---
title: "List findings for a specific scan"
method: GET
path: "/scans/{id}/findings"
tags: ["REST API - Scans"]
---

# List findings for a specific scan

`GET /scans/{id}/findings`

## Path parameters

- `id` string, required

## Query parameters

- `page` number
- `limit` number
- `severity` 'critical' | 'high' | 'medium' | 'low' | 'info'
- `state` 'open' | 'true_positive' | 'false_positive' | 'accepted_risk' | 'resolved' | 'closed'
- `scan_id` string
- `scan_type` 'pr' | 'full'
- `repo_url` string
- `found_since` string
- `found_until` string
- `sort_by` 'found_at' | 'updated_at' | 'severity'
- `sort_order` 'ASC' | 'DESC'

## Response `200`

- RestFindingListResponseDto
  - `data` RestFindingResponseDto[], required
    - `id` string, required — Finding UUID
    - `title` string, required
    - `category` string, required
    - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info', required
    - `state` 'open' | 'true_positive' | 'false_positive' | 'accepted_risk' | 'resolved' | 'closed', required
    - `description` string, required
    - `affected_file` string, required
    - `affected_code` string, required
    - `proof_of_concept` string, nullable, required
    - `tags` string[], required
    - `scan_id` string, nullable, required
    - `found_at` string, required
    - `updated_at` string, required
    - `resolved_at` string, nullable, required — Timestamp of the most recent transition to resolved (ISO 8601). Null if never resolved.
  - `total` number, required
  - `page` number, required
  - `limit` number, required

---

[API](https://skmtc.dev/hacktron/apis/hacktron-rest-api.md) · [All operations](https://skmtc.dev/hacktron/apis/hacktron-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hacktron/hacktron-rest-api/revisions/6a361244ce2c/schema)