COcoderabbit
Bug Scan

List or export Bug Scan findings

Changed on

Returns one repository's Bug Scan findings from its latest completed scan, or from scan_id. Cursor-paginated JSON by default; CSV and SARIF 2.1.0 download every matching finding of the scan (up to 50,000 records and 16 MB). Findings are in the scan's rank order. Each finding carries its fingerprint, severity, category, location, every location it applies to, explanation, the prompt for AI agents, the verifier's account, and its state (open, fixed or dismissed) with the dismiss reason. Requires a non-agentic API key with bug_scan:read permission, and Bug Scan enabled for the organization; other organizations receive 403 BUG_SCAN_NOT_ENABLED.

get/v1/bug-scan/findings

Request

  • Base URL
    https://api.coderabbit.ai
  • Auth
    API key in header x-coderabbitai-api-key

Query parameters

org_idstring

Git-provider organization ID for workspace API keys. Omit for the complete workspace scope.

repo_idstring required

One exact Git-provider repository ID in the authenticated organization scope.

scan_idstring uuid

A completed scan of the repository. Defaults to the latest completed scan.

severity'critical' | 'major' | 'minor' | 'trivial'
limitinteger

JSON page size.

cursorstring

next_cursor from the previous JSON page. A cursor stays on the scan it was issued for.

format'json' | 'csv' | 'sarif'

Response

Paginated JSON or a full-scan download.

next_cursorstring nullable required

Changes