---
title: "Change a finding's status"
method: POST
path: "/v1/findings/{finding_id}/status"
tags: ["findings"]
---

# Change a finding's status

`POST /v1/findings/{finding_id}/status`

## Request

- Base URL: `https://api.ethiack.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.ethiack.com/v1/findings/{finding_id}/status`
- Auth: none declared

Change the status of a finding.

Available to organizations and machine callers; the transition is
validated and authorized by the finding status-change service, and
noted in the finding's Updates thread.

Args:
    finding_id (int): Primary key of the finding.
    body (UpdateFindingStatusRequest): Requested status transition.
    db (AsyncSession): Request-scoped database session.
    context (ActiveContext): Resolved caller identity and scope.

Returns:
    UpdateFindingStatusResponse: The finding with its new status.

## Path parameters

- `finding_id` integer, required

## Request body

- UpdateFindingStatusRequest: Request body for updating a finding's status. Attributes: status (FindingStatus): New lifecycle status (e.g. ``"open"``, ``"triaged"``, ``"fixed"``). An integer status id is also accepted — see :func:`status_from_legacy_id`.
  - `status` 'draft' | 'open' | 'triaged' | 'invalid' | 'fixed' | 'duplicate' | 'accepted', required: Finding lifecycle status. ``DRAFT`` is the author-private pre-submission state: a hacker (or machine) composes the finding as a draft, then ``submit`` advances it to ``OPEN`` / ``TRIAGED``, at which point it becomes visible to the event's other members. Drafts are only ever seen by their author (and privileged actors).

## Response `200`

Successful Response

- UpdateFindingStatusResponse: Response from a successful finding status update. Attributes: result (str): Operation result (``"success"``). finding_id (str): Finding ID as hex string.
  - `result` string
  - `finding_id` string, required: Finding ID as hex string

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ethiack/apis/ethiack-api.md) - [All operations](https://skmtc.dev/ethiack/apis/ethiack-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ethiack/apis/ethiack-api/revisions/4eaba89bfebf?raw)