative to access this API on your instance.'
  version: 3.0.1
servers:
- url: https://api-saas.mend.io
  description: Generated server url
security:
- bearer-key: []
tags:
- name: Policies - Organization
paths:
  /api/v2.0/orgs/{orgToken}/policies/{policyUuid}:
    get:
      tags:
      - Policies - Organization
      summary: Get organization policy
      description: Returns the given policy for a particular organization
      operationId: getContextPolicy_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      - name: policyUuid
        in: path
        description: Policy UUID (by running Policies - Organization and run Get Organization Policies, or the equivalent for Product or Project.)
        required: true
        schema:
          type: string
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponsePolicyDTO'
    put:
      tags:
      - Policies - Organization
      summary: Update Organization Policy
      description: Updates a policy of a given organization
      operationId: updatePolicy_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      - name: policyUuid
        in: path
        description: Policy UUID (by running Policies - Organization and run Get Organization Policies, or the equivalent for Product or Project.)
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PolicyRequestDTO'
        required: true
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponsePolicyDTO'
    delete:
      tags:
      - Policies - Organization
      summary: Delete Organization Policy
      description: Deletes the given policy for an organization
      operationId: deletePolicy_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      - name: policyUuid
        in: path
        description: Policy UUID (by running Policies - Organization and run Get Organization Policies, or the equivalent for Product or Project.)
        required: true
        schema:
          type: string
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseMessageDTO'
  /api/v2.0/orgs/{orgToken}/policies/priority:
    put:
      tags:
      - Policies - Organization
      summary: Update Organization Policy Priorities
      description: Updates the priority of policies in a given organization. Policies are numbered and then evaluated sequentially. The request body should contain a list of policy UUIDs in the desired order, starting from highest priority. The service returns a list or ordered policies.
      operationId: updatePriorities_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdatePrioritiesRequestDTO'
        required: true
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseCollectionPolicyDTO'
  /api/v2.0/orgs/{orgToken}/policies/autoPrioritize:
    put:
      tags:
      - Policies - Organization
      summary: Auto Prioritize Organization Policies
      description: Sets an organization's policies to "auto-prioritize" in the order of reject > conditional approval > reassign to user > approve
      operationId: autoPrioritize_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseCollectionPolicyDTO'
  /api/v2.0/orgs/{orgToken}/policies/apply:
    post:
      tags:
      - Policies - Organization
      summary: Apply Organization Policies On Inventory
      description: After initiating this call, the process will be performed asynchronously in the background. To check the status of the process and retrieve the final outcome, use the "Get Async Process Status" request.
      operationId: applyOnInventory_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseAsyncProcessStatusV2DTO'
  /api/v2.0/orgs/{orgToken}/policies:
    get:
      tags:
      - Policies - Organization
      summary: Get organization policies
      description: Returns all of the policies of a given organization
      operationId: getContextPolicies_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseCollectionPolicyDTO'
    post:
      tags:
      - Policies - Organization
      summary: Create Organization Policy
      description: Creates a new policy for a given organization
      operationId: createPolicy_2
      parameters:
      - name: orgToken
        in: path
        description: 'org UUID (by running Entities - Organization > Get User Organizations) or API Key (from the Mend SCA App: **Integrate** tab > **API Key**).'
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PolicyRequestDTO'
        required: true
      responses:
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponsePolicyDTO'
components:
  schemas:
    DWRResponseBase:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
    LICENSE:
      required:
      - licenses
      type: object
      properties:
        type:
          type: string
        licenses:
          type: array
          items:
            $ref: '#/components/schemas/PolicyLicenseDTO'
        inclusive:
          title: Inclusive
          type: boolean
          description: Trigger only when ALL licenses of the library are matched
      description: 'type: LICENSE'
    UpdatePrioritiesRequestDTO:
      required:
      - uuids
      type: object
      properties:
        uuids:
          type: array
          items:
            title: Policy Uuid
            type: string
            example: 123e4567-e89b-12d3-a456-426655440000
      description: Must contain all policy uuids
    GAV_REGEX:
      type: object
      properties:
        type:
          type: string
        groupIdRegex:
          title: Group Id Regex
          type: string
          example: /**
        artifactIdRegex:
          title: Artifact Id Regex
          type: string
          example: /**
        versionRegex:
          title: Version Regex
          type: string
          example: /**
      description: 'type: GAV_REGEX'
    MessageDTO:
      type: object
      properties:
        message:
          title: message
          type: string
          example: Success!
