Image Baseline Check Results Overview - Security Center - Alibaba Cloud - Security Center

Queries the details of image baseline check results.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:DescribeImageListWithBaselineName

get

*All Resource

*

None

Request parameters

Parameter	Type	Required	Description	Example
BaselineNameKey	string	Yes	The name of the image baseline check result.	ak_leak
Criteria	string	No	The query condition for the baseline.	Unauthorized access
CriteriaType	string	No	The query type for the baseline. Valid values: BaselineNameAlias: baseline name BaselineClassAlias: baseline category.	BaselineNameAlias
RepoInstanceId	string	No	The instance ID of the image repository.	i-qewqrqcsadf****
RepoName	string	No	The name of the image repository.	libssh2
RepoNamespace	string	No	The namespace of the image repository.	libssh2
ImageDigest	string	No	The SHA256 value of the image digest.	2e6daffce524ffeae66cccaa90c8fc47de912346dcec295c27395b6d66db6423
PageSize	integer	No	Settings for paged query paging. The number of image baseline check result details to display per page. Default value: 10, which indicates that 10 image baseline check result details are displayed per page.	10
CurrentPage	integer	No	The page number of the page to return. Default value: 1, which indicates that the first page is returned.	1
Lang	string	No	The language type for the request and response messages. Default value: zh. Valid values: zh: Chinese en: English.	zh
ClusterId	string	No	The ID of the container cluster to query. Note You can call the DescribeGroupedContainerInstances operation to obtain this parameter.	cc20a1024011c44b6a8710d6f8b****
ScanRange	array	No	The collection of scan ranges.
	string	No	The scan range. Valid values: container: container image: image.	container
ContainerId	string	No	The container ID.	c08d5fc1a329a4b88950a253d082f****
ClusterName	string	No	The cluster name.	docker-law
Pod	string	No	The pod.	22222-7xsqq
Namespace	string	No	The namespace.	test-002
Image	string	No	The container image name.	registry.cn-wulanchabu.aliyuncs.com/sas_test/huxin-test-001:nuxeo6-****

Response elements

Element	Type	Description	Example
	object
RequestId	string	The request ID, which is a unique identifier generated by Alibaba Cloud for the request. You can use this ID to troubleshoot issues.	5B8C2156-2DB9-5A42-99E7-F2ED5AE9EA1F
PageInfo	object	The paging information for the paged query results.
CurrentPage	integer	The page number of the page to return. Default value: 1, which indicates that the first page is returned.	1
PageSize	integer	Settings for paging in a paged query. The number of image baseline check results to display per page. Default value: 10, which indicates that 10 image baseline check results are displayed per page.	10
TotalCount	integer	The total number of images that have baseline risks in the image baseline check.	1
Count	integer	The number of images that have baseline risks on the current page.	1
ImageInfos	array<object>	The list of image information.
	object	The details of the image baseline check result.
MiddleRiskImage	integer	The number of images with a medium risk level that have baseline risk issues.	0
RiskStatus	string	Indicates whether the image has security risks. Valid values: YES: The image has risks. NO: The image does not have risks.	YES
ImageCreate	integer	The timestamp when the image was created, in milliseconds.	1636962328000
Digest	string	The SHA256 value of the image digest.	2e6daffce524ffeae66cccaa90c8fc47de912346dcec295c27395b6d66db6423
Tag	string	The version of the image.	v1
ImageUpdate	integer	The timestamp when the image was updated, in milliseconds.	1636974116000
InstanceId	string	The ID of the image instance.	cri-a595qp31knh9****
LowRiskImage	integer	The number of images with a low risk level that have baseline risk issues.	0
RepoType	string	The type of the image repository.	PRIVATE
RegionId	string	The region ID of the image instance.	cn-beijing
Uuid	string	The unique identifier of the image.	f58681174f944623345379e23b7b****
ImageSize	integer	The size of the image.	157408623
RepoId	string	The ID of the image repository.	crr-1lt6q7167yh6****
TotalItemCount	integer	The total number of baseline risk items in the image.	3
HighRiskImage	integer	The number of images with a high risk level that have baseline risk issues.	1
NoRiskImage	integer	The number of images that do not have baseline risk issues.	0
ImageId	string	The ID of the image.	cddb5fd33b34a1fabb358d0a19497cdfe362fe624821cb250947af0ea5cc****
RepoName	string	The name of the image repository.	scanner
ClusterId	string	The cluster ID.	c08d5fc1a329a4b88950a253d082f1****
ClusterName	string	The cluster name.	docker-law
RepoNamespace	string	The namespace of the image repository.	libssh2
Pod	string	The pod.	22222-7xsqq
Namespace	string	The namespace.	test-002
ContainerId	string	The container ID.	04d20e98c8e2c93b7b864372084320a15a58c8671e53c972ce3a71d9c163****
Image	string	The image name.	registry.cn-wulanchabu.aliyuncs.com/sas_test/huxin-test-001:nuxeo6-conta****
InstanceName	string	The name of the server instance.	pre.mongo-196
InternetIp	string	The public IP address of the server.	47.96.XX.XX
IntranetIp	string	The private IP address of the server.	172.16.XX.XX
TargetName	string	The name of the scan target.	spod
TargetId	string	The ID of the scan target.	m-bp17m0pc0xprzbwo****
TargetType	string	The object type of the scan target. Valid values: ECS_IMAGE: image. ECS_SNAPSHOT: snapshot.	ECS_IMAGE
LastScanTime	integer	The timestamp of the most recent scan, in milliseconds.	1649814050000
FirstScanTime	integer	The timestamp of the first scan, in milliseconds.	1649814050000

