---
title: "Ingest container security findings from external tools"
method: POST
path: "/v1/appsecops/container/findings/ingest"
tags: ["AppSecOps"]
---

# Ingest container security findings from external tools

`POST /v1/appsecops/container/findings/ingest`

Ingest container security findings from tools like Dockle and Hadolint

## Request body

- AppSecopsIngestContainerFindingsRequest
  - `tenant_id` string, required — Unique identifier of the tenant submitting the container security findings
  - `sbom_version_id` string, required — Unique identifier of the SBOM version to associate the container security findings with
  - `container_findings` ContainerFindings[], required — List of container security findings to be ingested, each containing tool information and attachment reference
    - `file_format` 'json' | 'txt', required — Format of the container security findings file (JSON or plain text)
    - `attachment_id` string, required — Unique identifier of the attachment containing the container security findings data
    - `parser_status` AppSecopsSbomVersionParserStatus
      - `status` 'error' | 'in_progress' | 'success' — Parsing status of SBOM
      - `message` string — Parsing message of SBOM
      - `time_taken` number — Time taken for parsing in seconds
    - `created_by` string — Name of the user who recently created the container findings
    - `updated_by` string — Name of the user who recently updated the container findings
    - `__type` string, required — Concrete type used for polymorphic deserialization (discriminator)

## Response `200`

Success

- ContainerFindings[]
  - `file_format` 'json' | 'txt', required — Format of the container security findings file (JSON or plain text)
  - `attachment_id` string, required — Unique identifier of the attachment containing the container security findings data
  - `parser_status` AppSecopsSbomVersionParserStatus
    - `status` 'error' | 'in_progress' | 'success' — Parsing status of SBOM
    - `message` string — Parsing message of SBOM
    - `time_taken` number — Time taken for parsing in seconds
  - `created_by` string — Name of the user who recently created the container findings
  - `updated_by` string — Name of the user who recently updated the container findings
  - `__type` string, required — Concrete type used for polymorphic deserialization (discriminator)

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error

---

[API](https://skmtc.dev/corestack/apis/corestack-external-api.md) · [All operations](https://skmtc.dev/corestack/apis/corestack-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/corestack/corestack-external-api/revisions/bf2cdf20826d/schema)