# Export project Findings report asynchronously (Dependencies - SCA)

Generates a Dependencies Findings report for the specified project asynchronously. Supported formats: Excel, JSON, XML.

Endpoint: POST /api/v3.0/projects/{projectUuid}/dependencies/reports/findings
Version: 3.0
Security: bearer-key

## Path parameters:

  - `projectUuid` (string, required)
    UUID of the project

## Request fields (application/json):

  - `name` (string)

  - `format` (string)
    Output file format. The Findings report supports excel, json and xml.
    Enum: "excel", "json", "xml"

  - `sendEmailNotification` (boolean)

  - `vulnerabilitiesState` (array)
    Alert states to include. Defaults to [OPEN] when omitted.
    Enum: "OPEN", "IGNORE"

  - `vulnerabilityTypes` (array)
    Filter by one or more vulnerability types. ANY (default) includes all types.
    Enum: "MSC", "CVE", "ANY", "GHSA", "WS", "MAI"

  - `dateRange` (integer)
    Include only vulnerabilities first detected within the last N days. 0 or omitted means no date filter.
    Example: 30

  - `zeroDayIdentifier` (string)
    Scope the report to a specific zero-day event, by event UUID or name.

## Response 200 fields (application/json):

  - `supportToken` (string)
    Example: "1171c60d"

  - `response` (object)

  - `response.uuid` (string)

  - `response.name` (string)

  - `response.scopeUuid` (string)

  - `response.scopeName` (string)

  - `response.subScopes` (array)

  - `response.subScopes.uuid` (string)

  - `response.subScopes.name` (string)

  - `response.subScopes.scopeUuid` (string)

  - `response.subScopes.scopeName` (string)

  - `response.title` (string)

  - `response.reportType` (string)
    Enum: "attribution", "inventory", "vulnerabilities", "securityAlerts", "sbom", "Cbom", "securityAlertsLibrary", "Compliance", "Findings", "Suppressions", "Resolved", "spdx", "spdx_2_3", "cycloneDX", "cycloneDX_1_5", "cycloneDX_1_6", "dueDiligence", "unknown", "imgAttribution", "imgDueDiligence", "imgSpdx", "imgSpdx_2_3", "imgCycloneDX", "imgCycloneDX_1_5", "aiInventory", "aiFindings", "imgCycloneDX_1_6", "risk", "users", "zeroDayCatalog", "activityLog"

  - `response.format` (string)
    Enum: "json", "html", "unknown", "xml", "excel", "yaml", "pdf", "tv", "rdf", "csv", "sarif", "text"

  - `response.scopeType` (string)
    Enum: "organization", "product", "project", "unsupported", "account"

  - `response.scopeUuidList` (array)

  - `response.projectUuids` (array)

  - `response.status` (string)
    Enum: "PENDING", "IN_PROGRESS", "FAILED", "FAILURE", "SUCCESS"

  - `response.createdBy` (string)

  - `response.createdAt` (string)

  - `response.sendEmailNotification` (boolean)

  - `response.labelsUuidList` (array)

  - `response.includeVulnerabilities` (boolean)

  - `response.excludeInactiveProjects` (boolean)

## Response 400 fields (*/*):

  - `supportToken` (string)
    Example: "1171c60d"