# Get target scan report

Proxy ShiftLeft/Qwiet compound scan report. Resolves polyglot scan and compound from ShiftLeft scan metadata, then streams Qwiet v4 compounds/named/{compound}/scans/{polyglot}/reports/{report}. {report} is the Qwiet filename (pci_dss.html, cwe.pdf, owasp-2025.html). pci_dss.md fetches pci_dss.html from Qwiet and converts to markdown.

Endpoint: GET /sto/api/v2/targets/{id}/reports/{report}
Version: 1.0
Security: 

## Query parameters:

  - `accountId` (string, required)
    Harness Account ID
    Example: "abcdef1234567890ghijkl"

  - `orgId` (string, required)
    Harness Organization ID
    Example: "example_org"

  - `projectId` (string, required)
    Harness Project ID
    Example: "example_project"

  - `variantId` (string)
    Optional variant scope
    Example: "xyz987zyx654wvu321tsr9"

  - `executionId` (string)
    Harness Execution ID
    Example: "abcdef1234567890ghijkl"

  - `comments` (boolean)
    Forwarded to Qwiet comments
    Example: true

  - `status` (string)
    Forwarded to Qwiet status
    Example: "any"

  - `tz` (string)
    Forwarded to Qwiet tz
    Example: "UTC"

  - `ignore_info_findings` (boolean)
    Forwarded to Qwiet ignore_info_findings

  - `empty_categories` (boolean)
    Forwarded to Qwiet empty_categories

  - `platform` (string)
    Comma-separated Qwiet platform values
    Example: "javascript,python"

  - `lang` (string)
    Comma-separated Qwiet lang values
    Example: "javascript"

## Path parameters:

  - `id` (string, required)
    Target ID
    Example: "abcdef1234567890ghijkl"

  - `report` (string, required)
    Qwiet report filename; pci_dss.md is converted from pci_dss.html
    Enum: "pci_dss.html", "pci_dss.pdf", "pci_dss.md", "cwe.html", "cwe.pdf", "owasp-2017.html", "owasp-2017.pdf", "owasp-2021.html", "owasp-2021.pdf", "owasp-2025.html", "owasp-2025.pdf"

## Response 400 fields (application/json):

  - `message` (string, required)
    Example: "Not Found"

  - `status` (integer)
    Example: 404