Skip to main content
GET
List the resources failing one compliance control

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

cluster_id
string<uuid>
required
check_id
string
required

Query Parameters

source
enum<string>
default:benchmark

Where the control comes from: a compliance benchmark (default) or the config-audit rollup.

Available options:
benchmark,
config_audit
benchmark_id
string

Required when source is benchmark: the benchmark the control belongs to.

Response

The failing objects for the control with their Ankra ownership; a 503 envelope when the cluster is offline, has no agent, or the agent timed out.

The Kubernetes objects failing one compliance control on a cluster, read live from the cluster's trivy-operator reports and attributed to Ankra stacks and resources.

cluster_id
string<uuid>
required
cluster_name
string
required
check_id
string
required
benchmark_id
string
required
source
enum<string>
required
Available options:
benchmark,
config_audit
control_title
string
required
resolved_check_ids
string[]
required

The config-audit check ids the benchmark control resolved to.

resources
SecurityComplianceAffectedResource · object[]
required
is_truncated
boolean
required
unresolved_reason
string | null
required

Why the control could not be resolved to any check, when the list is empty for that reason.