---
title: "List vendor findings"
method: GET
path: "/vendors/{vendorId}/findings"
tags: ["Vendors"]
---

# List vendor findings

`GET /vendors/{vendorId}/findings`

Lists a vendor's findings.

## Path parameters

- `vendorId` string, required

## Query parameters

- `pageSize` integer — Controls the maximum number of items returned in one response from the API.
- `pageCursor` string — A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.
- `securityReviewId` string
- `documentId` string

## Response `200`

Ok

- PaginatedResponseVendorFinding
  - `results` object, required
    - `data` VendorFinding[], required
      - `id` string, required — Unique identifier for the finding.
      - `vendorId` string, required — Unique identifier for the vendor.
      - `securityReviewId` string, nullable, required — Unique identifier for a security review.
      - `documentId` string, nullable, required — Unique identifier for a document.
      - `content` string, required — The content of the finding.
      - `riskStatus` 'ACCEPT' | 'REMEDIATE' | 'NONE', required — The status of the finding: - ACCEPT: The finding and its risk has been accepted and no follow up is required. - REMEDIATE: The finding needs to be remediated in some way. - NONE: The finding is not related to an observed risk that needs to be accepted or remediated.
      - `remediation` object, nullable, required — Remediation information about the finding. Will only be populated if riskStatus is set to "REMEDIATE".
        - `state` 'OPEN' | 'CLOSED', required — The current state of a finding remediation: - OPEN: The finding has not been remediated and still needs to be addressed. - CLOSED: The finding has been remediated and no further action is needed.
        - `requirementNotes` string, nullable, required — A string containing the information needed to properly remediate the finding.
    - `pageInfo` PageInfo, required — Provides information about the pagination of a dataset.
      - `endCursor` string, nullable, required — The cursor that points to the end of the current page, or null if there is no such cursor.
      - `hasNextPage` boolean, required — Indicates if there is another page after the current page.
      - `hasPreviousPage` boolean, required — Indicates if there is a page before the current page.
      - `startCursor` string, nullable, required — The cursor that points to the start of the current page, or null if there is no such cursor.

---

[API](https://skmtc.net/vanta/apis/build-integrations.md) · [All operations](https://skmtc.net/vanta/apis/build-integrations/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vanta/build-integrations/versions/6c1f7590538b/schema)