src appsec defect list

List the defect groups of the latest scan

Usage

src appsec defect list [flags]

Examples

List findings in the current repository

src appsec defect list

List findings in another repository

src appsec defect list -R owner/repo

Only open and confirmed findings of high or critical severity

src appsec defect list --status OPEN,TRIAGED_TP --severity HIGH --severity CRITICAL

Narrow by rule name and file path substrings

src appsec defect list --type SCA --rule CVE-2025 --file src/

Show more than the default 30 findings

src appsec defect list --limit 100

Flags

Flag	Description
--type string	Engine type, e.g. SECRETS, SCA, SAST, DAST, AI_AUDIT
--status strings	Statuses to keep, e.g. OPEN,TRIAGED_TP (repeatable)
--severity strings	Severities to keep, e.g. HIGH,CRITICAL (repeatable)
--rule string	Substring of the rule name
--file string	Substring of the file path
-L, --limit int	Maximum number of items to return (default "30")

Inherited flags

Flag	Description
--env string	Override Sourcecraft environment (use 'src envs' to list available)
--json string	Output JSON, optionally filtered (--json or --json=field1,field2)
--json-compact string	Output compact JSON, optionally filtered
-R, --repo string	Select another repository using OWNER/REPO format
-V, --verbose	Enable debug logging output

Learn more

Use src appsec defect list <subcommand> --help for more information about a command.