---
title: "Update a finding"
method: PATCH
path: "/v1/findings/{id}"
tags: ["Findings"]
---

# Update a finding

`PATCH /v1/findings/{id}`

Update a finding. Status transition rules apply based on user role.

## Path parameters

- `id` string, required

## Request body

- UpdateFindingDto
  - `status` 'open' | 'ready_for_review' | 'needs_revision' | 'closed' — Finding status
  - `type` 'soc2' | 'iso27001' — Type of finding (SOC 2 or ISO 27001)
  - `content` string — Finding content/message
  - `revisionNote` object, nullable — Auditor note when requesting revision (only for needs_revision status)

## Response `200`

The updated finding

## Other responses

- `401` — Unauthorized
- `403` — Forbidden - Insufficient permissions for status transition
- `404` — Finding not found

---

[API](https://skmtc.dev/trycompai/apis/comp-ai-api.md) · [All operations](https://skmtc.dev/trycompai/apis/comp-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/trycompai/comp-ai-api/revisions/267b1aa90d52/schema)