List SBOMs

GET

/container-registry/registries/:registry_id/security/sboms

GET

/v1/container-registry/registries/:registry_id/security/sboms

# Example request with curl (set IBEE_API_TOKEN to a platform API token and WORKSPACE_ID to the workspace first).
# REGISTRY_ID: Registry ID
curl "https://api.ibee.ai/v1/container-registry/registries/$REGISTRY_ID/security/sboms?workspace_id=$WORKSPACE_ID&repository_name=<repository_name>" \
  -H "Authorization: Bearer $IBEE_API_TOKEN"

{
  "items": [
    {
      "repository_name": "<repository_name>",
      "artifact_digest": "<artifact_digest>",
      "tags": [],
      "status": "GENERATED",
      "artifact_kind": "image",
      "platforms": [],
      "start_time": "2026-10-25T12:00:00Z",
      "end_time": "2026-10-25T12:00:00Z",
      "duration": 1,
      "sbom_digest": "<sbom_digest>",
      "report_id": "<report_id>",
      "scanner": {
        "name": "<name>",
        "vendor": "<vendor>",
        "version": "<version>"
      },
      "format": "SPDX",
      "package_count": 1,
      "platform": {
        "digest": "<digest>",
        "architecture": "<architecture>",
        "os": "<os>",
        "variant": "<variant>"
      }
    }
  ],
  "page_summary": {
    "generated": 1,
    "processing": 1,
    "failed": 1,
    "not_generated": 1,
    "unknown": 1
  },
  "total": 1,
  "page": 1,
  "page_size": 1
}

Lists the SBOMs of one repository, one per image digest. Paged with page and page_size (at most 100). Requires scope: container-registry.read.

# Example request with curl (set IBEE_API_TOKEN to a platform API token and WORKSPACE_ID to the workspace first).
# REGISTRY_ID: Registry ID
curl "https://api.ibee.ai/v1/container-registry/registries/$REGISTRY_ID/security/sboms?workspace_id=$WORKSPACE_ID&repository_name=<repository_name>" \
  -H "Authorization: Bearer $IBEE_API_TOKEN"

Authentication

AuthorizationBearer

IBEE platform API token. Production tokens start with ibee_prod_key_; development tokens start with ibee_dev_key_. Use a token only with its matching gateway environment.

Path parameters

registry_idstringRequiredformat: "uuid"

Registry ID.

Query parameters

workspace_idstringRequiredformat: "^[1-9][0-9]*$">=1 character

The positive numeric workspace ID to scope this request to. Zero, negative, and non-numeric values are rejected.

repository_namestringRequiredformat: "^[a-z0-9]+(?:[._-][a-z0-9]+)*(?:/[a-z0-9]+(?:[._-][a-z0-9]+)*)*$"1-255 characters

Repository name inside the registry, for example api or team/api.

pageintegerOptional>=1Defaults to 1

Page number.

page_sizeintegerOptional1-100Defaults to 20

Number of records per page.

Response

SBOMs returned.

itemslist of objects

Artifacts on this page.

page_summaryobject

SBOM status counts for the items on this page.

totalinteger

Total number of items matching the request.

pageinteger

Page number returned (1-based).

page_sizeinteger

Page size that was applied.

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

409

Conflict Error

422

Unprocessable Entity Error

503

Service Unavailable Error