---
title: "List public secret incidents"
method: GET
path: "/v1/public-incidents/secrets"
tags: ["Public Secret Incidents"]
---

# List public secret incidents

`GET /v1/public-incidents/secrets`

List public secret incidents detected by the GitGuardian dashboard.

## Query parameters

- `cursor` string
- `per_page` integer
- `date_before` string, datetime — Entries found before this date.
- `date_after` string, datetime — Entries found after this date.
- `triggered_at_before` string, datetime — Incidents with triggered_at before this date.
- `triggered_at_after` string, datetime — Incidents with triggered_at after this date.
- `assignee_email` string — Public secret incidents assigned to this email.
- `assignee_id` integer — Public secret incidents assigned to this user id.
- `status` 'IGNORED' | 'TRIGGERED' | 'ASSIGNED' | 'RESOLVED' — Public secret incidents with the following status.
- `severity` 'critical' | 'high' | 'medium' | 'low' | 'info' | 'unknown' — Filter public secret incidents by severity.
- `validity` 'valid' | 'invalid' | 'failed_to_check' | 'no_checker' | 'unknown' — Public secret incident with the following validity.
- `tags` 'SENSITIVE_FILE' | 'TEST_FILE' | 'MINIFIED_FILE' | 'PROD' | 'WHITELISTED' | 'DECODED_BASE64' | 'DECRYPTED' | 'JWT_PROPERTIES' | 'COMPANY_DOMAIN_IN_CONTENT' | 'COMPANY_NAME_IN_CONTENT' | 'FROM_HISTORICAL_SCAN' | 'FROM_SECRET_GRASPER' | 'FROM_EXPLORE' | 'FALSE_POSITIVE' | 'IS_COMPANY_CONTEXT' | 'INTERNALLY_LEAKED' — Public secret incidents with one of the following tags. Use `NONE` if you want to filter incidents with no tags.
- `custom_tags` string — Public secret incidents with one of the following custom tag ids. To retrieve incidents containing several custom tags at once, this query parameter should be used several times to intersect the results.
- `custom_tag_key` string — Public secret incidents with the given custom tag key.
- `custom_tag_value` string — Public secret incidents with the given custom tag value.
- `ordering` 'date' | '-date' | 'resolved_at' | '-resolved_at' | 'ignored_at' | '-ignored_at' | 'risk_score' | '-risk_score'
- `detector_group_name` string — Public secret incidents belonging to the specified detector group.
- `ignorer_id` integer — Public secret incidents ignored by this user id.
- `ignorer_api_token_id` string, uuid — Public secret incidents ignored by this API token id.
- `resolver_id` integer — Public secret incidents resolved by this user id.
- `resolver_api_token_id` string, uuid — Public secret incidents resolved by this API token id.
- `feedback` boolean — Public secret incidents with or without feedback.
- `declarative_secret_status` 'revoked' | 'active' | 'test_credential' | 'false_positive' | 'low_risk' — Public secret incidents with the following declarative secret status.
- `risk_score_min` integer — Incidents with risk score greater than value.
- `risk_score_max` integer — Incidents with risk score lesser than value.

## Headers

- `X-Privacy-Mode` 'true' | 'false'

## Response `200`

Public Secret Incident List

- object[]
  - `id` integer
  - `detector` object
    - `name` string, required
    - `display_name` string, required
    - `nature` string, required
    - `family` string
    - `category` string
    - `detector_group_name` string
    - `detector_group_display_name` string
  - `date` string, date-time
  - `secret_id` integer
  - `secret_hash` string
  - `hmsl_hash` string
  - `occurrences_count` integer
  - `status` 'IGNORED' | 'TRIGGERED' | 'ASSIGNED' | 'RESOLVED'
  - `triggered_at` string, date-time
  - `ignored_at` string, date-time, nullable
  - `ignore_reason` 'test_credential' | 'false_positive' | 'low_risk' | 'invalid' | 'ignore_actor' | 'ignore_secret', nullable — Comma-separated list of the reasons why the incident was ignored.
  - `ignorer_id` integer, nullable
  - `ignorer_api_token_id` string, uuid, nullable
  - `resolved_at` string, date-time, nullable
  - `resolver_id` integer, nullable
  - `resolver_api_token_id` string, uuid, nullable
  - `secret_revoked` boolean
  - `validity` 'valid' | 'invalid' | 'failed_to_check' | 'no_checker' | 'unknown'
  - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info' | 'unknown'
  - `assignee_id` integer, nullable
  - `assignee_email` string, nullable
  - `share_url` string, nullable
  - `feedback_list` object[]
    - `created_at` string, date-time
    - `updated_at` string, date-time
    - `member_id` integer, nullable — Only if the feedback has been provided from the dashboard.
    - `email` string — Feedback author's e-mail address
    - `answers` union[]
      - union
        - object
          - `type` 'boolean' — The value's type for this field.
          - `field_ref` string — The field's unique reference.
          - `field_label` string — The field's name or question.
          - `boolean` boolean — The value provided for this field in the feedback.
        - object
          - `type` 'text' — The value's type for this field.
          - `field_ref` string — The field's unique reference.
          - `field_label` string — The field's name or question.
          - `text` string — The value provided for this field in the feedback.
  - `declarative_secret_status` 'revoked' | 'active' | 'test_credential' | 'false_positive' | 'low_risk'
  - `resolve_reason` 'revoked' | 'dmca_request' | 'source_deleted', nullable — Comma-separated list of the reasons why the incident was resolved.
  - `gitguardian_url` string
  - `tags` string[]
  - `custom_tags` object[]
    - `id` string, uuid
    - `key` string
    - `value` string, nullable
  - `risk_score` integer — Risk score of the incident, from 0 (low) to 100 (critical).
  - `severity_rule_id` integer, nullable — ID of the severity rule that set this incident's severity. Null if severity was not set by a rule or was manually overridden.
  - `incident_name` string — Human-readable name combining detector information
  - `is_vaulted` boolean, nullable — Indicates whether this secret is stored in a vault (NHI observability feature)

## Other responses

- `400` — Invalid data
- `401` — Invalid API key
- `503` — API under maintenance

---

[API](https://skmtc.net/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.net/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/511b067cdcb1/schema)