---
title: "Change a mapping's task status mapping"
method: POST
path: "/api/v2/securityCompass/updateProjectMapping"
tags: ["Security Compass"]
---

# Change a mapping's task status mapping

`POST /api/v2/securityCompass/updateProjectMapping`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/securityCompass/updateProjectMapping`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Set or clear the per-project override of which SD Elements task status each verification outcome (pass / partial / fail) sets. Pass null to return the mapping to the integration default; pass {} to keep the verification note but never change task statuses. Every slug is validated against the live instance (must exist, meaning DONE or TODO) and the call fails with 400 otherwise. The change applies to the next findings push — call securityCompass.pushLatestScan to apply it to the current scan.

## Request body

- SecurityCompassUpdateProjectMappingRequest
  - `organizationId` string, required: Organization that owns the integration.
  - `mappingId` string, required: cuid of the project mapping to change.
  - `taskStatusMapping` SecurityCompassTaskStatusMapping, required: Which SD Elements task status each ZeroPath verification outcome sets, keyed by outcome. Values are task-status slugs (e.g. DONE, TODO, or a custom status such as ZeroPath-Verified) from securityCompass.listTaskStatuses; a slug whose meaning is NA is never accepted. A missing key leaves the task status unchanged, so {} means "verification note only". Countermeasures a human marked Not Applicable are never changed regardless of this mapping.
    - `pass` string: Status slug to set when ZeroPath finds no violation of the countermeasure.
    - `partial` string: Status slug to set when ZeroPath could not fully verify the countermeasure (some candidate findings failed analysis, or only secondary matches exist).
    - `fail` string: Status slug to set when ZeroPath found at least one violation.

## Response `200`

The mapping with its override and effective mapping

- SecurityCompassUpdateProjectMappingResponse
  - `id` string, required: cuid of the mapping.
  - `taskStatusMapping` SecurityCompassTaskStatusMapping, required: Which SD Elements task status each ZeroPath verification outcome sets, keyed by outcome. Values are task-status slugs (e.g. DONE, TODO, or a custom status such as ZeroPath-Verified) from securityCompass.listTaskStatuses; a slug whose meaning is NA is never accepted. A missing key leaves the task status unchanged, so {} means "verification note only". Countermeasures a human marked Not Applicable are never changed regardless of this mapping.
    - `pass` string: Status slug to set when ZeroPath finds no violation of the countermeasure.
    - `partial` string: Status slug to set when ZeroPath could not fully verify the countermeasure (some candidate findings failed analysis, or only secondary matches exist).
    - `fail` string: Status slug to set when ZeroPath found at least one violation.
  - `effectiveTaskStatusMapping` SecurityCompassTaskStatusMapping, required: Which SD Elements task status each ZeroPath verification outcome sets, keyed by outcome. Values are task-status slugs (e.g. DONE, TODO, or a custom status such as ZeroPath-Verified) from securityCompass.listTaskStatuses; a slug whose meaning is NA is never accepted. A missing key leaves the task status unchanged, so {} means "verification note only". Countermeasures a human marked Not Applicable are never changed regardless of this mapping.
    - `pass` string: Status slug to set when ZeroPath finds no violation of the countermeasure.
    - `partial` string: Status slug to set when ZeroPath could not fully verify the countermeasure (some candidate findings failed analysis, or only secondary matches exist).
    - `fail` string: Status slug to set when ZeroPath found at least one violation.

## Other responses

- `400`: Error Response
- `401`: Error Response
- `404`: Error Response
- `409`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)
