---
title: "Changes to Update Finding State"
method: POST
path: "/api/v1/findings/{finding_id}/state"
---

# Changes to Update Finding State

`POST /api/v1/findings/{finding_id}/state`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 6 of 36 revisions.

- **2026-10-20** `fe943bedf41b`: 1 info
- **2026-10-06** `918a4e749f56`: 11 info
- **2026-09-01** `f76d07868c0c`: 1 warning, 2 info
- **2026-08-21** `f2cf3228f366`: 14 breaking, 37 warning, 7 info
- **2026-05-22** `d391405a35d3`: 1 info
- **2026-04-30** `fa2bb307d6fa`: 1 info

## Changes

- **2026-10-20** `fe943bedf41b`: 1 info
  - added the optional property `finding/oneOf[subschema #1: Finding]/nhiUnownedEvidence` to the response with the `200` status
- **2026-10-06** `918a4e749f56`: 11 info
  - added the optional property `finding/oneOf[subschema #1: Finding]/assigneeIdentityUserId` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/credentialExpiring/oneOf[subschema #1: Credential Expiring Type]/appResourceSecret` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/edgeFinding` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/edgeFindingEvidence` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/mcpGatewayToolCallRisk` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/mcpGatewayToolCallRiskEvidence` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/objectPermissions` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/shadowApp` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/shadowMcp` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/shadowMcpEvidence` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/usageResourceTarget` to the response with the `200` status
- **2026-09-01** `f76d07868c0c`: 1 warning, 2 info
  - added the new `DEACTIVATED_OWNER_SOURCE_SECRET_RUN_AS_IDENTITY` enum value to the `finding/oneOf[subschema #1: Finding]/deactivatedOwner/oneOf[subschema #1: Deactivated Owner Type]/source` response property for the response status `200`
  - added the optional property `finding/oneOf[subschema #1: Finding]/connectorSyncFailing` to the response with the `200` status
  - added the optional property `finding/oneOf[subschema #1: Finding]/connectorSyncFailingEvidence` to the response with the `200` status
- **2026-08-21** `f2cf3228f366`: 14 breaking, 37 warning, 7 info
  - the request property `acceptRisk` became not nullable
  - the request property `reopen` became not nullable
  - the request property `resolve` became not nullable
  - the request property `snooze` became not nullable
  - the request property `suppress` became not nullable
  - the request property `unsuppress` became not nullable
  - the `acceptRisk` request property type changed from `object` to no type
  - the `reopen` request property type changed from `object` to no type
  - the `resolve` request property type changed from `object` to no type
  - the `snooze` request property type changed from `object` to no type
  - the `suppress` request property type changed from `object` to no type
  - the `unsuppress` request property type changed from `object` to no type
  - added `#/components/schemas/c1.api.finding.v1.Finding, subschema #2` to the `finding` response property `oneOf` list for the response status `200`
  - the `finding` response's property type changed from `object` to no type for status `200`
  - removed the request property `acceptRisk/expiresAt`
  - removed the request property `acceptRisk/justification`
  - removed the request property `resolve/reason`
  - removed the request property `snooze/reason`
  - removed the request property `snooze/snoozeUntil`
  - removed the request property `suppress/reason`
  - removed the optional property `finding/appId` from the response with the `200` status
  - removed the optional property `finding/appUserTarget` from the response with the `200` status
  - removed the optional property `finding/assignedOwner` from the response with the `200` status
  - removed the optional property `finding/computedOwner` from the response with the `200` status
  - removed the optional property `finding/createdAt` from the response with the `200` status
  - removed the optional property `finding/customTags` from the response with the `200` status
  - removed the optional property `finding/decoyCredentialUsed` from the response with the `200` status
  - removed the optional property `finding/fingerprint` from the response with the `200` status
  - removed the optional property `finding/firstObservedAt` from the response with the `200` status
  - removed the optional property `finding/id` from the response with the `200` status
  - removed the optional property `finding/identityUserTarget` from the response with the `200` status
  - removed the optional property `finding/lastObservedAt` from the response with the `200` status
  - removed the optional property `finding/recurrenceCount` from the response with the `200` status
  - removed the optional property `finding/remediationDescription` from the response with the `200` status
  - removed the optional property `finding/resolvedAt` from the response with the `200` status
  - removed the optional property `finding/riskAcceptanceExpiresAt` from the response with the `200` status
  - removed the optional property `finding/riskAcceptanceJustification` from the response with the `200` status
  - removed the optional property `finding/riskScore` from the response with the `200` status
  - removed the optional property `finding/serviceAccountMisclassification` from the response with the `200` status
  - removed the optional property `finding/serviceAccountMisclassificationEvidence` from the response with the `200` status
  - …18 more
- **2026-05-22** `d391405a35d3`: 1 info
  - added the optional property `finding/decoyCredentialUsed` to the response with the `200` status
- **2026-04-30** `fa2bb307d6fa`: 1 info
  - endpoint added

---

[Operation](https://skmtc.dev/conductorone/apis/c1-api/docs/api/v1/findings/:finding_id/state/post.md) - [API](https://skmtc.dev/conductorone/apis/c1-api.md) - [Page](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/findings/:finding_id/state/post)
