---
title: "POST /#X-Amz-Target=AmazonEC2ContainerRegistry_V20150921.DescribeImageScanFindings"
method: POST
path: "/#X-Amz-Target=AmazonEC2ContainerRegistry_V20150921.DescribeImageScanFindings"
---

# POST /#X-Amz-Target=AmazonEC2ContainerRegistry_V20150921.DescribeImageScanFindings

`POST /#X-Amz-Target=AmazonEC2ContainerRegistry_V20150921.DescribeImageScanFindings`

Returns the scan findings for the specified image.

## Query parameters

- `maxResults` string
- `nextToken` string

## Headers

- `X-Amz-Target` 'AmazonEC2ContainerRegistry_V20150921.DescribeImageScanFindings', required

## Request body

- DescribeImageScanFindingsRequest
  - `registryId` string — The Amazon Web Services account ID associated with the registry that contains the repository in which to describe the image scan findings for. If you do not specify a registry, the default registry is assumed.
  - `repositoryName` string, required — The repository for the image for which to describe the scan findings.
  - `imageId` ImageIdentifier, required — An object with identifying information for an image in an Amazon ECR repository.
    - `imageDigest` string — The <code>sha256</code> digest of the image manifest.
    - `imageTag` string — The tag used for the image.
  - `nextToken` string — The <code>nextToken</code> value returned from a previous paginated <code>DescribeImageScanFindings</code> request where <code>maxResults</code> was used and the results exceeded the value of that parameter. Pagination continues from the end of the previous results that returned the <code>nextToken</code> value. This value is null when there are no more results to return.
  - `maxResults` integer — The maximum number of image scan results returned by <code>DescribeImageScanFindings</code> in paginated output. When this parameter is used, <code>DescribeImageScanFindings</code> only returns <code>maxResults</code> results in a single page along with a <code>nextToken</code> response element. The remaining results of the initial request can be seen by sending another <code>DescribeImageScanFindings</code> request with the returned <code>nextToken</code> value. This value can be between 1 and 1000. If this parameter is not used, then <code>DescribeImageScanFindings</code> returns up to 100 results and a <code>nextToken</code> value, if applicable.

