Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
Optional packagesThe packages the firewall evaluated, ALLOW ones included.
The Supply Chain Firewall outcome for a package, a matched rule, or the whole request.
Generated using TypeDoc
The Supply Chain Firewall verdict for the version-pinned install packages found in the request. Evaluation requires Supply Chain Firewall to be enabled for the organization and the caller to have the
appsec_vm_readpermission. Without that permission, Supply Chain Firewall evaluation is skipped; the AI Guard evaluation request itself is not rejected. Findings are omitted when Supply Chain Firewall does not produce a result. The recommended action combines the package outcomes. Confirmation support is inferred from the evaluator profile, not from a separate confirmation-capability flag. By default, a non-emptymeta.coding_agentselects the coding-agent profile, which assumes the caller can ask for confirmation and retains WARN inrecommended_action. Omittingmeta.coding_agentor setting it to an empty string selects the default profile, which assumes the caller cannot ask for confirmation and returns ALLOW instead of WARN inrecommended_action. Package outcomes still retain WARN, and BLOCK is never changed to ALLOW by this rule.