Skip to main content
GET
Summarize findings

Authorizations

Authorization
string
header
required

Bearer token for authentication

Query Parameters

project_name
string

Filter by project name

Filter findings by project name

project_version_name
string

Filter by project version name

Filter findings by project version name

finding_type
enum<string>[]

Filter by finding types

Filter by one or more finding types

Available options:
FINDING_TYPE_UNSPECIFIED,
FINDING_TYPE_VULNERABILITY
status
enum<string>[]

Filter by one or more lifecycle statuses. Unset = no filter.

  • FINDING_STATUS_OPEN: OPEN: newly detected finding, not yet triaged or acted upon
  • FINDING_STATUS_IN_PROGRESS: IN_PROGRESS: finding is being investigated or actively remediated
  • FINDING_STATUS_RESOLVED: RESOLVED: finding has been fixed, mitigated, or otherwise closed (see resolution_reason for details)
  • FINDING_STATUS_REJECTED: REJECTED: finding has been dismissed by an operator (e.g. false positive, risk accepted, out of scope)
Available options:
FINDING_STATUS_UNSPECIFIED,
FINDING_STATUS_OPEN,
FINDING_STATUS_IN_PROGRESS,
FINDING_STATUS_RESOLVED,
FINDING_STATUS_REJECTED
artifact_ids
string[]

Filter by artifact IDs (UUID); matches findings linked to any of the given artifacts

component_id
string

Filter findings by associated software component ID (UUID)

Response

A successful response.

Aggregate finding counts for dashboards

total
integer<int32>

Total number of findings matching the request filters

by_effective_assessment_status
object[]

Breakdown by effective assessment status (bucket with status unset = unassessed)

unassessed_by_severity_fixable
Unassessed findings bucketed by severity and fixability · object[]

Unassessed findings bucketed by severity × is_fixable

suggested_actions
object

SuggestedActionCounts are the four scalar counts driving the Suggested Actions card. All counts are restricted to unassessed findings matching the request's status/finding_type filters.

Example:
by_finding_type
Breakdown by finding type (forward-compat for license/secret/misconfig findings) · object[]

Breakdown by finding type

total_exploitable
integer<int32>

Total findings whose linked vulnerability is in the CISA KEV catalog

total_fixable
integer<int32>

Total findings with a fix available

by_severity
Breakdown by severity across all findings (not restricted to unassessed) · object[]

Breakdown by severity across all findings

last_scanned_at
string<date-time>

Most recent last_seen_at timestamp across matching findings