---
title: "List findings for advisory"
method: POST
path: "/api/sca/deployments/{deploymentId}/advisories/{advisoryId}/findings"
tags: ["SupplyChain2Service"]
---

# List findings for advisory

`POST /api/sca/deployments/{deploymentId}/advisories/{advisoryId}/findings`

## Request

- The document declares no server URL.
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
- TypeScript: <https://skmtc.dev/semgrep/apis/semgrep-web-app/docs/api/sca/deployments/:deploymentId/advisories/:advisoryId/findings/post.ts> (a function with typed inputs; its response is checked against the schema)

Returns a summary of findings grouped by project and branch for a specific advisory using pagination

## Path parameters

- `deploymentId` string, int64, required: Deployment ID (numeric). Example: `123`. Can be found at `/deployments`, or in your Settings in the web UI.
- `advisoryId` string, required: Advisory identifier to get findings for

## Request body

- ProtosScaV1ListFindingsForAdvisoryRequest
  - `deploymentId` string, int64: Deployment ID (numeric). Example: `123`. Can be found at `/deployments`, or in your Settings in the web UI.
  - `advisoryId` string: Advisory identifier to get findings for
  - `pageSize` integer: Number of projects per page.
  - `cursorFindingCount` integer: Total finding count from the last project of the previous page for cursor-based pagination.
  - `cursorProjectName` string: Project name from the last project of the previous page for cursor-based pagination.

## Response `200`

OK

- ProtosScaV1ListFindingsForAdvisoryResponse
  - `projects` ProtosScaV1ProjectFindingSummary[]: List of projects with their branch-level finding summaries.
    - `projectName` string
    - `totalFindingCount` integer
    - `branchFindings` ProtosScaV1BranchFindingSummary[]
      - `branchName` string
      - `findingCount` integer
  - `hasMore` boolean: True if there are more projects to get.
  - `cursorFindingCount` integer: Total finding count from the last project - pass to next request for pagination.
  - `cursorProjectName` string: Project name from the last project - pass to next request for pagination.
  - `ruleId` string: Database rule ID for constructing findings URLs (integer primary key)

---

[API](https://skmtc.dev/semgrep/apis/semgrep-web-app.md) - [All operations](https://skmtc.dev/semgrep/apis/semgrep-web-app/llms.txt) - [OpenAPI document](https://skmtc.dev/semgrep/apis/semgrep-web-app/revisions/6483eeecd582?raw)