All Products
Search

This Product

    Security Center:DescribeImageInstances

    Document Center

    Security Center:DescribeImageInstances

    Last Updated:Jun 16, 2026

    Retrieves a list of image information.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

    • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

    • API: The API that you can call to perform the action.

    • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

    • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

      • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

      • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

    • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

    • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

    Action

    Access level

    Resource type

    Condition key

    Dependent action

    yundun-sas:DescribeImageInstances

    get

    *All Resource

    *

    		 None None

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    Criteria

    string

    No

    Sets the conditions for searching assets. This parameter is in JSON format and contains the following fields:

    • name: The search item.

    • value: The value of the search item.

    • logicalExp: The logical relationship between multiple search item values. Valid values:

      • OR: The multiple search item values are in an OR relationship.

      • AND: The multiple search item values are in an AND relationship.

    Note

    You can call the DescribeImageRepoCriteria operation to query supported search conditions.

    [{"name":"instanceId","value":"390100182","logicalExp":"AND"}]
    LogicalExp

    string

    No

    Sets the logical relationship between multiple search conditions. Valid values:

    • OR: The multiple search conditions are in an OR relationship.

    • AND: The multiple search conditions are in an AND relationship.

    OR
    PageSize

    integer

    No

    The maximum number of entries to return on each page during a paged query. The default number of entries per page is 20. If the PageSize parameter is left empty, 20 entries are returned by default.

    Note

    We recommend that you do not leave the PageSize parameter empty.

    20
    CurrentPage

    integer

    No

    The page number of the returned results to start displaying. The starting value is 1. Default value: 1, which indicates that page 1 is displayed.

    1
    Scanned

    boolean

    No

    Indicates whether the image has been scanned. Valid values:

    • true: processed.

    • false: not processed.

    true

    Response elements

    Element

    Type

    Description

    Example

    object

    The response data.

    RequestId

    string

    The request ID, which is a unique identifier generated by Alibaba Cloud for the request. You can use the ID to troubleshoot issues.

    BE120DAB-F4E7-4C53-ADC3-A97578ABF384
    PageInfo

    object

    The pagination information of the query result.

    CurrentPage

    integer

    The page number of the current page in the paged query.

    1
    PageSize

    integer

    The number of entries of image information displayed on each page in the paged query.

    20
    TotalCount

    integer

    The total number of images.

    69
    Count

    integer

    The number of images displayed on the current page of the returned results.

    4
    ImageInstanceList

    array<object>

    The list of image information.

    object

    The image information.

    Status

    string

    The image status. Valid values:

    • NORMAL: normal.

    NORMAL
    Digest

    string

    The digest value of the image.

    a5ccdd9b166b67e02954aa9b618fe19b7968bd56a15463d2ad7f2643ba5b****
    RegistryType

    string

    The registry type of the image. Valid values:

    • acr: ACR.

    • harbor: Harbor.

    • quay: Quay.

    • CI/CD: CI/CD repository type.

    acr
    Tag

    string

    The tag of the image.

    mysql_5.7
    ImageUpdate

    string

    The timestamp when the image was updated. Unit: milliseconds.

    1600069948849
    RepoType

    string

    The repository type. Valid values:

    • private: private repository.

    • public: public repository.

    private
    ImageSize

    string

    The size of the image. Unit: MB.

    1604487690
    HcStatus

    string

    The baseline risk status. Valid values:

    • NO: no baseline risk exists.

    • YES: baseline risk exists.

    NO
    VulCount

    integer

    The number of vulnerabilities in the image.

    0
    ImageId

    string

    The ID of the image.

    c20987f18b130f9d144c9828df630417e2a9523148930dc3963e9d0dab30****
    Endpoints

    string

    The endpoint addresses of the image resource.

    []
    RiskStatus

    string

    Indicates whether a risk exists. Valid values:

    • NO: no risk.

    • YES: risk exists.

    NO
    ImageCreate

    string

    The timestamp when the image was created. Unit: milliseconds.

    1600069948849
    VulStatus

    string

    Indicates whether vulnerabilities exist in the image. Valid values:

    • YES: vulnerabilities exist.

