# Download an artifact



Retrieve a sealed artifact and verify its SHA-256.



`GET /v1/artifacts/{artifact_id}/content`



## Download a sealed input



GET the returned artifact content URL and write the response as bytes.



## What to do next



Compare the downloaded SHA-256 with the expected digest before using the file.



[Read the step-by-step guide →](https://www.security.run/docs/upload-inputs.html)



### Parameters



#### `artifact_id` · `path · string` · required



#### `authorization` · `header · string | null` · required



### Responses



- `200` Successful Response

- `422` Validation Error

## Request

```bash
curl -X GET "$SECURITY_RUN_URL/v1/artifacts/artifact_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/content" \
  -H "Authorization: Bearer $SECURITY_RUN_API_KEY"
```

## Request

```python
import os, httpx

headers = {}
headers["Authorization"] = "Bearer " + os.environ["SECURITY_RUN_API_KEY"]
response = httpx.request('GET', os.environ["SECURITY_RUN_URL"].rstrip("/") + '/v1/artifacts/artifact_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/content',
    headers=headers)
response.raise_for_status()
print(response.text)
```

## Request

```javascript
const base = process.env.SECURITY_RUN_URL.replace(/\/$/, "");
const headers = {};
headers.Authorization = `Bearer ${process.env.SECURITY_RUN_API_KEY}`;
const response = await fetch(base + "/v1/artifacts/artifact_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/content", {
  method: "GET",
  headers
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
console.log(await response.text());
```