List the CVEs across one stack's workloads (browser session)

Lists the CVEs found in one stack’s workloads, paginated, with the same filters, sorting and disposition counts as the organisation findings list; the facets are the stack’s own. Requires security.read.

GET /org/clusters/imported/{cluster_id}/stacks/{stack_name}/security/findings

List the CVEs across one stack's workloads (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/clusters/imported/{cluster_id}/stacks/{stack_name}/security/findings"

headers = {"cookie": "ankra_session="}

response = requests.get(url, headers=headers)

print(response.text)

200

{
  "facets": {
    "addons": [
      {
        "count": 123,
        "value": "<string>"
      }
    ],
    "clusters": [
      {
        "count": 123,
        "value": "<string>"
      }
    ],
    "severity": [
      {
        "count": 123,
        "value": "<string>"
      }
    ],
    "status": [
      {
        "count": 123,
        "value": "<string>"
      }
    ],
    "exploited": [
      {
        "count": 123,
        "value": "<string>"
      }
    ]
  },
  "pagination": {
    "page": 123,
    "page_size": 123,
    "total_count": 123,
    "total_pages": 123
  },
  "result": [
    {
      "affected_clusters": 123,
      "affected_workloads": 123,
      "cve_id": "<string>",
      "disposition_counts": {
        "accepted_risk": 123,
        "acknowledged": 123,
        "open": 123,
        "resolved": 123
      },
      "first_seen_at": "2023-11-07T05:31:56Z",
      "fixable_occurrences": 123,
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "last_seen_at": "2023-11-07T05:31:56Z",
      "occurrences": 123,
      "package_name": "<string>",
      "package_type": "<string>",
      "primary_link": "<string>",
      "provider": "<string>",
      "score": 123,
      "severity": "<string>",
      "title": "<string>",
      "known_exploited": true,
      "kev_date_added": "<string>",
      "kev_due_date": "<string>",
      "kev_ransomware_use": true,
      "epss_score": 123,
      "epss_percentile": 123,
      "kev_vendor_project": "<string>",
      "kev_product": "<string>",
      "kev_vulnerability_name": "<string>",
      "kev_required_action": "<string>"
    }
  ],
  "scanner": {
    "fresh_clusters": 123,
    "last_scan": "2023-11-07T05:31:56Z",
    "stale_after_seconds": 123,
    "stale_clusters": 123,
    "status": "fresh",
    "unscanned_clusters": 123
  },
  "intelligence": {
    "epss_synced_at": "2023-11-07T05:31:56Z",
    "kev_listed": 123,
    "kev_synced_at": "2023-11-07T05:31:56Z"
  }
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Path Parameters

cluster_id · string<uuid> · required

stack_name · string · required

Query Parameters

page · integer · default: 1

Required range: 1 <= x <= 10000

page_size · integer · default: 50

Values above 100 are clamped to 100.

Required range: x >= 1

search · string

severity · string[]

status · string[]

fixable · boolean

sort · string

order · enum<string>

Available options: asc, desc

known_exploited · boolean | null

Keep only findings whose CVE is (true) or is not (false) listed in the CISA Known Exploited Vulnerabilities catalog.

Response

200

application/json

Successful response

facets · object · required

Show child attributes

pagination · object · required

Show child attributes

result · object[] · required

Show child attributes

scanner · object · required

Show child attributes

intelligence · object · required

Show child attributes