---
updatedAt: 2026-07-26T12:31:37.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# Scan Artifact for Exposures

Triggers an exposures scan for a specific artifact. Only artifacts already scanned by Xray (SCA) can be scanned for exposures. Requires the Manage Xray Metadata permission.

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Xray REST APIs",
    "description": "Combined JFrog Xray REST API specification (all endpoints).",
    "version": "3.140"
  },
  "servers": [
    {
      "url": "https://jf.example.com/xray",
      "description": "JFrog Platform (Xray)"
    }
  ],
  "security": [
    {
      "basicAuth": []
    }
  ],
  "paths": {
    "/api/v1/artifact/exposures/scan": {
      "post": {
        "operationId": "scan-artifact-for-exposures",
        "summary": "Scan Artifact for Exposures",
        "description": "Triggers an exposures scan for a specific artifact. Only artifacts already scanned by Xray (SCA) can be scanned for exposures. Requires the Manage Xray Metadata permission.",
        "tags": [
          "Scanning V1"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "description": "Identifies the artifact and specifies which exposure categories to scan. All three fields are required.\n",
                "required": [
                  "repo",
                  "path",
                  "categories"
                ],
                "properties": {
                  "repo": {
                    "type": "string",
                    "description": "Repository name."
                  },
                  "path": {
                    "type": "string",
                    "description": "Artifact path in the repository."
                  },
                  "categories": {
                    "type": "object",
                    "description": "Map of exposure categories to scan. Set each category to true to include it. Valid categories: secrets, services, applications, iac.\n",
                    "properties": {
                      "secrets": {
                        "type": "boolean"
                      },
                      "services": {
                        "type": "boolean"
                      },
                      "applications": {
                        "type": "boolean"
                      },
                      "iac": {
                        "type": "boolean"
                      }
                    }
                  }
                }
              },
              "example": {
                "repo": "my-repository",
                "path": "path-to/manifest.json",
                "categories": {
                  "secrets": true,
                  "applications": true,
                  "services": false,
                  "iac": false
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Exposures scan started.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "info": {
                      "type": "string",
                      "description": "Status message."
                    }
                  }
                },
                "example": {
                  "info": "Exposures Scan Started"
                }
              }
            }
          },
          "400": {
            "description": "Bad request",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "404": {
            "description": "Not found",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "basicAuth": {
        "type": "http",
        "scheme": "basic",
        "description": "Basic authentication using username/password or API key"
      }
    }
  },
  "tags": [
    {
      "name": "Scanning V1",
      "description": "APIs from Scanning V1"
    }
  ]
}
```