---
title: "Get Security Findings"
method: GET
path: "/snapshots/{snapshot_id}/security-findings"
tags: ["dashboard"]
---

# Get Security Findings

`GET /snapshots/{snapshot_id}/security-findings`

Security findings from the indexer's regex scan.

Read-on-demand from `security_findings.json` per the α decision (no
`security_findings` table on the hosted side). Ordered high → med → low
severity, then by id ascending so the UI ordering is stable across calls.
Returns an empty payload for snapshots indexed before 3C-bis.

## Path parameters

- `snapshot_id` string, required

## Query parameters

- `severity` string, nullable — Filter by severity: 'high' | 'med' | 'low'
- `file_path` string, nullable — Filter to a single file path
- `limit` integer

## Response `200`

Successful Response

- SecurityFindingsResponse
  - `total` integer
  - `findings` SecurityFinding[]
    - `id` integer, required
    - `file_path` string, required
    - `kind` string, required
    - `severity` string, required
    - `snippet` string, nullable
    - `detected_at` string, date-time, required
    - `line_number` integer, nullable
    - `line_verified` boolean
    - `commit_at` string, date-time, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc.dev/repowise/apis/repowise-hosted-api/revisions/98c833b3480d?raw)