    CONDITIONS:
      type: object
      description: 'type: CONDITIONS'
      allOf:
      - $ref: '#/components/schemas/BasePolicyActionDTO'
      - type: object
        properties:
          approveWhenAllSatisfied:
            title: Approve When All Satisfied
            type: boolean
            default: false
          rejectWhenOneRejected:
            title: Reject When One Condition is Rejected
            type: boolean
            default: false
          conditions:
            type: array
            items:
              $ref: '#/components/schemas/ConditionInfo'
          failPolicyCheck:
            title: Fail Policy Check
            type: boolean
            default: false
    DWRResponseMessageDTO:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
        retVal:
          $ref: '#/components/schemas/MessageDTO'
    EFFECTIVENESS:
      required:
      - shieldValue
      type: object
      properties:
        type:
          type: string
        shieldValue:
          title: Effective Value
          type: string
          enum:
          - RED
          - YELLOW
          - GREY
          - NO_SHIELD
          - GREEN
      description: 'type: EFFECTIVENESS'
    DWRResponsePolicyDTO:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
        retVal:
          $ref: '#/components/schemas/PolicyDTO'
    PolicyContextDTO:
      type: object
      properties:
        uuid:
          title: Policy Uuid
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        name:
          title: Context Name
          type: string
          example: Context A
        contextType:
          title: ContextType
          type: string
          example: orgs
          enum:
          - ORGS
          - PRODUCTS
          - PROJECTS
    BasePolicyActionDTO:
      required:
      - type
      type: object
      properties:
        type:
          type: string
      discriminator:
        propertyName: type
    DWRResponseCollectionPolicyDTO:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
        retVal:
          type: array
          items:
            $ref: '#/components/schemas/PolicyDTO'
    BasePolicyFilterDTO:
      type: object
      properties:
        type:
          type: string
    REJECT:
      type: object
      description: 'type: REJECT'
      allOf:
      - $ref: '#/components/schemas/BasePolicyActionDTO'
    APPROVE:
      type: object
      description: 'type: APPROVE'
      allOf:
      - $ref: '#/components/schemas/BasePolicyActionDTO'
    DWRResponseAsyncProcessStatusV2DTO:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
        retVal:
          $ref: '#/components/schemas/AsyncProcessStatusV2DTO'
    UserInfoDTO:
      required:
      - uuid
      type: object
      properties:
        uuid:
          title: User UUID
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        name:
          title: User Name
          type: string
          example: Jon Smith
        email:
          title: User Email
          type: string
          example: jon.smith@mail.com
        userType:
          title: Type Of User
          type: string
          example: REGULAR
          enum:
          - REGULAR
          - SERVICE
          - SCAN_SUMMARY_RECEIVER
        accountStatus:
          type: string
          enum:
          - ACTIVE
          - INACTIVE
          - LOCKOUT
    AsyncProcessStatusV2DTO:
      type: object
      properties:
        contextUuid:
          title: contextUuid
          type: string
          example: caf69794-9882-4b55-82db-6b6da4fe2a26
        uuid:
          title: uuid
          type: string
          example: caf69794-9882-4b55-82db-6b6da4fe2a92
        status:
          title: status
          type: string
          example: PENDING
          enum:
          - PENDING
          - IN_PROGRESS
          - FAILED
          - FAILURE
          - SUCCESS
        contextType:
          title: contextType
          type: string
          example: DOMAIN
          enum:
          - SYSTEM
          - GLOBAL_ACCOUNT
          - DOMAIN
          - PRODUCT
          - PROJECT
          - SCAN
          - UNSUPPORTED_TYPE
        created:
          type: string
          format: date-time
        modified:
          type: string
          format: date-time
        processType:
          title: processType
          type: string
          example: APPLY_POLICIES
        messageContentSha1:
          title: messageContentSha1
          type: string
          example: fb4016165697cc32d0b90ccc82e3c2c846eb01b7
        userMail:
          type: string
          writeOnly: true
        requestToken:
          title: requestToken
          type: string
          example: 2cd6a43b
        userEmail:
          title: userMail
          type: string
          example: sample@mail.com
    ReferenceNameRequiredException:
      type: object
      properties:
        cause:
          type: object
          properties:
            stackTrace:
              type: array
              items:
                type: object
                properties:
                  classLoaderName:
                    type: string
                  moduleName:
                    type: string
                  moduleVersion:
                    type: string
                  methodName:
                    type: string
                  fileName:
                    type: string
                  lineNumber:
                    type: integer
                    format: int32
                  className:
                    type: string
                  nativeMethod:
                    type: boolean
            message:
              type: string
            suppressed:
              type: array
              items:
                type: object
                properties:
                  stackTrace:
                    type: array
                    items:
                      type: object
