Skip to main content
GET
List or export AI Deep Scan code findings
To install and sign in to the CLI, see Call from the CLI.
In a CSV download, the reachability_call_stack column holds the call stack as a JSON-encoded array. In SARIF, it’s in runs[].results[].properties.reachabilityCallStack. See Export Deep Scan code findings.

Authorizations

x-coderabbitai-api-key
string
header
required

See Authentication for the key types and where to create a key.

Query Parameters

org_id
string

Git-provider organization ID for workspace API keys; mutually exclusive with org_name. Omit both for the complete workspace scope.

org_name
string

GitHub organization login for a workspace API key, matched case-insensitively within that workspace. Supply either org_name or org_id, never both; omit for an organization-bound key.

Pattern: ^[A-Za-z0-9][A-Za-z0-9-]{0,38}$
repo_id
string

One exact Git-provider repository ID. It must belong to the authenticated organization scope; response items expose it as repository_id together with organization and repository names.

scan_id
string<uuid>

Historical scan snapshot. By default each repository uses its latest completed scan.

state
enum<string>
default:open
Available options:
open,
fixed,
dismissed,
all
limit
integer
default:1000

JSON pagination only.

Required range: 1 <= x <= 1000
cursor
string

Opaque next_cursor from the previous JSON response.

format
enum<string>
default:json
Available options:
json,
csv,
sarif

Response

Paginated JSON or a full-inventory download.

data
object[]
required
next_cursor
string | null
required
metadata
object

Present only when this page contains populated LLM-generated description or call-stack text. This is a response-level provenance assertion, not attribution of every finding or field.