COcodeant
Container Scanning

Get Container Scan Vulnerabilities

Changed on

Returns the vulnerability findings of a container scan — the list displayed in the CodeAnt UI — including CVE id, affected package, installed/fixed versions, severity, EPSS enrichment, and public-exploit references. While the scan is still running the response carries its status without findings.

post/api/cloud/container-scanning/results

Request

  • Base URL
    https://api.codeant.ai
  • URL
    https://api.codeant.ai/api/cloud/container-scanning/results
  • Auth
    HTTP bearer

Request body

platform'github' | 'gitlab' | 'bitbucket' | 'azure_devops' required

Git platform of the organization

orgstring required

Organization / workspace slug

github_base_urlstring

Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url / azure_devops_base_url). Defaults to the cloud host.

scan_idstring required

Scan identifier from the containers list

cloud'aws' | 'azure' | 'gcp'

Cloud the scan ran against (from the containers list)

Example request

{
  "github_base_url": "https://github.com",
  "scan_id": "aB3xK9mP2q"
}

Response

Scan results retrieved successfully

scan_idstring
statusstring
created_atstring date-time
completed_atstring date-time
repositoriesobject[]

Per-repository scan summaries with severity rollups

Example response

{
  "status": "completed",
  "findings": [
    {
      "kind": "os-pkgs",
      "target": "debian 12.5",
      "id": "CVE-2024-12345",
      "package": "libssl3",
      "installed_version": "3.0.11-1",
      "fixed_version": "3.0.13-1",
      "title": "openssl: denial of service via crafted certificate",
      "primary_url": "https://avd.aquasec.com/nvd/cve-2024-12345"
    }
  ]
}

Changes