Open base-image bump pull requests for a security finding (browser session)
import requests
url = "https://api.platform.ankra.app/org/security/findings/{finding_id}/rebuild"
headers = {"cookie": "ankra_session="}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {cookie: 'ankra_session='}};
fetch('https://api.platform.ankra.app/org/security/findings/{finding_id}/rebuild', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://api.platform.ankra.app/org/security/findings/{finding_id}/rebuild \
--cookie ankra_session={
"finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"pull_requests": [
{
"application_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"application_name": "<string>",
"base_image": "<string>",
"branch": "<string>",
"opened_at": "2023-11-07T05:31:56Z",
"opened_by": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"pull_request_url": "<string>",
"repository": "<string>",
"reused": true
}
],
"refusals": [
{
"application_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"application_name": "<string>",
"image_repository": "<string>",
"occurrences": 123,
"reason": "<string>",
"repository": "<string>"
}
]
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "<string>"
}Security
Open base-image bump pull requests for a security finding (browser session)
Opens one pull request per affected application repository bumping the Dockerfile base image to the advisory's fixed version, through the application's own GitHub credential, and records each on the finding (served as image_rebuild_pull_requests on the finding detail). Every write goes to a new branch (ankra/security/<finding short id>/<base image>) plus a pull request, never to the default branch; only base-image FROM lines change; an open Ankra pull request for the same finding and repository is reused, never duplicated. Repositories the plan refuses are answered as refusals with their reason; when no repository could be acted on the call is refused with 409 naming the reasons, as is a finding with no application image occurrence carrying a fixed version.
POST
/
org
/
security
/
findings
/
{finding_id}
/
rebuild
Open base-image bump pull requests for a security finding (browser session)
import requests
url = "https://api.platform.ankra.app/org/security/findings/{finding_id}/rebuild"
headers = {"cookie": "ankra_session="}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {cookie: 'ankra_session='}};
fetch('https://api.platform.ankra.app/org/security/findings/{finding_id}/rebuild', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://api.platform.ankra.app/org/security/findings/{finding_id}/rebuild \
--cookie ankra_session={
"finding_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"pull_requests": [
{
"application_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"application_name": "<string>",
"base_image": "<string>",
"branch": "<string>",
"opened_at": "2023-11-07T05:31:56Z",
"opened_by": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"pull_request_url": "<string>",
"repository": "<string>",
"reused": true
}
],
"refusals": [
{
"application_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"application_name": "<string>",
"image_repository": "<string>",
"occurrences": 123,
"reason": "<string>",
"repository": "<string>"
}
]
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "<string>"
}Authorizations
Browser session. Mutations also require X-Ankra-CSRF.