> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get imported cluster pod security posture



## OpenAPI

````yaml https://platform.ankra.app/openapi.json get /org/clusters/imported/{cluster_id}/security/pods/{namespace}/{pod_name}
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
paths:
  /org/clusters/imported/{cluster_id}/security/pods/{namespace}/{pod_name}:
    get:
      tags:
        - Security
      summary: Get imported cluster pod security posture
      operationId: get_imported_cluster_pod_security
      parameters:
        - in: path
          name: cluster_id
          required: true
          schema:
            format: uuid
            type: string
        - in: path
          name: namespace
          required: true
          schema:
            type: string
        - in: path
          name: pod_name
          required: true
          schema:
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityPodSecurityResponse'
          description: Successful response
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Business validation error
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityPermissionDenied'
          description: Permission denied
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Cluster or pod is not in the active organization
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Request validation error
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Internal server error
components:
  schemas:
    SecurityPodSecurityResponse:
      properties:
        status:
          description: >-
            connected: the CVE figures describe at least one scanned container.
            stale: the cluster's newest report is older than the freshness
            window. no_reports: the pod was found but no vulnerability report
            covers any of its containers (a bill of materials alone does not
            make the CVE figures observed). unscanned: the scanner has never
            reported on this cluster.
          enum:
            - connected
            - stale
            - no_reports
            - unscanned
          type: string
        cluster_id:
          format: uuid
          type: string
        namespace:
          type: string
        pod_name:
          type: string
        pod_uid:
          anyOf:
            - type: string
            - type: 'null'
        node:
          anyOf:
            - type: string
            - type: 'null'
        phase:
          anyOf:
            - type: string
            - type: 'null'
        created_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        owner_kind:
          anyOf:
            - type: string
            - type: 'null'
        owner_name:
          anyOf:
            - type: string
            - type: 'null'
        workload_kind:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            The scanned workload the pod's containers were matched to through
            its owner chain.
        workload_name:
          anyOf:
            - type: string
            - type: 'null'
        stack:
          anyOf:
            - $ref: '#/components/schemas/SecurityPodSecurityStack'
            - type: 'null'
          description: >-
            The stack member that deploys the pod, when one of the cluster's
            stacks does; null when no add-on release or declared manifest object
            is in the pod's owner chain.
        stack_attribution:
          enum:
            - attributed
            - none
            - unknown
          type: string
          description: >-
            What stack means: attributed - the named member deploys the pod;
            none - the pod's whole owner chain is in the resource cache, every
            add-on and manifest member of the cluster's stacks was checked
            against it and none matched; unknown - part of the owner chain is
            not cached, or the members could not be read or decoded, so the null
            stack is not an answer.
        scanner:
          $ref: '#/components/schemas/SecurityScannerSummary'
        intelligence:
          $ref: '#/components/schemas/SecurityIntelligenceStatus'
        findings:
          $ref: '#/components/schemas/SecurityPodSecurityFindings'
        sbom:
          $ref: '#/components/schemas/SecurityPodSecuritySbom'
        containers:
          items:
            $ref: '#/components/schemas/SecurityPodSecurityContainer'
          type: array
      required:
        - status
        - cluster_id
        - namespace
        - pod_name
        - pod_uid
        - node
        - phase
        - created_at
        - owner_kind
        - owner_name
        - workload_kind
        - workload_name
        - stack
        - stack_attribution
        - scanner
        - intelligence
        - findings
        - sbom
        - containers
      title: SecurityPodSecurityResponse
      type: object
      description: >-
        The security summary of one running pod of an imported cluster: every
        container with its CVE posture and bill of materials.
    SecurityDetailError:
      properties:
        detail:
          type: string
      required:
        - detail
      type: object
    SecurityPermissionDenied:
      properties:
        detail:
          enum:
            - permission_denied
          type: string
        permission:
          type: string
        scope_type:
          type: string
      required:
        - detail
        - permission
        - scope_type
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    SecurityPodSecurityStack:
      properties:
        stack_name:
          type: string
        member_resource_id:
          format: uuid
          type: string
        member_kind:
          enum:
            - addon
            - manifest
          type: string
        member_name:
          type: string
      required:
        - stack_name
        - member_resource_id
        - member_kind
        - member_name
      title: SecurityPodSecurityStack
      type: object
      description: >-
        The stack member that deploys the pod: an add-on whose Helm release
        identity, or a manifest whose declared object, is in the pod's owner
        chain. When members of more than one stack match, the first by stack
        name, member kind and member name is reported; the attribution is
        deterministic, not exclusive.
