Skip to content

List destination SRG options for the propose flow

GET
/requirement_relocations/destinations

Serves the Destination SRG picker: one row per SRG abbreviation across the SRG components in projects the caller can see (member or discoverable). An open component wins its abbreviation's row; released true marks the queued next-release case. Hidden projects' SRGs never appear — proposing to them remains possible through the free abbreviation entry, which discloses nothing.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Responses

Destination options, ordered by abbreviation

application/json
JSON
[
  
{
  
  
"token": "CTR",
  
  
"name": "Container Platform SRG",
  
  
"released": false
  
},
  
{
  
  
"token": "GPOS",
  
  
"name": "General Purpose Operating System SRG",
  
  
"released": true
  
}
]

Playground

Server
Authorization

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)