Findings

Assign, schedule, acknowledge, accept the risk, or close a finding

A person cannot mark a finding fixed: that is a claim about the page which only a passing observation can make, so closing one by hand needs a resolution such as false_positive or accepted_risk. Reopening is likewise something an observation does. Every change is recorded against the person who made it.

patch/v1/findings/{findingId}

Request

  • Base URL: https://api.ironfang.com/audit
  • URL: https://api.ironfang.com/audit/v1/findings/{findingId}
  • Auth: one of:
    • HTTP bearer
    • HTTP bearer

Request body

accepted_risk_untilstring

RFC 3339. When it passes, the finding stops being suppressed and notifies again.

assignee_user_idstring

Empty string clears the assignment

commentstring
due_atstring

RFC 3339, or an empty string to clear

resolution_code'false_positive' | 'accepted_risk' | 'superseded' | 'other'
state'acknowledged' | 'accepted_risk' | 'resolved'

Response

The updated finding

Changes

No recorded changes to this operation across all 1 revision of this API.