Anchore Engine API Server

Anchore Engine API Server

API version: 0.1.20

Auth

ApiKey username in formData

Base URL

Not specified.

Setup

1. Set your API key in the appropriate header
2. GET / -- verify access
3. POST /policies -- create first policies

Endpoints

112 endpoints across 21 groups. See references/api-spec.lap for full details.

root

health

version

policies

subscriptions

summaries

images

import

repositories

registries

status

system

event_types

events

query

accounts

account

user

archives

oauth

imports

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

• "List all health?" -> GET /health
• "List all version?" -> GET /version
• "List all policies?" -> GET /policies
• "Create a policy?" -> POST /policies
• "Get policy details?" -> GET /policies/{policyId}
• "Update a policy?" -> PUT /policies/{policyId}
• "Delete a policy?" -> DELETE /policies/{policyId}
• "List all subscriptions?" -> GET /subscriptions
• "Create a subscription?" -> POST /subscriptions
• "Get subscription details?" -> GET /subscriptions/{subscriptionId}
• "Update a subscription?" -> PUT /subscriptions/{subscriptionId}
• "Delete a subscription?" -> DELETE /subscriptions/{subscriptionId}
• "List all imagetags?" -> GET /summaries/imagetags
• "Create a image?" -> POST /images
• "List all images?" -> GET /images
• "Create a image?" -> POST /import/images
• "Get image details?" -> GET /images/{imageDigest}
• "Delete a image?" -> DELETE /images/{imageDigest}
• "Get by_id details?" -> GET /images/by_id/{imageId}
• "Delete a by_id?" -> DELETE /images/by_id/{imageId}
• "List all check?" -> GET /images/{imageDigest}/check
• "List all check?" -> GET /images/by_id/{imageId}/check
• "List all vuln?" -> GET /images/{imageDigest}/vuln
• "Get vuln details?" -> GET /images/{imageDigest}/vuln/{vtype}
• "List all vuln?" -> GET /images/by_id/{imageId}/vuln
• "Get vuln details?" -> GET /images/by_id/{imageId}/vuln/{vtype}
• "List all content?" -> GET /images/{imageDigest}/content
• "List all content?" -> GET /images/by_id/{imageId}/content
• "Get content details?" -> GET /images/{imageDigest}/content/{ctype}
• "List all files?" -> GET /images/{imageDigest}/content/files
• "List all java?" -> GET /images/{imageDigest}/content/java
• "List all malware?" -> GET /images/{imageDigest}/content/malware
• "Get content details?" -> GET /images/by_id/{imageId}/content/{ctype}
• "List all files?" -> GET /images/by_id/{imageId}/content/files
• "List all java?" -> GET /images/by_id/{imageId}/content/java
• "List all retrieved_files?" -> GET /images/{imageDigest}/artifacts/retrieved_files
• "List all file_content_search?" -> GET /images/{imageDigest}/artifacts/file_content_search
• "List all secret_search?" -> GET /images/{imageDigest}/artifacts/secret_search
• "List all metadata?" -> GET /images/{imageDigest}/metadata
• "List all native?" -> GET /images/{imageDigest}/sboms/native
• "Get metadata details?" -> GET /images/{imageDigest}/metadata/{mtype}
• "Create a repository?" -> POST /repositories
• "List all registries?" -> GET /registries
• "Create a registry?" -> POST /registries
• "Get registry details?" -> GET /registries/{registry}
• "Update a registry?" -> PUT /registries/{registry}
• "Delete a registry?" -> DELETE /registries/{registry}
• "List all status?" -> GET /status
• "List all system?" -> GET /system
• "List all feeds?" -> GET /system/feeds
• "Create a feed?" -> POST /system/feeds
• "Update a feed?" -> PUT /system/feeds/{feed}
• "Delete a feed?" -> DELETE /system/feeds/{feed}
• "Update a feed?" -> PUT /system/feeds/{feed}/{group}
• "Delete a feed?" -> DELETE /system/feeds/{feed}/{group}
• "List all services?" -> GET /system/services
• "Get service details?" -> GET /system/services/{servicename}
• "Get service details?" -> GET /system/services/{servicename}/{hostid}
• "Delete a service?" -> DELETE /system/services/{servicename}/{hostid}
• "List all policy_spec?" -> GET /system/policy_spec
• "List all error_codes?" -> GET /system/error_codes
• "List all event_types?" -> GET /event_types
• "List all events?" -> GET /events
• "Get event details?" -> GET /events/{eventId}
• "Delete a event?" -> DELETE /events/{eventId}
• "List all by_vulnerability?" -> GET /query/images/by_vulnerability
• "List all by_package?" -> GET /query/images/by_package
• "List all vulnerabilities?" -> GET /query/vulnerabilities
• "List all accounts?" -> GET /accounts
• "Create a account?" -> POST /accounts
• "Get account details?" -> GET /accounts/{accountname}
• "Delete a account?" -> DELETE /accounts/{accountname}
• "List all users?" -> GET /accounts/{accountname}/users
• "Create a user?" -> POST /accounts/{accountname}/users
• "Delete a user?" -> DELETE /accounts/{accountname}/users/{username}
• "Get user details?" -> GET /accounts/{accountname}/users/{username}
• "List all credentials?" -> GET /accounts/{accountname}/users/{username}/credentials
• "Create a credential?" -> POST /accounts/{accountname}/users/{username}/credentials
• "List all account?" -> GET /account
• "List all user?" -> GET /user
• "List all credentials?" -> GET /user/credentials
• "Create a credential?" -> POST /user/credentials
• "List all archives?" -> GET /archives
• "List all rules?" -> GET /archives/rules
• "Create a rule?" -> POST /archives/rules
• "Get rule details?" -> GET /archives/rules/{ruleId}
• "Delete a rule?" -> DELETE /archives/rules/{ruleId}
• "List all images?" -> GET /archives/images
• "Create a image?" -> POST /archives/images
• "Get image details?" -> GET /archives/images/{imageDigest}
• "Delete a image?" -> DELETE /archives/images/{imageDigest}
• "Create a token?" -> POST /oauth/token
• "Create a test?" -> POST /system/webhooks/{webhook_type}/test
• "Create a image?" -> POST /imports/images
• "List all images?" -> GET /imports/images
• "Get image details?" -> GET /imports/images/{operation_id}
• "Delete a image?" -> DELETE /imports/images/{operation_id}
• "List all packages?" -> GET /imports/images/{operation_id}/packages
• "Create a package?" -> POST /imports/images/{operation_id}/packages
• "List all dockerfile?" -> GET /imports/images/{operation_id}/dockerfile
• "Create a dockerfile?" -> POST /imports/images/{operation_id}/dockerfile
• "List all manifest?" -> GET /imports/images/{operation_id}/manifest
• "Create a manifest?" -> POST /imports/images/{operation_id}/manifest
• "List all parent_manifest?" -> GET /imports/images/{operation_id}/parent_manifest
• "Create a parent_manifest?" -> POST /imports/images/{operation_id}/parent_manifest
• "List all image_config?" -> GET /imports/images/{operation_id}/image_config
• "Create a image_config?" -> POST /imports/images/{operation_id}/image_config
• "How to authenticate?" -> See Auth section

Response Tips

• Check response schemas in references/api-spec.lap for field details
• List endpoints may support pagination; check for limit, offset, or cursor params
• Create/update endpoints typically return the created/updated object

References

• Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP