List the vulnerabilities on one image (browser session)
import requests
url = "https://api.platform.ankra.app/org/security/sbom/image/findings"
headers = {"cookie": "ankra_session="}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {cookie: 'ankra_session='}};
fetch('https://api.platform.ankra.app/org/security/sbom/image/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://api.platform.ankra.app/org/security/sbom/image/findings \
--cookie ankra_session={
"image": {
"image_identity": "<string>",
"image_ref": "<string>",
"image_digest": "<string>",
"sbom_status": "present"
},
"result": [
{
"finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"cve_id": "<string>",
"severity": "<string>",
"title": "<string>",
"package_type": "<string>",
"package_name": "<string>",
"installed_version": "<string>",
"fixed_version": "<string>",
"fixable": true,
"disposition": "open",
"dispositions": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"occurrences": 123,
"workloads": 123,
"clusters": 123,
"last_seen_at": "2023-11-07T05:31:56Z",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"pagination": {
"page": 123,
"page_size": 123,
"total_count": 123,
"total_pages": 123
},
"summary": {
"observed": 123,
"actionable": {
"critical": 123,
"high": 123,
"low": 123,
"medium": 123,
"unknown": 123
},
"actionable_total": 123,
"accepted_risk": 123,
"fixable": 123,
"known_exploited": 123,
"findings": 123
},
"intelligence": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
}
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}Security
List the vulnerabilities on one image (browser session)
List the vulnerabilities (CVEs) named on one image: one row per CVE and installed package version, aggregated across every workload container running the image, with the fixed version when one exists, the CISA KEV / EPSS intelligence, how the occurrences are dispositioned and where it runs. The summary totals the image’s active occurrences before search and severity narrow the rows. Answers for an image with or without a bill of materials (image.sbom_status); an image the platform has never seen is not found.
GET
/
org
/
security
/
sbom
/
image
/
findings
List the vulnerabilities on one image (browser session)
import requests
url = "https://api.platform.ankra.app/org/security/sbom/image/findings"
headers = {"cookie": "ankra_session="}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {cookie: 'ankra_session='}};
fetch('https://api.platform.ankra.app/org/security/sbom/image/findings', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://api.platform.ankra.app/org/security/sbom/image/findings \
--cookie ankra_session={
"image": {
"image_identity": "<string>",
"image_ref": "<string>",
"image_digest": "<string>",
"sbom_status": "present"
},
"result": [
{
"finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"cve_id": "<string>",
"severity": "<string>",
"title": "<string>",
"package_type": "<string>",
"package_name": "<string>",
"installed_version": "<string>",
"fixed_version": "<string>",
"fixable": true,
"disposition": "open",
"dispositions": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"occurrences": 123,
"workloads": 123,
"clusters": 123,
"last_seen_at": "2023-11-07T05:31:56Z",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"pagination": {
"page": 123,
"page_size": 123,
"total_count": 123,
"total_pages": 123
},
"summary": {
"observed": 123,
"actionable": {
"critical": 123,
"high": 123,
"low": 123,
"medium": 123,
"unknown": 123
},
"actionable_total": 123,
"accepted_risk": 123,
"fixable": 123,
"known_exploited": 123,
"findings": 123
},
"intelligence": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
}
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}Authorizations
Query Parameters
Response
Successful Response