Update finding status

PATCH /sscs/findings/{findingId}/status

Scope sbom:write Plan Growth+

Move a finding through its triage workflow. status is required and must be one of open, mitigated, accepted_risk, false_positive, fixed. remediationNotes is optional free text recording the decision. Requires the sbom:write scope (or a signed-in Owner or Manager session).

Example

curl -X PATCH "https://api.autociso.io/api/v1/sscs/findings/<findingId>/status" \
  -H "Authorization: Bearer <your-api-token>" \
  -H "Content-Type: application/json" \
  -d '{"status":"mitigated","remediationNotes":"Upgraded the dependency in release 2026.9.2."}'

Response 200

{
  "data": {
    "updated": true
  }
}

Path parameters

  • findingId string required
    Finding id.

Request body

  • status string required
    "open" | "mitigated" | "accepted_risk" | "false_positive" | "fixed"
  • remediationNotes string
  • No other fields.

Returns

The data field of the standard { data, error, meta } envelope:

  • updated boolean required

Errors

Status Code Retry Meaning
400 VALIDATION_FAILED no The body is invalid. code VALIDATION_FAILED (schema violation) or INVALID_STATUS.
401 INVALID_TOKEN no Missing (UNAUTHORIZED) or invalid, expired or revoked (INVALID_TOKEN) token.
402 FEATURE_GATED no The tenant plan does not include supply chain security. code FEATURE_GATED; args.feature, args.minTier, args.minTierName.
403 INSUFFICIENT_SCOPE no The token lacks the required scope (INSUFFICIENT_SCOPE) or the request is refused (FORBIDDEN).
413 FILE_TOO_LARGE no The body exceeds the size limit. code FILE_TOO_LARGE (upload, 5 MB) or PAYLOAD_TOO_LARGE (JSON body).
429 RATE_LIMITED yes Too many failed authentication attempts from this address. code RATE_LIMITED; wait Retry-After seconds.
500 DB_ERROR no Unexpected server error. code DB_ERROR (or VALIDATION_ERROR when the request could not be validated); quote error.id to support.
503 BILLING_UNAVAILABLE yes Billing is temporarily unavailable, so the plan could not be checked. code BILLING_UNAVAILABLE. Retry later.
Last reviewed: 2026-10-13

Was this page helpful?

Esc