Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Body

application/json
reference
string
required

Image reference in the form name:tag or name@sha256:<digest>.

registry_id
string<uuid> | null

Registry that hosts the image. Null uses the public Docker Hub.

platform
string | null

OCI platform to add, for example linux/amd64. Null selects linux/amd64. A later scan of the image uses this platform if the scan request does not specify a platform.

linked_repository_id
string<uuid> | null

Repository that builds this image. Strix shows the link on the image and uses it for remediation context.

watch_tags
string | null

Tag pattern to watch, for example 1.* or release-*. When set, Strix rescans the image when a matching tag moves to a new digest.

scan
boolean
default:false

Start the first scan when the image is added. Default false.

Response

The image was already tracked.

image
object
required

A tracked container image with counts from its latest completed scan.

created
boolean
required

False when the image was already tracked.

resolved
object
required
scan
object | null
required
scan_error
string | null
required

Reason the first scan did not start. Null when scan is set or the caller disabled the scan.