security-governance

Get security scan

Plan: Business or higher

Returns a single security scan invocation with per-scanner run details and findings.

get/v1/projects/{project_id}/security-scans/{scan_id}

Path parameters

project_idstring required

Project ID

scan_idstring required

Scan invocation ID from the list endpoint

Response

Example response

{
  "findings": [
    {
      "category": "data_exposure",
      "created_at": "2026-01-15T09:30:00Z",
      "description": "A public table has row-level security disabled, exposing all rows to anonymous clients.",
      "details": "table: public.profiles; rls_enabled: false",
      "finding_id": "b2c3d4e5-f6a7-8901-bcde-f23456789012",
      "first_seen_scan_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "level": "error",
      "link": "https://docs.lovable.dev/security/rls",
      "name": "Row-level security disabled on a public table",
      "recurrence": 3,
      "remediation_difficulty": "medium",
      "scanner_name": "agent_security",
      "status": "open",
      "updated_at": "2026-01-15T09:30:00Z"
    }
  ],
  "scan": {
    "commit_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8",
    "finished_at": "2026-01-15T09:30:00Z",
    "scan_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "started_at": "2026-01-15T09:30:00Z",
    "status": "completed",
    "trigger_source": "workflow"
  },
  "scanner_runs": [
    {
      "commit_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8",
      "error_message": "Scanner timed out after 300s",
      "finished_at": "2026-01-15T09:30:00Z",
      "scanner_name": "agent_security",
      "scanner_version": "1.4.2",
      "started_at": "2026-01-15T09:30:00Z",
      "status": "failed"
    }
  ]
}

Changes

Changed in 1 of the 8 revisions of this API.1

Aug 29, 2026dee6c65455111See the full diff
- ●
  removed the optional property findings/items/connector_id from the response with the 200 status
  response-optional-property-removed

Full history