---
title: "Retrieve a VulnerabilityReport for a Manifest"
method: GET
path: "/matcher/api/v1/vulnerability_report/{digest}"
tags: ["matcher"]
---

# Retrieve a VulnerabilityReport for a Manifest

`GET /matcher/api/v1/vulnerability_report/{digest}`

Given a Manifest's content addressable hash a VulnerabilityReport will be created. The Manifest **must** have been Indexed first via the Index endpoint.

## Response `201`

Vulnerability Report Created

- VulnerabilityReport — A report with discovered packages, package environments, and package vulnerabilities within a Manifest.
  - `manifest_hash` DigestSchemaJson, required — unresolved $ref
  - `packages` object, required — A map of Package objects indexed by a document-local identifier.
  - `distributions` object, required — A map of Distribution objects indexed by a document-local identifier.
  - `repository` object — A map of Repository objects indexed by a document-local identifier.
  - `environments` object, required — A map of Environment arrays indexed by a Package's identifier.
  - `vulnerabilities` object, required — A map of Vulnerabilities indexed by a document-local identifier.
  - `package_vulnerabilities` object, required — A mapping of Vulnerability identifier lists indexed by Package identifier.
  - `enrichments` object — A mapping of extra "enrichment" data by type

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `415` — Unsupported Media Type
- `default` — Internal Server Error

---

[API](https://skmtc.dev/quay/apis/clair-container-analyzer.md) · [All operations](https://skmtc.dev/quay/apis/clair-container-analyzer/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/quay/clair-container-analyzer/revisions/079b3eb25695/schema)