Skip to main content
PUT

Path Parameters

string
required
The UUID of the project
string
required
The UUID of the SCA package

Authorization

Requires change_vulnerability_state permission on the project.

Request Body

string
required
The SPDX license identifier to assign (e.g., MIT, Apache-2.0, GPL-3.0-only)

Response

boolean
Whether the request succeeded
string
Confirmation message
Assigning a license to a package that was previously categorized as Unknown will remove the Unknown placeholder and update the package’s license list. This is particularly useful for internal packages or packages whose license metadata is missing from the registry.