Skip to main content
GET
Export scan findings
Returns every approved finding for a scan in one of three formats. Unlike List scan findings, this endpoint is not paginated; all findings are returned in a single response.
Scope required: read

Request

Path parameters

Query parameters

Response

The Content-Type and Content-Disposition headers depend on the requested format.

format=json

Returns a JSON array of finding objects, each matching the schema described in List findings.

format=csv

Returns a CSV document with one row per finding and a header row. Intended for spreadsheets, BI tools, and ad‑hoc review.

format=sarif

Returns a SARIF 2.1.0 document. SARIF is consumed by GitHub code scanning, Azure DevOps, and most IDE security plugins; use this format to integrate Hacktron findings into existing security tooling.

Errors

  • 400 — missing or invalid format query parameter.
  • 404 — scan not found or not visible to your organization.