---
title: "Get Container Scan Vulnerabilities"
method: POST
path: "/api/cloud/container-scanning/results"
tags: ["Container Scanning"]
---

# Get Container Scan Vulnerabilities

`POST /api/cloud/container-scanning/results`

## Request

- Base URL: `https://api.codeant.ai`
- URL: `https://api.codeant.ai/api/cloud/container-scanning/results`
- Auth: HTTP bearer

Returns the vulnerability findings of a container scan — the list displayed in the CodeAnt UI — including CVE id, affected package, installed/fixed versions, severity, EPSS enrichment, and public-exploit references. While the scan is still running the response carries its status without findings.

## Request body

- ContainerScanResultsRequest
  - `platform` 'github' | 'gitlab' | 'bitbucket' | 'azure_devops', required: Git platform of the organization
  - `org` string, required: Organization / workspace slug
  - `github_base_url` string: Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url / azure_devops_base_url). Defaults to the cloud host.
  - `scan_id` string, required: Scan identifier from the containers list
  - `cloud` 'aws' | 'azure' | 'gcp': Cloud the scan ran against (from the containers list)

## Response `200`

Scan results retrieved successfully

- object
  - `scan_id` string
  - `status` string
  - `created_at` string, date-time
  - `completed_at` string, date-time
  - `repositories` object[]: Per-repository scan summaries with severity rollups
  - `findings` ContainerFinding[]
    - `uid` string: Stable finding identifier
    - `image` string: Image the vulnerability was found in
    - `kind` string: Finding kind, e.g. os-pkgs or lang-pkgs
    - `target` string: Scanned target inside the image
    - `id` string: Vulnerability identifier
    - `package` string
    - `severity` 'critical' | 'high' | 'medium' | 'low' | 'unknown'
    - `installed_version` string
    - `fixed_version` string
    - `title` string
    - `primary_url` string
    - `epss_details` object: EPSS exploit-probability enrichment, when available
    - `public_exploit` object: Known public exploit references, when available

## Other responses

- `401`: Missing or invalid access token
- `404`: Scan not found

## Changes

- **2026-11-03** `0eb1442ce49d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/codeant/apis/codeant-ai-api/changes/api/cloud/container-scanning/results/post.md)

---

[API](https://skmtc.dev/codeant/apis/codeant-ai-api.md) - [All operations](https://skmtc.dev/codeant/apis/codeant-ai-api/llms.txt) - [OpenAPI document](https://skmtc.dev/codeant/apis/codeant-ai-api/revisions/0eb1442ce49d?raw)