Skip to main content
GET
cURL

Authorizations

Lovable-API-Key
string
header
required

Lovable API key. Send its value in the Lovable-API-Key header.

Headers

Lovable-Version
string

Stable API version to serve, as a YYYY-MM-DD date. Omit for the oldest supported stable version, currently 2026-09-11.

Lovable-Beta
string

Comma-separated beta revision strings to enable on top of the stable version.

Path Parameters

project_id
string
required

Project ID.

scan_id
string
required

Security scan ID returned by the list endpoint.

Response

OK

Status and timing of the security scan. Retrieve findings from this scan's paginated findings endpoint.

commit_sha
string | null
required

Git commit SHA of the project when the scan started; null when unavailable.

Example:

"9fceb02d0ae598e95dc970b74767f19372d61af8"

finished_at
string<date-time> | null
required

When the scan finished, UTC; null while still running.

Example:

"2026-01-15T09:30:00Z"

id
string
required

Security scan ID.

Example:

"a1b2c3d4-e5f6-7890-abcd-ef1234567890"

requested_scanners
string[]
required

Identifiers of the security checks requested for this scan.

started_at
string<date-time>
required

When the scan started, UTC.

Example:

"2026-01-15T09:30:00Z"

status
enum<string>
required

Overall scan state. Finishing a scan does not mean that no security issues were found. More values may be added; clients must tolerate unknown values.

Available options:
running,
completed,
failed
Example:

"completed"