diff --git a/iast/views/project_report_list.py b/iast/views/project_report_list.py
index b17ba8cf..4539b09c 100644
--- a/iast/views/project_report_list.py
+++ b/iast/views/project_report_list.py
@@ -3,6 +3,7 @@
 from dongtai.endpoint import R
 from dongtai.endpoint import UserEndPoint
 from dongtai.models.project_report import ProjectReport
+from dongtai.models.project import IastProject
 from django.utils.translation import gettext_lazy as _
 from rest_framework import serializers
 from iast.utils import extend_schema_with_envcheck
@@ -13,6 +14,7 @@ class _ProjectReportSearchQuerysSerializer(serializers.Serializer):
     page_size = serializers.IntegerField(default=20,
                                          help_text=_('Number per page'))
     page = serializers.IntegerField(default=1, help_text=_('Page index'))
+    pid = serializers.IntegerField(default=1, help_text=_('Project id'))
 
 
 class _ProjectReportListDataSerializer(serializers.ModelSerializer):
@@ -35,8 +37,10 @@ class ProjectReportList(UserEndPoint):
     )
     def get(self, request):
         page = request.query_params.get('page', 1)
+        pid = request.query_params.get('pid', 0)
         page_size = request.query_params.get('page_size', 20)
         ser = _ProjectReportSearchQuerysSerializer(data=request.data)
+        project = IastProject.objects.filter(pk=pid, user=request.user).first()
         try:
             if ser.is_valid(True):
                 page = ser.validated_data['page']
@@ -45,6 +49,7 @@ def get(self, request):
             return R.failure(data=e.detail)
         queryset = ProjectReport.objects.filter(
             user=request.user,
+            project=project
         ).order_by('-create_time')
 
         page_summary, page_data = self.get_paginator(queryset, page, page_size)
diff --git a/iast/views/project_report_sync_add.py b/iast/views/project_report_sync_add.py
index 98b5d512..908d5f32 100644
--- a/iast/views/project_report_sync_add.py
+++ b/iast/views/project_report_sync_add.py
@@ -58,7 +58,7 @@ def post(self, request):
             return R.failure(status=202, msg=_('Report type error'))
         ProjectReport.objects.create(
             user=request.user, project=project, vul_id=vid,
-            status=1, type=type, create_time=timestamp, language=get_language()
+            status=0, type=type, create_time=timestamp, language=get_language()
         )
 
         return R.success(msg=_('Created success'))