                      properties:
                        classLoaderName:
                          type: string
                        moduleName:
                          type: string
                        moduleVersion:
                          type: string
                        methodName:
                          type: string
                        fileName:
                          type: string
                        lineNumber:
                          type: integer
                          format: int32
                        className:
                          type: string
                        nativeMethod:
                          type: boolean
                  message:
                    type: string
                  localizedMessage:
                    type: string
            localizedMessage:
              type: string
        stackTrace:
          type: array
          items:
            type: object
            properties:
              classLoaderName:
                type: string
              moduleName:
                type: string
              moduleVersion:
                type: string
              methodName:
                type: string
              fileName:
                type: string
              lineNumber:
                type: integer
                format: int32
              className:
                type: string
              nativeMethod:
                type: boolean
        requestId:
          type: string
        errorCode:
          type: string
        errorType:
          type: string
          enum:
          - Client
          - Service
          - Unknown
        errorMessage:
          type: string
        statusCode:
          type: integer
          format: int32
        serviceName:
          type: string
        httpHeaders:
          type: object
          additionalProperties:
            type: string
        rawResponse:
          type: array
          items:
            type: string
            format: byte
        rawResponseContent:
          type: string
        message:
          type: string
        retryable:
          type: boolean
        suppressed:
          type: array
          items:
            type: object
            properties:
              stackTrace:
                type: array
                items:
                  type: object
                  properties:
                    classLoaderName:
                      type: string
                    moduleName:
                      type: string
                    moduleVersion:
                      type: string
                    methodName:
                      type: string
                    fileName:
                      type: string
                    lineNumber:
                      type: integer
                      format: int32
                    className:
                      type: string
                    nativeMethod:
                      type: boolean
              message:
                type: string
              localizedMessage:
                type: string
        localizedMessage:
          type: string
    PolicyGroupDTO:
      required:
      - uuid
      type: object
      properties:
        uuid:
          title: Group Uuid
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        name:
          title: Group Name
          type: string
          example: Group A
    CREATE_ISSUE:
      required:
      - issueTrackerType
      type: object
      description: 'type: CREATE_ISSUE'
      allOf:
      - $ref: '#/components/schemas/BasePolicyActionDTO'
      - type: object
        properties:
          failPolicyCheck:
            title: Fail Policy Check
            type: boolean
            default: false
          issueTrackerType:
            title: Issue Tracker Type
            type: string
            example: COMMON_ISSUE_TRACKER
            enum:
            - COMMON_ISSUE_TRACKER
    PolicyRequestDTO:
      required:
      - action
      - filter
      - name
      type: object
      properties:
        name:
          title: Policy Name
          type: string
          example: License Policy
        filter:
          type: object
          oneOf:
          - $ref: '#/components/schemas/GAV_REGEX'
          - $ref: '#/components/schemas/LIBRARY_REQUEST_HISTORY'
          - $ref: '#/components/schemas/LIBRARY_STALENESS'
          - $ref: '#/components/schemas/LICENSE'
          - $ref: '#/components/schemas/PRIMARY_ATTRIBUTE_VALUE'
          - $ref: '#/components/schemas/PRODUCT'
          - $ref: '#/components/schemas/ReferenceNameRequiredException'
          - $ref: '#/components/schemas/EFFECTIVENESS'
          - $ref: '#/components/schemas/VULNERABILITY_SCORE'
        action:
          oneOf:
          - $ref: '#/components/schemas/APPROVE'
          - $ref: '#/components/schemas/CONDITIONS'
          - $ref: '#/components/schemas/CREATE_ISSUE'
          - $ref: '#/components/schemas/REASSIGN'
          - $ref: '#/components/schemas/REJECT'
        enabled:
          title: Enabled
          type: boolean
          default: true
    LIBRARY_STALENESS:
      required:
      - monthsBack
      type: object
      properties:
        type:
          type: string
        monthsBack:
          title: Months Back
          type: integer
          format: int32
          example: 36
      description: 'type: LIBRARY_STALENESS'
    PRODUCT:
      required:
      - productToken
      type: object
      properties:
        type:
          type: string
        productToken:
          title: Product Token
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        productName:
          title: Product Name
          type: string
          description: 'product UUID (by running Entities - Organization > Get Organization Products) or Product Token (from the Mend SCA App: **Integrate** tab > **Product Token**).'
