---
title: "List scanned assets metadata"
method: GET
path: "/api/v2/security/scanned-assets-metadata"
tags: ["Security Monitoring"]
---

# List scanned assets metadata

`GET /api/v2/security/scanned-assets-metadata`

Get a list of security scanned assets metadata for an organization.

### Pagination

For the "List Vulnerabilities" endpoint, see the [Pagination section](#pagination).

### Filtering

For the "List Vulnerabilities" endpoint, see the [Filtering section](#filtering).

### Metadata

 For the "List Vulnerabilities" endpoint, see the [Metadata section](#metadata).

### Related endpoints

This endpoint returns additional metadata for cloud resources that is not available from the standard resource endpoints. To access a richer dataset, call this endpoint together with the relevant resource endpoint(s) and merge (join) their results using the resource identifier.

**Hosts**

To enrich host data, join the response from the [Hosts](https://docs.datadoghq.com/api/latest/hosts/) endpoint with the response from the scanned-assets-metadata endpoint on the following key fields:

| ENDPOINT | JOIN KEY | TYPE |
| --- | --- | --- |
| [/api/v1/hosts](https://docs.datadoghq.com/api/latest/hosts/) | host_list.host_name | string |
| /api/v2/security/scanned-assets-metadata | data.attributes.asset.name | string |

**Host Images**

To enrich host image data, join the response from the [Hosts](https://docs.datadoghq.com/api/latest/hosts/) endpoint with the response from the scanned-assets-metadata endpoint on the following key fields:

| ENDPOINT | JOIN KEY | TYPE |
| --- | --- | --- |
| [/api/v1/hosts](https://docs.datadoghq.com/api/latest/hosts/) | host_list.tags_by_source["Amazon Web Services"]["image"] | string |
| /api/v2/security/scanned-assets-metadata | data.attributes.asset.name | string |

**Container Images**

To enrich container image data, join the response from the [Container Images](https://docs.datadoghq.com/api/latest/container-images/) endpoint with the response from the scanned-assets-metadata endpoint on the following key fields:

| ENDPOINT | JOIN KEY | TYPE |
| --- | --- | --- |
| [/api/v2/container_images](https://docs.datadoghq.com/api/latest/container-images/) | `data.attributes.name`@`data.attributes.repo_digest` | string |
| /api/v2/security/scanned-assets-metadata | data.attributes.asset.name | string |

## Query parameters

- `page[token]` string
- `page[number]` integer
- `filter[asset.type]` 'Host' | 'HostImage' | 'Image' — The cloud asset type
- `filter[asset.name]` string
- `filter[last_success.origin]` string
- `filter[last_success.env]` string

## Response `200`

OK

- ScannedAssetsMetadata — The expected response schema when listing scanned assets metadata.
  - `data` ScannedAssetMetadata[], required — List of scanned assets metadata.
    - `attributes` ScannedAssetMetadataAttributes, required — The attributes of a scanned asset metadata.
      - `asset` ScannedAssetMetadataAsset, required — The asset of a scanned asset metadata.
        - `name` string, required — The name of the asset.
        - `type` 'Host' | 'HostImage' | 'Image', required — The cloud asset type
      - `first_success_timestamp` string, required — The timestamp when the scan of the asset was performed for the first time.
      - `last_success` ScannedAssetMetadataLastSuccess, required — Metadata for the last successful scan of an asset.
        - `env` string — The environment of the last success scan of the asset.
        - `origin` string[] — The list of origins of the last success scan of the asset.
        - `timestamp` string, required — The timestamp of the last success scan of the asset.
    - `id` string, required — The ID of the scanned asset metadata.
  - `links` Links — The JSON:API links related to pagination.
    - `first` string, required — First page link.
    - `last` string, required — Last page link.
    - `next` string — Next page link.
    - `previous` string — Previous page link.
    - `self` string, required — Request link.
  - `meta` Metadata — The metadata related to this request.
    - `count` integer, required — Number of entities included in the response.
    - `token` string, required — The token that identifies the request.
    - `total` integer, required — Total number of entities across all pages.

## Other responses

- `400` — Bad request: The server cannot process the request due to invalid syntax in the request.
- `403` — Forbidden: Access denied
- `404` — Not found: asset not found
- `429` — Too many requests

---

[API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/versions/da68bf029e4c/schema)