Start a container image scan
Resolve the tag to a digest and queue a scan. An image whose compressed size is above the scan limit (8 GiB; self-hosted installs can change it with STRIX_CONTAINER_MAX_IMAGE_BYTES) fails with status 400 before Strix queues the scan. One scan per image can be queued or running at a time. Strix returns 409 when a scan is already active. Session callers must hold the admin or analyst role without asset scopes.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
UUID of the container image. Use the id field of an image from listContainerImages.
Body
Tag to resolve and scan. Null scans the tag from the latest scan. If the image has no tag, null scans the digest from the add request.
Platform to scan for multi-platform images, for example linux/amd64. Defaults to the platform stored on the image. A platform that the image index does not have fails with status 400 and the response lists the platforms the image has. An image with one manifest and no index is checked against the platform that its image config declares.