Sign in
instance

Rotate the secret-scanning fingerprint key.

Changed on

Mints a new scanning-fingerprint key, retires the old one, and drops every dismissal row in the same transaction.

Outright replacement: there is no version keyring and no reencrypt walk, because a fingerprint is a keyed digest, not a ciphertext to preserve. Every stored fingerprint becomes unrecomputable under the new key, so keeping the dismissals would silently suppress warns that must now re-fire - dropping them is the safe direction.

It rides rotate-dek, the same tier-3 rotation authority as rotate-token-key.

post/api/v1/instance/rotate-scanning-key

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/instance/rotate-scanning-key
  • Auth: HTTP bearer

Response

The rotation.

scanning_key_versioninteger required

The new scanning-fingerprint key version. Operator bookkeeping only; a fingerprint is never exported, displayed or compared.

dismissals_droppedinteger required

How many dismissal rows the rotation invalidated. Every stored fingerprint became unrecomputable under the new key, so all dismissals were dropped and their warns will re-fire.

Changes

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • f84a1cd8a05aRevision changes
    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status