---
title: "POST /ListCodeReviewJobTasks"
method: POST
path: "/ListCodeReviewJobTasks"
---

# POST /ListCodeReviewJobTasks

`POST /ListCodeReviewJobTasks`

Returns a paginated list of task summaries for the specified code review job, optionally filtered by step name or category.

## Request body

- object
  - `agentSpaceId` string, required — The unique identifier of the agent space.
  - `maxResults` integer — Maximum results for pagination.
  - `codeReviewJobId` string — The unique identifier of the code review job to list tasks for.
  - `stepName` 'PREFLIGHT' | 'STATIC_ANALYSIS' | 'PENTEST' | 'FINALIZING' | 'VALIDATION' — Pentest job step names.
  - `categoryName` string — Filter tasks by category name.
  - `nextToken` string — Pagination token.

## Response `200`

Success

- ListCodeReviewJobTasksOutput — Output for the ListCodeReviewJobTasks operation.
  - `codeReviewJobTaskSummaries` CodeReviewJobTaskSummary[] — The list of code review job task summaries.
    - `taskId` string, required — The unique identifier of the task.
    - `codeReviewId` string — The unique identifier of the code review associated with the task.
    - `codeReviewJobId` string — The unique identifier of the code review job that contains the task.
    - `agentSpaceId` string — The unique identifier of the agent space.
    - `title` string — The title of the task.
    - `riskType` 'CROSS_SITE_SCRIPTING' | 'DEFAULT_CREDENTIALS' | 'INSECURE_DIRECT_OBJECT_REFERENCE' | 'PRIVILEGE_ESCALATION' | 'SERVER_SIDE_TEMPLATE_INJECTION' | 'COMMAND_INJECTION' | 'CODE_INJECTION' | 'SQL_INJECTION' | 'ARBITRARY_FILE_UPLOAD' | 'INSECURE_DESERIALIZATION' | 'LOCAL_FILE_INCLUSION' | 'INFORMATION_DISCLOSURE' | 'PATH_TRAVERSAL' | 'SERVER_SIDE_REQUEST_FORGERY' | 'JSON_WEB_TOKEN_VULNERABILITIES' | 'XML_EXTERNAL_ENTITY' | 'FILE_DELETION' | 'OTHER' | 'GRAPHQL_VULNERABILITIES' | 'BUSINESS_LOGIC_VULNERABILITIES' | 'CRYPTOGRAPHIC_VULNERABILITIES' | 'DENIAL_OF_SERVICE' | 'FILE_ACCESS' | 'FILE_CREATION' | 'DATABASE_MODIFICATION' | 'DATABASE_ACCESS' | 'OUTBOUND_SERVICE_REQUEST' | 'UNKNOWN' — The type of security risk the task is testing for.
    - `executionStatus` 'IN_PROGRESS' | 'ABORTED' | 'COMPLETED' | 'INTERNAL_ERROR' | 'FAILED' — The current execution status of the task.
    - `createdAt` string, date-time — The date and time the task was created, in UTC format.
    - `updatedAt` string, date-time — The date and time the task was last updated, in UTC format.
  - `nextToken` string — A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request. For subsequent calls, use the nextToken value returned from the previous request.

---

[API](https://skmtc.net/aws/apis/securityagent.md) · [All operations](https://skmtc.net/aws/apis/securityagent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityagent/versions/cad56717d636/schema)