> ## Documentation Index > Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt > Use this file to discover all available pages before exploring further. # Get Container Scan Vulnerabilities > Returns the vulnerability findings of a container scan — the list displayed in the CodeAnt UI — including CVE id, affected package, installed/fixed versions, severity, EPSS enrichment, and public-exploit references. While the scan is still running the response carries its status without findings. ## OpenAPI ````yaml /openapi.json post /api/cloud/container-scanning/results openapi: 3.0.3 info: title: CodeAnt AI API description: >- API for code analysis (SAST, SCA, secrets, IaC) and developer productivity metrics. Supports GitHub, GitLab, Bitbucket, and Azure DevOps. version: 1.0.0 servers: - url: https://api.codeant.ai description: Production server security: [] tags: - name: Analysis description: Code analysis operations - name: Agent Analysis description: >- AI-powered agent analysis operations. Uses LLM-based code exploration agents to perform deep security threat hunting, bug finding, and custom analysis with reflection-based false positive filtering. - name: Developer Metrics - Teams description: >- Manage developer teams: create, update, delete teams and manage team membership. Teams are used to organize developers and scope metrics. - name: Developer Metrics description: >- Developer productivity and activity metrics: active developers, PR throughput, individual comparisons, and AI-generated summaries. All endpoints support GitHub, GitLab, Bitbucket, and Azure DevOps. - name: Audit Logs description: >- Read-only access to your organization's audit trail for compliance, ETL and SIEM ingestion. Events are immutable, retained for 180 days, and cover security-relevant actions: user management, access control, credentials, scan triggers, configuration changes and data exports. Secrets and tokens are redacted and never appear in any response format. - name: Container Scanning description: >- Container image vulnerability scanning across AWS ECR, Azure ACR, and GCP GAR registries. List tracked containers with their latest scan, then fetch the full vulnerability findings of a scan — the same data shown on the Cloud Security → Container Scanning page. Authenticate with a CodeAnt API token (requires the `view_cloud_security: read` permission when token scoping is configured). - name: Security Hotlist description: >- The organization-wide security Hotlist: every SCA, SAST, secrets, IaC, cloud (CSPM) and AI-exploitation finding, deduplicated and priority-scored into one ranked list with live ticket, assignee and SLA state. Query it with filters, facets and cursor pagination, or export the full filtered list as an Excel workbook. Authenticate with a CodeAnt API token (requires the `view_code_security: read` permission when token scoping is configured). paths: /api/cloud/container-scanning/results: post: tags: - Container Scanning summary: Get Container Scan Vulnerabilities description: >- Returns the vulnerability findings of a container scan — the list displayed in the CodeAnt UI — including CVE id, affected package, installed/fixed versions, severity, EPSS enrichment, and public-exploit references. While the scan is still running the response carries its status without findings. operationId: getContainerScanVulnerabilities requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/ContainerScanResultsRequest' example: platform: github org: Example-Org cloud: aws scan_id: aB3xK9mP2q responses: '200': description: Scan results retrieved successfully content: application/json: schema: type: object properties: scan_id: type: string status: type: string example: completed created_at: type: string format: date-time completed_at: type: string format: date-time repositories: type: array description: Per-repository scan summaries with severity rollups items: type: object findings: type: array items: $ref: '#/components/schemas/ContainerFinding' '401': description: Missing or invalid access token content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '404': description: Scan not found content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: scan not found security: - BearerAuth: [] components: schemas: ContainerScanResultsRequest: type: object required: - platform - org - scan_id properties: platform: type: string enum: - github - gitlab - bitbucket - azure_devops description: Git platform of the organization org: type: string description: Organization / workspace slug github_base_url: type: string description: >- Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url / azure_devops_base_url). Defaults to the cloud host. example: https://github.com scan_id: type: string description: Scan identifier from the containers list example: aB3xK9mP2q cloud: type: string enum: - aws - azure - gcp default: aws description: Cloud the scan ran against (from the containers list) ContainerFinding: type: object properties: uid: type: string description: Stable finding identifier image: type: string description: Image the vulnerability was found in kind: type: string description: Finding kind, e.g. os-pkgs or lang-pkgs example: os-pkgs target: type: string description: Scanned target inside the image example: debian 12.5 id: type: string description: Vulnerability identifier example: CVE-2024-12345 package: type: string example: libssl3 severity: type: string enum: - critical - high - medium - low - unknown installed_version: type: string example: 3.0.11-1 fixed_version: type: string example: 3.0.13-1 title: type: string example: 'openssl: denial of service via crafted certificate' primary_url: type: string example: https://avd.aquasec.com/nvd/cve-2024-12345 epss_details: type: object description: EPSS exploit-probability enrichment, when available public_exploit: type: object description: Known public exploit references, when available ErrorResponse: type: object properties: error: type: string description: Error message securitySchemes: BearerAuth: type: http scheme: bearer description: >- CodeAnt API token (`cdt_...`), created on the Settings → API Tokens page. Pass via `Authorization: Bearer ` header. ````