Sign in

v1

latestOpenAPI 3.0.0CoreStack Inc License2026-07-248001,5071.7 MB
AppSecOps

List of container finding details

Details of the given batch of container finding IDs. Supports a maximum of 1000 IDs per request.

post/v1/appsecops/container/findings/batch

Request body

idsstring[]

Response

Success

finding_idstring

Unique identifier for the security finding record in the system

category'Misconfiguration' | 'Vulnerability' | 'Threat' required

High-level classification of the security finding type (Misconfiguration, Vulnerability, or Threat)

source_tool'Hadolint' | 'Dockle' | 'AzureDefender' | 'InspectorV2' | 'InspectorClassic' | 'SecurityCommandCenter' | 'CloudGuard' | 'Guardduty' required

Name of the security scanning tool that originally detected and reported this finding

execution_phase'Build' | 'Runtime' required

Phase in the software development lifecycle when this security issue was detected (Build or Runtime)

layer'Container' | 'Infrastructure' | 'Supplychain' | 'API' required

Architectural layer where the security issue exists (Container, Infrastructure, Supplychain, or API)

severity'critical' | 'high' | 'medium' | 'low' | 'informational' | 'none' required

Normalized severity level indicating the criticality and potential impact of the security finding

status'open' | 'resolved' required

Current resolution status of the security finding (open for unresolved, resolved for fixed)

titlestring required

Concise, human-readable summary title describing the specific security issue found

descriptionstring

Detailed explanation of the security finding, including what was detected and why it is a concern

recommendationstring

Actionable guidance and best practices for addressing and resolving the security finding

remediationstring

Specific step-by-step instructions for fixing the security issue and preventing recurrence

created_atstring date-time required

Timestamp indicating when this security finding was first discovered and recorded in the system

updated_atstring date-time required

Timestamp of the most recent modification or status change to this security finding record

sbom_version_idstring

SBOM version ID to which the findings are associated

codestring

Unique code identifying the specific finding

targetstring

Identifies the subject of the scan, can be either Image or Dockerfile

tenant_idstring

Tenant ID to which the findings are associated

Example response

[
  {
    "category": "Misconfiguration",
    "source_tool": "Hadolint",
    "execution_phase": "Build",
    "layer": "Container",
    "severity": "critical",
    "status": "open"
  }
]