---
title: "Get Security Findings"
method: GET
path: "/snapshots/{snapshot_id}/security-findings"
tags: ["dashboard"]
---

# Get Security Findings

`GET /snapshots/{snapshot_id}/security-findings`

Security findings from the indexer's regex scan.

Read-on-demand from `security_findings.json` per the α decision (no
`security_findings` table on the hosted side). Ordered source → test →
docs, then high → med → low severity, then file path, line and id, so the
UI ordering is stable across calls. Returns an empty payload for
snapshots indexed before 3C-bis.

## Path parameters

- `snapshot_id` string, required

## Query parameters

- `severity` string, nullable — Filter by severity: 'high' | 'med' | 'low'
- `file_path` string, nullable — Filter to a single file path
- `scope` 'source' | 'test' | 'docs' | 'all' — Filter by where the file sits: 'source' | 'test' | 'docs' | 'all'
- `limit` integer

## Response `200`

Successful Response

- SecurityFindingsResponse
  - `total` integer
  - `findings` SecurityFinding[]
    - `id` integer, required
    - `file_path` string, required
    - `kind` string, required
    - `severity` string, required
    - `snippet` string, nullable
    - `detected_at` string, date-time, required
    - `line_number` integer, nullable
    - `line_verified` boolean
    - `commit_at` string, date-time, nullable
    - `path_class` 'source' | 'test' | 'docs'
  - `class_counts` object

## Other responses

- `422` — Validation Error

## Changes

- **2026-09-26** `29a9df53f763` — 3 info
  - added the new optional `query` request parameter `scope`
  - added the optional property `class_counts` to the response with the `200` status
  - added the optional property `findings/items/path_class` to the response with the `200` status

[Change history](https://skmtc.dev/repowise/apis/repowise-hosted-api/changes/snapshots/:snapshot_id/security-findings/get.md)

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc.dev/repowise/apis/repowise-hosted-api/revisions/29a9df53f763?raw)