As far as I know, this cannot be done in a single API call.
First request all assemblies.
/job/<jobname>/api/xml /job/<jobname>/api/json
This will return xml or json output, respectively.
Once you get the build numbers, you can request each build number.
/job/<jobname>/<jobnum>/api/xml?xpath=/freeStyleBuild/action/lastBuiltRevision/SHA /job/<jobname>/<jobnum>/api/json?tree=actions[lastBuiltRevision[SHA]]
You can then verify the SHA as a result against your SHA.
source share