Get a list of findings

get

https://api.jit.io/findings/

Get a list of findings with optional filtering and sorting. This endpoint supports retrieving findings as a list or generating a URL for CSV export

Requires the following permission:
jit.findings.read

Query Params

filters

string

JSON string of filters to apply. Supports filtering by severity, status, resolution, asset_type, and other finding attributes. Also supports search_query for searching by ID, CVE, CWE, or finding name. Example: {'severity': ['HIGH', 'CRITICAL'], 'status': 'OPEN', 'search_query': 'CVE-2023-1234'}

search_query

string

Search query to find findings by ID, CVE, CWE, or finding name. Uses MongoDB Atlas Search for fast, relevant results. Example: 'CVE-2023-1234', 'CWE-79', 'SQL injection'

sort_desc

boolean

Sort order for findings. True for descending (newest first), False for ascending (oldest first). Default is True

page_limit

integer

Number of findings to return per page. Must be between 1 and 100. Default is 20

next_page_key

string

Pagination token for retrieving the next page of results. Obtained from the previous response

format

string

Response format. Set to 'csv' to get a pre-signed URL for CSV download. Default is JSON list format

Responses

200Findings retrieved successfully. Returns either a paginated list of findings or a pre-signed URL for CSV download, depending on the request parameters

400Invalid request parameters: malformed filters JSON, invalid sort_desc value, invalid page_limit (must be between 1 and 100), or invalid next_page_key

401Unauthorized

403Insufficient permissions to access findings

500Internal server error occurred while processing the request