> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hacktron.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Export scan findings

> Download all findings for a scan as JSON, CSV, or SARIF.

Returns every approved finding for a scan in one of three formats. Unlike [List scan findings](/api-reference/scans/list-scan-findings), this endpoint is **not paginated**; all findings are returned in a single response.

<Info>**Scope required**: `read`</Info>

### `format=json`

```http theme={null}
Content-Type: application/json; charset=utf-8
```

Returns a JSON array of finding objects, each matching the schema described in [List findings](/api-reference/findings/list-findings#response-data).

### `format=csv`

```http theme={null}
Content-Type: text/csv; charset=utf-8
Content-Disposition: attachment; filename="findings-<scanId>.csv"
```

Returns a CSV document with one row per finding and a header row. Intended for spreadsheets, BI tools, and ad‑hoc review.

### `format=sarif`

```http theme={null}
Content-Type: application/sarif+json; charset=utf-8
Content-Disposition: attachment; filename="findings-<scanId>.sarif"
```

Returns a [SARIF 2.1.0](https://sarifweb.azurewebsites.net/) document. SARIF is consumed by GitHub code scanning, Azure DevOps, and most IDE security plugins; use this format to integrate Hacktron findings into existing security tooling.


## OpenAPI

````yaml GET /scans/{id}/findings/export
openapi: 3.0.0
info:
  title: Hacktron REST API
  description: Public REST API for programmatic access to Hacktron
  version: '1.0'
  contact: {}
servers:
  - url: https://api.hacktron.ai/v1
security:
  - api-key: []
tags: []
paths:
  /scans/{id}/findings/export:
    get:
      tags:
        - REST API - Scans
      summary: Export findings for a scan
      operationId: RestScanController_exportFindings
      parameters:
        - name: id
          required: true
          in: path
          schema:
            type: string
        - name: format
          required: true
          in: query
          description: Export format
          schema:
            type: string
            enum:
              - json
              - csv
              - sarif
      responses:
        '200':
          description: ''
components:
  securitySchemes:
    api-key:
      type: apiKey
      in: header
      name: X-Api-Key

````