curl --request GET \
  --url https://api.coderabbit.ai/v1/security/findings \
  --header 'x-coderabbitai-api-key: <api-key>'

import requests

url = "https://api.coderabbit.ai/v1/security/findings"

headers = {"x-coderabbitai-api-key": "<api-key>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {'x-coderabbitai-api-key': '<api-key>'}};

fetch('https://api.coderabbit.ai/v1/security/findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "items": [
    {
      "id": "<string>",
      "repoId": "<string>",
      "repoName": "<string>",
      "category": "<string>",
      "severity": "<string>",
      "source": "<string>",
      "reachability": "<string>",
      "exploitability": "<string>",
      "filePath": "<string>",
      "startLine": 123,
      "endLine": 123,
      "description": "<string>",
      "recommendation": "<string>",
      "cwe": "<string>",
      "state": "<string>",
      "detectedAt": "<string>",
      "fingerprint": "<string>",
      "fixStatus": "<string>",
      "fixPrUrl": "<string>",
      "verificationSteps": "<string>",
      "secretAssessment": {
        "policyVersion": "2026-10-01",
        "status": "assessed",
        "classification": "public_config",
        "confidence": "high",
        "environment": "production",
        "impact": "privileged_access",
        "reason": "public_provider_role",
        "missingEvidence": [
          "usage"
        ],
        "scanVerification": "<string>",
        "verificationCheckedAt": "2023-11-07T05:31:56Z",
        "verification": "valid",
        "detectors": [
          "<string>"
        ],
        "relatedLocations": [
          {
            "file": "<string>",
            "startLine": 1,
            "endLine": 1
          }
        ]
      },
      "findingKind": "secret",
      "fixTaskId": "<string>"
    }
  ],
  "total": 123,
  "next_cursor": "<string>"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "forbidden",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "head_changed",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "precondition_failed",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "payload_too_large",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "rate_limit_exceeded",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "internal_error",
    "message": "<string>",
    "retry_after": 1
  }
}

{
  "error": {
    "code": "unavailable",
    "message": "<string>",
    "retry_after": 1
  }
}