---
title: "List of images containing given package"
method: GET
path: "/query/images/by_package"
tags: ["Query"]
---

# List of images containing given package

`GET /query/images/by_package`

Filterable query interface to search for images containing specified package

## Query parameters

- `name` string, required
- `package_type` string
- `version` string
- `page` string
- `limit` integer

## Headers

- `x-anchore-account` string

## Response `200`

Image listing

- PaginatedImageList — Pagination wrapped list of images that match some filter
  - `page` string — The page number returned (should match the requested page query string param)
  - `next_page` string — True if additional pages exist (page + 1) or False if this is the last page
  - `returned_count` integer — The number of items sent in this response
  - `images` ImageWithPackages[]
    - `image` ImageReference — A summary of an image identity, including digest, id (if available), and any tags known to have ever been mapped to the digest
      - `digest` string — The image digest
      - `id` string — The image id if available
      - `analyzed_at` string — Timestamp, in rfc3339 format, indicating when the image state became 'analyzed' in Anchore Engine.
      - `tag_history` TagEntry[]
        - `pullstring` string — The pullable string for the tag. E.g. "docker.io/library/node:latest"
        - `registry` string — The registry hostname:port section of the pull string
        - `repository` string — The repository section of the pull string
        - `tag` string — The tag-only section of the pull string
        - `detected_at` string, date-time — The timestamp at which the Anchore Engine detected this tag was mapped to the image digest. Does not necessarily indicate when the tag was actually pushed to the registry.
    - `packages` PackageReference[]
      - `name` string — Package name
      - `version` string, nullable — A version for the package. If null, then references all versions
      - `type` string — Package type (e.g. package, rpm, deb, apk, jar, npm, gem, ...)
      - `will_not_fix` boolean — Whether a vendor will or will not fix a vulnerabitlity

## Other responses

- `400` — Bad filter parameters

---

[API](https://skmtc.net/anchore/apis/anchore-engine-api-server.md) · [All operations](https://skmtc.net/anchore/apis/anchore-engine-api-server/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/anchore/anchore-engine-api-server/revisions/afb4f60ab44a/schema)