REST Source Control Repository

Sync a source control repository such as https://github.com/phantomcyber/playbooks.git or file:////opt/phantom/scm/git/local.

/rest/scm/<scm_id>

Sync an existing source control repository.

Syntax

https://<username>:<password>@<host>/rest/scm/<scm_id>

The body of your request must be a JSON object.

Key	Required	Type	Description
pull	Required	Boolean	Update local repository from the specified remote repository.
force	Optional	Boolean	If set to "true" Splunk Phantom treats the remote repository as authoritative and overwrites any local changes to playbooks.
preserve	Optional	Boolean	If set to "true" Splunk Phantom retains the local metadata for changes to playbooks. Playbooks from the community repository always have a status of Inactive. If you have set the status of a community playbook to Active locally, updating from the community repository will set its status to Inactive unless you use the preserve key.

POST

Sync an existing source control repository by Id.

Example request
Sync source control repository Id 3. The body of the request is a JSON Object with a "pull" command. The "force" key can be used to cause the pull operation to do a more aggressive sync, discarding local changes or conflicts.

curl -k -u admin:changeme https://localhost/rest/scm/3 \
-d '{
  "pull": true,
  "force": true
}'

Example response
A successful POST will return an array of changes that were made. Each entry has two parts. Part 1 is the type of change, either (A)dded, (D)eleted or (M)odified. Part 2 is the name of the playbook that was changed.

[
    ["M", "playbook1"],
    ["D", "playbook2"],
    ["M", "playbook3"],
    ["A", "playbook4"]
]