---
title: "Get issue detail"
method: GET
path: "/issues/{issue_id}"
---

# Get issue detail

`GET /issues/{issue_id}`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/issues/{issue_id}`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `issues:read`

Returns the details of a single issue

## Path parameters

- `issue_id` integer, required

## Query parameters

- `include_epss_score` boolean

## Response `200`

An issue

- object
  - `id` integer, required: The issue ID.
  - `group_id` integer, required: The issue group ID.
  - `type` 'open_source' | 'leaked_secret' | 'cloud' | 'iac' | 'sast' | 'surface_monitoring' | 'malware' | 'eol' | 'scm_security' | 'ai_pentest' | 'license', required: The type of issues in this group.
  - `rule` string: The name of the rule that caused this finding (eg 'SQL injection')
  - `attack_surface` 'frontend' | 'backend' | 'docker_container' | 'cloud', required: The attack surface of this issue.
  - `severity_score` integer, required: A number indicating the importance of the vulnerability
  - `severity` 'critical' | 'high' | 'medium' | 'low', required: A human friendly version of the issue's importance
  - `status` 'open' | 'ignored' | 'snoozed' | 'closed', required: The current status of the issue.
  - `affected_package` string: The name of affected open-source package, if any
  - `affected_file` string: The name of affected file, if any
  - `cve_id` string: The CVE ID when it is an open_source issue
  - `cve_id_alias` string: An alternative CVE ID when the issue is related to a AIKIDO CVE. This value will be 'null' if the issue is not related to a AIKIDO CVE.
  - `first_detected_at` integer, required: A timestamp indicating when the issue was first created
  - `code_repo_id` integer: The id of the code repository where this issue was found
  - `code_repo_name` string: The name of code repository where this issue was found
  - `cloud_id` integer: The id of the cloud where this issue was found
  - `cloud_name` string: The name of the cloud where this issue was found
  - `container_repo_id` integer: The id of the container image where this issue was found
  - `container_repo_name` string: The name of the container image where this issue was found
  - `domain_id` integer: The id of the domain where this issue was found
  - `domain_name` string: The name of the domain where this issue was found
  - `virtual_machine_id` integer: The id of the cloud instance where this issue was found
  - `virtual_machine_name` string: The name of the cloud instance where this issue was found
  - `sla_remediate_by` integer: An epoch timestamp in seconds by when this issue should be fixed following the configured SLA for this severity
  - `ignored_at` integer: A timestamp indicating when the issue was ignored. This value will be 'null' if it is not ignored.
  - `closed_at` integer: A timestamp indicating when the issue was closed. This value will be 'null' if it is not closed.
  - `issue_type_metadata` object: An object containing additional information about the issue by the issue type. This value will not always be set.
  - `how_to_fix` string: A string explaining how to fix the issue
  - `reachability_status` 'unknown' | 'reachable' | 'not_reachable': The current status of the issue group.
  - `snooze_until` integer: A timestamp indicating until when the issue will be snoozed. This value will be 'null' if the issue is not snoozed.
  - `snooze_reason` string: The reason why the issue is snoozed.
  - `ignore_reasons` object[]: The reasons why this issue is ignored.
    - `kind` 'manual_ignore' | 'auto_ignore' | 'rule_ignore' | 'api_ignore', required: The kind of ignore that happened. Can be 'manual_ignore', 'auto_ignore', 'rule_ignore' or 'api_ignore'
    - `reason` string, required: The reason describing why the issue is ignored.
  - `epss` string: String representing the EPSS score when include_epss_score is set to true. Value is null when there is no EPSS score available.
  - `programming_language` string: The programming language related to this issue.

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)