Examples

Success response

JSON format

{
  "RequestId": "5B8C2156-2DB9-5A42-99E7-F2ED5AE9EA1F",
  "PageInfo": {
    "CurrentPage": 1,
    "PageSize": 10,
    "TotalCount": 1,
    "Count": 1
  },
  "ImageInfos": [
    {
      "MiddleRiskImage": 0,
      "RiskStatus": "YES",
      "ImageCreate": 1636962328000,
      "Digest": "2e6daffce524ffeae66cccaa90c8fc47de912346dcec295c27395b6d66db6423",
      "Tag": "v1",
      "ImageUpdate": 1636974116000,
      "InstanceId": "cri-a595qp31knh9****",
      "LowRiskImage": 0,
      "RepoType": "PRIVATE",
      "RegionId": "cn-beijing",
      "Uuid": "f58681174f944623345379e23b7b****",
      "ImageSize": 157408623,
      "RepoId": "crr-1lt6q7167yh6****",
      "TotalItemCount": 3,
      "HighRiskImage": 1,
      "NoRiskImage": 0,
      "ImageId": "cddb5fd33b34a1fabb358d0a19497cdfe362fe624821cb250947af0ea5cc****",
      "RepoName": "scanner",
      "ClusterId": "c08d5fc1a329a4b88950a253d082f1****",
      "ClusterName": "docker-law",
      "RepoNamespace": "libssh2",
      "Pod": "22222-7xsqq",
      "Namespace": "test-002",
      "ContainerId": "04d20e98c8e2c93b7b864372084320a15a58c8671e53c972ce3a71d9c163****",
      "Image": "registry.cn-wulanchabu.aliyuncs.com/sas_test/huxin-test-001:nuxeo6-conta****",
      "InstanceName": "pre.mongo-196",
      "InternetIp": "47.96.XX.XX",
      "IntranetIp": "172.16.XX.XX",
      "TargetName": "spod",
      "TargetId": "m-bp17m0pc0xprzbwo****",
      "TargetType": "ECS_IMAGE",
      "LastScanTime": 1649814050000,
      "FirstScanTime": 1649814050000
    }
  ]
}

Error codes

HTTP status code	Error code	Error message	Description
500	ServerError	ServerError
403	NoPermission	caller has no permission

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.