> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corgea.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Issues for Scan

> Retrieves a list of issues for a specific scan



## OpenAPI

````yaml /api-reference/openapi.json get /scan/{scan_id}/issues
openapi: 3.0.0
info:
  title: Corgea API
  version: 1.0.0
  description: >-
    API for interacting with Corgea's scanning and vulnerability management
    features
servers:
  - url: https://www.corgea.app/api/v1
    description: Production server
security:
  - CorgeaToken: []
  - BearerAuth: []
paths:
  /scan/{scan_id}/issues:
    get:
      tags:
        - Issues
      summary: Get Issues for Scan
      description: Retrieves a list of issues for a specific scan
      operationId: getScanIssues
      parameters:
        - name: scan_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
          description: The ID of the scan
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
          description: The page number for pagination
        - name: page_size
          in: query
          required: false
          schema:
            type: integer
            default: 20
            maximum: 50
          description: The number of results per page
        - name: urgency
          in: query
          required: false
          schema:
            type: string
          description: >-
            Filter by urgency levels (comma-separated). Valid values: CR, HI,
            ME, LO
          example: CR,HI
        - name: status
          in: query
          required: false
          schema:
            type: string
          description: >-
            Filter by status (comma-separated). Valid values: fixed,
            false_positive, accepted_risk, open, fix_in_progress, duplicate
          example: open,fix_in_progress
        - name: show_false_positives
          in: query
          required: false
          schema:
            type: boolean
            default: false
          description: >-
            Include issues marked as false positives (manual or AI). By default
            false positives are excluded.
          example: true
        - name: language
          in: query
          required: false
          schema:
            type: string
          description: Filter by programming language (case-insensitive)
          example: python
        - name: file_path
          in: query
          required: false
          schema:
            type: string
          description: Filter by file path (partial match)
          example: src/auth
        - name: classification
          in: query
          required: false
          schema:
            type: string
          description: Filter by classification/CWE (partial match)
          example: CWE-89
        - name: sla_status
          in: query
          required: false
          schema:
            type: string
          description: >-
            Filter by SLA status (comma-separated). Valid values: overdue,
            escalated
          example: overdue
        - name: sort_by
          in: query
          required: false
          schema:
            type: string
            enum:
              - created_at
              - '-created_at'
              - urgency
              - '-urgency'
              - status
              - '-status'
              - classification
              - '-classification'
          description: Sort results by field (prefix with '-' for descending order)
          example: '-created_at'
      responses:
        '200':
          description: Issues retrieved successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: ok
                  page:
                    type: integer
                  total_pages:
                    type: integer
                  total_issues:
                    type: integer
                  issues:
                    type: array
                    items:
                      $ref: '#/components/schemas/Issue'
        '403':
          description: Permission denied
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Permission denied
        '404':
          description: Scan not found
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    example: error
                  message:
                    type: string
                    example: Scan not found
components:
  schemas:
    Issue:
      type: object
      properties:
        id:
          type: string
          format: uuid
        classification:
          type: object
          properties:
            id:
              type: string
              example: CWE-123
            name:
              type: string
              example: Vulnerability Name
            description:
              type: string
        urgency:
          type: string
          enum:
            - critical
            - high
            - medium
            - low
        created_at:
          type: string
          format: date-time
        status:
          type: string
          enum:
            - open
            - in_progress
            - fixed
            - accepted_risk
            - false_positive
        sla_status:
          type: string
          enum:
            - on_track
            - due
            - overdue
        location:
          $ref: '#/components/schemas/IssueLocation'
        auto_triage:
          $ref: '#/components/schemas/AutoTriage'
        auto_fix_suggestion:
          $ref: '#/components/schemas/AutoFixSuggestion'
        scanner_metadata:
          type: object
          description: Scanner-provided metadata attached to the issue.
          additionalProperties:
            type: string
    IssueLocation:
      type: object
      properties:
        file:
          type: object
          properties:
            name:
              type: string
            language:
              type: string
            path:
              type: string
        project:
          type: object
          properties:
            name:
              type: string
            branch:
              type: string
            git_sha:
              type: string
        line_number:
          type: integer
    AutoTriage:
      type: object
      properties:
        false_positive_detection:
          type: object
          properties:
            status:
              type: string
              enum:
                - valid
                - false_positive
                - pending
            reasoning:
              type: string
    AutoFixSuggestion:
      type: object
      properties:
        id:
          type: string
          format: uuid
        status:
          type: string
          enum:
            - fix_available
            - fix_not_available
            - pending
        patch:
          type: object
          properties:
            diff:
              type: string
              description: Unified diff format patch
            explanation:
              type: string
              description: Explanation of how the fix addresses the vulnerability
  securitySchemes:
    CorgeaToken:
      type: apiKey
      in: header
      name: CORGEA-TOKEN
      description: API key for authentication
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth2 access token (JWT) in the Authorization header

````