Get Scan Results for a Commit

Retrieves the scan results data associated with a specific commit in a branch of a repository. The scan results provide insights into vulnerabilities, SBOM components, operational risks, secrets, IaC issues, and SAST findings detected at the time of the commit.

If the same commit was scanned multiple times (e.g., by different jobs), the API returns findings from all scans. It does not deduplicate issues across scans.

Requires a user with READ permissions. Since Xray 3.122.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required

The unique identifier of the repository.

string
required

The hash of the commit for which to retrieve scan results.

Query Params
string
required

The name of the branch that contains the commit.

Responses

400

Bad request - invalid parameters.

500

Internal server error.

Language
Credentials
Basic
base64
:
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json