ETethiack
findings

List findings

List findings visible to the caller, filtered and paginated.

Scoped to the caller by FindingService; supports filtering by organization, pentest, asset, and CVE. The route only translates transport in/out.

Args: db (AsyncSession): Request-scoped database session. context (ActiveContext): Resolved caller identity and scope. query (FindingListQuery): Filters + pagination query params. pager (Paginator): Fills the response's navigation metadata.

Returns: FindingListResponse: The authorized, filtered finding list.

get/v1/findings/

Request

  • Base URL
    https://api.ethiack.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Query parameters

pageinteger
per_pageinteger

Page size. Values above 500 are clamped to it (or rejected, per REST__PAGINATION__PER_PAGE_OVER_MAX).

organization_idinteger nullable
finding_idinteger nullable
pentest_slugstring nullable
asset_idinteger nullable
cvestring nullable
searchstring nullable
status'draft' | 'open' | 'triaged' | 'invalid' | 'fixed' | 'duplicate' | 'accepted'

Finding lifecycle status.

DRAFT is the author-private pre-submission state: a hacker (or machine) composes the finding as a draft, then submit advances it to OPEN / TRIAGED, at which point it becomes visible to the event's other members. Drafts are only ever seen by their author (and privileged actors).

statusesFindingStatus[] nullable
severity0 | 1 | 2 | 3 | 4 | 5

Finding severity level.

severitiesSeverity[] nullable

Response

Successful Response

totalinteger nullable
pageinteger nullable
per_pageinteger nullable
_linksobject nullable

RFC 8288 rel to URL. Always first; last unless the route opted out of counting; prev and next when applicable.

Changes

No recorded changes to this operation across all 1 revision of this API.