---
title: "Export vulnerabilities as SARIF"
method: GET
path: "/vulnerabilities/sarif"
---

# Export vulnerabilities as SARIF

`GET /vulnerabilities/sarif`

## Request

- Base URL: `https://app.gecko.security/api/v1`
- URL: `https://app.gecko.security/api/v1/vulnerabilities/sarif`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

The vulnerabilities matching the list filters as a SARIF 2.1.0 log, one run per repository, ready for GitHub code scanning. Fixed findings are left out, so uploading the log closes their alerts. Rather than truncate, the request fails with `export_too_large` when the filters match more than 10,000 vulnerabilities.

## Query parameters

- `severity` string
- `status` string
- `type` string
- `cwe` string
- `created_after` string, date-time
- `created_before` string, date-time
- `repository` string
- `scan_id` string, uuid
- `pull_request` integer

## Response `200`

A SARIF 2.1.0 log

## Other responses

- `400`: Invalid filters, or too many matches
- `401`: Authentication error
- `403`: Authorization error
- `404`: Not found
- `429`: Rate limited

---

[API](https://skmtc.dev/gecko/apis/gecko-security-api.md) - [All operations](https://skmtc.dev/gecko/apis/gecko-security-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gecko/apis/gecko-security-api/revisions/9da49dae8b07?raw)