Lists the VM images caught by your policy on a per-rule basis.

To see where Console invokes this endpoint:

* In Console, go to **Defend > Vulnerabilities > Hosts**.
* Select the **VM images** tab.
* In the **Vulnerability rules** section, click **Show** under the **Entities in scope** column for a rule.
* The endpoint is invoked when the pop-up is displayed.

### cURL Request

The following cURL command returns a list of code repositories captured by `<RULE_NAME>`.

```bash
$ curl -k \
  -u <USER> \
  -X GET 'https://<CONSOLE>/api/v<VERSION>/policies/vulnerability/vms?project=<PROJECT_NAME>&ruleName=<RULE_NAME>'
```

A successful response contains a list of impacted repositories by a rule within the context of the policy.