---
title: "Get project security findings (Dependencies - SCA)"
method: GET
path: "/api/v3.0/projects/{projectUuid}/dependencies/findings/security"
tags: ["Findings - Project"]
---

# Get project security findings (Dependencies - SCA)

`GET /api/v3.0/projects/{projectUuid}/dependencies/findings/security`

Returns all security findings for a given project

## Path parameters

- `projectUuid` string, required

## Query parameters

- `limit` string
- `cursor` string

## Response `200`

OK

- DWRResponsePageableV3CollectionSecurityFindingDTOV3
  - `additionalData` object — + **totalItems**: The total count of data points returned in an API response.
  - `supportToken` string
  - `response` SecurityFindingDTOV3[]
    - `uuid` string
    - `name` string — Identifier of the finding, changes based on finding type
    - `type` 'SECURITY_VULNERABILITY'
    - `findingInfo` FindingInfoDTOV3
      - `findingStatus` 'UNREVIEWED' | 'IN_REVIEW' | 'SUPPRESSED' | 'ISSUE_CREATED' | 'REMEDIATED'
      - `status` 'ACTIVE' | 'IGNORED' | 'LIBRARY_REMOVED' | 'LIBRARY_IN_HOUSE' | 'LIBRARY_WHITELIST'
      - `comment` UserCommentDTO
        - `comment` string
        - `date` string, date-time
        - `userEmail` string
        - `username` string
      - `detectedAt` string, date-time
      - `modifiedAt` string, date-time
    - `project` ProjectDTOV3 — Project information
      - `uuid` string
      - `name` string
      - `path` string
      - `applicationName` string
      - `applicationUuid` string
    - `application` ApplicationDTOV3
      - `uuid` string
      - `name` string
    - `component` union
      - object
        - `uuid` string
        - `name` string
        - `description` string
        - `componentType` 'Library'
        - `libraryType` string
        - `language` string
        - `directDependency` boolean
        - `rootLibrary` boolean
        - `references` ComponentReferencesDTO
          - `url` string
          - `homePage` string
          - `downloadLink` string
          - `issueUrl` string
          - `pomUrl` string
          - `scmUrl` string
          - `genericPackageIndex` string
          - `nugetGallery` string
          - `tags` string
          - `copyright` string
          - `hasNotice` boolean
        - `groupId` string
        - `artifactId` string
        - `version` string
        - `path` string
        - `dependencyFile` string
        - `localPath` string
        - `dependencyType` string
        - `libraryLocations` LibraryLocationDTO[]
          - `localPath` string
          - `dependencyFile` string
      - object
        - `uuid` string
        - `name` string
        - `description` string
        - `componentType` 'Source File'
        - `libraryType` string
        - `language` string
        - `directDependency` boolean
        - `rootLibrary` boolean
        - `references` ComponentReferencesDTO
          - `url` string
          - `homePage` string
          - `downloadLink` string
          - `issueUrl` string
          - `pomUrl` string
          - `scmUrl` string
          - `genericPackageIndex` string
          - `nugetGallery` string
          - `tags` string
          - `copyright` string
          - `hasNotice` boolean
        - `groupId` string
        - `artifactId` string
        - `version` string
        - `path` string
        - `dependencyFile` string
        - `localPath` string
        - `dependencyType` string
        - `libraryLocations` LibraryLocationDTO[]
          - `localPath` string
          - `dependencyFile` string
        - `sourceFile` string
        - `sourceFileUuid` string
    - `vulnerability` VulnerabilityProfileDTO
      - `name` string
      - `type` 'CVE' | 'WS'
      - `description` string
      - `score` number, float
      - `severity` 'HIGH' | 'MEDIUM' | 'LOW'
      - `publishDate` string, date-time
      - `modifiedDate` string, date-time
      - `vulnerabilityScoring` VulnerabilityScoringDTO[]
        - `score` number, float
        - `severity` 'LOW' | 'HIGH' | 'MEDIUM'
        - `type` 'CVSS_2' | 'CVSS_3'
        - `scoreMetadataVector` string
        - `extraData` object
        - `source` 'NVD' | 'MITRE' | 'MEND' | 'GITHUB' | 'OSV' | 'VENDOR' | 'EUVD'
        - `url` string
        - `converted` boolean
      - `references` VulnerabilityReferenceDTO[]
        - `value` string
        - `source` string
        - `url` string
        - `signature` boolean
        - `advisory` boolean
        - `patch` boolean
      - `effectiveInfo` EffectiveVulnerabilityInfoDTO
        - `referenceCount` integer
        - `shieldValue` integer — RED(15), YELLOW(10), GREY(8), NO_SHIELD(6), GREEN(5)
      - `threatAssessment` ThreatAssessmentDTO
        - `exploitCodeMaturity` 'UNPROVEN' | 'POC_CODE' | 'FUNCTIONAL' | 'HIGH' | 'NOT_DEFINED'
        - `epssPercentage` number, float
    - `topFix` VulnerabilityFixInfoDTO
      - `id` integer
      - `vulnerability` string
      - `type` 'CHANGE_FILES' | 'PATCH' | 'UPGRADE_VERSION'
      - `origin` string
      - `url` string
      - `fixResolution` string
      - `date` string, date-time
      - `message` string
      - `extraData` string
      - `minimalFixVersionFromExtraData` string
      - `minimalAffectedVersionFromExtraData` string
    - `reachability` 'REACHABLE' | 'POTENTIALLY_REACHABLE' | 'UNREACHABLE' | 'REACHABILITY_UNAVAILABLE'
    - `findingIntegration` FindingIntegrationDTO
      - `status` 'SUCCESS' | 'FAILURE' | 'PROCESSING'
      - `issues` IssueTrackerDTO[]
        - `issueStatus` string
        - `url` string
        - `issueTrackerType` string
        - `issueIdentifier` string
    - `threatAssessment` ThreatAssessmentDTO
      - `exploitCodeMaturity` 'UNPROVEN' | 'POC_CODE' | 'FUNCTIONAL' | 'HIGH' | 'NOT_DEFINED'
      - `epssPercentage` number, float
    - `exploitable` boolean
    - `malicious` boolean
    - `scoreMetadataVector` string
    - `violations` integer
    - `workflowUuids` string[]
    - `dependencyContexts` DependencyContextDTOV3[]
      - `dependencyType` 'DIRECT' | 'TRANSITIVE'
      - `isDirect` boolean
      - `isTransitive` boolean
      - `directRoots` DirectRootDTOV3[]
        - `rootLibraryUuid` string
        - `rootLibraryName` string
        - `rootLibraryVersion` string

## Other responses

- `400` — Bad Request
- `403` — Forbidden

---

[API](https://skmtc.net/mend/apis/mend-api.md) · [All operations](https://skmtc.net/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mend/mend-api/versions/849dfb157abc/schema)