List Code Scan Findings (Devin API)

List Code Scan Findings

curl --request GET \
  --url https://api.devin.ai/v3/enterprise/code-scans/findings \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.devin.ai/v3/enterprise/code-scans/findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.devin.ai/v3/enterprise/code-scans/findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.devin.ai/v3/enterprise/code-scans/findings"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.devin.ai/v3/enterprise/code-scans/findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "items": [
    {
      "category": "<string>",
      "code_owners": [
        "<string>"
      ],
      "created_at": 123,
      "description": "<string>",
      "finding_id": "<string>",
      "note": "<string>",
      "orchestrator_session_id": "<string>",
      "pr_url": "<string>",
      "recommendation": "<string>",
      "reference_snippets": [
        {
          "commentary": "<string>",
          "end_line": 123,
          "file_path": "<string>",
          "start_line": 123,
          "code": "<string>"
        }
      ],
      "repo_name": "<string>",
      "scan_id": "<string>",
      "session_id": "<string>",
      "severity": "critical",
      "status": "open",
      "title": "<string>",
      "related_finding_ids": [
        "<string>"
      ]
    }
  ],
  "end_cursor": "<string>",
  "has_next_page": false,
  "total": 123
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

GET

enterprise

code-scans

findings

List Code Scan Findings

curl --request GET \
  --url https://api.devin.ai/v3/enterprise/code-scans/findings \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.devin.ai/v3/enterprise/code-scans/findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.devin.ai/v3/enterprise/code-scans/findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.devin.ai/v3/enterprise/code-scans/findings"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.devin.ai/v3/enterprise/code-scans/findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "items": [
    {
      "category": "<string>",
      "code_owners": [
        "<string>"
      ],
      "created_at": 123,
      "description": "<string>",
      "finding_id": "<string>",
      "note": "<string>",
      "orchestrator_session_id": "<string>",
      "pr_url": "<string>",
      "recommendation": "<string>",
      "reference_snippets": [
        {
          "commentary": "<string>",
          "end_line": 123,
          "file_path": "<string>",
          "start_line": 123,
          "code": "<string>"
        }
      ],
      "repo_name": "<string>",
      "scan_id": "<string>",
      "session_id": "<string>",
      "severity": "critical",
      "status": "open",
      "title": "<string>",
      "related_finding_ids": [
        "<string>"
      ]
    }
  ],
  "end_cursor": "<string>",
  "has_next_page": false,
  "total": 123
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

{
  "status": 123,
  "title": "<string>",
  "detail": "<string>",
  "errors": [
    {}
  ],
  "instance": "<string>",
  "type": "about:blank"
}

Permissions

Requires a service user or personal access token with the ViewAccountCodeScans permission at the enterprise level.

Filter by scan_id after a scan started with Start Code Scan reaches completed (see List Code Scans for polling).
To understand what a scan looked for, read the profile it ran with via List Code Scan Profiles and Get Code Scan Profile.
The organization-scoped equivalent is List Code Scan Findings (Organization).
For the end-to-end workflow, see Triggering Code Scans via the Devin API.

Authorizations

Authorization

string

header

required

Service User credential (prefix: cog_)

Query Parameters

after

string | null

first

integer

default:100

Required range: 1 <= x <= 200

scan_id

string | null

Filter to findings produced by this scan.

repo_name

string | null

Filter to findings reported in this repository.

severity

enum<string>[] | null

Filter to findings with any of these severities (critical, high, medium, low).

Available options:

critical,

high,

medium,

low

status

enum<string>[] | null

Filter to findings with any of these statuses (open, dismissed, resolved).

Available options:

open,

dismissed,

resolved

org_ids

string[] | null

Filter to findings in these organizations.

Response

Successful Response

items

CodeScanFindingResponse · object[]

required

Show child attributes

end_cursor

string | null

Cursor to fetch the next page, or None if this is the last page.

has_next_page

boolean

default:false

Whether there are more items available after this page.

total

integer | null

Optional total count (can be omitted for performance).

Getting Started

Concepts

Agent Lifecycle

Context Management

Environment Management

Automation

Integrations

Analytics

Observability

Devin for Security

Infrastructure

Identity & Access

Configuration

Legacy API v1

Legacy API v2

List Code Scan Findings (Devin API)

Permissions

Authorizations

Query Parameters

Response

​Permissions

​Related

Authorizations

Query Parameters

Response

Permissions

Related