Query

List images vulnerable to the specific vulnerability ID.

Returns a listing of images and their respective packages vulnerable to the given vulnerability ID

get/query/images/by_vulnerability

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /query/images/by_vulnerability
  • Auth: none declared

Query parameters

vulnerability_idstring required

The ID of the vulnerability to search for within all images stored in anchore-engine (e.g. CVE-1999-0001)

namespacestring

Filter results to images within the given vulnerability namespace (e.g. debian:8, ubuntu:14.04)

affected_packagestring

Filter results to images with vulnable packages with the given package name (e.g. libssl)

severity'Unknown' | 'Negligible' | 'Low' | 'Medium' | 'High' | 'Critical'

Filter results to vulnerable package/vulnerability with the given severity

vendor_onlyboolean

Filter results to include only vulnerabilities that are not marked as invalid by upstream OS vendor data

pageinteger

The page of results to fetch. Pages start at 1

limitinteger

Limit the number of records for the requested page. If omitted or set to 0, return all results in a single page

Headers

x-anchore-accountstring

An account name to change the resource scope of the request to that account, if permissions allow (admin only)

Response

Image lookup success

pagestring

The page number returned (should match the requested page query string param)

next_pagestring

True if additional pages exist (page + 1) or False if this is the last page

returned_countinteger

The number of items sent in this response

Example response

{
  "images": [
    {
      "image": {
        "tag_history": [
          {
            "registry": "registry",
            "detected_at": "2000-01-23T04:56:07.000+00:00",
            "pullstring": "pullstring",
            "tag": "tag",
            "repository": "repository"
          }
        ]
      }
    }
  ]
}

Changes