Skip to main content
POST
Preview code finding disposition

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Name the finding by exactly one of application_id or repository_id, plus tool, rule_id and path as the code security read reports them.

disposition
enum<string>
required
Available options:
false_positive,
accepted_risk
path
string
required
rule_id
string
required
tool
enum<string>
required
Available options:
semgrep,
checkov
application_id
string<uuid> | null
expires_at
string<date-time> | null

Review deadline. Required, and at most a year out, for accepted_risk.

reason
string

Required to create; recorded on the audit trail.

Maximum string length: 2000
repository_id
string<uuid> | null

Response

Successful response

active_disposition_id
string<uuid> | null
required
application_id
string<uuid> | null
required
can_create
boolean
required
disposition
string
required
effect
string
required
finding_line
integer | null
required
finding_severity
string
required
finding_title
string
required
path
string
required
refusal
string | null
required
repository
string
required
repository_id
string<uuid>
required
rule_id
string
required
scope
enum<string>
required
Available options:
repository_code
tool
string
required