Skip to main content
GET
List findings

Authorizations

CORGEA-TOKEN
string
header
required

API key for authentication API tokens belonging to inactive users are rejected.

Query Parameters

issue_type
string

Comma-separated families. Default: every security family the token may view (all but code_quality). Naming a family the token may not view returns 403.

Example:

"sast,dependency"

status
string

Comma-separated statuses.

Example:

"open,fix_in_progress"

urgency
string

Comma-separated urgencies.

Example:

"CR,HI"

project_id
string

Comma-separated project ids.

Example:

"12,15"

project
string

One project name.

repo
string

Substring of the repository URL.

cwe
string

Comma-separated CWE ids, as CWE-79 or 79.

Example:

"CWE-79,CWE-89"

detection_state
enum<string>
default:active

active: the finding has a detection in its project (default). retired: its last detection was deleted with its scan or project. all: both.

Available options:
active,
retired,
all
status_changed_since
string

ISO 8601 datetime, or a date read as midnight UTC. Findings whose triage changed after this instant; use it for incremental sync.

Example:

"2026-10-01T00:00:00Z"

created_since
string

ISO 8601 datetime, or a date read as midnight UTC. Findings first detected after this instant.

Example:

"2026-10-01T00:00:00Z"

assigned_to
integer

One user id.

sort_by
enum<string>
default:-created_at

Sort order. created_at is when the finding was first detected, the instant created_since filters on; it is not in the response, and equals first_detection_date unless the finding's oldest detections were deleted with their scan. Ties break on id.

Available options:
-created_at,
created_at,
urgency,
-urgency,
status,
-status,
status_changed_at,
-status_changed_at
page
integer
default:1

The page number for pagination

page_size
integer
default:20

The number of results per page

Required range: x <= 100

Response

Findings retrieved successfully

status
string
Example:

"ok"

page
integer
total_pages
integer
total_findings
integer
findings
object[]