> ## Documentation Index > Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt > Use this file to discover all available pages before exploring further. # List the resources failing one compliance control ## OpenAPI ````yaml https://platform.ankra.app/openapi.json get /api/v1/org/clusters/imported/{cluster_id}/security/compliance/checks/{check_id}/resources openapi: 3.1.0 info: title: FastAPI version: 0.1.0 servers: - url: https://platform.ankra.app security: [] tags: - name: Clusters description: Create, inspect and manage clusters, and the stacks deployed on them. - name: Managed Clusters description: Provider-managed control planes, driven through one common surface. - name: Imported Clusters description: Clusters that already existed and were connected to Ankra. - name: Cluster Access description: Kubeconfigs, service-account tokens and per-cluster access grants. - name: Kubernetes description: Read and act on the Kubernetes objects inside a cluster. - name: DigitalOcean Clusters description: Provision and manage DigitalOcean Kubernetes clusters. - name: Hetzner Clusters description: Provision and manage Hetzner Kubernetes clusters. - name: OVH Clusters description: Provision and manage OVH Kubernetes clusters. - name: Scaleway Clusters description: Provision and manage Scaleway Kapsule clusters. - name: UpCloud Clusters description: Provision and manage UpCloud Kubernetes clusters. - name: Applications description: Deploy, configure and observe applications across the fleet. - name: Stack Profiles description: Reusable stack definitions, their versions and sharing. - name: Charts description: Browse the chart catalogue behind stacks and addons. - name: Helm description: Helm registries, credentials and the charts they expose. - name: Executions description: Long-running platform executions and their jobs. - name: Operations description: Cancel in-flight cluster operations and their jobs. - name: Chat description: Conversational sessions, plans and confirmable actions. - name: AI Agent Runs description: Autonomous agent runs and their outcomes. - name: AI Tickets description: The AI ticket board, its sync connections and settings. - name: AI Playbooks description: Reusable playbooks the AI lanes execute. - name: AI Conditions description: Conditions that gate AI autonomy. - name: AI Engineering Handoffs description: Work the AI lanes escalate to a human engineer. - name: AI Environment description: The environment and base stacks AI demos deploy into. - name: Security description: Findings, advisories, SBOMs, compliance and posture. - name: Cost description: Cluster and fleet cost, rate cards and cost settings. - name: Billing description: Subscription and spend caps. - name: Organisation description: Members, invitations, audit logs and organisation settings. - name: Account Tokens description: Personal access tokens for the API and CLI. - name: Credentials description: The shared credential store. - name: Azure Credentials description: Azure credentials and SSH keys. - name: DigitalOcean Credentials description: DigitalOcean credentials and SSH keys. - name: Hetzner Credentials description: Hetzner credentials and SSH keys. - name: OVH Credentials description: OVH credentials and SSH keys. - name: Scaleway Credentials description: Scaleway credentials. - name: UpCloud Credentials description: UpCloud credentials and SSH keys. - name: Data Source Credentials description: Credentials for metrics and log sources. - name: DNS Credentials description: Credentials for DNS providers. - name: DNS description: DNS zones and records, including custom organisation zones. - name: Cloudflare description: Cloudflare domains and the credentials behind them. - name: Variables description: Organisation- and cluster-scoped variables. - name: SOPS description: Encrypt and decrypt values with the organisation SOPS config. - name: Alerts description: Alert integrations and ingest credentials. - name: Notifications description: Notification routes and their delivery targets. - name: Support description: Support tickets. paths: /api/v1/org/clusters/imported/{cluster_id}/security/compliance/checks/{check_id}/resources: get: tags: - Security summary: List the resources failing one compliance control operationId: get_imported_cluster_security_compliance_check_resources_api_v1 parameters: - in: path name: cluster_id required: true schema: format: uuid type: string - in: path name: check_id required: true schema: type: string - in: query name: source required: false schema: type: string enum: - benchmark - config_audit default: benchmark description: >- Where the control comes from: a compliance benchmark (default) or the config-audit rollup. - in: query name: benchmark_id required: false schema: type: string description: >- Required when source is benchmark: the benchmark the control belongs to. responses: '200': content: application/json: schema: $ref: '#/components/schemas/SecurityComplianceCheckResourcesResponse' description: >- The failing objects for the control with their Ankra ownership; a 503 envelope when the cluster is offline, has no agent, or the agent timed out. '400': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: Missing benchmark_id for a benchmark control, or an unknown source '401': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: Missing, expired or revoked API token '403': content: application/json: schema: $ref: '#/components/schemas/SecurityPermissionDenied' description: Missing the security.read permission '404': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: Organization-scoped resource not found '422': content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' description: Request validation error '500': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: Internal server error '503': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: >- CLUSTER_OFFLINE, NO_AGENT or AGENT_TIMEOUT: the live read could not reach the cluster components: schemas: SecurityComplianceCheckResourcesResponse: description: >- The Kubernetes objects failing one compliance control on a cluster, read live from the cluster's trivy-operator reports and attributed to Ankra stacks and resources. properties: cluster_id: format: uuid type: string cluster_name: type: string check_id: type: string benchmark_id: type: string source: type: string enum: - benchmark - config_audit control_title: type: string resolved_check_ids: type: array items: type: string description: The config-audit check ids the benchmark control resolved to. resources: type: array items: $ref: '#/components/schemas/SecurityComplianceAffectedResource' is_truncated: type: boolean unresolved_reason: anyOf: - type: string - type: 'null' description: >- Why the control could not be resolved to any check, when the list is empty for that reason. required: - cluster_id - cluster_name - check_id - benchmark_id - source - control_title - resolved_check_ids - resources - is_truncated - unresolved_reason title: SecurityComplianceCheckResourcesResponse type: object SecurityDetailError: properties: detail: type: string required: - detail type: object SecurityPermissionDenied: properties: detail: enum: - permission_denied type: string permission: type: string scope_type: type: string required: - detail - permission - scope_type type: object HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' title: Detail type: array title: HTTPValidationError type: object SecurityComplianceAffectedResource: description: One failing Kubernetes object plus its Ankra ownership. properties: kind: type: string name: type: string namespace: anyOf: - type: string - type: 'null' check_id: type: string severity: type: string message: type: string report_kind: type: string description: The trivy-operator report kind the failure was read from. owner: $ref: '#/components/schemas/SecurityComplianceResourceOwner' required: - kind - name - namespace - check_id - severity - message - report_kind - owner title: SecurityComplianceAffectedResource type: object ValidationError: properties: loc: items: anyOf: - type: string - type: integer title: Location type: array msg: title: Message type: string type: title: Error Type type: string required: - loc - msg - type title: ValidationError type: object SecurityComplianceResourceOwner: description: >- The Ankra ownership of one affected Kubernetes object. Every member is optional: a control can fail on an object nobody in the platform deploys. properties: resource_id: anyOf: - format: uuid type: string - type: 'null' resource_kind: anyOf: - type: string - type: 'null' name: anyOf: - type: string - type: 'null' namespace: anyOf: - type: string - type: 'null' stack_id: anyOf: - format: uuid type: string - type: 'null' stack_name: anyOf: - type: string - type: 'null' matched_by: type: string enum: - release - namespace - stack - none description: >- How the object was attributed to an Ankra resource; none when nothing in the platform deploys it. required: - resource_id - resource_kind - name - namespace - stack_id - stack_name - matched_by title: SecurityComplianceResourceOwner type: object ````