curl --request GET \
  --url 'https://api.lovable.dev/v1/projects/project-id/security-scans/scan-id/findings' \
  --header 'Lovable-API-Key: lov_your-api-key' \
  --header 'Lovable-Version: 2026-09-11'

{
  "data": [
    {
      "category": "data_exposure",
      "created_at": "2026-01-15T09:30:00Z",
      "description": "A public table has row-level security disabled, exposing all rows to anonymous clients.",
      "id": "b2c3d4e5-f6a7-8901-bcde-f23456789012",
      "level": "error",
      "name": "Row-level security disabled on a public table",
      "scanner_name": "agent_security",
      "status": "open",
      "updated_at": "2026-01-15T09:30:00Z"
    }
  ],
  "pagination": {
    "has_more": true,
    "next_cursor": "eyJ2IjoxLCJpZCI6InByal8wMWp3M2s5In0"
  }
}

{
  "detail": "validation failed",
  "errors": [
    {
      "location": "body.members",
      "message": "expected array length >= 1"
    }
  ],
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 400,
  "title": "Bad Request",
  "type": "invalid_request"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 401,
  "title": "Authorization header required",
  "type": "unauthorized"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 402,
  "title": "You need to upgrade your plan to access this feature",
  "type": "payment_required"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 403,
  "title": "You don't have the permissions to perform this action",
  "type": "forbidden"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 404,
  "title": "Not Found",
  "type": "security_scan_not_found"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 406,
  "title": "This endpoint produces application/json. Send a matching Accept header, */*, or omit the header.",
  "type": "not_acceptable"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 429,
  "title": "Too Many Requests",
  "type": "rate_limited"
}

{
  "detail": null,
  "errors": null,
  "props": null,
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 503,
  "title": "Request timed out",
  "type": "request_timeout"
}

{
  "detail": "validation failed",
  "errors": [
    {
      "location": "body.workspace_id",
      "message": "expected string"
    }
  ],
  "props": {
    "finding_refs": [
      "supabase/finding-1"
    ]
  },
  "request_id": "4bf92f3577b34da6a3ce929d0e0e4736",
  "status": 429,
  "title": "Too Many Requests",
  "type": "rate_limited"
}