---
title: "Get asynchronous code scan results"
method: POST
path: "/api/v2/async-code-scans/results"
tags: ["Async Code Scans"]
---

# Get asynchronous code scan results

`POST /api/v2/async-code-scans/results`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/async-code-scans/results`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Returns structured vulnerabilities and fixes for completed jobs. Non-completed jobs return a null result, and expired ephemeral results return 410.

## Request body

- AsyncCodeScanJobRequest
  - `jobId` string, uuid, required

## Response `200`

Current job result state

- AsyncCodeScanResultsResponse
  - `jobId` string, uuid, required
  - `status` 'queued' | 'running' | 'completed' | 'failed', required
  - `codeScanId` string, nullable
  - `result` AsyncCodeScanResult, required
    - `vulnerabilities` AsyncCodeScanVulnerability[], required
      - `id` string, uuid, required
      - `title` string, required
      - `description` string, required
      - `file` string, required
      - `startLine` integer, required
      - `endLine` integer, required
      - `vulnerabilityClass` string, required
      - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info', required
      - `confidence` number, required
      - `language` string
      - `cwes` string[], required
      - `codeSegment` string
      - `fix` AsyncCodeScanFix, required
        - `description` string, required
        - `diff` string
  - `error` string, nullable, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `403`: Error Response
- `404`: Error Response
- `410`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)