> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hacktron.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get finding

> Fetch a single finding with full triage context.

Returns a single finding along with its triage thread, occurrence count, repository URL, scan type, and a Mermaid diagram of the vulnerability trace when one was produced.

<Info>**Scope required**: `read`</Info>


## OpenAPI

````yaml GET /findings/{id}
openapi: 3.0.0
info:
  title: Hacktron REST API
  description: Public REST API for programmatic access to Hacktron
  version: '1.0'
  contact: {}
servers:
  - url: https://api.hacktron.ai/v1
security:
  - api-key: []
tags: []
paths:
  /findings/{id}:
    get:
      tags:
        - REST API - Findings
      summary: Get finding details
      operationId: RestFindingController_getById
      parameters:
        - name: id
          required: true
          in: path
          schema:
            type: string
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RestFindingDetailResponseDto'
components:
  schemas:
    RestFindingDetailResponseDto:
      type: object
      properties:
        id:
          type: string
          description: Finding UUID
        title:
          type: string
        category:
          type: string
        severity:
          type: string
          enum:
            - critical
            - high
            - medium
            - low
            - info
        state:
          type: string
          enum:
            - open
            - true_positive
            - false_positive
            - accepted_risk
            - resolved
            - closed
        description:
          type: string
        affected_file:
          type: string
        affected_code:
          type: string
        proof_of_concept:
          type: string
          nullable: true
        tags:
          type: array
          items:
            type: string
        scan_id:
          type: string
          nullable: true
        found_at:
          type: string
        updated_at:
          type: string
        resolved_at:
          type: string
          nullable: true
          description: >-
            Timestamp of the most recent transition to resolved (ISO 8601). Null
            if never resolved.
        triage_thread:
          type: array
          items:
            $ref: '#/components/schemas/RestTriageThreadEntryDto'
        taint_path:
          type: array
          items:
            $ref: '#/components/schemas/TaintStepDto'
        occurrence_count:
          type: number
        repo_url:
          type: string
          nullable: true
        scan_type:
          type: string
          nullable: true
      required:
        - id
        - title
        - category
        - severity
        - state
        - description
        - affected_file
        - affected_code
        - proof_of_concept
        - tags
        - scan_id
        - found_at
        - updated_at
        - resolved_at
        - triage_thread
        - taint_path
        - occurrence_count
        - repo_url
        - scan_type
    RestTriageThreadEntryDto:
      type: object
      properties:
        id:
          type: string
        reaction:
          type: string
          nullable: true
        comment:
          type: string
          nullable: true
        user_id:
          type: string
        username:
          type: string
        source:
          type: string
        timestamp:
          type: string
      required:
        - id
        - reaction
        - comment
        - user_id
        - source
        - timestamp
    TaintStepDto:
      type: object
      properties:
        type:
          type: string
          enum:
            - source
            - propagation
            - sink
        file:
          type: string
        line:
          type: number
        end_line:
          type: number
        symbol:
          type: string
        description:
          type: string
        detail:
          type: string
          description: >-
            Raw symbol docstring; supplemental context for the stepped taint
            flow.
        taint_sources:
          type: array
          items:
            type: string
        code:
          type: string
          description: Source code lines for this step's symbol, pre-sliced by the worker.
        code_start_line:
          type: number
          description: >-
            1-based start line number of the `code` slice in the source file.
            Used by the frontend as the anchor for chevron-expand requests to
            GET /findings/:uuid/source.
        code_end_line:
          type: number
          description: >-
            1-based end line number of the `code` slice in the source file. Used
            by the frontend as the anchor for chevron-expand requests to GET
            /findings/:uuid/source.
      required:
        - type
        - file
        - line
        - end_line
        - symbol
        - description
        - taint_sources
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: X-Api-Key

````