LOlovable
security-governance

List security scans

Changed on

Plan: Business or higher

Scope: projects:read

Returns the project's security scans ordered by start time, newest first. Use GET /v1/projects/{project_id}/security-scans/{scan_id}/findings to retrieve findings.

get/v1/projects/{project_id}/security-scans

Request

  • Base URL
    https://api.lovable.dev
  • Auth
    • API key in header Lovable-API-Key
    • or HTTP bearer

Path parameters

project_idstring required

Project ID.

Example:prj_01jw3k9m2xq8r5v0c7d4e6f2gh

Query parameters

limitinteger

Maximum number of items to return per page.

Example:50
cursorstring

Pass pagination.next_cursor from the previous response to fetch the next page. Omit for the first page; keep the same filters and sort order across pages.

Headers

Lovable-Versionstring

Stable API version to serve, as a YYYY-MM-DD date. Omit for the oldest supported stable version, currently 2026-09-11.

Lovable-Betastring

Comma-separated beta revision strings to enable on top of the stable version.

Response

OK

Example response

{
  "data": [
    {
      "commit_sha": "9fceb02d0ae598e95dc970b74767f19372d61af8",
      "finished_at": "2026-01-15T09:30:00Z",
      "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "requested_scanners": [
        "agent_security"
      ],
      "started_at": "2026-01-15T09:30:00Z",
      "status": "completed"
    }
  ],
  "pagination": {
    "has_more": true,
    "next_cursor": "eyJ2IjoxLCJpZCI6InByal8wMWp3M2s5In0"
  }
}

Changes

  • a83f0776a896Revision changes
    • info

      for the header request parameter Lovable-Version, the format was generalized from date to no format

    • info

      added the non-success response with the status

  • 63e95b862209Revision changes
    • info

      added the non-success response with the status