Update finding status
PATCH /sscs/findings/{findingId}/status
Scope sbom:write Plan Growth+
Move a finding through its triage workflow. status is required and must be one of open, mitigated, accepted_risk, false_positive, fixed. remediationNotes is optional free text recording the decision. Requires the sbom:write scope (or a signed-in Owner or Manager session).
Example
curl -X PATCH "https://api.autociso.io/api/v1/sscs/findings/<findingId>/status" \
-H "Authorization: Bearer <your-api-token>" \
-H "Content-Type: application/json" \
-d '{"status":"mitigated","remediationNotes":"Upgraded the dependency in release 2026.9.2."}'import requests
response = requests.patch(
"https://api.autociso.io/api/v1/sscs/findings/<findingId>/status",
headers={"Authorization": "Bearer <your-api-token>", "Content-Type": "application/json"},
json={
"status": "mitigated",
"remediationNotes": "Upgraded the dependency in release 2026.9.2.",
},
)
print(response.json())const response = await fetch("https://api.autociso.io/api/v1/sscs/findings/<findingId>/status", {
method: "PATCH",
headers: { "Authorization": "Bearer <your-api-token>", "Content-Type": "application/json" },
body: JSON.stringify({
"status": "mitigated",
"remediationNotes": "Upgraded the dependency in release 2026.9.2."
}),
});
console.log(await response.json());Response 200
{
"data": {
"updated": true
}
}Path parameters
findingIdstring requiredFinding id.
Request body
statusstring required"open" | "mitigated" | "accepted_risk" | "false_positive" | "fixed"remediationNotesstring
Returns
The data field of the standard { data, error, meta } envelope:
updatedboolean required
Errors
| Status | Code | Retry | Meaning |
|---|---|---|---|
| 400 | VALIDATION_FAILED |
no | The body is invalid. code VALIDATION_FAILED (schema violation) or INVALID_STATUS. |
| 401 | INVALID_TOKEN |
no | Missing (UNAUTHORIZED) or invalid, expired or revoked (INVALID_TOKEN) token. |
| 402 | FEATURE_GATED |
no | The tenant plan does not include supply chain security. code FEATURE_GATED; args.feature, args.minTier, args.minTierName. |
| 403 | INSUFFICIENT_SCOPE |
no | The token lacks the required scope (INSUFFICIENT_SCOPE) or the request is refused (FORBIDDEN). |
| 413 | FILE_TOO_LARGE |
no | The body exceeds the size limit. code FILE_TOO_LARGE (upload, 5 MB) or PAYLOAD_TOO_LARGE (JSON body). |
| 429 | RATE_LIMITED |
yes | Too many failed authentication attempts from this address. code RATE_LIMITED; wait Retry-After seconds. |
| 500 | DB_ERROR |
no | Unexpected server error. code DB_ERROR (or VALIDATION_ERROR when the request could not be validated); quote error.id to support. |
| 503 | BILLING_UNAVAILABLE |
yes | Billing is temporarily unavailable, so the plan could not be checked. code BILLING_UNAVAILABLE. Retry later. |
Last reviewed: 2026-10-13
Was this page helpful?