Sign in
Query

List images vulnerable to the specific vulnerability ID.

Returns a listing of images and their respective packages vulnerable to the given vulnerability ID

get/query/images/by_vulnerability

Query parameters

vulnerability_idstring required

The ID of the vulnerability to search for within all images stored in anchore-engine (e.g. CVE-1999-0001)

namespacestring

Filter results to images within the given vulnerability namespace (e.g. debian:8, ubuntu:14.04)

affected_packagestring

Filter results to images with vulnable packages with the given package name (e.g. libssl)

severity'Unknown' | 'Negligible' | 'Low' | 'Medium' | 'High' | 'Critical'

Filter results to vulnerable package/vulnerability with the given severity

vendor_onlyboolean

Filter results to include only vulnerabilities that are not marked as invalid by upstream OS vendor data

pageinteger

The page of results to fetch. Pages start at 1

limitinteger

Limit the number of records for the requested page. If omitted or set to 0, return all results in a single page

Headers

x-anchore-accountstring

An account name to change the resource scope of the request to that account, if permissions allow (admin only)

Response

Image lookup success

pagestring

The page number returned (should match the requested page query string param)

next_pagestring

True if additional pages exist (page + 1) or False if this is the last page

returned_countinteger

The number of items sent in this response

Example response

{
  "images": [
    {
      "image": {
        "tag_history": [
          {
            "registry": "registry",
            "detected_at": "2000-01-23T04:56:07.000+00:00",
            "pullstring": "pullstring",
            "tag": "tag",
            "repository": "repository"
          }
        ]
      }
    }
  ]
}

Changes

Changed in 3 of the 5 revisions of this API.16

  • 38e5705e0b2112See the full diff
    • ▲

      the allOf[PaginatedVulnerableImageList_allOf]/ response's property type/format changed from / to object/ for status 200

      response-property-type-changed

    • ○

      api tag Query added

      api-tag-added

    • ○

      api tag Vulnerabilities removed

      api-tag-removed

    This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • f0235c7ed0d52See the full diff
    • ○

      added PaginatedVulnerableImageList_allOf to the response body allOf list for the response status 200

      response-body-all-of-added

    • ○

      removed subschema #2 from the response body allOf list for the response status 200

      response-body-all-of-removed

  • 75f483ab10a02See the full diff
    • ○

      api tag Vulnerabilities added

      api-tag-added

    • ○

      api tag Query removed

      api-tag-removed

    This revision also has 75 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog