list_security_sbom_containers
List every container the resource cache says is running on the scoped clusters, init containers included, each joined to the bill of materials of its image or marked absent when the scanner has none for it. This is the tool for "which running containers have no bill of materials" and "what does this workload actually run": absent rows are listed, sorted first, and counted in the inventory block, because a missing bill of materials is a state to act on (SBOM generation off on the cluster, a registry the scanner cannot pull from, a tag rolled since the last scan) - never proof the image is empty. Filter by cluster, namespace, workload (kind and/or name; a bare pod matches its own name) and status. Read-only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number, starting at 1. | |
| sort | No | Sort column: status (absent first), image, container, pod, namespace, workload, cluster_name, components, last_seen_at. | |
| order | No | asc or desc. | |
| search | No | Match image, container, pod, workload or namespace. | |
| status | No | present (image has a bill of materials), absent (it does not) or any. | |
| namespace | No | Only containers in this namespace. | |
| page_size | No | Results per page (default 50). | |
| cluster_id | No | One cluster (UUID); omit for every live cluster of the organisation. | |
| workload_kind | No | Match the resolved workload, its direct owner, or 'pod' for bare pods; case-insensitive. | |
| workload_name | No | Match the resolved workload, its direct owner, or the pod name; case-insensitive. |