Set finding status
POST/api/security/findings/:finding_id/status
Resolution policy (docs/security/SECURITY_FINDINGS_AND_RISK.md): runtime findings keep the manual lifecycle, but resolved and false_positive
need a note of at least 10 characters. Vulnerability / configuration / coverage findings return 409 verification_required for resolved (only a
verified rescan resolves them), 409 accept_risk_required for accepted_risk (own endpoint), and false_positive needs the same note.
Request
Responses
- 200
- 401
- 403
- 422
Successful Response
The token is missing, invalid or expired. Refresh it, or sign in again.
Your role does not allow this. The detail names the missing permission or role.
Validation Error