    • NO: no vulnerabilities exist.

    NO
    AlarmStatus

    string

    Indicates whether security alerts exist for the image. Valid values:

    • YES: security alerts exist.

    • NO: no security alerts exist.

    NO
    ScaProgress

    integer

    The scan progress of the image. Value range: 0 to 100.

    100
    InstanceId

    string

    The instance ID of the image asset.

    39010****
    RegionId

    string

    The ID of the region where the image is located.

    cn-hangzhou
    ScaStatus

    string

    The image scan status. Valid values:

    • INIT: image scan pending.

    • START: image scan started.

    • MESSAGE_SEND: image scan message sent.

    • START_RUN: image analysis task started.

    • DOWNLOAD: image scan downloaded.

    • PRE_ANALYZER: image pre-analysis started.

    • WEB_SHELL_ANALYZER: image WebShell analysis completed.

    • CVE_ANALYZER: image CVE analysis completed.

    • BIN_ANALYZER: image binary analysis completed.

    • OTHER_ANALYZER: image extended analysis completed.

    • SUCCESS: image scan completed.

    • PRE_ANALYZER_SUCCESS: image pre-analysis completed.

    • FAIL: image scan failed.

    • TIMEOUT: image scan timed out.

    SUCCESS
    Uuid

    string

    The UUID of the server.

    12f80307-60aa-4efa-863a-56d72fb****
    RepoId

    string

    The ID of the image repository.

    f2b86d20bf0855af6aa268ce90fd****
    HcCount

    integer

    The number of baseline risks.

    0
    ScaResult

    string

    The error code of the image scan result. Valid values:

    • TASK_NOT_EXISTS: the task does not exist.

    • TASK_NOT_SUPPORT_REGION: the task does not support the region.

    • forbid_create_repeat_task: repeated tasks are not allowed.

    TASK_NOT_SUPPORT_REGION
    RepoName

    string

    The name of the image repository.

    sas-script-test
    AlarmCount

    integer

    The number of security alerts for the image.

    0
    RepoNamespace

    string

    The namespace of the image repository.

    N/A
    Deployed

    integer

    Indicates whether the image has been deployed. Valid values:

    • 0: not deployed.

    • 1: deployed.

    1
    LastScanTime

    integer

    The timestamp of the latest scan. Unit: milliseconds.

    1721363159000
    SourceBizTag

    string

    The business tag of the image.

    PAI

    Examples

    Success response

    JSON format

    {
  "RequestId": "BE120DAB-F4E7-4C53-ADC3-A97578ABF384",
  "PageInfo": {
    "CurrentPage": 1,
    "PageSize": 20,
    "TotalCount": 69,
    "Count": 4
  },
  "ImageInstanceList": [
    {
      "Status": "NORMAL",
      "Digest": "a5ccdd9b166b67e02954aa9b618fe19b7968bd56a15463d2ad7f2643ba5b****",
      "RegistryType": "acr",
      "Tag": "mysql_5.7",
      "ImageUpdate": "1600069948849",
      "RepoType": "private",
      "ImageSize": "1604487690",
      "HcStatus": "NO",
      "VulCount": 0,
      "ImageId": "c20987f18b130f9d144c9828df630417e2a9523148930dc3963e9d0dab30****",
      "Endpoints": "[]",
      "RiskStatus": "NO",
      "ImageCreate": "1600069948849",
      "VulStatus": "NO",
      "AlarmStatus": "NO",
      "ScaProgress": 100,
      "InstanceId": "39010****",
      "RegionId": "cn-hangzhou",
      "ScaStatus": "SUCCESS",
      "Uuid": "12f80307-60aa-4efa-863a-56d72fb****",
      "RepoId": "f2b86d20bf0855af6aa268ce90fd****",
      "HcCount": 0,
      "ScaResult": "TASK_NOT_SUPPORT_REGION",
      "RepoName": "sas-script-test",
      "AlarmCount": 0,
      "RepoNamespace": "N/A",
      "Deployed": 1,
      "LastScanTime": 1721363159000,
      "SourceBizTag": "PAI"
    }
  ]
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    500 ServerError ServerError
    403 NoPermission caller has no permission

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.