---
updatedAt: 2026-07-26T12:14:49.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# Check if image(s) by SHA256 are running in runtime

Returns whether image(s) with the given SHA256(s) are currently running 
in any monitored cluster. Used for Xray policy integration.

Supports both single SHA256 and batch queries:
- Single: { "sha256": "abc123..." }
- Batch: { "sha256List": ["abc123...", "def456..."] }

Note: If both sha256 and sha256List are provided, sha256List takes precedence.


# OpenAPI definition

```json
{
  "openapi": "3.0.2",
  "info": {
    "title": "Runtime Security RESTful API",
    "version": "1.0.0",
    "description": "This document describes the Runtime Security RESTful API.<br/>\nAt the moment these API Endpoints can only be used internally,<br/>\nby the Runtime Frontend and other JPD services.\n"
  },
  "servers": [
    {
      "url": "http://localhost:9999/v1",
      "description": "localhost"
    },
    {
      "url": "http://demo-runtime.jfrog.net/v1",
      "description": "demo"
    }
  ],
  "tags": [
    {
      "name": "Runtime Status",
      "description": "Artifact, image, application version, and repository runtime status checks."
    }
  ],
  "paths": {
    "/images/running": {
      "post": {
        "tags": [
          "Runtime Status"
        ],
        "summary": "Check if image(s) by SHA256 are running in runtime",
        "description": "Returns whether image(s) with the given SHA256(s) are currently running \nin any monitored cluster. Used for Xray policy integration.\n\nSupports both single SHA256 and batch queries:\n- Single: { \"sha256\": \"abc123...\" }\n- Batch: { \"sha256List\": [\"abc123...\", \"def456...\"] }\n\nNote: If both sha256 and sha256List are provided, sha256List takes precedence.\n",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "sha256": {
                    "type": "string",
                    "description": "Single SHA256 digest of the image (without sha256: prefix)",
                    "example": "2034fb44bb6544546a7c6a2647a0a92b84646224cbd836637d2954d2fc237e47"
                  },
                  "sha256List": {
                    "type": "array",
                    "description": "List of SHA256 digests for batch queries (max 100)",
                    "maxItems": 100,
                    "items": {
                      "type": "string"
                    },
                    "example": [
                      "2034fb44bb6544546a7c6a2647a0a92b84646224cbd836637d2954d2fc237e47",
                      "abc123def456789012345678901234567890123456789012345678901234"
                    ]
                  },
                  "timePeriod": {
                    "description": "Optional time period filter (default is \"now\" for currently running)",
                    "$ref": "#/components/schemas/TimePeriodEnum"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "$ref": "#/components/responses/ImageRunningStatusResponse"
          },
          "400": {
            "description": "Bad Request - Invalid SHA256 or time period",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "Error": {
        "type": "object",
        "properties": {
          "message": {
            "type": "string",
            "description": "Error message."
          }
        },
        "required": [
          "message"
        ]
      },
      "TimePeriodEnum": {
        "type": "string",
        "enum": [
          "now",
          "1 hour",
          "24 hours",
          "3 days",
          "7 days",
          "10 days",
          "30 days"
        ]
      }
    },
    "responses": {
      "ImageRunningStatusResponse": {
        "description": "Image running status response (single or batch)",
        "content": {
          "application/json": {
            "schema": {
              "type": "object",
              "properties": {
                "sha256": {
                  "type": "string",
                  "description": "The SHA256 digest that was queried (single query only)"
                },
                "isRunning": {
                  "type": "boolean",
                  "description": "Whether the image is currently running (single query only)"
                },
                "lastSeen": {
                  "type": "string",
                  "format": "date-time",
                  "description": "Last time the image was seen running (single query only, present if isRunning is true)"
                },
                "results": {
                  "type": "array",
                  "description": "Array of results for batch queries",
                  "items": {
                    "type": "object",
                    "required": [
                      "sha256",
                      "isRunning"
                    ],
                    "properties": {
                      "sha256": {
                        "type": "string",
                        "description": "The SHA256 digest"
                      },
                      "isRunning": {
                        "type": "boolean",
                        "description": "Whether the image is currently running"
                      },
                      "lastSeen": {
                        "type": "string",
                        "format": "date-time",
                        "description": "Last time the image was seen running (present if isRunning is true)"
                      }
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}
```