import requests
url = "https://platform.ankra.app/api/v1/org/security/sbom/image/findings"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/security/sbom/image/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/org/security/sbom/image/findings \
--header 'Authorization: Bearer <token>'{
"image": {
"image_identity": "<string>",
"image_ref": "<string>",
"image_digest": "<string>",
"sbom_status": "present"
},
"result": [
{
"finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"cve_id": "<string>",
"severity": "<string>",
"title": "<string>",
"package_type": "<string>",
"package_name": "<string>",
"installed_version": "<string>",
"fixed_version": "<string>",
"fixable": true,
"disposition": "open",
"dispositions": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"occurrences": 123,
"workloads": 123,
"clusters": 123,
"last_seen_at": "2023-11-07T05:31:56Z",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"pagination": {
"page": 123,
"page_size": 123,
"total_count": 123,
"total_pages": 123
},
"summary": {
"observed": 123,
"actionable": {
"critical": 123,
"high": 123,
"low": 123,
"medium": 123,
"unknown": 123
},
"actionable_total": 123,
"accepted_risk": 123,
"fixable": 123,
"known_exploited": 123,
"findings": 123
},
"intelligence": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
}
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}List the vulnerabilities on one image
List the vulnerabilities (CVEs) named on one image: one row per CVE and installed package version, aggregated across every workload container running the image, with the fixed version when one exists, the CISA KEV / EPSS intelligence, how the occurrences are dispositioned and where it runs. The summary totals the image’s active occurrences before search and severity narrow the rows. Answers for an image with or without a bill of materials (image.sbom_status); an image the platform has never seen is not found.
import requests
url = "https://platform.ankra.app/api/v1/org/security/sbom/image/findings"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/security/sbom/image/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/org/security/sbom/image/findings \
--header 'Authorization: Bearer <token>'{
"image": {
"image_identity": "<string>",
"image_ref": "<string>",
"image_digest": "<string>",
"sbom_status": "present"
},
"result": [
{
"finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"cve_id": "<string>",
"severity": "<string>",
"title": "<string>",
"package_type": "<string>",
"package_name": "<string>",
"installed_version": "<string>",
"fixed_version": "<string>",
"fixable": true,
"disposition": "open",
"dispositions": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"occurrences": 123,
"workloads": 123,
"clusters": 123,
"last_seen_at": "2023-11-07T05:31:56Z",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"pagination": {
"page": 123,
"page_size": 123,
"total_count": 123,
"total_pages": 123
},
"summary": {
"observed": 123,
"actionable": {
"critical": 123,
"high": 123,
"low": 123,
"medium": 123,
"unknown": 123
},
"actionable_total": 123,
"accepted_risk": 123,
"fixable": 123,
"known_exploited": 123,
"findings": 123
},
"intelligence": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
}
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
The image identity: its digest, or repository:tag when the scanner knew no digest.
x >= 11 <= x <= 100Match CVE id, package name or title.
Only these severities (repeatable): critical, high, medium, low, unknown.
exploitability (default), severity, epss, cve_id, package_name, last_seen_at, occurrences.
asc, desc Response
Successful Response
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Show child attributes