Export findings as JSON, CSV, or SARIF, optionally filtered by repository
Findings
Export findings
Export findings across all scans as JSON, CSV, or SARIF.
GET
Export findings as JSON, CSV, or SARIF, optionally filtered by repository
Exports findings across every scan in your organization in one of three formats. This is the organization-wide counterpart to Export scan findings, which is scoped to a single scan. Only findings that have passed automated verification (
Returns a JSON array of finding objects, each matching the schema described in List findings.
Returns a CSV document with one row per finding and a header row. Intended for spreadsheets, BI tools, and ad‑hoc review.
Returns a SARIF 2.1.0 document. SARIF is consumed by GitHub code scanning, Azure DevOps, and most IDE security plugins; use this format to integrate Hacktron findings into existing security tooling.
verification_status = approved) are returned.
Use the same filters available on List findings — including severity, state, scan_type, found_since, and found_until — to export exactly the findings you are looking at. Scope the export to one repository with the repo_url filter.
Scope required:
readformat=json
format=csv
format=sarif
Authorizations
Query Parameters
The page number to retrieve.
The number of items to retrieve per page.
Available options:
critical, high, medium, low, info Available options:
open, true_positive, false_positive, accepted_risk, resolved, closed Filter by scan type across all scans associated with the finding.
Available options:
pr, full Filter by exact repository URL.
Only include findings discovered on/after this ISO 8601 timestamp.
Only include findings discovered before this ISO 8601 timestamp.
Available options:
found_at, updated_at, severity Available options:
ASC, DESC Export format
Available options:
json, csv, sarif Response
200 - undefined