Sonatype Policy Violation
A policy violation detected by Sonatype Lifecycle during a component scan.
Software Supply ChainSecurityVulnerability ManagementSBOMSoftware Composition AnalysisDevSecOps
Properties
| Name |
Type |
Description |
| policyViolationId |
string |
Unique identifier for this policy violation |
| policyId |
string |
ID of the policy that was violated |
| policyName |
string |
Name of the violated policy |
| threatLevel |
integer |
Threat level from 0 (informational) to 10 (critical) |
| constraintViolations |
array |
List of constraint violations that triggered the policy |
| component |
object |
The component that triggered the violation |
| waived |
boolean |
Whether this violation has been waived |
| grandfathered |
boolean |
Whether this violation is grandfathered |
JSON Schema
{
"$schema": "http://json-schema.org/draft-07/schema#",
"$id": "https://raw.githubusercontent.com/api-evangelist/sonatype/main/json-schema/sonatype-policy-violation-schema.json",
"title": "Sonatype Policy Violation",
"description": "A policy violation detected by Sonatype Lifecycle during a component scan.",
"type": "object",
"properties": {
"policyViolationId": {
"type": "string",
"description": "Unique identifier for this policy violation"
},
"policyId": {
"type": "string",
"description": "ID of the policy that was violated"
},
"policyName": {
"type": "string",
"description": "Name of the violated policy"
},
"threatLevel": {
"type": "integer",
"minimum": 0,
"maximum": 10,
"description": "Threat level from 0 (informational) to 10 (critical)"
},
"constraintViolations": {
"type": "array",
"description": "List of constraint violations that triggered the policy",
"items": {
"type": "object",
"properties": {
"constraintId": {"type": "string"},
"constraintName": {"type": "string"},
"reasons": {
"type": "array",
"items": {
"type": "object",
"properties": {
"reason": {"type": "string"},
"reference": {
"type": ["object", "null"],
"properties": {
"value": {"type": "string"},
"type": {"type": "string"}
}
}
}
}
}
}
}
},
"component": {
"type": "object",
"description": "The component that triggered the violation",
"properties": {
"packageUrl": {"type": "string"},
"hash": {"type": "string"},
"componentIdentifier": {
"type": "object",
"properties": {
"format": {"type": "string"},
"coordinates": {
"type": "object",
"additionalProperties": {"type": "string"}
}
}
}
}
},
"waived": {
"type": "boolean",
"description": "Whether this violation has been waived"
},
"grandfathered": {
"type": "boolean",
"description": "Whether this violation is grandfathered"
}
},
"required": ["policyViolationId", "policyId", "policyName", "threatLevel"]
}
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.
All 92 tools
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/sonatype-policy-violation"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no email required.
A second provider on the same verified email joins the account you already have.