---
title: "Get a list of project findings (Code - SAST)"
method: GET
path: "/api/v3.0/projects/{projectUuid}/code/findings"
tags: ["Findings - Project"]
---

# Get a list of project findings (Code - SAST)

`GET /api/v3.0/projects/{projectUuid}/code/findings`

Get a list of findings for a specified project UUID.
</br>
This endpoint supports paging using <em>cursor</em> and <em>limit</em> parameters described in <i>Parameters</i> section below.

## Path parameters

- `projectUuid` string, required

## Query parameters

- `limit` integer
- `cursor` string

## Response `200`

OK

- DtoMendCursoredResponseArrayDtoFindingV3
  - `additionalData` object
    - `cursor` integer
    - `next` string
  - `response` DtoFindingV3[]
    - `ageRating` number — Between 0 and 10
    - `almIssues` DtoFindingAlmIssues
      - `azure` DtoAzureDevOpsWorkItem
        - `project` string
        - `workItemId` integer
      - `jira` DtoJiraIssue
        - `issueId` string
        - `project` string
      - `jiraPlatform` DtoJiraPlatformIssue
        - `createdBy` string
        - `createdByName` string
        - `createdTime` string
        - `errorMessage` string
        - `internalStatus` string
        - `issueKey` string
        - `issueStatus` string
        - `publicLink` string
    - `appId` string
    - `baseline` boolean
    - `comments` DtoFindingComment[]
      - `body` string
      - `createdBy` string
      - `createdTime` string
    - `confidenceRating` number — Between 0 and 10
    - `correlatedDastFindingUuids` string[]
    - `createdTime` string
    - `dataFlows` DtoDataFlow[]
      - `ageRating` number — Between 0 and 10
      - `confidenceRating` number — Between 0 and 10
      - `createdTime` string
      - `filter` DtoFilter
        - `filterTypes` DtoFilterType[]
          - `code` integer
          - `name` string
        - `isFiltered` boolean
      - `functionCalls` DtoCallStackItem[]
        - `endLine` integer
        - `file` string
        - `kind` string
        - `line` integer
        - `name` string
        - `snippet` string
        - `startLine` integer
      - `id` string
      - `inputFlow` DtoCallStackItem[]
        - `endLine` integer
        - `file` string
        - `kind` string
        - `line` integer
        - `name` string
        - `snippet` string
        - `startLine` integer
      - `inputKind` string
      - `inputSource` string
      - `isNew` boolean
      - `rating` number — Between 0 and 10
      - `sink` string
      - `sinkFile` string
      - `sinkKind` string
      - `sinkLine` integer
      - `sinkSnippet` string
    - `description` string
    - `hasRemediation` boolean
    - `id` string — Uniquely identifies the finding across multiple scans
    - `isNew` boolean
    - `issueStatus` integer
    - `projectId` string
    - `rating` number — Between 0 and 10
    - `refId` string — Uniquely identifies the finding across multiple scans
    - `reviewed` boolean
    - `riskFactors` DtoRiskFactors
      - `endpoints` DtoRiskFactorEndpoint[]
        - `endpoint` string
        - `method` string
      - `hasEndpoints` boolean
      - `isExploitable` boolean
      - `probability` string
    - `scanId` string — Uniquely identifies the scan this finding was loaded from
    - `severity` string
    - `severityRating` number — Between 0 and 10
    - `sharedStep` DtoFindingSharedStep
      - `endLine` integer
      - `file` string
      - `kind` string
      - `line` integer
      - `lineBlame` DtoLineBlame
        - `commitId` string
        - `file` string
        - `line` integer
      - `name` string
      - `snippet` string
      - `startLine` integer
    - `snapshotId` string — Uniquely identifies the finding within a scan, it's equivalent to the pair of <em>id</em> and <em>scanId</em>
    - `suppressed` boolean
    - `suppressedBy` string
    - `suppressionMessage` string — Always empty if suppressed is not set
    - `suppressionRejected` boolean
    - `suppressionRequestComment` string
    - `suppressionRequested` boolean
    - `suppressionTime` string
    - `type` DtoVulnerabilityTypeDefinition
      - `capec` DtoCapecInfo
        - `id` string
        - `title` string
        - `url` string
      - `commonId` string
      - `cwe` DtoCweInfo
        - `id` string
        - `title` string
        - `url` string
      - `description` string
      - `driver` string
      - `engineId` integer
      - `hipaa` DtoHipaaInfo
        - `control` string
        - `title` string
      - `hitrust` DtoHitrustInfo
        - `control` string
        - `title` string
      - `id` integer
      - `language` string
      - `name` string
      - `nist` DtoNistInfo
        - `control` string
        - `priority` string
        - `title` string
        - `url` string
      - `order` integer
      - `owasp` DtoOwaspInfo
        - `index` string
        - `title` string
        - `url` string
      - `owasp2021` DtoOwasp2021Info
        - `index` string
        - `title` string
        - `url` string
      - `pcidss` DtoPcidssInfo
        - `section` string
        - `title` string
      - `recommendations` string[]
      - `references` string[]
      - `sansTop25` DtoSansTop25Info
        - `rank` integer
        - `title` string
      - `sarif` string
      - `sarifLevel` string
      - `severity` string
      - `severityRating` number
    - `workflowViolations` DtoWorkflow[]
      - `name` string
      - `uuid` string
    - `workflowViolationsCount` integer
  - `supportToken` string

## Other responses

- `400` — Invalid query definition
- `403` — Unauthorized
- `500` — Error while processing the request

---

[API](https://skmtc.net/mend/apis/mend-api.md) · [All operations](https://skmtc.net/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mend/mend-api/versions/849dfb157abc/schema)