> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Container Scan Vulnerabilities

> Returns the vulnerability findings of a container scan — the list displayed in the CodeAnt UI — including CVE id, affected package, installed/fixed versions, severity, EPSS enrichment, and public-exploit references. While the scan is still running the response carries its status without findings.



## OpenAPI

````yaml /openapi.json post /api/cloud/container-scanning/results
openapi: 3.0.3
info:
  title: CodeAnt AI API
  description: >-
    API for code analysis (SAST, SCA, secrets, IaC) and developer productivity
    metrics. Supports GitHub, GitLab, Bitbucket, and Azure DevOps.
  version: 1.0.0
servers:
  - url: https://api.codeant.ai
    description: Production server
security: []
tags:
  - name: Analysis
    description: Code analysis operations
  - name: Agent Analysis
    description: >-
      AI-powered agent analysis operations. Uses LLM-based code exploration
      agents to perform deep security threat hunting, bug finding, and custom
      analysis with reflection-based false positive filtering.
  - name: Developer Metrics - Teams
    description: >-
      Manage developer teams: create, update, delete teams and manage team
      membership. Teams are used to organize developers and scope metrics.
  - name: Developer Metrics
    description: >-
      Developer productivity and activity metrics: active developers, PR
      throughput, individual comparisons, and AI-generated summaries. All
      endpoints support GitHub, GitLab, Bitbucket, and Azure DevOps.
  - name: Audit Logs
    description: >-
      Read-only access to your organization's audit trail for compliance, ETL
      and SIEM ingestion. Events are immutable, retained for 180 days, and cover
      security-relevant actions: user management, access control, credentials,
      scan triggers, configuration changes and data exports. Secrets and tokens
      are redacted and never appear in any response format.
  - name: Container Scanning
    description: >-
      Container image vulnerability scanning across AWS ECR, Azure ACR, and GCP
      GAR registries. List tracked containers with their latest scan, then fetch
      the full vulnerability findings of a scan — the same data shown on the
      Cloud Security → Container Scanning page. Authenticate with a CodeAnt API
      token (requires the `view_cloud_security: read` permission when token
      scoping is configured).
paths:
  /api/cloud/container-scanning/results:
    post:
      tags:
        - Container Scanning
      summary: Get Container Scan Vulnerabilities
      description: >-
        Returns the vulnerability findings of a container scan — the list
        displayed in the CodeAnt UI — including CVE id, affected package,
        installed/fixed versions, severity, EPSS enrichment, and public-exploit
        references. While the scan is still running the response carries its
        status without findings.
      operationId: getContainerScanVulnerabilities
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ContainerScanResultsRequest'
            example:
              platform: github
              org: Example-Org
              cloud: aws
              scan_id: aB3xK9mP2q
      responses:
        '200':
          description: Scan results retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  scan_id:
                    type: string
                  status:
                    type: string
                    example: completed
                  created_at:
                    type: string
                    format: date-time
                  completed_at:
                    type: string
                    format: date-time
                  repositories:
                    type: array
                    description: Per-repository scan summaries with severity rollups
                    items:
                      type: object
                  findings:
                    type: array
                    items:
                      $ref: '#/components/schemas/ContainerFinding'
        '401':
          description: Missing or invalid access token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Scan not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              example:
                error: scan not found
      security:
        - BearerAuth: []
components:
  schemas:
    ContainerScanResultsRequest:
      type: object
      required:
        - platform
        - org
        - scan_id
      properties:
        platform:
          type: string
          enum:
            - github
            - gitlab
            - bitbucket
            - azure_devops
          description: Git platform of the organization
        org:
          type: string
          description: Organization / workspace slug
        github_base_url:
          type: string
          description: >-
            Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url
            / azure_devops_base_url). Defaults to the cloud host.
          example: https://github.com
        scan_id:
          type: string
          description: Scan identifier from the containers list
          example: aB3xK9mP2q
        cloud:
          type: string
          enum:
            - aws
            - azure
            - gcp
          default: aws
          description: Cloud the scan ran against (from the containers list)
    ContainerFinding:
      type: object
      properties:
        uid:
          type: string
          description: Stable finding identifier
        image:
          type: string
          description: Image the vulnerability was found in
        kind:
          type: string
          description: Finding kind, e.g. os-pkgs or lang-pkgs
          example: os-pkgs
        target:
          type: string
          description: Scanned target inside the image
          example: debian 12.5
        id:
          type: string
          description: Vulnerability identifier
          example: CVE-2024-12345
        package:
          type: string
          example: libssl3
        severity:
          type: string
          enum:
            - critical
            - high
            - medium
            - low
            - unknown
        installed_version:
          type: string
          example: 3.0.11-1
        fixed_version:
          type: string
          example: 3.0.13-1
        title:
          type: string
          example: 'openssl: denial of service via crafted certificate'
        primary_url:
          type: string
          example: https://avd.aquasec.com/nvd/cve-2024-12345
        epss_details:
          type: object
          description: EPSS exploit-probability enrichment, when available
        public_exploit:
          type: object
          description: Known public exploit references, when available
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Error message
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: >-
        CodeAnt API token (`cdt_...`), created on the Settings → API Tokens
        page. Pass via `Authorization: Bearer <token>` header.

````