> ## Documentation Index > Fetch the complete documentation index at: https://docs.corgea.app/llms.txt > Use this file to discover all available pages before exploring further. # List Code Quality Detections > Retrieve code quality detections separately from security detections. Classification values are code quality labels, such as Maintainability, rather than CWEs. By default, results are ordered by creation time, newest first, with detection ID as a tie-breaker for stable pagination. When no scan ID is supplied, prefers the newest matching processed non-PR scan covering the whole project; falls back to the newest matching scan if none exists. An explicit scan_type filter on /detections or /detections/code-quality instead selects the newest scan of that type. Also served at `/api/v1/issues/code-quality`, this endpoint's earlier name, which stays supported with the same parameters and response. ## OpenAPI ````yaml /api-reference/openapi.json get /detections/code-quality openapi: 3.0.0 info: title: Corgea API version: 1.0.0 description: >- API for interacting with Corgea's scanning and vulnerability management features servers: - url: https://www.corgea.app/api/v1 description: Production server - url: https://eu.corgea.app/api/v1 description: EU production server security: - CorgeaToken: [] - BearerAuth: [] paths: /detections/code-quality: get: tags: - Detections summary: List Code Quality Detections description: >- Retrieve code quality detections separately from security detections. Classification values are code quality labels, such as Maintainability, rather than CWEs. By default, results are ordered by creation time, newest first, with detection ID as a tie-breaker for stable pagination. When no scan ID is supplied, prefers the newest matching processed non-PR scan covering the whole project; falls back to the newest matching scan if none exists. An explicit scan_type filter on /detections or /detections/code-quality instead selects the newest scan of that type. Also served at `/api/v1/issues/code-quality`, this endpoint's earlier name, which stays supported with the same parameters and response. operationId: listCodeQualityIssues parameters: - name: project in: query schema: type: string description: Filter issues by project name - name: repo in: query schema: type: string description: Filter issues by repository URL - name: branch in: query schema: type: string description: Filter issues by branch name - name: classification in: query schema: type: string description: Filter by code quality classification label (partial match) example: Maintainability - name: page in: query schema: type: integer default: 1 - name: page_size in: query schema: type: integer default: 20 maximum: 50 responses: '200': description: Code quality issues retrieved successfully content: application/json: schema: type: object properties: status: type: string example: ok page: type: integer total_pages: type: integer total_issues: type: integer issues: type: array items: $ref: '#/components/schemas/Issue' components: schemas: Issue: type: object properties: finding_id: type: string format: uuid nullable: true description: >- ID of the finding this issue is a detection of: the same across rescans. Null for an issue ingested before findings existed. id: type: string format: uuid classification: type: object nullable: true description: >- When the CWE is unknown or the classification is a free-form label, id and name contain the original classification label and description is null. An empty classification is returned as null. properties: id: type: string example: CWE-123 name: type: string example: Vulnerability Name description: type: string nullable: true urgency: type: string enum: - CR - HI - ME - LO description: 'Urgency code: CR (critical), HI (high), ME (medium), or LO (low).' created_at: type: string format: date-time first_detection_date: type: string format: date-time description: >- When Corgea first detected this issue, across every scan it appeared in. Equals created_at when this is the earliest detection. status: type: string nullable: true enum: - open - fix_in_progress - fixed - false_positive - accepted_risk - duplicate sla_status: type: string nullable: true enum: - overdue - escalated description: >- SLA breach state. null when the issue is neither overdue nor escalated. location: $ref: '#/components/schemas/IssueLocation' auto_triage: $ref: '#/components/schemas/AutoTriage' auto_fix_suggestion: $ref: '#/components/schemas/AutoFixSuggestion' assigned_to: $ref: '#/components/schemas/AssignedTo' reachability: $ref: '#/components/schemas/IssueReachabilitySummary' IssueLocation: type: object properties: file: type: object properties: name: type: string language: type: string path: type: string git_hash: type: string nullable: true description: >- Git hash recorded for the scanned file. Returned only by the endpoints that list issues. project: type: object properties: name: type: string branch: type: string git_sha: type: string line_number: type: integer sink_line_number: type: integer nullable: true description: >- Line of the data-flow sink when the sink is in this file, or null otherwise. Returned only when getting a single issue. AutoTriage: type: object properties: false_positive_detection: type: object properties: status: type: string enum: - valid - false_positive - pending reasoning: description: >- False-positive reasoning when available, including when no fix was generated. type: string nullable: true AutoFixSuggestion: type: object properties: id: type: string format: uuid status: type: string enum: - fix_available - no_fix - generating - false_positive - on_hold - unsupported - plan description: >- Current fix availability. Getting an issue starts eligible missing fix generation in the background by default. While that generation is pending, the status is generating; fetch the issue again until generation finishes. If generation is disabled or no fix is produced, the status is no_fix. patch: type: object properties: diff: type: string description: >- Unified diff format patch. Returns an empty string when the fix has no diff. explanation: type: string description: Explanation of how the fix addresses the vulnerability full_code: type: string description: >- Full source of the file with the fix applied. Returned only when show_full_code is true and a fix exists. AssignedTo: type: object nullable: true description: User assigned to the issue, or null when the issue is unassigned. properties: id: type: string description: Assigned user's ID. email: type: string format: email description: Assigned user's email address. name: type: string nullable: true description: Assigned user's display name, or null when unavailable. IssueReachabilitySummary: type: object description: >- Endpoint reachability summary returned when include_reachability is true. properties: is_reachable: type: boolean endpoint_count: type: integer securitySchemes: CorgeaToken: type: apiKey in: header name: CORGEA-TOKEN description: >- API key for authentication API tokens belonging to inactive users are rejected. BearerAuth: type: http scheme: bearer bearerFormat: JWT description: OAuth2 access token (JWT) in the Authorization header ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.