Skip to main content
GET
Export findings as JSON, CSV, or SARIF, optionally filtered by repository
Exports findings across every scan in your organization in one of three formats. This is the organization-wide counterpart to Export scan findings, which is scoped to a single scan. Only findings that have passed automated verification (verification_status = approved) are returned. Use the same filters available on List findings — including severity, state, scan_type, found_since, and found_until — to export exactly the findings you are looking at. Scope the export to one repository with the repo_url filter.
Scope required: read

format=json

Returns a JSON array of finding objects, each matching the schema described in List findings.

format=csv

Returns a CSV document with one row per finding and a header row. Intended for spreadsheets, BI tools, and ad‑hoc review.

format=sarif

Returns a SARIF 2.1.0 document. SARIF is consumed by GitHub code scanning, Azure DevOps, and most IDE security plugins; use this format to integrate Hacktron findings into existing security tooling.

Authorizations

X-Api-Key
string
header
required

Query Parameters

page
number
default:1

The page number to retrieve.

limit
number
default:100

The number of items to retrieve per page.

severity
enum<string>
Available options:
critical,
high,
medium,
low,
info
state
enum<string>
Available options:
open,
true_positive,
false_positive,
accepted_risk,
resolved,
closed
scan_id
string
scan_type
enum<string>

Filter by scan type across all scans associated with the finding.

Available options:
pr,
full
repo_url
string

Filter by exact repository URL.

found_since
string

Only include findings discovered on/after this ISO 8601 timestamp.

found_until
string

Only include findings discovered before this ISO 8601 timestamp.

sort_by
enum<string>
Available options:
found_at,
updated_at,
severity
sort_order
enum<string>
default:DESC
Available options:
ASC,
DESC
format
enum<string>
required

Export format

Available options:
json,
csv,
sarif

Response

200 - undefined