Get imported cluster add-on security posture (browser session)

Returns the vulnerability posture of one add-on installed on an imported cluster. Requires security.read.

GET /org/clusters/imported/{cluster_id}/addons/{addon_name}/security

Get imported cluster add-on security posture (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/clusters/imported/{cluster_id}/addons/{addon_name}/security"

headers = {"cookie": "ankra_session="}

response = requests.get(url, headers=headers)

print(response.text)

200

{
  "accepted_risk": {
    "critical": 123,
    "high": 123,
    "low": 123,
    "medium": 123,
    "unknown": 123
  },
  "acknowledged": {
    "critical": 123,
    "high": 123,
    "low": 123,
    "medium": 123,
    "unknown": 123
  },
  "actionable": {
    "critical": 123,
    "high": 123,
    "low": 123,
    "medium": 123,
    "unknown": 123
  },
  "addon_name": "<string>",
  "addon_resource_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "addon_slug": "<string>",
  "affected_images": 123,
  "affected_workloads": 123,
  "attribution": {
    "ambiguous": 123,
    "matched": 123,
    "partial": true,
    "status": "matched",
    "unmatched": 123
  },
  "chart_name": "<string>",
  "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "fixable_severe": 123,
  "last_scan": "2023-11-07T05:31:56Z",
  "namespace": "<string>",
  "observed": {
    "critical": 123,
    "high": 123,
    "low": 123,
    "medium": 123,
    "unknown": 123
  },
  "release_name": "<string>",
  "scanner": {
    "fresh_clusters": 123,
    "last_scan": "2023-11-07T05:31:56Z",
    "stale_after_seconds": 123,
    "stale_clusters": 123,
    "status": "fresh",
    "unscanned_clusters": 123
  },
  "status": "connected",
  "top_actionable_findings": [
    {
      "actionable_count": 123,
      "affected_clusters": 123,
      "affected_workloads": 123,
      "cve_id": "<string>",
      "finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "fix_routes": {
        "addon_upgrade_occurrences": 123,
        "addons": [
          {
            "addon_slug": "<string>",
            "clusters": 123,
            "named_clusters": [
              {
                "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
                "cluster_name": "<string>"
              }
            ],
            "occurrences": 123,
            "target_chart_version": "<string>",
            "target_scanned_at": "2023-11-07T05:31:56Z",
            "target_verdict": "fixes",
            "target_verdict_reason": "<string>"
          }
        ],
        "image_rebuild_occurrences": 123,
        "no_fix_occurrences": 123,
        "platform_occurrences": 123,
        "route": "addon_upgrade"
      },
      "fixable_occurrences": 123,
      "last_seen_at": "2023-11-07T05:31:56Z",
      "package_name": "<string>",
      "package_type": "<string>",
      "severity": "<string>",
      "title": "<string>",
      "known_exploited": true,
      "kev_date_added": "<string>",
      "kev_due_date": "<string>",
      "kev_ransomware_use": true,
      "epss_score": 123,
      "epss_percentile": 123,
      "kev_vendor_project": "<string>",
      "kev_product": "<string>",
      "kev_vulnerability_name": "<string>",
      "kev_required_action": "<string>"
    }
  ],
  "known_exploited": 123
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Path Parameters

cluster_id · string<uuid> · required

addon_name · string · required

Response

200

application/json

Successful response

accepted_risk · object · required

Show child attributes

acknowledged · object · required

Show child attributes

actionable · object · required

Show child attributes

addon_name · string · required

addon_resource_id · string<uuid> | null · required

addon_slug · string | null · required

affected_images · integer · required

affected_workloads · integer · required

attribution · object · required

Show child attributes

chart_name · string | null · required

cluster_id · string<uuid> · required

fixable_severe · integer · required

last_scan · string<date-time> | null · required

namespace · string | null · required

observed · object · required

Show child attributes

release_name · string | null · required

scanner · object · required

Show child attributes

status · enum<string> · required

Available options: connected, degraded, stale, installed_no_reports, not_installed

top_actionable_findings · object[] · required

Show child attributes

known_exploited · integer · required