    SecurityScannerSummary:
      properties:
        fresh_clusters:
          type: integer
        last_scan:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        stale_after_seconds:
          type: integer
        stale_clusters:
          type: integer
        status:
          enum:
            - fresh
            - degraded
            - stale
            - unscanned
          type: string
        unscanned_clusters:
          type: integer
      required:
        - status
        - last_scan
        - fresh_clusters
        - stale_clusters
        - unscanned_clusters
        - stale_after_seconds
      type: object
    SecurityIntelligenceStatus:
      properties:
        epss_synced_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        kev_listed:
          type: integer
        kev_synced_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
      required:
        - kev_synced_at
        - epss_synced_at
        - kev_listed
      type: object
    SecurityPodSecurityFindings:
      properties:
        observed:
          type: integer
        actionable:
          $ref: '#/components/schemas/SecuritySeverityCounts'
        known_exploited:
          type: integer
        fixable_severe:
          type: integer
        containers:
          type: integer
        scanned_containers:
          type: integer
          description: >-
            How many of the containers a report covers; the figures above sum
            only those.
      required:
        - observed
        - actionable
        - known_exploited
        - fixable_severe
        - containers
        - scanned_containers
      title: SecurityPodSecurityFindings
      type: object
    SecurityPodSecuritySbom:
      properties:
        containers:
          type: integer
        with_sbom:
          type: integer
        without_sbom:
          type: integer
        images:
          type: integer
        components:
          type: integer
        latest_generated_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        coverage:
          $ref: '#/components/schemas/SecuritySbomCoverage'
      required:
        - containers
        - with_sbom
        - without_sbom
        - images
        - components
        - latest_generated_at
        - coverage
      title: SecurityPodSecuritySbom
      type: object
    SecurityPodSecurityContainer:
      properties:
        name:
          type: string
        kind:
          enum:
            - app
            - init
          type: string
        image:
          type: string
        image_digest:
          anyOf:
            - type: string
            - type: 'null'
        image_identity:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            The key the per-image vulnerability and component reads take: the
            stored bill of materials' identity, else the digest the kubelet
            reported, else the image reference.
        ready:
          type: boolean
        restart_count:
          type: integer
        scanned:
          type: boolean
          description: >-
            False when no vulnerability report covers the container; not the
            same as clean.
        observed:
          type: integer
        actionable:
          $ref: '#/components/schemas/SecuritySeverityCounts'
        known_exploited:
          type: integer
        fixable_severe:
          type: integer
        sbom_status:
          enum:
            - present
            - absent
          type: string
        component_count:
          anyOf:
            - type: integer
            - type: 'null'
        os_name:
          anyOf:
            - type: string
            - type: 'null'
        generated_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
      required:
        - name
        - kind
        - image
        - image_digest
        - image_identity
        - ready
        - restart_count
        - scanned
        - observed
        - actionable
        - known_exploited
        - fixable_severe
        - sbom_status
        - component_count
        - os_name
        - generated_at
      title: SecurityPodSecurityContainer
      type: object
      description: >-
        One container or init container of the pod with the CVEs attributed to
        the workload container behind it and the bill of materials of its image.
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
    SecuritySeverityCounts:
      properties:
        critical:
          type: integer
        high:
          type: integer
        low:
          type: integer
        medium:
          type: integer
        unknown:
          type: integer
      required:
        - critical
        - high
        - medium
        - low
        - unknown
      type: object
    SecuritySbomCoverage:
      properties:
        scanned_clusters:
          type: integer
        clusters_with_sbom:
          description: >-
            Below scanned_clusters means the remaining clusters have SBOM
            generation switched off, not that they run nothing.
          type: integer
        images:
          type: integer
        components:
          type: integer
        workloads:
          type: integer
        latest_generated_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
      required:
        - scanned_clusters
        - clusters_with_sbom
        - images
        - components
        - workloads
        - latest_generated_at
      title: SecuritySbomCoverage
      type: object

````