Retrieves the vulnerability policy for VM images scanned in your cloud accounts.
A policy consists of ordered rules.

This endpoint maps to the policy table in **Defend > Vulnerabilities > Hosts > VM images** in the Console UI.

### cURL Request

The following cURL command retrieves all rules in the policy.

```bash
$ curl -k \
  -u <USER> \
  -H 'Content-Type: application/json' \
  -X GET \
  'https://<CONSOLE>/api/v<VERSION>/policies/vulnerability/vms?project=<PROJECT>'
```

A successful response returns a list of vulnerability rules in the policy.