---
title: "Export"
method: POST
path: "/api/v2/issues/export"
tags: ["Issues"]
---

# Export

`POST /api/v2/issues/export`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/issues/export`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Export all issues matching the given filters. Returns complete issue data for external processing, including patch status metadata for each issue when remediation data exists.

## Request body

- ExportIssuesInput
  - `repositoryScope` object
    - `tagNames` string[]: Match any of up to 100 exact tag names, case-insensitively. Percent signs and underscores are literal.
    - `branchName` string: Select this exact branch for every matched repository unless repositoryBranches specifies a branch.
  - `searchQuery` string: Free-text filter matched against issue title, vulnerability class, and affected file path. A query that looks like an issue id — hex digits and dashes only, at least 4 hex digits — also matches the issue id as a prefix, so the full UUID, the short 8-character issue id, and any longer prefix all find the issue. Dashes and surrounding whitespace are ignored for id matching.
  - `scoreRange` object
    - `min` number, required
    - `max` number, required
    - `minExclusive` boolean
    - `maxExclusive` boolean
  - `scoreLevels` string[]
  - `severityLevels` string[]
  - `languages` string[]
  - `vulnerabilityClasses` string[]
  - `vulnerabilityClassFilters` object[]
    - `operator` 'equals' | 'contains' | 'startsWith', required
    - `value` string, required
  - `applicationFilters` object[]
    - `repositoryId` string, required
    - `relativePath` string, required
  - `scanId` string
  - `codeScanTypes` string[]
  - `statuses` string[]
  - `detectionTypes` string[]
  - `showOnlyNewIssues` boolean
  - `hasWizExposure` boolean
  - `secretVerified` boolean: Limit to findings whose detected secret was verified live against its provider. Applies to every category.
  - `lane` 'fix_now' | 'next' | 'later' | 'reviewing' | 'patching' | 'resolved' | 'non_exploitable' | 'false_positive' | 'accepted_risk' | 'informational'
  - `boardValidation` 'validated' | 'unvalidated' | 'not_examined'
  - `knownExploited` boolean
  - `kevRansomware` boolean
  - `epssMin` number
  - `dependencyReachability` string[]
  - `hasFix` boolean
  - `dependencyQuery` string
  - `validationStates` string[]
  - `runtimeValidationVerdicts` string[]
  - `reachability` string[]
  - `cvssAttackVectors` string[]: Filter by the canonical CVSS 4.0 attack-vector metric.
  - `cvssAttackComplexities` string[]: Filter by the canonical CVSS 4.0 attack-complexity metric.
  - `cvssPrivilegesRequired` string[]: Filter by the canonical CVSS 4.0 privileges-required metric.
  - `cvssUserInteractions` string[]: Filter by the canonical CVSS 4.0 user-interaction metric.
  - `runtimeValidationSetupRequirements` string[]: Filter by the runtime validation setup classification.
  - `createdAfter` string
  - `createdBefore` string
  - `createdInLastNDays` integer
  - `resolvedAfter` string
  - `resolvedBefore` string
  - `resolvedInLastNDays` integer
  - `sortBy` 'priority' | 'createdAt' | 'score' | 'title' | 'repository' | 'class' | 'file' | 'patch'
  - `sortOrder` 'asc' | 'desc'
  - `issueIds` string[]
  - `excludeScore` number
  - `organizationId` string
  - `repositoryBranches` object[]: A nonempty list limits results to these repository IDs. repositoryScope and excludedRepositoryBranches also apply; a repository in both lists is excluded. Each branchName overrides repositoryScope.branchName for that repository.
    - `repositoryId` string, required
    - `branchName` string
  - `excludedRepositoryBranches` object[]: Exclude these repository IDs, including any also present in repositoryBranches. Exclusion applies to the whole repository; branchName is ignored.
    - `repositoryId` string, required
    - `branchName` string
  - `projectId` string
  - `exportFilterOverrides` object
    - `scoreLevels` string[]
    - `severityLevels` string[]
    - `statuses` string[]
    - `detectionTypes` string[]
  - `sarifOptions` object
    - `includePreconditions` boolean
    - `includeExploitWalkthrough` boolean

## Response `200`

Exported issues with complete data

- IssuesExportResponse
  - `items` object[], required
    - `id` string, required
    - `issueStatus` 'PENDING_REVIEW' | 'REVIEWING' | 'PATCHING' | 'NON_EXPLOITABLE' | 'FALSE_POSITIVE' | 'ACCEPTED_RISK' | 'RESOLVED' | 'BACKLOG' | 'INFORMATIONAL', required
    - `generatedTitle` string, required
    - `generatedDescription` string, required
    - `vulnClass` string, required
    - `vulnImpact` string, nullable, required
    - `vulnCategory` string, nullable, required
    - `affectedFile` string, required
    - `language` string, nullable, required
    - `sastCodeSegment` string, nullable, required
    - `startLine` number, nullable, required
    - `endLine` number, nullable, required
    - `cwes` string[], required
    - `severity` number, nullable, required
    - `confidence` number, nullable, required
    - `score` number, nullable, required
    - `validated` 'CONFIRMED' | 'DISCONFIRMED' | 'UNKNOWN', nullable, required
    - `validationSecurityAssessment` string, nullable, required
    - `discoveryTool` string, nullable, required
    - `archivedAt` string, nullable, required
    - `silencedAt` string, nullable, required
    - `falsePositiveAt` string, nullable, required
    - `noLongerDetectedAt` string, nullable, required
    - `unpatchable` boolean, nullable, required
    - `vulnerabilityPatch` object, nullable, required
      - `pullRequestStatus` 'PENDING' | 'ACCEPTED' | 'DENIED', required
    - `createdAt` string, required
    - `updatedAt` string, required
    - `repositoryId` string, required
    - `repositoryName` string, required
    - `issueCodeRange` object, nullable, required
      - `startLine` number, required
      - `endLine` number, required
      - `snippet` string, required
      - `snippetStart` number, required
      - `snippetEnd` number, required
    - `tickets` object[], required
      - `provider` 'jira' | 'linear', required
      - `key` string, required
      - `url` string, nullable, required
    - `attackSteps` string[]
    - `preconditions` object[]
      - `condition` string, required
      - `evidence` string, nullable

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)