> ## Documentation Index > Fetch the complete documentation index at: https://docs.cybedefend.com/llms.txt > Use this file to discover all available pages before exploring further. # Get all vulnerabilities of a project for SAST ## OpenAPI ````yaml get /project/{projectId}/results/sast openapi: 3.0.0 info: title: Cybedefend API description: >- CybeDefend is an advanced API for application security analysis. Key features include OAuth 2.0 authentication, user/organization/project management, and REBAC-based permissions. It excels in static, dynamic, and IaC security analyses (SAST, DAST, IaC, etc.). version: '1.0' contact: {} servers: - url: https://api-eu.cybedefend.com description: EU - url: https://api-us.cybedefend.com description: US security: [] tags: [] paths: /project/{projectId}/results/sast: get: tags: - Results & Vulnerabilities summary: Get all vulnerabilities of a project for SAST operationId: ResultController_findAllSast parameters: - name: projectId required: true in: path schema: format: uuid type: string - name: sort required: false in: query description: Sort field schema: type: string enum: - currentState - currentSeverity - currentPriority - language - createdAt - updateAt - name: order required: false in: query description: Sort order schema: enum: - asc - desc type: string - name: severity required: false in: query description: >- Filter by severity (repeat the param for multiple values, e.g. severity=critical&severity=high) schema: type: array items: type: string enum: - critical - high - medium - low - name: status required: false in: query description: >- Filter by status (repeat the param, e.g. status=to_verify&status=confirmed) schema: type: array items: type: string enum: - to_verify - resolved - confirmed - ignored - name: priority required: false in: query description: >- Filter by priority (repeat the param, e.g. priority=critical_urgent&priority=urgent) schema: type: array items: type: string enum: - critical_urgent - urgent - normal - low - very_low - name: language required: false in: query description: Programming language schema: type: string - name: pageNumber required: false in: query description: Page number alias schema: minimum: 1 type: number - name: pageSizeNumber required: false in: query description: Page size alias schema: minimum: 1 type: number - name: searchQuery required: false in: query description: Search query alias schema: type: string - name: branch required: false in: query description: Filter by branch name (e.g. main, develop, feature/xyz) schema: type: string - name: hasAutofix required: false in: query description: >- Filter by autofix status: true = only with autofix, false = only without autofix, omit = all schema: type: boolean responses: '200': description: All vulnerabilities of a project content: application/json: schema: type: array items: $ref: '#/components/schemas/GetProjectVulnerabilitiesResponseDto' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ErrorDto' '401': description: Unauthorized content: application/json: schema: example: message: Unauthorized statusCode: 401 timestamp: '2025-02-18T12:31:18.491Z' path: /example/path '403': description: Forbidden content: application/json: schema: example: message: Forbidden statusCode: 403 timestamp: '2025-02-18T12:31:18.491Z' path: /example/path components: schemas: GetProjectVulnerabilitiesResponseDto: type: object properties: projectId: type: string description: Project unique identifier projectName: type: string description: Project name page: type: number description: Current page number minimum: 1 limit: type: number description: Number of items per page minimum: 10 maximum: 25 totalPages: type: number description: Total number of pages sort: type: string description: Field used for sorting enum: - currentState - currentSeverity - currentPriority - language - createdAt - updateAt order: type: string description: Order of sorting enum: - asc - desc severity: type: array description: Filter by severity items: type: string enum: - critical - high - medium - low status: type: array description: Filter by vulnerability status items: type: string enum: - to_verify - resolved - confirmed - ignored language: type: string description: Filter by programming language priority: type: array description: Filter by priority levels items: type: string enum: - critical_urgent - urgent - normal - low - very_low vulnerabilities: description: List of vulnerabilities matching the filters additionalProperties: true type: array items: type: object total: type: number description: Total number of vulnerabilities found scanProjectInfo: description: Information about the ongoing or last scan allOf: - $ref: '#/components/schemas/ScanProjectInfoDto' vulnCountByType: description: Count of vulnerabilities grouped by type (SAST, SCA, IaC) allOf: - $ref: '#/components/schemas/CountVulnerabilitiesCountByType' required: - projectId - projectName - page - limit - totalPages - vulnerabilities - total ErrorDto: type: object properties: timestamp: type: string example: '2025-02-18T12:31:18.491Z' description: Timestamp of the error service: type: string example: AiService description: Name of the service where the error occurred method: type: string example: startConversation description: Method name where the error occurred message: type: string example: Invalid parameters provided description: Error message code: type: number example: 400 description: HTTP status code minimum: 100 maximum: 599 required: - timestamp - service - method - message - code ScanProjectInfoDto: type: object properties: scanId: type: string description: Scan unique identifier state: type: string description: Scan state enum: - queued - running - completed - failed createAt: type: string description: Date when the scan was created format: date-time scanType: type: string description: Type of the scan (optional) required: - scanId - state - createAt CountVulnerabilitiesCountByType: type: object properties: sast: type: number description: Number of SAST vulnerabilities iac: type: number description: Number of IaC vulnerabilities sca: type: number description: Number of SCA vulnerabilities container: type: number description: Number of Container vulnerabilities cicd: type: number description: Number of CICD vulnerabilities secret: type: number description: Number of Secret vulnerabilities required: - sast - iac - sca - container - cicd - secret ````