---
title: "Lists scan results for a specific repository."
method: GET
path: "/vulnerabilities/{owner}/{repo}/"
tags: ["vulnerabilities"]
---

# Lists scan results for a specific repository.

`GET /vulnerabilities/{owner}/{repo}/`

Lists scan results for a specific repository.

## Query parameters

- `page` integer
- `page_size` integer

## Response `200`

OK

- VulnerabilityScanResultsList[]
  - `created_at` string, date-time — The time this scan result was stored.
  - `has_vulnerabilities` boolean — Do the results contain any known vulnerabilities?
  - `identifier` string, required
  - `max_severity` 'Unknown' | 'Low' | 'Medium' | 'High' | 'Critical'
  - `num_vulnerabilities` integer
  - `package` PackageVulnerability, required
    - `identifier` string, required
    - `name` string, nullable — The name of this package.
    - `url` string, uri, nullable
    - `version` string, nullable — The raw version for this package.
  - `scan_id` integer, nullable, required — Deprecated (23-05-15): Please use 'identifier' instead. Previously: A monotonically increasing number that identified a scan within a repository.

## Other responses

- `400` — Request could not be processed (see detail).
- `422` — Missing or invalid parameters (see detail).

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api-v1/revisions/4d7879df9b2f/schema)