The scans of the app's current release and the gate's verdict.
GET
/api/v1/projects/{project}/environments/{environment}/apps/{app}/scans
const url = 'https://example.com/api/v1/projects/example/environments/example/apps/example/scans';const options = {method: 'GET'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://example.com/api/v1/projects/example/environments/example/apps/example/scansParameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”project
required
string
Project name
environment
required
string
Environment short name
app
required
string
App name
Responses
Section titled “Responses”Media typeapplication/json
object
release
string | null format: uuid
gate
required
pass, warn or block: what the environment’s gate says now.
string
reasons
required
Array<string>
images
required
Array<object>
object
digest
required
string
scan
One of:
null
The newest scan; None when the image was never scanned.
object
status
required
ok, or unavailable when the scanner, its feed or the image was
not reachable (never “clean”).
string
scanner
required
string
databaseUpdatedAt
When the vulnerability database was built.
string | null
scannedAt
required
string
critical
required
integer format: int32
high
required
integer format: int32
medium
required
integer format: int32
low
required
integer format: int32
unknown
required
integer format: int32
findings
required
severity:id of the most severe findings.
Array<string>
sbom
required
An SBOM can be downloaded.
boolean
Examplegenerated
{ "release": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "gate": "example", "reasons": [ "example" ], "images": [ { "digest": "example", "scan": { "status": "example", "scanner": "example", "databaseUpdatedAt": "example", "scannedAt": "example", "critical": 1, "high": 1, "medium": 1, "low": 1, "unknown": 1, "findings": [ "example" ] }, "sbom": true } ]}Media typeapplication/json
Problem Details body.
object
code
required
Stable machine-readable code, e.g. forbidden.
string
title
required
Short human readable title.
string
status
required
HTTP status.
integer format: int32
detail
Details, if safe to expose.
string | null
Example
{ "code": "forbidden"}