LOlovable
security-governance

Get security scan

Changed on

Plan: Business or higher

Scope: projects:read

Returns a security scan's status, timing, and requested checks. Findings are available from GET /v1/projects/{project_id}/security-scans/{scan_id}/findings.

get/v1/projects/{project_id}/security-scans/{scan_id}

Request

  • Base URL
    https://api.lovable.dev
  • Auth
    • API key in header Lovable-API-Key
    • or HTTP bearer

Path parameters

project_idstring required

Project ID.

Example:prj_01jw3k9m2xq8r5v0c7d4e6f2gh
scan_idstring required

Security scan ID returned by the list endpoint.

Example:a1b2c3d4-e5f6-7890-abcd-ef1234567890

Headers

Lovable-Versionstring

Stable API version to serve, as a YYYY-MM-DD date. Omit for the oldest supported stable version, currently 2026-09-11.

Lovable-Betastring

Comma-separated beta revision strings to enable on top of the stable version.

Response

OK

commit_shastring nullable required

Git commit SHA of the project when the scan started; null when unavailable.

finished_atstring date-time nullable required

When the scan finished, UTC; null while still running.

idstring required

Security scan ID.

requested_scannersstring[] required

Identifiers of the security checks requested for this scan.

started_atstring date-time required

When the scan started, UTC.

status'running' | 'completed' | 'failed' required

Overall scan state. Finishing a scan does not mean that no security issues were found. More values may be added; clients must tolerate unknown values.

Example response

{
  "commit_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8",
  "finished_at": "2026-01-15T09:30:00Z",
  "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "requested_scanners": [
    "agent_security"
  ],
  "started_at": "2026-01-15T09:30:00Z",
  "status": "completed"
}

Changes

  • a83f0776a896Revision changes
    • info

      for the header request parameter Lovable-Version, the format was generalized from date to no format

    • info

      added the non-success response with the status

  • 63e95b862209Revision changes
    • info

      added the non-success response with the status