# List image scan secrets findings

List the image scan secrets findings

Endpoint: GET /api/v3.0/projects/{projectuuid}/scans/{scanuuid}/images/findings/secrets
Version: 3.0
Security: bearer-key

## Path parameters:

  - `projectuuid` (string, required)
    UUID of the project

  - `scanuuid` (string, required)
    scan UUID

## Query parameters:

  - `cursor` (string)
    Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

  - `limit` (integer)
    Specifies the maximum number of items to be returned in the response.

## Response 200 fields (*/*):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `additionalData.paging` (object)

  - `additionalData.paging.cursor` (integer)
    Example: 5

  - `additionalData.paging.next` (string)
    Example: https://api-saas.mend.io/api/v3.0/projects/<project_uuid>>/images/deployments?cursor=6

  - `additionalData.totalItems` (integer)
    Example: 100

  - `response` (array)

  - `response.category` (string)
    Example: AWS

  - `response.createdAt` (string)
    Example: 2020-01-01T00:00:00Z

  - `response.description` (string)
    Example: AWS Access Key

  - `response.endLine` (integer)
    Example: 35

  - `response.filePath` (string)
    Example: /home/ubuntu/.aws/credentials

  - `response.isFromBaseLayer` (integer)
    Example: 0

  - `response.layerId` (integer)
    Example: 123456

  - `response.layerNumber` (integer)
    Example: 1

  - `response.projectName` (string)

  - `response.ruleId` (string)
    Example: 123456

  - `response.severity` (string)
    Example: HIGH

  - `response.startLine` (integer)
    Example: 15

  - `response.updatedAt` (string)
    Example: 2020-01-01T00:00:00Z

  - `response.uuid` (string)
    Example: c4f93b6d-8236-4d0c-a67b-3978def476a3

  - `supportToken` (string)
    Example: 659C0A4730

## Response 500 fields (*/*):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `response` (array)

  - `supportToken` (string)