---
title: "Update finding state, severity, and/or duplicate link"
method: PATCH
path: "/findings/{id}"
tags: ["REST API - Findings"]
---

# Update finding state, severity, and/or duplicate link

`PATCH /findings/{id}`

## Path parameters

- `id` string, required

## Request body

- RestUpdateFindingDto
  - `state` 'open' | 'true_positive' | 'false_positive' | 'accepted_risk' | 'resolved' | 'closed' — New finding state
  - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info' — New severity level
  - `state_reason` string — Reason for the state change (defaults to reason if omitted)
  - `severity_reason` string — Reason for the severity change (defaults to reason if omitted)
  - `reason` string — Shorthand reason applied to both state and severity changes when their specific reason is not provided
  - `duplicate_of` string, nullable — UUID of the canonical finding to mark this finding as a duplicate of, or null to unmark. The target must be in the same repository.

## Response `200`

- RestUpdateFindingResponseDto
  - `id` string, required
  - `state` 'open' | 'true_positive' | 'false_positive' | 'accepted_risk' | 'resolved' | 'closed', required
  - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info', required
  - `duplicate_of` string, nullable, required — UUID of the canonical finding this duplicates, if any.

---

[API](https://skmtc.dev/hacktron/apis/hacktron-rest-api.md) · [All operations](https://skmtc.dev/hacktron/apis/hacktron-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hacktron/hacktron-rest-api/revisions/6a361244ce2c/schema)