Skip to main content
GET
Get imported cluster pod security posture

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

cluster_id
string<uuid>
required
namespace
string
required
pod_name
string
required

Response

Successful response

The security summary of one running pod of an imported cluster: every container with its CVE posture and bill of materials.

status
enum<string>
required

connected: the CVE figures describe at least one scanned container. stale: the cluster's newest report is older than the freshness window. no_reports: the pod was found but no vulnerability report covers any of its containers (a bill of materials alone does not make the CVE figures observed). unscanned: the scanner has never reported on this cluster.

Available options:
connected,
stale,
no_reports,
unscanned
cluster_id
string<uuid>
required
namespace
string
required
pod_name
string
required
pod_uid
string | null
required
node
string | null
required
phase
string | null
required
created_at
string<date-time> | null
required
owner_kind
string | null
required
owner_name
string | null
required
workload_kind
string | null
required

The scanned workload the pod's containers were matched to through its owner chain.

workload_name
string | null
required
stack
SecurityPodSecurityStack · object | null
required

The stack member that deploys the pod, when one of the cluster's stacks does; null when no add-on release or declared manifest object is in the pod's owner chain.

stack_attribution
enum<string>
required

What stack means: attributed - the named member deploys the pod; none - the pod's whole owner chain is in the resource cache, every add-on and manifest member of the cluster's stacks was checked against it and none matched; unknown - part of the owner chain is not cached, or the members could not be read or decoded, so the null stack is not an answer.

Available options:
attributed,
none,
unknown
scanner
object
required
intelligence
object
required
findings
SecurityPodSecurityFindings · object
required
sbom
SecurityPodSecuritySbom · object
required
containers
SecurityPodSecurityContainer · object[]
required