Skip to Content
veriom

List findings

GET
/v1/workspaces/{workspace_id}/findings

Authorization

workspaceToken
headerAuthorizationBearer <vat_<opaque-token>>

Expiring, hashed workspace token with explicit scopes.

Path Parameters

workspace_id*Workspace Id
Formatuuid

Query Parameters

cursor?string|null
limit?Limit
Range1 <= value <= 100
Default50
severity?|null
status?|null
repository_id?|null
owner?||null
lifecycle_state?|null
first_seen_after?|null
first_seen_before?|null
structural_layer?|null
architecture_disposition?|
Default"actionable"
sort?Sort

attention lists what Needs attention first (strongest proof, then business impact, then severity and risk), then the rest in the same order. business_impact lists Urgent first and findings without one last, then by risk. risk_desc and risk_asc sort by the technical score.

Default"risk_desc"
Value in"newest""oldest""risk_desc""risk_asc""attention""business_impact"
q?|

Only findings whose title, rule or component contains this text.

proof_grade?|null
business_impact?||

Only findings with this business impact, or unset for none.

finding_class?|

Only findings of this class. Combines with architecture_disposition; pass all to see structural findings, which the actionable default excludes.

finding_group?|

Only one Findings group: security (what a scanner reported) or architectural (what the architecture analysis reported).

Response Body

Successful Response

application/json
  1. response
has_more?Has More
Defaultfalse
items*array<>
next_cursor?string|null
Example Request
curl -X GET 'https://api.veriom.ai/v1/workspaces/497f6eca-6276-4993-bfeb-53cbbbba6f08/findings'
Example Response
{  "has_more": false,  "items": [    {      "adjudication_version": "string",      "architecture_confidence": "0",      "architecture_disposition": "pending",      "architecture_impact": "critical",      "architecture_link": {        "object_count": 0,        "objects": [          {            "key": "string",            "kind": "string",            "kind_label": "string",            "name": "string"          }        ],        "reason": "string",        "state": "linked"      },      "audit_id": "78c04fa6-cfb4-46a0-9aa5-3681ba4f3897",      "auto_disposition": false,      "business_impact": "urgent",      "component_identity": "string",      "conclusion_confidence": "string",      "cvss_score": "string",      "evidence_revision": "string",      "finding_class": "scanner_vulnerability",      "finding_class_label": "string",      "finding_group": "security",      "fingerprint_algorithm_version": "finding-v1",      "hypothesis": false,      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",      "identity_fingerprint": "string",      "impact_conclusion": "confirmed",      "last_seen_at": "2019-08-24T14:15:22Z",      "lifecycle_started_at": "2019-08-24T14:15:22Z",      "lifecycle_state": "new",      "lifecycle_updated_at": "2019-08-24T14:15:22Z",      "lifecycle_version": 1,      "locations": [        {}      ],      "owner_id": "8826ee2e-7933-4665-aef2-2393f84a0d05",      "proof_grade": "candidate",      "repository_id": "b349ae61-b973-4c6c-a5e0-89183ba99ff3",      "risk_severity": "string",      "risk_total": "string",      "rule_id": "string",      "scanner_severity": "string",      "severity_source": "cvss",      "sla_due_at": "2019-08-24T14:15:22Z",      "source_family": "scanner",      "source_label": "string",      "source_tools": [        {          "rule_id": "string",          "tool": "string",          "version": "string"        }      ],      "state": "new",      "structural_contract_version": "string",      "structural_layer": "string",      "structural_root_cause_id": "51d97e66-655e-47cc-b147-d97f2b4d419b",      "taxonomy_snapshot_id": "487bda72-1129-4a41-8441-bc24f9e8006b",      "title": "string",      "tool": "string",      "work_status": "open"    }  ],  "next_cursor": "string"}