Update finding lifecycle
PATCH
workspaceTokenheader
AuthorizationBearer <vat_<opaque-token>>Expiring, hashed workspace token with explicit scopes.
workspace_id*Workspace IdFormat
uuidfinding_id*Finding IdFormat
uuidapplication/json- body
duplicate_of?|nullevidence_ids?array<>Items
items <= 100expires_at?|nullreason*ReasonLength
3 <= length <= 4000state*FindingLifecycleStateValue in
"new""persistent""regressed""remediated""accepted_risk""false_positive""duplicate""not_applicable""environment_changed"verification_audit_id?|nullSuccessful Response
application/json- response
finding*observations*array<>transitions*array<>curl -X PATCH 'https://api.veriom.ai/v1/workspaces/497f6eca-6276-4993-bfeb-53cbbbba6f08/findings/497f6eca-6276-4993-bfeb-53cbbbba6f08/lifecycle' \ -H 'Content-Type: application/json' \ -d '{ "reason": "string", "state": "new"}'Example Response
{ "finding": { "adjudication_version": "string", "architecture_confidence": "0", "architecture_disposition": "pending", "architecture_impact": "critical", "architecture_link": { "object_count": 0, "objects": [ { "key": "string", "kind": "string", "kind_label": "string", "name": "string" } ], "reason": "string", "state": "linked" }, "audit_id": "78c04fa6-cfb4-46a0-9aa5-3681ba4f3897", "auto_disposition": false, "business_impact": "urgent", "component_identity": "string", "conclusion_confidence": "string", "cvss_score": "string", "evidence_revision": "string", "finding_class": "scanner_vulnerability", "finding_class_label": "string", "finding_group": "security", "fingerprint_algorithm_version": "finding-v1", "hypothesis": false, "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "identity_fingerprint": "string", "impact_conclusion": "confirmed", "last_seen_at": "2019-08-24T14:15:22Z", "lifecycle_started_at": "2019-08-24T14:15:22Z", "lifecycle_state": "new", "lifecycle_updated_at": "2019-08-24T14:15:22Z", "lifecycle_version": 1, "locations": [ {} ], "owner_id": "8826ee2e-7933-4665-aef2-2393f84a0d05", "proof_grade": "candidate", "repository_id": "b349ae61-b973-4c6c-a5e0-89183ba99ff3", "risk_severity": "string", "risk_total": "string", "rule_id": "string", "scanner_severity": "string", "severity_source": "cvss", "sla_due_at": "2019-08-24T14:15:22Z", "source_family": "scanner", "source_label": "string", "source_tools": [ { "rule_id": "string", "tool": "string", "version": "string" } ], "state": "new", "structural_contract_version": "string", "structural_layer": "string", "structural_root_cause_id": "51d97e66-655e-47cc-b147-d97f2b4d419b", "taxonomy_snapshot_id": "487bda72-1129-4a41-8441-bc24f9e8006b", "title": "string", "tool": "string", "work_status": "open" }, "observations": [ { "audit_id": "78c04fa6-cfb4-46a0-9aa5-3681ba4f3897", "component_identity": "string", "control_mapping_hash": "string", "evidence_ids": [ "string" ], "evidence_revision": "string", "finding_id": "feebf65a-2eaa-4fae-aab2-772450efdffe", "fingerprint_algorithm_version": "string", "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "identity_fingerprint": "string", "locations": [ {} ], "observed_at": "2019-08-24T14:15:22Z", "risk_severity": "string", "risk_total": "string", "rule_id": "string", "scanner_run_id": "ce0a6d22-d820-48c5-9063-ac46db25a515", "source_family": "string", "source_tool": "string" } ], "transitions": [ { "actor_id": "04f37679-bfbf-4906-b749-01756515cecf", "created_at": "2019-08-24T14:15:22Z", "evidence_ids": [ "string" ], "expires_at": "2019-08-24T14:15:22Z", "finding_id": "feebf65a-2eaa-4fae-aab2-772450efdffe", "from_state": "string", "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "metadata_json": {}, "reason": "string", "supersedes_transition_id": "f9ff0de1-fe00-468e-90d4-e52542ee49f3", "to_state": "new", "verification_audit_id": "cef6c8ad-7eed-4189-9f94-26d2342cdd25", "version": 0 } ]}