Skip to main content
PATCH
Update finding
Updates the state, severity, duplicate_of, or any combination of them on a single finding. Every change is recorded to the finding’s audit trail and propagated to connected integrations (GitHub, Slack, Jira, Linear).
Scope required: write

Request

Path parameters

Body

At least one of state, severity, or duplicate_of must be provided. Providing none of them returns 400.
Pass reason alone when the same justification applies to both state and severity. Use state_reason and severity_reason only when the justifications differ.
Setting duplicate_of to another finding UUID closes this finding as a duplicate. Setting duplicate_of to null removes the duplicate link and reopens the finding.

Response

200 OK
The response contains only the updated state, severity, and duplicate link. Fetch the full finding via GET /findings/{id} for the remaining fields.

Errors

  • 400 — none of state, severity, or duplicate_of provided, or field validation failed.
  • 404 — finding not found, still in verification, or not visible to your organization.