# Retrieve artifact metadata



Read the artifact identity, declared hash, upload state and ownership-scoped URLs.



`GET /v1/artifacts/{artifact_id}`



## Check an upload’s state



Retrieve the artifact ID you received when creating the upload.



## What to do next



A file that has not been sealed is not ready to use in a run.



[Read the step-by-step guide →](https://www.security.run/docs/upload-inputs.html)



### Parameters



#### `artifact_id` · `path · string` · required



#### `authorization` · `header · string | null` · required



### Responses



- `200` Successful Response

- `422` Validation Error

## Request

```bash
curl -X GET "$SECURITY_RUN_URL/v1/artifacts/artifact_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" \
  -H "Authorization: Bearer $SECURITY_RUN_API_KEY"
```

## Request

```python
import os, httpx

headers = {}
headers["Authorization"] = "Bearer " + os.environ["SECURITY_RUN_API_KEY"]
response = httpx.request('GET', os.environ["SECURITY_RUN_URL"].rstrip("/") + '/v1/artifacts/artifact_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
    headers=headers)
response.raise_for_status()
print(response.text)
```

## Request

```javascript
const base = process.env.SECURITY_RUN_URL.replace(/\/$/, "");
const headers = {};
headers.Authorization = `Bearer ${process.env.SECURITY_RUN_API_KEY}`;
const response = await fetch(base + "/v1/artifacts/artifact_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {
  method: "GET",
  headers
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
console.log(await response.text());
```