List all project vulnerability findings

GET

/api/v4/projects/{id}/vulnerability_findings

• GitLab REST API

Lists all vulnerability findings for a specified project. Responses are paginated and return 20 results by default.

Authorizations

• http
• oauth2

Parameters

Path Parameters

id

required

One of:

string

string

integer

integer

The ID or URL-encoded path of the project

Query Parameters

report_type

Array<string>

nullable

The type of report vulnerability belongs to

scope

string

default: dismissed nullable

Allowed values: all dismissed

Return vulnerabilities for the given scope: dismissed or all

severity

Array<string>

nullable

Returns vulnerabilities belonging to specified severity level: info, unknown, low, medium, high, or critical. Defaults to all

pipeline_id

string

nullable

The ID of the pipeline

page

integer

default: 1 nullable

Current page number

Example

1

per_page

integer

default: 20 nullable

Number of items per page

Example

20

Responses

200

OK

Media type application/json

object

id

string

report_type

string

name

string

severity

string

scanner

object

external_id

string

name

string

vendor

string

is_vulnerability_scanner

string

unverified

string

identifiers

object

external_type

string

external_id

string

name

string

url

string

uuid

string

create_jira_issue_url

string

false_positive

string

create_vulnerability_feedback_issue_path

string

create_vulnerability_feedback_merge_request_path

string

create_vulnerability_feedback_dismissal_path

string

project

object

id

integer

name

string

full_path

string

full_name

string

refs_url

string

forked

boolean

dismissal_feedback

object

id

string

created_at

string

project_id

string

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

comment_details

string

finding_uuid

string

pipeline

string

issue_iid

string

issue_url

string

merge_request_iid

string

merge_request_path

string

category

string

feedback_type

string

branch

string

dismissal_reason

string

issue_feedback

object

id

string

created_at

string

project_id

string

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

comment_details

string

finding_uuid

string

pipeline

string

issue_iid

string

issue_url

string

merge_request_iid

string

merge_request_path

string

category

string

feedback_type

string

branch

string

dismissal_reason

string

merge_request_feedback

object

id

string

created_at

string

project_id

string

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

comment_details

string

finding_uuid

string

pipeline

string

issue_iid

string

issue_url

string

merge_request_iid

string

merge_request_path

string

category

string

feedback_type

string

branch

string

dismissal_reason

string

state_transitions

object

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

comment

string

from_state

string

to_state

string

created_at

string

dismissal_reason

string

issue_links

object

issue_iid

string

issue_url

string

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

created_at

string

link_type

string

external_issue_links

object

external_issue_details

string

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

created_at

string

updated_at

string

merge_request_links

object

merge_request_iid

string

merge_request_path

string

state

string

author

object

id

integer format: int64

username

string

public_email

string

name

string

state

string

locked

boolean

avatar_url

string

avatar_path

string

custom_attributes

Array<object>

object

key

string

value

string

web_url

string

status_tooltip_html

string

show_status

string

availability

string

path

string

applicable_approval_rules

object

id

integer format: int64

name

string

rule_type

string

human

boolean

created_at

string

metadata

string

details

string

state

string

scan

string

blob_path

string

found_by_pipeline

string

ai_resolution_enabled

string

matches_auto_dismiss_policy

string

auto_severity_override

string

Example

{
  "project": {
    "id": 1,
    "name": "GitLab",
    "full_path": "gitlab-org/gitlab",
    "full_name": "GitLab Org / GitLab",
    "forked": true
  },
  "dismissal_feedback": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      }
    }
  },
  "issue_feedback": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      }
    }
  },
  "merge_request_feedback": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      }
    }
  },
  "state_transitions": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      }
    }
  },
  "issue_links": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      }
    }
  },
  "external_issue_links": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      }
    }
  },
  "merge_request_links": {
    "author": {
      "id": 1,
      "username": "admin",
      "public_email": "john@example.com",
      "name": "Administrator",
      "state": "active",
      "avatar_url": "https://gravatar.com/avatar/1",
      "avatar_path": "/user/avatar/28/The-Big-Lebowski-400-400.png",
      "custom_attributes": [
        {
          "key": "foo",
          "value": "bar"
        }
      ],
      "web_url": "https://gitlab.example.com/root",
      "applicable_approval_rules": {
        "id": 1,
        "name": "QA",
        "rule_type": "regular"
      },
      "human": true
    }
  }
}

400

Bad Request

404

Not Found