findings

Re-run a finding's attacks to confirm a fix

Re-runs every attack under the finding against the live target and drives its verification status. Call AFTER marking the finding fixed (PATCH .../close status=fixed) -- validating a finding that is not marked fixed returns verdict='not_eligible'. Returns the terminal verdict when the re-run finishes quickly; otherwise returns verdict='validating' with a replay_run_id -- re-read the finding's status via the findings list. Cross-workspace ids resolve to 404.

post/api/v1/findings/{finding_id}/validate

Request

  • Base URL: https://api.enokilabs.ai
  • URL: https://api.enokilabs.ai/api/v1/findings/{finding_id}/validate
  • Auth: none declared

Path parameters

finding_idstring required

Headers

Authorizationstring nullable

Bearer token with API key

Response

Successful Response

finding_idstring required

The finding that was validated.

replay_run_idstring required

The replay run that re-ran the finding's attacks. Empty when the finding was not eligible and no run was spent.

verdict'resolved' | 'still_broken' | 'not_eligible' | 'validating' required

resolved: every attack no longer reproduces (finding FIXED_VERIFIED). still_broken: at least one attack still reproduces or could not be checked. not_eligible: mark the finding fixed before validating -- it was not in a verifiable state. validating: still running -- re-read the finding's status via the findings list.

Changes

No recorded changes to this operation across all 1 revision of this API.