SDKs & samples

The Partner API is small enough that a hand-rolled HTTP client is the right choice for most teams — no SDK lock-in. Two official thin wrappers (Python + Go) handle retries, exponential backoff, and signature verification if you'd rather not.

Official SDKs

First call with the SDK

import os
from qorbom import Client

q = Client(api_key=os.environ["QORBOM_KEY"])

# Submit + wait (handles polling for you, default timeout 90s)
scan = q.scans.create_and_wait(
    repo_url="https://github.com/octocat/Hello-World"
)

print(scan.score, scan.findings_total)

# CycloneDX BOM as a dict
bom = q.scans.bom(scan.id, format="cyclonedx")
print(bom["bomFormat"], bom["specVersion"])

Or just plain HTTP

Every endpoint is a single request. See Quickstart for curl, Python (requests), Node (axios), and Go (net/http) recipes without any SDK dependency.

Postman collection

A pre-built Postman 2.1 collection is available on the interactive API reference page — click Export → Postman. The collection includes a sandbox environment with all required headers + a working example for every endpoint.