Skip to main content
GET
List organization security findings (browser session)

Authorizations

ankra_session
string
cookie
required

Browser session. Mutations also require X-Ankra-CSRF.

Query Parameters

page
integer
default:1
Required range: 1 <= x <= 10000
page_size
integer
default:50

Values above 100 are clamped to 100.

Required range: x >= 1
severity
string[]
status
string[]
fixable
boolean
cluster_id
string<uuid>
addon_slug
string
namespace
string
provider
enum<string>[]

Keep only findings from these providers: trivy_operator (CVEs in container images), node_kernel (advisories on a node's running kernel) or samma (failing endpoint checks). Repeat the parameter or pass a comma-separated list; omit it for every provider.

Available options:
trivy_operator,
node_kernel,
samma
sort
string
order
enum<string>
Available options:
asc,
desc
known_exploited
boolean | null

Keep only findings whose CVE is (true) or is not (false) listed in the CISA Known Exploited Vulnerabilities catalog.

facets
boolean | null
default:true

false leaves facets out of the answer and skips the organisation-wide counts behind them; a caller that shows no facet chips answers much sooner. Default true.

Response

Successful response

pagination
object
required
result
object[]
required
scanner
object
required
intelligence
object
required
facets
object

Counts per facet value across the organisation (within the request's project). Left out when the request passed facets=false.