# List image scan secrets findings

List the image scan secrets findings

Endpoint: GET /api/v3.0/projects/{projectuuid}/scans/{scanuuid}/images/findings/secrets
Version: 3.0
Security: bearer-key

## Path parameters:

  - `projectuuid` (string, required)
    UUID of the project

  - `scanuuid` (string, required)
    scan UUID

## Query parameters:

  - `cursor` (string)
    Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

  - `limit` (integer)
    Specifies the maximum number of items to be returned in the response.

## Response 200 fields (*/*):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `additionalData.paging` (object)

  - `additionalData.paging.cursor` (integer)
    Example: 5

  - `additionalData.paging.next` (string)
    Example: "https://api-saas.mend.io/api/v3.0/projects/<project_uuid>>/images/deployments?cursor=6"

  - `additionalData.totalItems` (integer)
    Example: 100

  - `response` (array)

  - `response.category` (string)
    Example: "AWS"

  - `response.createdAt` (string)
    Example: "2020-01-01T00:00:00Z"

  - `response.description` (string)
    Example: "AWS Access Key"

  - `response.endLine` (integer)
    Example: 35

  - `response.filePath` (string)
    Example: "/home/ubuntu/.aws/credentials"

  - `response.isFromBaseLayer` (integer)

  - `response.layerId` (integer)
    Example: 123456

  - `response.layerNumber` (integer)
    Example: 1

  - `response.projectName` (string)

  - `response.ruleId` (string)
    Example: "123456"

  - `response.severity` (string)
    Example: "HIGH"

  - `response.startLine` (integer)
    Example: 15

  - `response.updatedAt` (string)
    Example: "2020-01-01T00:00:00Z"

  - `response.uuid` (string)
    Example: "c4f93b6d-8236-4d0c-a67b-3978def476a3"

  - `supportToken` (string)
    Example: "659C0A4730"

## Response 500 fields (*/*):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `response` (array)

  - `supportToken` (string)