List an application's image versions with SBOM and findings (browser session)

Lists the application’s image versions, one row per pushed tag, with the SBOM and vulnerability finding metadata the Security Center holds for each. component narrows the list to one component; answers 404 when the application does not exist in the organisation.

GET /org/applications/{application_id}/security/versions

List an application's image versions with SBOM and findings (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/applications/{application_id}/security/versions"

headers = {"cookie": "ankra_session="}

response = requests.get(url, headers=headers)

print(response.text)

200

{
  "application_id": "<string>",
  "repository": {
    "provider": "<string>",
    "owner": "<string>",
    "name": "<string>",
    "visibility": "private"
  },
  "components": [
    {
      "name": "<string>",
      "registry": "<string>",
      "repository": "<string>",
      "registry_status": "listed",
      "message": "<string>"
    }
  ],
  "versions": [
    {
      "component": "<string>",
      "registry": "<string>",
      "repository": "<string>",
      "tag": "<string>",
      "digest": "<string>",
      "pushed_at": "2023-11-07T05:31:56Z",
      "sources": [
        "registry"
      ],
      "sbom": {
        "status": "present",
        "image_identity": "<string>",
        "component_count": 123,
        "os_name": "<string>",
        "generated_at": "2023-11-07T05:31:56Z",
        "license_exposure": {
          "network_copyleft": 123,
          "source_available": 123,
          "copyleft": 123,
          "weak_copyleft": 123,
          "permissive": 123,
          "unknown": 123
        }
      },
      "findings": {
        "scanned": true,
        "observed": 123,
        "actionable": {
          "critical": 123,
          "high": 123,
          "low": 123,
          "medium": 123,
          "unknown": 123
        },
        "known_exploited": 123,
        "fixable_severe": 123,
        "last_scan_at": "2023-11-07T05:31:56Z"
      },
      "running": {
        "workloads": 123,
        "clusters": 123,
        "namespaces": [
          "<string>"
        ],
        "last_seen_at": "2023-11-07T05:31:56Z"
      }
    }
  ],
  "summary": {
    "versions": 123,
    "with_sbom": 123,
    "with_findings": 123,
    "running": 123
  },
  "license_exposure": {
    "status": "assessed",
    "latest": {
      "network_copyleft": 123,
      "source_available": 123,
      "copyleft": 123,
      "weak_copyleft": 123,
      "permissive": 123,
      "unknown": 123
    },
    "source_disclosure_required": true,
    "service_licence_required": true,
    "flagged_components": 123,
    "components": [
      {
        "component": "<string>",
        "tag": "<string>",
        "image_identity": "<string>",
        "name": "<string>",
        "version": "<string>",
        "package_type": "<string>",
        "licenses": [
          "<string>"
        ],
        "license_risk": "network_copyleft"
      }
    ]
  }
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Path Parameters

application_id · string · required

Query Parameters

component · string

Narrow a monorepo application to one component.

Response

200

application/json

Every pushed image version of the application with its bill of materials, findings and where it runs, the source repository's visibility, and what the licences in the newest scanned versions oblige of the application's own source.

application_id · string · required

repository · ApplicationRepository · object · required

Show child attributes

components · ApplicationImageVersionComponent · object[] · required

Show child attributes

versions · ApplicationImageVersion · object[] · required

Show child attributes

summary · ApplicationImageVersionsSummary · object · required

Show child attributes

license_exposure · ApplicationLicenseExposure · object · required

Show child attributes