---
title: "List image scan security findings"
method: GET
path: "/api/v3.0/projects/{projectuuid}/scans/{scanuuid}/images/findings/security"
tags: ["Findings - Scan"]
---

# List image scan security findings

`GET /api/v3.0/projects/{projectuuid}/scans/{scanuuid}/images/findings/security`

## Request

- Base URL: `https://baseUrl`
- URL: `https://baseUrl/api/v3.0/projects/{projectuuid}/scans/{scanuuid}/images/findings/security`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/mend/apis/mend-api/docs/api/v3.0/projects/:projectuuid/scans/:scanuuid/images/findings/security/get.ts> (a function with typed inputs; its response is checked against the schema)

List the image scan security findings

## Path parameters

- `projectuuid` string, required
- `scanuuid` string, required

## Query parameters

- `cursor` string
- `limit` integer

## Response `200`

OK

- object
  - `additionalData` CommonAdditionalData
    - `error` string
    - `paging` CommonPaging
      - `cursor` integer
      - `next` string
    - `totalItems` integer
  - `response` ModelSecurityFindingExternal[]
    - `createdAt` string
    - `cvss` number
    - `cvssDetails` string
    - `description` string
    - `detectionDate` string
    - `epss` number
    - `fixVersion` string
    - `hasFix` boolean
    - `imageName` string
    - `lastModifiedDate` string
    - `packageName` string
    - `packageVersion` string
    - `projectUUID` string
    - `publishedDate` string
    - `reachabilityConfidence` number
    - `reachabilityGraph` string
    - `reachabilityStatus` string
    - `severity` string
    - `uuid` string
    - `vulnerabilityID` string
  - `supportToken` string

## Other responses

- `500`: failed loading image security findings

---

[API](https://skmtc.dev/mend/apis/mend-api.md) - [All operations](https://skmtc.dev/mend/apis/mend-api/llms.txt) - [OpenAPI document](https://skmtc.dev/mend/apis/mend-api/revisions/17de76ee2fb8?raw)