> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List Scanned Containers

> Returns one entry per tracked container (registry repository / image) across AWS ECR, Azure ACR, and GCP GAR, each with its latest scan's status, severity rollup, and `scan_id`. Use the returned `cloud` and `scan_id` with the results endpoint to fetch the full vulnerability list.



## OpenAPI

````yaml /openapi.json post /api/cloud/container-scanning/containers
openapi: 3.0.3
info:
  title: CodeAnt AI API
  description: >-
    API for code analysis (SAST, SCA, secrets, IaC) and developer productivity
    metrics. Supports GitHub, GitLab, Bitbucket, and Azure DevOps.
  version: 1.0.0
servers:
  - url: https://api.codeant.ai
    description: Production server
security: []
tags:
  - name: Analysis
    description: Code analysis operations
  - name: Agent Analysis
    description: >-
      AI-powered agent analysis operations. Uses LLM-based code exploration
      agents to perform deep security threat hunting, bug finding, and custom
      analysis with reflection-based false positive filtering.
  - name: Developer Metrics - Teams
    description: >-
      Manage developer teams: create, update, delete teams and manage team
      membership. Teams are used to organize developers and scope metrics.
  - name: Developer Metrics
    description: >-
      Developer productivity and activity metrics: active developers, PR
      throughput, individual comparisons, and AI-generated summaries. All
      endpoints support GitHub, GitLab, Bitbucket, and Azure DevOps.
  - name: Audit Logs
    description: >-
      Read-only access to your organization's audit trail for compliance, ETL
      and SIEM ingestion. Events are immutable, retained for 180 days, and cover
      security-relevant actions: user management, access control, credentials,
      scan triggers, configuration changes and data exports. Secrets and tokens
      are redacted and never appear in any response format.
  - name: Container Scanning
    description: >-
      Container image vulnerability scanning across AWS ECR, Azure ACR, and GCP
      GAR registries. List tracked containers with their latest scan, then fetch
      the full vulnerability findings of a scan — the same data shown on the
      Cloud Security → Container Scanning page. Authenticate with a CodeAnt API
      token (requires the `view_cloud_security: read` permission when token
      scoping is configured).
  - name: Security Hotlist
    description: >-
      The organization-wide security Hotlist: every SCA, SAST, secrets, IaC,
      cloud (CSPM) and AI-exploitation finding, deduplicated and priority-scored
      into one ranked list with live ticket, assignee and SLA state. Query it
      with filters, facets and cursor pagination, or export the full filtered
      list as an Excel workbook. Authenticate with a CodeAnt API token (requires
      the `view_code_security: read` permission when token scoping is
      configured).
paths:
  /api/cloud/container-scanning/containers:
    post:
      tags:
        - Container Scanning
      summary: List Scanned Containers
      description: >-
        Returns one entry per tracked container (registry repository / image)
        across AWS ECR, Azure ACR, and GCP GAR, each with its latest scan's
        status, severity rollup, and `scan_id`. Use the returned `cloud` and
        `scan_id` with the results endpoint to fetch the full vulnerability
        list.
      operationId: listScannedContainers
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ContainerScanContextRequest'
            example:
              platform: github
              org: Example-Org
      responses:
        '200':
          description: Containers retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  containers:
                    type: array
                    items:
                      $ref: '#/components/schemas/Container'
                  total:
                    type: integer
        '401':
          description: Missing or invalid access token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - BearerAuth: []
components:
  schemas:
    ContainerScanContextRequest:
      type: object
      required:
        - platform
        - org
      properties:
        platform:
          type: string
          enum:
            - github
            - gitlab
            - bitbucket
            - azure_devops
          description: Git platform of the organization
        org:
          type: string
          description: Organization / workspace slug
        github_base_url:
          type: string
          description: >-
            Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url
            / azure_devops_base_url). Defaults to the cloud host.
          example: https://github.com
    Container:
      type: object
      properties:
        name:
          type: string
          description: Registry repository name
          example: backend/api
        image:
          type: string
          description: Full image reference that was scanned
          example: 123456789.dkr.ecr.us-east-1.amazonaws.com/backend/api:latest
        tag:
          type: string
          example: latest
        cloud:
          type: string
          enum:
            - aws
            - azure
            - gcp
        registry:
          type: string
          enum:
            - ECR
            - ACR
            - GAR
        region:
          type: string
          example: us-east-1
        scan_id:
          type: string
          description: Latest scan of this container; pass to the results endpoint
          example: aB3xK9mP2q
        status:
          type: string
          description: Latest scan status
          example: completed
        severity_rollup:
          type: object
          description: Vulnerability counts by severity for the latest scan
          example:
            critical: 2
            high: 11
            medium: 30
            low: 7
            unknown: 0
        findings_total:
          type: integer
          example: 50
        last_scan:
          type: string
          format: date-time
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Error message
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: >-
        CodeAnt API token (`cdt_...`), created on the Settings → API Tokens
        page. Pass via `Authorization: Bearer <token>` header.

````