Skip to main content
GET
Get an application's code scan findings

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

application_id
string
required

The application's id.

Response

The code scan findings.

semgrep_findings
ApplicationCodeFinding · object[]
required
checkov_findings
ApplicationCodeFinding · object[]
required
dependency_findings
ApplicationVulnerabilityItem · object[]
required
semgrep_summary
object
required

Counts keyed by name, in a stable order.

checkov_summary
object
required

Counts keyed by name, in a stable order.

dependency_summary
object
required

Counts keyed by name, in a stable order.

total_findings
integer
required
scan_source
string | null
required
dependency_scan_source
string | null
required

"trivy" when a pipeline run's filesystem scan of the checkout was read - whether or not it found anything - and nil when no such scan is known: the GitHub Actions artifact fallback has no dependency source, so an empty DependencyFindings there is "not scanned", never "nothing found".

scan_error
string | null
required
scanned_at
string | null
required
semgrep_scan_status
ApplicationScanStatus · object
required
checkov_scan_status
ApplicationScanStatus · object
required
dependency_scan_status
ApplicationScanStatus · object
required
dispositions_unreadable
boolean