Get lightweight product compliance summary

Returns per-requirement aggregated status, automation level, scope and pre-computed flags (override / needs-review) plus aggregate project counts for a product version. Excludes policy evaluation payloads, manual evidence, override details and per-project breakdowns — those load on demand via GetProductRequirementComplianceDetail.

GET /v1/compliance/product/summary

Get lightweight product compliance summary

cURL

curl --request GET \
  --url https://api.app.chainloop.dev/v1/compliance/product/summary \
  --header 'Authorization: Bearer <token>'

200

{
  "frameworks": [
    {
      "framework_name": "framework_name",
      "requirements": [
        {
          "requirement_version_id": "requirement_version_id",
          "overall_status": "overall_status",
          "description": "description",
          "display_name": "display_name",
          "requirement_id": "requirement_id",
          "project_breakdown": {
            "expired": 9,
            "pending": 7,
            "failing": 5,
            "not_applicable": 1,
            "passing": 5,
            "total_applicable": 6,
            "partial": 2,
            "exempted": 3
          },
          "automation_level": "unspecified",
          "framework_name": "framework_name",
          "has_manual_evidence_needs_review": true,
          "requirement_revision": 0,
          "scope": "UNSPECIFIED",
          "override_status": "override_status",
          "name": "name",
          "framework_display_name": "framework_display_name",
          "not_applicable": true,
          "has_override": true,
          "has_pending_override": true
        },
        {
          "requirement_version_id": "requirement_version_id",
          "overall_status": "overall_status",
          "description": "description",
          "display_name": "display_name",
          "requirement_id": "requirement_id",
          "project_breakdown": {
            "expired": 9,
            "pending": 7,
            "failing": 5,
            "not_applicable": 1,
            "passing": 5,
            "total_applicable": 6,
            "partial": 2,
            "exempted": 3
          },
          "automation_level": "unspecified",
          "framework_name": "framework_name",
          "has_manual_evidence_needs_review": true,
          "requirement_revision": 0,
          "scope": "UNSPECIFIED",
          "override_status": "override_status",
          "name": "name",
          "framework_display_name": "framework_display_name",
          "not_applicable": true,
          "has_override": true,
          "has_pending_override": true
        }
      ],
      "framework_id": "framework_id",
      "framework_display_name": "framework_display_name",
      "metrics": {
        "pending_requirements": 5,
        "passing_requirements": 6,
        "compliance_percentage": 2.302136,
        "inactive_requirements": 7,
        "failing_requirements": 1,
        "partial_requirements": 5,
        "total_requirements": 0
      }
    },
    {
      "framework_name": "framework_name",
      "requirements": [
        {
          "requirement_version_id": "requirement_version_id",
          "overall_status": "overall_status",
          "description": "description",
          "display_name": "display_name",
          "requirement_id": "requirement_id",
          "project_breakdown": {
            "expired": 9,
            "pending": 7,
            "failing": 5,
            "not_applicable": 1,
            "passing": 5,
            "total_applicable": 6,
            "partial": 2,
            "exempted": 3
          },
          "automation_level": "unspecified",
          "framework_name": "framework_name",
          "has_manual_evidence_needs_review": true,
          "requirement_revision": 0,
          "scope": "UNSPECIFIED",
          "override_status": "override_status",
          "name": "name",
          "framework_display_name": "framework_display_name",
          "not_applicable": true,
          "has_override": true,
          "has_pending_override": true
        },
        {
          "requirement_version_id": "requirement_version_id",
          "overall_status": "overall_status",
          "description": "description",
          "display_name": "display_name",
          "requirement_id": "requirement_id",
          "project_breakdown": {
            "expired": 9,
            "pending": 7,
            "failing": 5,
            "not_applicable": 1,
            "passing": 5,
            "total_applicable": 6,
            "partial": 2,
            "exempted": 3
          },
          "automation_level": "unspecified",
          "framework_name": "framework_name",
          "has_manual_evidence_needs_review": true,
          "requirement_revision": 0,
          "scope": "UNSPECIFIED",
          "override_status": "override_status",
          "name": "name",
          "framework_display_name": "framework_display_name",
          "not_applicable": true,
          "has_override": true,
          "has_pending_override": true
        }
      ],
      "framework_id": "framework_id",
      "framework_display_name": "framework_display_name",
      "metrics": {
        "pending_requirements": 5,
        "passing_requirements": 6,
        "compliance_percentage": 2.302136,
        "inactive_requirements": 7,
        "failing_requirements": 1,
        "partial_requirements": 5,
        "total_requirements": 0
      }
    }
  ]
}

Authorizations

Authorization · string · header · required

Bearer token for authentication

Query Parameters

product_version_id · string

The product version ID to summarize

framework_ids · string[]

Optional framework filter. If empty, returns all frameworks for the product version.

Response

200

application/json

A successful response.

Lightweight product compliance summary: per-requirement aggregated status and pre-computed flags, without policy payloads, manual evidence, override details or per-project breakdowns.

frameworks · Per-framework summaries · object[]

Show child attributes