          example: Product A
      description: 'type: PRODUCT'
    REASSIGN:
      type: object
      description: 'type: REASSIGN'
      allOf:
      - $ref: '#/components/schemas/BasePolicyActionDTO'
      - type: object
        properties:
          user:
            $ref: '#/components/schemas/PolicyUserDTO'
          group:
            $ref: '#/components/schemas/PolicyGroupDTO'
          failPolicyCheck:
            title: Fail Policy Check
            type: boolean
            default: false
    LIBRARY_REQUEST_HISTORY:
      required:
      - libraryRequestHistory
      type: object
      properties:
        type:
          type: string
        libraryRequestHistory:
          title: Library Request History
          type: string
          enum:
          - APPROVED_AT_LEAST_ONCE
          - APPROVED_AT_LEAST_ONCE_OR_PENDING
          - REJECTED_AT_LEAST_ONCE
          - REJECTED_AT_LEAST_ONCE_OR_PENDING
          - PENDING
      description: 'type: LIBRARY_REQUEST_HISTORY'
    PolicyUserDTO:
      required:
      - uuid
      type: object
      properties:
        uuid:
          title: User Uuid
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        name:
          title: User Name
          type: string
          example: jon.smith
        email:
          title: User Name
          type: string
          example: jon.smith@mail.com
    PolicyLicenseDTO:
      required:
      - name
      type: object
      properties:
        uuid:
          title: License Uuid
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        name:
          title: License Name
          type: string
          example: MIT
    PRIMARY_ATTRIBUTE_VALUE:
      required:
      - attributeValue
      type: object
      properties:
        type:
          type: string
        attributeValue:
          title: Attribute Value
          type: string
          example: value
      description: 'type: PRIMARY_ATTRIBUTE_VALUE'
    ConditionInfo:
      required:
      - conditionText
      - duePeriod
      type: object
      properties:
        duty:
          type: string
          enum:
          - REQUESTER
          - APPROVER
        user:
          $ref: '#/components/schemas/PolicyUserDTO'
        group:
          $ref: '#/components/schemas/PolicyGroupDTO'
        conditionText:
          title: Condition Description
          type: string
          example: A reason for the condition
        duePeriod:
          title: Due Period
          type: integer
          format: int32
          example: 10
      description: Condition will apply to duty or user or group
    VULNERABILITY_SCORE:
      type: object
      properties:
        type:
          type: string
        from:
          type: number
          format: float
        to:
          type: number
          format: float
      description: 'type: VULNERABILITY_SCORE'
    PolicyDTO:
      type: object
      properties:
        uuid:
          title: Policy Uuid
          type: string
          example: 123e4567-e89b-12d3-a456-426655440000
        name:
          title: Policy Name
          type: string
          example: A Policy
        owner:
          $ref: '#/components/schemas/UserInfoDTO'
        createdAt:
          title: Policy Creation Date
          type: string
          format: date-time
        priority:
          title: Priority
          type: integer
          description: 1 is the lowest priority
          format: int32
          example: 1
        filter:
          $ref: '#/components/schemas/BasePolicyFilterDTO'
        action:
          oneOf:
          - $ref: '#/components/schemas/APPROVE'
          - $ref: '#/components/schemas/CONDITIONS'
          - $ref: '#/components/schemas/CREATE_ISSUE'
          - $ref: '#/components/schemas/REASSIGN'
          - $ref: '#/components/schemas/REJECT'
        context:
          $ref: '#/components/schemas/PolicyContextDTO'
        enabled:
          title: Enabled
          type: boolean
        modifiedAt:
          title: Policy Modification Date
          type: string
          format: date-time
        modifiedBy:
          title: Policy Modified By
          type: string
          example: jon.smith@mail.com
        aggregatedPriority:
          type: integer
          format: int32
      description: Policies are checked by order of priority; note that 1 is the lowest priority
  securitySchemes:
    bearer-key:
      type: http
      description: JWT token Bearer
      scheme: bearer
      bearerFormat: JWT