---
title: "Get finding details"
method: GET
path: "/findings/{id}"
tags: ["REST API - Findings"]
---

# Get finding details

`GET /findings/{id}`

## Path parameters

- `id` string, required

## Response `200`

- RestFindingDetailResponseDto
  - `id` string, required — Finding UUID
  - `title` string, required
  - `category` string, required
  - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info', required
  - `state` 'open' | 'true_positive' | 'false_positive' | 'accepted_risk' | 'resolved' | 'closed', required
  - `description` string, required
  - `affected_file` string, required
  - `affected_code` string, required
  - `proof_of_concept` string, nullable, required
  - `tags` string[], required
  - `scan_id` string, nullable, required
  - `found_at` string, required
  - `updated_at` string, required
  - `resolved_at` string, nullable, required — Timestamp of the most recent transition to resolved (ISO 8601). Null if never resolved.
  - `triage_thread` RestTriageThreadEntryDto[], required
    - `id` string, required
    - `reaction` string, nullable, required
    - `comment` string, nullable, required
    - `user_id` string, required
    - `username` string
    - `source` string, required
    - `timestamp` string, required
  - `taint_path` TaintStepDto[], required
    - `type` 'source' | 'propagation' | 'sink', required
    - `file` string, required
    - `line` number, required
    - `end_line` number, required
    - `symbol` string, required
    - `description` string, required
    - `detail` string — Raw symbol docstring; supplemental context for the stepped taint flow.
    - `taint_sources` string[], required
    - `code` string — Source code lines for this step's symbol, pre-sliced by the worker.
    - `code_start_line` number — 1-based start line number of the `code` slice in the source file. Used by the frontend as the anchor for chevron-expand requests to GET /findings/:uuid/source.
    - `code_end_line` number — 1-based end line number of the `code` slice in the source file. Used by the frontend as the anchor for chevron-expand requests to GET /findings/:uuid/source.
  - `occurrence_count` number, required
  - `repo_url` string, nullable, required
  - `scan_type` string, nullable, required

---

[API](https://skmtc.dev/hacktron/apis/hacktron-rest-api.md) · [All operations](https://skmtc.dev/hacktron/apis/hacktron-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hacktron/hacktron-rest-api/revisions/6a361244ce2c/schema)