> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List Scanned Containers

> Returns one entry per tracked container (registry repository / image) across AWS ECR, Azure ACR, and GCP GAR, each with its latest scan's status, severity rollup, and `scan_id`. Use the returned `cloud` and `scan_id` with the results endpoint to fetch the full vulnerability list.



## OpenAPI

````yaml /openapi.json post /api/cloud/container-scanning/containers
openapi: 3.0.3
info:
  title: CodeAnt AI API
  description: >-
    API for code analysis (SAST, SCA, secrets, IaC) and developer productivity
    metrics. Supports GitHub, GitLab, Bitbucket, and Azure DevOps.
  version: 1.0.0
servers:
  - url: https://api.codeant.ai
    description: Production server
security: []
tags:
  - name: Analysis
    description: Code analysis operations
  - name: Agent Analysis
    description: >-
      AI-powered agent analysis operations. Uses LLM-based code exploration
      agents to perform deep security threat hunting, bug finding, and custom
      analysis with reflection-based false positive filtering.
  - name: Developer Metrics - Teams
    description: >-
      Manage developer teams: create, update, delete teams and manage team
      membership. Teams are used to organize developers and scope metrics.
  - name: Developer Metrics
    description: >-
      Developer productivity and activity metrics: active developers, PR
      throughput, individual comparisons, and AI-generated summaries. All
      endpoints support GitHub, GitLab, Bitbucket, and Azure DevOps.
  - name: Audit Logs
    description: >-
      Read-only access to your organization's audit trail for compliance, ETL
      and SIEM ingestion. Events are immutable, retained for 180 days, and cover
      security-relevant actions: user management, access control, credentials,
      scan triggers, configuration changes and data exports. Secrets and tokens
      are redacted and never appear in any response format.
  - name: Container Scanning
    description: >-
      Container image vulnerability scanning across AWS ECR, Azure ACR, and GCP
      GAR registries. List tracked containers with their latest scan, then fetch
      the full vulnerability findings of a scan — the same data shown on the
      Cloud Security → Container Scanning page. Authenticate with a CodeAnt API
      token (requires the `view_cloud_security: read` permission when token
      scoping is configured).
paths:
  /api/cloud/container-scanning/containers:
    post:
      tags:
        - Container Scanning
      summary: List Scanned Containers
      description: >-
        Returns one entry per tracked container (registry repository / image)
        across AWS ECR, Azure ACR, and GCP GAR, each with its latest scan's
        status, severity rollup, and `scan_id`. Use the returned `cloud` and
        `scan_id` with the results endpoint to fetch the full vulnerability
        list.
      operationId: listScannedContainers
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ContainerScanContextRequest'
            example:
              platform: github
              org: Example-Org
      responses:
        '200':
          description: Containers retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  containers:
                    type: array
                    items:
                      $ref: '#/components/schemas/Container'
                  total:
                    type: integer
        '401':
          description: Missing or invalid access token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - BearerAuth: []
components:
  schemas:
    ContainerScanContextRequest:
      type: object
      required:
        - platform
        - org
      properties:
        platform:
          type: string
          enum:
            - github
            - gitlab
            - bitbucket
            - azure_devops
          description: Git platform of the organization
        org:
          type: string
          description: Organization / workspace slug
        github_base_url:
          type: string
          description: >-
            Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url
            / azure_devops_base_url). Defaults to the cloud host.
          example: https://github.com
    Container:
      type: object
      properties:
        name:
          type: string
          description: Registry repository name
          example: backend/api
        image:
          type: string
          description: Full image reference that was scanned
          example: 123456789.dkr.ecr.us-east-1.amazonaws.com/backend/api:latest
        tag:
          type: string
          example: latest
        cloud:
          type: string
          enum:
            - aws
            - azure
            - gcp
        registry:
          type: string
          enum:
            - ECR
            - ACR
            - GAR
        region:
          type: string
          example: us-east-1
        scan_id:
          type: string
          description: Latest scan of this container; pass to the results endpoint
          example: aB3xK9mP2q
        status:
          type: string
          description: Latest scan status
          example: completed
        severity_rollup:
          type: object
          description: Vulnerability counts by severity for the latest scan
          example:
            critical: 2
            high: 11
            medium: 30
            low: 7
            unknown: 0
        findings_total:
          type: integer
          example: 50
        last_scan:
          type: string
          format: date-time
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Error message
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: >-
        CodeAnt API token (`cdt_...`), created on the Settings → API Tokens
        page. Pass via `Authorization: Bearer <token>` header.

````