Skip to Content
veriom

Findings needing attention

The open findings to look at first, and why none are listed. Open Critical and High findings, findings with observed or verified proof and findings a person rated Urgent or High business impact. Every architecture view counts, so a finding awaiting review or detected by a rule is listed too; only the impact review's evidence-based exclusions are left out.

GET
/v1/workspaces/{workspace_id}/findings/attention

The open findings to look at first, and why none are listed.

Open Critical and High findings, findings with observed or verified proof and findings a person rated Urgent or High business impact. Every architecture view counts, so a finding awaiting review or detected by a rule is listed too; only the impact review's evidence-based exclusions are left out.

Authorization

workspaceToken
headerAuthorizationBearer <vat_<opaque-token>>

Expiring, hashed workspace token with explicit scopes.

Path Parameters

workspace_id*Workspace Id
Formatuuid

Query Parameters

limit?Limit
Range1 <= value <= 20
Default5

Response Body

Successful Response

application/json
  1. response
architecture_relevant*Architecture Relevant

How many of them have an architecture impact the review confirmed or an architecture rule detected.

Range0 <= value
empty_reason?|

Why nothing needs attention, or null when something does: no findings yet, none open, none Critical or High, or every Critical and High one excluded on evidence.

excluded_by_evidence*Excluded By Evidence

Open Critical and High findings the impact review excluded on evidence.

Range0 <= value
items*array<>

The open findings to look at first: strongest proof first, then the business impact a person set, then architecture-relevant ones, then Critical before High, then by risk.

total*Total

Open findings that are Critical or High, have observed or verified proof, or have Urgent or High business impact, in every architecture view, less those the impact review excluded on evidence: all that need attention, listed or not.

Range0 <= value
Example Request
curl -X GET 'https://api.veriom.ai/v1/workspaces/497f6eca-6276-4993-bfeb-53cbbbba6f08/findings/attention'
Example Response
{  "architecture_relevant": 0,  "empty_reason": "no_findings",  "excluded_by_evidence": 0,  "items": [    {      "adjudication_version": "string",      "architecture_confidence": "0",      "architecture_disposition": "pending",      "architecture_impact": "critical",      "architecture_link": {        "object_count": 0,        "objects": [          {            "key": "string",            "kind": "string",            "kind_label": "string",            "name": "string"          }        ],        "reason": "string",        "state": "linked"      },      "audit_id": "78c04fa6-cfb4-46a0-9aa5-3681ba4f3897",      "auto_disposition": false,      "business_impact": "urgent",      "component_identity": "string",      "conclusion_confidence": "string",      "cvss_score": "string",      "evidence_revision": "string",      "finding_class": "scanner_vulnerability",      "finding_class_label": "string",      "finding_group": "security",      "fingerprint_algorithm_version": "finding-v1",      "hypothesis": false,      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",      "identity_fingerprint": "string",      "impact_conclusion": "confirmed",      "last_seen_at": "2019-08-24T14:15:22Z",      "lifecycle_started_at": "2019-08-24T14:15:22Z",      "lifecycle_state": "new",      "lifecycle_updated_at": "2019-08-24T14:15:22Z",      "lifecycle_version": 1,      "locations": [        {}      ],      "owner_id": "8826ee2e-7933-4665-aef2-2393f84a0d05",      "proof_grade": "candidate",      "repository_id": "b349ae61-b973-4c6c-a5e0-89183ba99ff3",      "risk_severity": "string",      "risk_total": "string",      "rule_id": "string",      "scanner_severity": "string",      "severity_source": "cvss",      "sla_due_at": "2019-08-24T14:15:22Z",      "source_family": "scanner",      "source_label": "string",      "source_tools": [        {          "rule_id": "string",          "tool": "string",          "version": "string"        }      ],      "state": "new",      "structural_contract_version": "string",      "structural_layer": "string",      "structural_root_cause_id": "51d97e66-655e-47cc-b147-d97f2b4d419b",      "taxonomy_snapshot_id": "487bda72-1129-4a41-8441-bc24f9e8006b",      "title": "string",      "tool": "string",      "work_status": "open"    }  ],  "total": 0}