Containers

Read image versions before tracking

Read image versions and verify the selected manifest without adding an image or starting a scan. Requires containers:read and an unscoped admin or analyst. Strix uses the stored registry credential on the server. Google Artifact Registry uses the native API when the service account has artifactregistry.versions.list. Native pages contain up to 50 versions, newest first, with one representative tag per version. Use cursor to read older versions. The first native page selects its newest tagged version. Later native pages return selected null. Pull-only custom roles keep the existing Docker-compatible listing without pagination. Other registries use an existing latest tag or a sole tag. Multiple unordered tags return selected null so the caller can choose. Empty repositories also return selected null.

GET

containers

registries

{registryId}

versions

Error

A valid request URL is required to generate request examples

{
  "next_cursor": "<string>",
  "versions": [
    {
      "tag": "<string>",
      "reference": "<string>"
    }
  ],
  "selected": {
    "tag": "<string>",
    "digest": "<string>",
    "platform": "<string>",
    "platforms": [
      "<string>"
    ]
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Authorizations

Authorization

string

header

required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Scopes

containers:read

Path Parameters

registryId

string<uuid>

required

Connected registry ID.

Query Parameters

name

string

required

Repository path without a tag or digest. Google Artifact Registry requires project-id/repository/image.

Maximum string length: 255

platform

string

Requested OCI platform, such as linux/amd64. Omit to select linux/amd64 when available, otherwise the first platform.

cursor

string

The next_cursor from the previous Google Artifact Registry page. Keep the same registry, name, and platform.

Maximum string length: 4096

version

string

Tag or sha256 digest to verify. When set, Strix verifies only this version and returns it as selected, with an empty versions list. Use it to read the platforms of a version that the caller picked.

Maximum string length: 128

Response

Available versions and verified selection. No credentials or image inventory writes.

next_cursor

string | null

required

Cursor for older versions. Null means there are no more pages.

versions

object[]

required

Show child attributes

selected

object | null

required

Show child attributes

Error

A valid request URL is required to generate request examples

{
  "next_cursor": "<string>",
  "versions": [
    {
      "tag": "<string>",
      "reference": "<string>"
    }
  ],
  "selected": {
    "tag": "<string>",
    "digest": "<string>",
    "platform": "<string>",
    "platforms": [
      "<string>"
    ]
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Domains

Analytics

Asset Discovery

Audit

Billing

Chat

CLI

Connectors

Containers

Assets

Test Users

Integrations

Knowledge

License

LLM

Run Logs

Organization

Invitations

Members

PR Reviews

Vulnerabilities

Repositories

Supply Chain

Scans

Schedules

Search

Tokens

Uploads

Webhooks

Workspaces

Read image versions before tracking

Authorizations

Scopes

Path Parameters

Query Parameters

Response