Action Item

List action items

Changed on

List action items with filtering, sorting, and pagination.

Default sort order is by score descending, then by creation date descending.

get/action_item

Request

  • Base URL
    https://api.nullplatform.com
  • URL
    https://api.nullplatform.com/action_item
  • Auth
    HTTP bearer

Query parameters

nrnstring

Filter by NRN (partial match supported).

status'open' | 'in_progress' | 'pending_deferral' | 'deferred' | 'pending_verification' | 'resolved' | 'pending_rejection' | 'rejected' | 'closed'

Filter by status. Use status[] for multiple values.

status_not_instring

Comma-separated statuses to exclude.

category_idstring

Filter by category ID.

priority'low' | 'medium' | 'high' | 'critical'

Filter by priority level.

created_bystring

Filter by creator (user email or agent identifier).

assignee_idstring

Filter by owner. Accepts a comma-separated list of nullplatform user IDs, and the token none for items nobody owns, so none,2345 returns the unassigned pool together with the items owned by user 2345.

assignedboolean

Filter by whether the item has an owner at all. Ignored when assignee_id is also present, since that filter is more specific.

due_date_beforestring date

Filter items with a due date before this date.

due_date_afterstring date

Filter items with a due date after this date.

min_valuenumber

Filter items with a value greater than or equal to this amount.

max_valuenumber

Filter items with a value less than or equal to this amount.

sort'score' | 'value' | 'priority' | 'createdAt' | 'dueDate'

Sort field. Defaults to score.

order'asc' | 'desc'

Sort direction. Defaults to desc.

limitinteger

Number of results per page. Max 100, default 25.

offsetinteger

Pagination offset.

Response

A paginated list of action items.

Example response

{
  "results": [
    {
      "id": "xYz789AbCdEf",
      "slug": "upgrade-base-image-to-fix-cve-2026-1234",
      "nrn": "organization=1:account=2:namespace=3:application=4",
      "title": "Upgrade base image to fix CVE-2026-1234",
      "description": "The current base image has a critical vulnerability.",
      "status": "open",
      "priority": "critical",
      "score": 2000,
      "category_id": "abc123def456",
      "value": 500,
      "created_by": "security-scanner-agent",
      "assignee_id": 2345,
      "assigned_at": "2026-08-20T14:32:00Z",
      "assigned_by": "jane@example.com",
      "due_date": "2026-05-01T00:00:00Z",
      "labels": {
        "source": "container-scan",
        "cve": "CVE-2026-1234"
      },
      "affected_resources": [
        {
          "type": "application",
          "name": "my-api-service",
          "permalink": "https://app.nullplatform.com/applications/4",
          "description": "Main API service"
        }
      ],
      "references": [
        {
          "name": "CVE-2026-1234",
          "permalink": "https://nvd.nist.gov/vuln/detail/CVE-2026-1234",
          "description": "NVD entry for this vulnerability"
        }
      ],
      "metadata": {
        "cve_id": "CVE-2026-1234"
      },
      "config": {
        "max_deferral_days": 90,
        "max_deferral_count": 3
      },
      "comments": [
        {
          "id": "cmt123AbCdEf",
          "author": "jane@example.com",
          "content": "This should be prioritized for the next sprint.",
          "created_at": "2026-04-06T14:30:00.000Z"
        }
      ],
      "audit_logs": [
        {
          "id": "3c35f973-d53b-4e60-a578-2e8fba1dbbb1",
          "actor": "jane@example.com",
          "action": "deferred",
          "details": {
            "from": "open",
            "to": "deferred",
            "reason": "Waiting for the next maintenance window."
          },
          "timestamp": "2026-04-06T12:00:00.000Z"
        }
      ],
      "created_at": "2026-04-06T12:00:00.000Z",
      "updated_at": "2026-04-06T12:00:00.000Z"
    }
  ],
  "pagination": {
    "limit": 25,
    "total": 42
  }
}

Changes

    • breaking

      the response's body type changed from no type to object for status

    • breaking

      the response property became optional for the status

    • breaking

      removed the required property from the response with the status

    • breaking

      removed the required property from the response with the status

    • info

      removed subschema #1 subschema #2 from the response body oneOf list for the response status

    • info

      media type application/json was changed to a more specific media type application/problem+json for the response status

    • info

      media type application/json was changed to a more specific media type application/problem+json for the response status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      response property message deprecated

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status