---
title: "Get a scan's audit summary"
method: GET
path: "/v1/scans/{scan_id}/audit"
tags: ["Scans"]
---

# Get a scan's audit summary

`GET /v1/scans/{scan_id}/audit`

⚠️ **Beta endpoint**: behavior and schemas are subject to change.

Return the audit summary for a scan. Always 200 when the scan and its
audit row exist — the summary's `summary_status` tells you whether the
data is final (`done`), still being computed (`pending`), or failed
(`failed`).

## Path parameters

- `scan_id` string, uuid, required

## Response `200`

Scan Audit Summary

- object — ⚠️ **Beta schema**: subject to change. Audit summary for a scan. Always returned with a `summary_status`; while it is `pending`, the count/breakdown fields below may still be null or reflect a partial computation.
  - `summary_status` 'pending' | 'done' | 'failed', required — Whether this summary has finished being computed.
  - `monitoring_type` 'historical' | 'recurrent' | 'realtime', required
  - `duration_seconds` integer, nullable — Duration of the scan, in seconds.
  - `pending_seconds` integer, nullable — Time the scan spent pending before it started, in seconds.
  - `elements_scanned` integer, nullable
  - `elements_skipped` integer, nullable
  - `elements_failed` integer, nullable
  - `data_downloaded_bytes` integer, nullable
  - `data_scanned_bytes` integer, nullable
  - `secrets_by_severity` object, required — Number of secrets found, grouped by severity.
  - `outcome_by_reason` object, required — Per-category breakdown of skipped/failed element counts, grouped by reason. Internal engine/infra failure reasons are never exposed individually — they are collapsed into a single `internal_error` key.
  - `ended_at` string, date-time, required — When the scan ended.
  - `rolled_up_at` string, date-time, nullable — When the rollup completed. Null while summary_status is pending.

## Other responses

- `400` — Invalid data
- `401` — Invalid API key
- `403` — Forbidden
- `404` — Resource not found
- `503` — API under maintenance

---

[API](https://skmtc.net/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.net/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/511b067cdcb1/schema)
