Download scan results as SARIF 2.1.0

Error

A valid request URL is required to generate request examples

{
  "version": "2.1.0",
  "runs": [
    {}
  ]
}

{
  "error": "Invalid or expired API token"
}

{
  "error": "<string>",
  "code": "<string>",
  "message": "<string>"
}

GET

api

scans

{scanId}

export.sarif

Error

A valid request URL is required to generate request examples

{
  "version": "2.1.0",
  "runs": [
    {}
  ]
}

{
  "error": "Invalid or expired API token"
}

{
  "error": "<string>",
  "code": "<string>",
  "message": "<string>"
}

Authorization

string

header

required

Scoped API token from Settings → API Tokens (scopes: scans:trigger, scans:read).

CF-Access-Client-Id

string

Cloudflare Access service-token client id (ends in .access). Only for CF-Access-fronted deployments; leave blank for self-hosted.

CF-Access-Client-Secret

string

Cloudflare Access service-token secret. Pair it with CF-Access-Client-Id.

scanId

string

required

Scan job ID (must be COMPLETED).

SARIF 2.1.0 log.

SARIF 2.1.0 static-analysis results log. Findings live under runs[].results[]; BreachLens severity is at result.properties.severity.

version

string

Example:

"2.1.0"

runs

object[]