# Get target finding tags

Proxy ShiftLeft/Qwiet compound finding tags. Resolves polyglot scan and compound from ShiftLeft scan metadata, then streams Qwiet v4 compounds/named/{compound}/finding_tags with polyglot_scan.

Endpoint: GET /sto/api/v2/targets/{id}/finding_tags
Version: 1.0
Security: 

## Query parameters:

  - `accountId` (string, required)
    Harness Account ID
    Example: "abcdef1234567890ghijkl"

  - `orgId` (string, required)
    Harness Organization ID
    Example: "example_org"

  - `projectId` (string, required)
    Harness Project ID
    Example: "example_project"

  - `variantId` (string)
    Optional variant scope
    Example: "xyz987zyx654wvu321tsr9"

  - `executionId` (string)
    Harness Execution ID
    Example: "abcdef1234567890ghijkl"

  - `group_by_key` (string, required)
    Qwiet group_by_key. OWASP years: owasp_category (2017), owasp_2021_category, owasp_2025_category
    Example: "owasp_2021_category"

  - `group_by_category` (boolean)
    When true, also send group_by_key=category to Qwiet (in addition to groupByKey)
    Example: true

  - `omit_empty` (boolean)
    Forwarded to Qwiet omit_empty
    Example: true

  - `finding_type` (string)
    Forwarded to Qwiet finding_type
    Example: "vuln"

  - `finding_status` (string)
    Forwarded to Qwiet finding_status
    Example: "fixed"

## Path parameters:

  - `id` (string, required)
    Target ID
    Example: "abcdef1234567890ghijkl"

## Response 400 fields (application/json):

  - `message` (string, required)
    Example: "Not Found"

  - `status` (integer)
    Example: 404