---
title: "POST /BatchGetFindings"
method: POST
path: "/BatchGetFindings"
---

# POST /BatchGetFindings

`POST /BatchGetFindings`

Retrieves information about one or more security findings in an agent space.

## Request body

- object
  - `findingIds` String[], required — The list of finding identifiers to retrieve.
  - `agentSpaceId` string, required — The unique identifier of the agent space that contains the findings.

## Response `200`

Success

- BatchGetFindingsOutput — Output for the BatchGetFindings operation.
  - `findings` Finding[] — The list of findings that were found.
    - `findingId` string, required — The unique identifier of the finding.
    - `agentSpaceId` string, required — The unique identifier of the agent space associated with the finding.
    - `pentestId` string — The unique identifier of the pentest associated with the finding.
    - `pentestJobId` string — The unique identifier of the pentest job that produced the finding.
    - `codeReviewId` string — The unique identifier of the code review associated with the finding.
    - `codeReviewJobId` string — The unique identifier of the code review job that produced the finding.
    - `taskId` string — The unique identifier of the task that produced the finding.
    - `name` string — The name of the finding.
    - `description` string — A description of the finding.
    - `status` 'ACTIVE' | 'RESOLVED' | 'ACCEPTED' | 'FALSE_POSITIVE' — The current status of the finding. Valid values include ACTIVE, RESOLVED, ACCEPTED, and FALSE_POSITIVE.
    - `riskType` string — The type of security risk identified by the finding.
    - `riskLevel` 'UNKNOWN' | 'INFORMATIONAL' | 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' — The risk level of the finding. Valid values include UNKNOWN, INFORMATIONAL, LOW, MEDIUM, HIGH, and CRITICAL.
    - `riskScore` string — The numerical risk score of the finding.
    - `reasoning` string — The reasoning behind the finding, explaining why it was identified as a vulnerability.
    - `confidence` 'FALSE_POSITIVE' | 'UNCONFIRMED' | 'LOW' | 'MEDIUM' | 'HIGH' — The confidence level of the finding. Valid values include FALSE_POSITIVE, UNCONFIRMED, LOW, MEDIUM, and HIGH.
    - `validationStatus` 'CONFIRMED' | 'NOT_REPRODUCED' | 'VALIDATION_FAILED' | 'VALIDATING' | 'NOT_VALIDATED' — The simulated validation status of the finding. Valid values are NOT_VALIDATED, VALIDATING, CONFIRMED, NOT_REPRODUCED, and VALIDATION_FAILED.
    - `attackScript` string — The attack script used to reproduce the finding.
    - `codeRemediationTask` object — The code remediation task associated with the finding, if code remediation was initiated.
      - `status` 'IN_PROGRESS' | 'COMPLETED' | 'FAILED', required — The current status of the code remediation task.
      - `statusReason` string — The reason for the current status of the code remediation task.
      - `taskDetails` CodeRemediationTaskDetails[] — The list of details for the code remediation task, including repository name, code diff link, and pull request link.
        - `repoName` string — The name of the repository where the remediation was applied.
        - `codeDiffLink` string — The link to the code diff for the remediation.
        - `pullRequestLink` string — The link to the pull request created for the remediation.
    - `lastUpdatedBy` string — The identifier of the entity that last updated the finding.
    - `customerNote` string — A customer-provided note on the finding.
    - `codeLocations` CodeLocation[] — The file locations involved in the vulnerability, as reported by the code scanner.
      - `filePath` string, required — The absolute path to the file containing the code location.
      - `lineStart` integer — The starting line number of the code location.
      - `lineEnd` integer — The ending line number of the code location.
      - `label` string — The role of this location in the vulnerability, such as source or sink.
    - `verificationScript` object — The verification script metadata for reproducing the finding, including download URL, instructions, and required environment variables.
      - `scriptType` string — The type of script. Valid values are python and bash.
      - `scriptUrl` string — URL to download the verification script.
      - `instructions` string — Instructions for running the verification script, including prerequisites and how to interpret results.
      - `envVars` VerificationScriptEnvVar[] — The list of environment variables required to run the verification script.
        - `name` string — The name of the environment variable.
        - `value` string — The value of the environment variable.
    - `alignmentRationale` string — The rationale provided by the alignment agent explaining how the finding was adjusted based on customer preferences.
    - `createdAt` string, date-time — The date and time the finding was created, in UTC format.
    - `updatedAt` string, date-time — The date and time the finding was last updated, in UTC format.
  - `notFound` String[] — The list of finding identifiers that were not found.

---

[API](https://skmtc.net/aws/apis/securityagent.md) · [All operations](https://skmtc.net/aws/apis/securityagent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityagent/versions/cad56717d636/schema)