Dismiss Findings
Dismisses one or many findings of a repository in a single call, exactly like the Dismiss action in the dashboard: dismissed findings leave the active lists and the Hotlist and move to the repository’s Dismissed tab, where they can be restored. Group findings by repository and scanner and send each group as one request.
Body
Git platform of the organization
github, gitlab, bitbucket, azure_devops Organization / workspace slug
Repository full name the findings belong to
"owner/repository"
Scanner the findings come from. raw.analysis_type from the Hotlist API maps directly (security is accepted as an alias of sast).
sast, sca, secrets, iac Finding identifiers to dismiss — one request dismisses any number of findings in one repo. Take them verbatim from raw.dismiss_key of the Hotlist API (/api/security/hotlist/findings), or build them from the per-repo results:
- sca —
package@versiondismisses every advisory of the package;package@version::<manifest relative_path>::<cve_id>dismisses one advisory. - sast —
<file_path>||::||<context_code_block>||::||<test_id>. - secrets —
<file_path>||::||<hashed_secret>:occurrence:<n>||::||<type>(nis the 0-based index among identical secrets in that file). - iac —
<file_path>||::||<check_id>||::||<start_line>-<end_line>.
1Self-hosted instance URL (also gitlab_base_url / bitbucket_base_url / azure_devops_base_url). Defaults to the cloud host.
"https://github.com"
Shown as the dismissal reason in the dashboard.
"This alert is inaccurate or incorrect"
Free-text note stored with the dismissal.
Attribution recorded on the dismissal; defaults to api.
"sec-automation@example.com"