Ignore security finding

Changed on

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Ignores one finding in the app's security scan, so it stays hidden across rescans for as long as its fingerprint doesn't change. Get the finding's fingerprint from Get security scan, and send the finding_type for its group.

Ignoring doesn't change the app, and it doesn't remove the finding from the scan result. The finding stays in its list, and its fingerprint is added to ignored_fingerprints. The app editor hides findings whose fingerprint is there. To undo an ignore, use Restore security finding.

A successful call doesn't confirm that the finding is now ignored. Base44 doesn't check that fingerprint belongs to a finding, so a mistyped or outdated one is saved and returns the same response. Check that the finding's fingerprint appears in ignored_fingerprints.

post/api/apps/{app_id}/security/scan/ignore

Request

  • Base URL: https://app.base44.com
  • URL: https://app.base44.com/api/apps/{app_id}/security/scan/ignore
  • Auth: HTTP bearer

Path parameters

app_idstring required

ID of the app.

Request body

fingerprintstring required

The finding's fingerprint, as returned by Get security scan. Up to 128 characters.

finding_typestring required

The finding's type, which matches the group it came from in Get security scan. Any other value is accepted and nothing is recorded.

file_pathstring

Path of the file the finding points at, kept with the ignore as a record of what was ignored. Up to 1,024 characters. Defaults to an empty string.

titlestring

Short name for the finding, kept with the ignore as a record of what was ignored. Up to 2,000 characters. Defaults to an empty string.

Example request

{
  "fingerprint": "3f9a1c0e8b7d4a6f2e5c9b1d0a8f7e6c5b4a3d2e1f0c9b8a7d6e5f4c3b2a1d0e",
  "finding_type": "static_code",
  "file_path": "src/pages/Orders.jsx",
  "title": "Order lookup trusts a client-supplied ID"
}

Response

The call was accepted.

statusstring required

Always ok, including when nothing changed.

Example response

{
  "status": "ok"
}

Changes