> ## Documentation Index > Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt > Use this file to discover all available pages before exploring further. # One image's bill of materials > One image by identity (its digest, or repository:tag when the scanner knew no digest): the image, a page of its components with the findings that name them, and every workload container currently running it. ## OpenAPI ````yaml https://platform.ankra.app/openapi.json get /api/v1/org/security/sbom/image openapi: 3.1.0 info: title: FastAPI version: 0.1.0 servers: - url: https://platform.ankra.app security: [] paths: /api/v1/org/security/sbom/image: get: tags: - security summary: One image's bill of materials description: >- One image by identity (its digest, or repository:tag when the scanner knew no digest): the image, a page of its components with the findings that name them, and every workload container currently running it. operationId: get_security_sbom_image_api_v1 parameters: - in: query name: image required: true schema: type: string - in: query name: page required: false schema: default: 1 maximum: 10000 minimum: 1 type: integer - description: Values above 100 are clamped to 100. in: query name: page_size required: false schema: default: 100 minimum: 1 type: integer - in: query name: search required: false schema: type: string - description: >- Ecosystem filter, repeatable (deb, apk, rpm, npm, pypi, golang, maven, ...). in: query name: package_type required: false schema: items: type: string type: array - in: query name: sort required: false schema: default: vulnerable enum: - name - version - package_type - images - workloads - clusters - vulnerable - actionable type: string - in: query name: order required: false schema: default: desc enum: - asc - desc type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/SecuritySbomImageDetailResponse' description: Successful response '400': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: Business validation error '403': content: application/json: schema: $ref: '#/components/schemas/SecurityPermissionDenied' description: Permission denied '404': content: application/json: schema: $ref: '#/components/schemas/SecurityDetailError' description: Organization-scoped resource not found '422': content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' description: Validation Error components: schemas: SecuritySbomImageDetailResponse: properties: image: $ref: '#/components/schemas/SecuritySbomImageSummary' components: items: $ref: '#/components/schemas/SecuritySbomComponentSummary' type: array pagination: $ref: '#/components/schemas/SecurityPagination' facets: $ref: '#/components/schemas/SecuritySbomComponentFacets' workloads: items: $ref: '#/components/schemas/SecuritySbomImageWorkload' type: array required: - image - components - pagination - facets - workloads title: SecuritySbomImageDetailResponse type: object SecurityDetailError: properties: detail: type: string required: - detail type: object SecurityPermissionDenied: properties: detail: enum: - permission_denied type: string permission: type: string scope_type: type: string required: - detail - permission - scope_type type: object HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' title: Detail type: array title: HTTPValidationError type: object SecuritySbomImageSummary: properties: image_identity: type: string image_ref: type: string image_repository: anyOf: - type: string - type: 'null' image_tag: anyOf: - type: string - type: 'null' image_digest: anyOf: - type: string - type: 'null' registry: anyOf: - type: string - type: 'null' os_family: anyOf: - type: string - type: 'null' os_name: anyOf: - type: string - type: 'null' bom_format: anyOf: - type: string - type: 'null' spec_version: anyOf: - type: string - type: 'null' component_count: type: integer dependency_count: type: integer workloads: type: integer clusters: type: integer namespaces: items: type: string type: array observed: type: integer actionable: $ref: '#/components/schemas/SecuritySeverityCounts' known_exploited: type: integer generated_at: anyOf: - format: date-time type: string - type: 'null' first_seen_at: format: date-time type: string last_seen_at: format: date-time type: string required: - image_identity - image_ref - image_repository - image_tag - image_digest - registry - os_family - os_name - bom_format - spec_version - component_count - dependency_count - workloads - clusters - namespaces - observed - actionable - known_exploited - generated_at - first_seen_at - last_seen_at title: SecuritySbomImageSummary type: object SecuritySbomComponentSummary: properties: name: type: string version: type: string package_type: type: string component_type: type: string purl: anyOf: - type: string - type: 'null' licenses: items: type: string type: array images: type: integer workloads: type: integer clusters: type: integer vulnerable_findings: type: integer actionable_findings: type: integer known_exploited: type: integer required: - name - version - package_type - component_type - purl - licenses - images - workloads - clusters - vulnerable_findings - actionable_findings - known_exploited title: SecuritySbomComponentSummary type: object SecurityPagination: properties: page: type: integer page_size: type: integer total_count: type: integer total_pages: type: integer required: - page - page_size - total_pages - total_count type: object SecuritySbomComponentFacets: properties: package_type: items: $ref: '#/components/schemas/SecurityFacetCount' type: array required: - package_type title: SecuritySbomComponentFacets type: object SecuritySbomImageWorkload: properties: cluster_id: format: uuid type: string cluster_name: type: string report_scope: enum: - namespaced - cluster type: string workload_kind: anyOf: - type: string - type: 'null' workload_namespace: anyOf: - type: string - type: 'null' workload_name: anyOf: - type: string - type: 'null' container_name: anyOf: - type: string - type: 'null' last_seen_at: format: date-time type: string required: - cluster_id - cluster_name - report_scope - workload_kind - workload_namespace - workload_name - container_name - last_seen_at title: SecuritySbomImageWorkload type: object ValidationError: properties: loc: items: anyOf: - type: string - type: integer title: Location type: array msg: title: Message type: string type: title: Error Type type: string required: - loc - msg - type title: ValidationError type: object SecuritySeverityCounts: properties: critical: type: integer high: type: integer low: type: integer medium: type: integer unknown: type: integer required: - critical - high - medium - low - unknown type: object SecurityFacetCount: properties: count: type: integer value: type: string required: - value - count type: object ````