## Response `200`

Success

- DescribeImageScanFindingsResponse
  - `registryId` string — The registry ID associated with the request.
  - `repositoryName` string — The repository name associated with the request.
  - `imageId` ImageIdentifier — An object with identifying information for an image in an Amazon ECR repository.
    - `imageDigest` string — The <code>sha256</code> digest of the image manifest.
    - `imageTag` string — The tag used for the image.
  - `imageScanStatus` object — The current state of the scan.
    - `status` 'IN_PROGRESS' | 'COMPLETE' | 'FAILED' | 'UNSUPPORTED_IMAGE' | 'ACTIVE' | 'PENDING' | 'SCAN_ELIGIBILITY_EXPIRED' | 'FINDINGS_UNAVAILABLE' — The current state of an image scan.
    - `description` string — The description of the image scan status.
  - `imageScanFindings` object — The information contained in the image scan findings.
    - `imageScanCompletedAt` string, date-time — The time of the last completed image scan.
    - `vulnerabilitySourceUpdatedAt` string, date-time — The time when the vulnerability data was last scanned.
    - `findingSeverityCounts` object — The image vulnerability counts, sorted by severity.
    - `findings` ImageScanFinding[] — The findings from the image scan.
      - `name` string — The name associated with the finding, usually a CVE number.
      - `description` string — The description of the finding.
      - `uri` string — A link containing additional details about the security vulnerability.
      - `severity` 'INFORMATIONAL' | 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' | 'UNDEFINED' — The finding severity.
      - `attributes` Attribute[] — A collection of attributes of the host from which the finding is generated.
        - `key` string, required — The attribute key.
        - `value` string — The value assigned to the attribute key.
    - `enhancedFindings` EnhancedImageScanFinding[] — Details about the enhanced scan findings from Amazon Inspector.
      - `awsAccountId` string — The Amazon Web Services account ID associated with the image.
      - `description` string — The description of the finding.
      - `findingArn` string — The Amazon Resource Number (ARN) of the finding.
      - `firstObservedAt` string, date-time — The date and time that the finding was first observed.
      - `lastObservedAt` string, date-time — The date and time that the finding was last observed.
      - `packageVulnerabilityDetails` object — An object that contains the details of a package vulnerability finding.
        - `cvss` CvssScore[] — An object that contains details about the CVSS score of a finding.
          - `baseScore` number, double — The base CVSS score used for the finding.
          - `scoringVector` string — The vector string of the CVSS score.
          - `source` string — The source of the CVSS score.
          - `version` string — The version of CVSS used for the score.
        - `referenceUrls` Url[] — One or more URLs that contain details about this vulnerability type.
        - `relatedVulnerabilities` RelatedVulnerability[] — One or more vulnerabilities related to the one identified in this finding.
        - `source` string — The source of the vulnerability information.
        - `sourceUrl` string — A URL to the source of the vulnerability information.
        - `vendorCreatedAt` string, date-time — The date and time that this vulnerability was first added to the vendor's database.
        - `vendorSeverity` string — The severity the vendor has given to this vulnerability type.
        - `vendorUpdatedAt` string, date-time — The date and time the vendor last updated this vulnerability in their database.
        - `vulnerabilityId` string — The ID given to this vulnerability.
        - `vulnerablePackages` VulnerablePackage[] — The packages impacted by this vulnerability.
          - `arch` string — The architecture of the vulnerable package.
          - `epoch` integer — The epoch of the vulnerable package.
          - `filePath` string — The file path of the vulnerable package.
          - `name` string — The name of the vulnerable package.
          - `packageManager` string — The package manager of the vulnerable package.
          - `release` string — The release of the vulnerable package.
          - `sourceLayerHash` string — The source layer hash of the vulnerable package.
          - `version` string — The version of the vulnerable package.
      - `remediation` object — An object that contains the details about how to remediate a finding.
        - `recommendation` object — An object that contains information about the recommended course of action to remediate the finding.
          - `url` string — The URL address to the CVE remediation recommendations.
          - `text` string — The recommended course of action to remediate the finding.
      - `resources` Resource[] — Contains information on the resources involved in a finding.
        - `details` object — An object that contains details about the resource involved in a finding.
          - `awsEcrContainerImage` object — An object that contains details about the Amazon ECR container image involved in the finding.
            - `architecture` string — The architecture of the Amazon ECR container image.
            - `author` string — The image author of the Amazon ECR container image.
            - `imageHash` string — The image hash of the Amazon ECR container image.
            - `imageTags` ImageTag[] — The image tags attached to the Amazon ECR container image.
            - `platform` string — The platform of the Amazon ECR container image.
            - `pushedAt` string, date-time — The date and time the Amazon ECR container image was pushed.
            - `registry` string — The registry the Amazon ECR container image belongs to.
            - `repositoryName` string — The name of the repository the Amazon ECR container image resides in.
        - `id` string — The ID of the resource.
        - `tags` object — The tags attached to the resource.
        - `type` string — The type of resource.
      - `score` number, double — The Amazon Inspector score given to the finding.
      - `scoreDetails` object — An object that contains details of the Amazon Inspector score.
        - `cvss` object — An object that contains details about the CVSS score given to a finding.
          - `adjustments` CvssScoreAdjustment[] — An object that contains details about adjustment Amazon Inspector made to the CVSS score.
            - `metric` string — The metric used to adjust the CVSS score.
            - `reason` string — The reason the CVSS score has been adjustment.
          - `score` number, double — The CVSS score.
          - `scoreSource` string — The source for the CVSS score.
          - `scoringVector` string — The vector for the CVSS score.
          - `version` string — The CVSS version used in scoring.
      - `severity` string — The severity of the finding.
      - `status` string — The status of the finding.
      - `title` string — The title of the finding.
      - `type` string — The type of the finding.
      - `updatedAt` string, date-time — The date and time the finding was last updated at.
  - `nextToken` string — The <code>nextToken</code> value to include in a future <code>DescribeImageScanFindings</code> request. When the results of a <code>DescribeImageScanFindings</code> request exceed <code>maxResults</code>, this value can be used to retrieve the next page of results. This value is null when there are no more results to return.

## Other responses

- `480` — ServerException
- `481` — InvalidParameterException
- `482` — RepositoryNotFoundException
- `483` — ImageNotFoundException
- `484` — ScanNotFoundException
- `485` — ValidationException

---

[API](https://skmtc.net/aws/apis/ecr.md) · [All operations](https://skmtc.net/aws/apis/ecr/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/ecr/versions/965cbb14e137/schema)