Bulk Update Finding State

Bulk update finding states.

POST /api/v1/findings/bulk/state

BulkUpdateFindingState

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.Finding.BulkUpdateFindingState(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.BulkUpdateFindingStateResponse != nil {
        // handle response
    }
}

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.finding.bulkUpdateFindingState();

  console.log(result);
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "acceptRisk": {
    "expiresAt": "2023-11-07T05:31:56Z",
    "justification": "<string>"
  },
  "assignOwner": {
    "owner": {
      "appOwnerAppId": "<string>",
      "identityUserId": "<string>",
      "managerOfUserId": "<string>",
      "userSetId": "<string>"
    }
  },
  "refs": [
    {
      "id": "<string>"
    }
  ],
  "reopen": {},
  "searchRequest": {
    "appIds": [
      "<string>"
    ],
    "appResourceIds": [
      "<string>"
    ],
    "appResourceTraitIds": [
      "<string>"
    ],
    "appResourceTypeIds": [
      "<string>"
    ],
    "appUserIds": [
      "<string>"
    ],
    "appUserTypes": [],
    "connectorIds": [
      "<string>"
    ],
    "customSubTypes": [
      "<string>"
    ],
    "decoyIds": [
      "<string>"
    ],
    "findingTypes": [],
    "includeUnassigned": true,
    "nhiTypes": [],
    "ownerIdentityUserIds": [
      "<string>"
    ],
    "pageSize": 123,
    "pageToken": "<string>",
    "query": "<string>",
    "refs": [
      {
        "id": "<string>"
      }
    ],
    "scopeToAppOwner": true,
    "severities": [],
    "sourceKinds": [],
    "states": []
  },
  "snooze": {
    "reason": "<string>",
    "snoozeUntil": "2023-11-07T05:31:56Z"
  },
  "suppress": {
    "reason": "<string>"
  },
  "unsuppress": {}
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state"

payload = {
    "acceptRisk": {
        "expiresAt": "2023-11-07T05:31:56Z",
        "justification": "<string>"
    },
    "assignOwner": { "owner": {
            "appOwnerAppId": "<string>",
            "identityUserId": "<string>",
            "managerOfUserId": "<string>",
            "userSetId": "<string>"
        } },
    "refs": [{ "id": "<string>" }],
    "reopen": {},
    "searchRequest": {
        "appIds": ["<string>"],
        "appResourceIds": ["<string>"],
        "appResourceTraitIds": ["<string>"],
        "appResourceTypeIds": ["<string>"],
        "appUserIds": ["<string>"],
        "appUserTypes": [],
        "connectorIds": ["<string>"],
        "customSubTypes": ["<string>"],
        "decoyIds": ["<string>"],
        "findingTypes": [],
        "includeUnassigned": True,
        "nhiTypes": [],
        "ownerIdentityUserIds": ["<string>"],
        "pageSize": 123,
        "pageToken": "<string>",
        "query": "<string>",
        "refs": [{ "id": "<string>" }],
        "scopeToAppOwner": True,
        "severities": [],
        "sourceKinds": [],
        "states": []
    },
    "snooze": {
        "reason": "<string>",
        "snoozeUntil": "2023-11-07T05:31:56Z"
    },
    "suppress": { "reason": "<string>" },
    "unsuppress": {}
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    acceptRisk: {expiresAt: '2023-11-07T05:31:56Z', justification: '<string>'},
    assignOwner: {
      owner: {
        appOwnerAppId: '<string>',
        identityUserId: '<string>',
        managerOfUserId: '<string>',
        userSetId: '<string>'
      }
    },
    refs: [{id: '<string>'}],
    reopen: {},
    searchRequest: {
      appIds: ['<string>'],
      appResourceIds: ['<string>'],
      appResourceTraitIds: ['<string>'],
      appResourceTypeIds: ['<string>'],
      appUserIds: ['<string>'],
      appUserTypes: [],
      connectorIds: ['<string>'],
      customSubTypes: ['<string>'],
      decoyIds: ['<string>'],
      findingTypes: [],
      includeUnassigned: true,
      nhiTypes: [],
      ownerIdentityUserIds: ['<string>'],
      pageSize: 123,
      pageToken: '<string>',
      query: '<string>',
      refs: [{id: '<string>'}],
      scopeToAppOwner: true,
      severities: [],
      sourceKinds: [],
      states: []
    },
    snooze: {reason: '<string>', snoozeUntil: '2023-11-07T05:31:56Z'},
    suppress: {reason: '<string>'},
    unsuppress: {}
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'acceptRisk' => [
        'expiresAt' => '2023-11-07T05:31:56Z',
        'justification' => '<string>'
    ],
    'assignOwner' => [
        'owner' => [
                'appOwnerAppId' => '<string>',
                'identityUserId' => '<string>',
                'managerOfUserId' => '<string>',
                'userSetId' => '<string>'
        ]
    ],
    'refs' => [
        [
                'id' => '<string>'
        ]
    ],
    'reopen' => [
        
    ],
    'searchRequest' => [
        'appIds' => [
                '<string>'
        ],
        'appResourceIds' => [
                '<string>'
        ],
        'appResourceTraitIds' => [
                '<string>'
        ],
        'appResourceTypeIds' => [
                '<string>'
        ],
        'appUserIds' => [
                '<string>'
        ],
        'appUserTypes' => [
                
        ],
        'connectorIds' => [
                '<string>'
        ],
        'customSubTypes' => [
                '<string>'
        ],
        'decoyIds' => [
                '<string>'
        ],
        'findingTypes' => [
                
        ],
        'includeUnassigned' => true,
        'nhiTypes' => [
                
        ],
        'ownerIdentityUserIds' => [
                '<string>'
        ],
        'pageSize' => 123,
        'pageToken' => '<string>',
        'query' => '<string>',
        'refs' => [
                [
                                'id' => '<string>'
                ]
        ],
        'scopeToAppOwner' => true,
        'severities' => [
                
        ],
        'sourceKinds' => [
                
        ],
        'states' => [
                
        ]
    ],
    'snooze' => [
        'reason' => '<string>',
        'snoozeUntil' => '2023-11-07T05:31:56Z'
    ],
    'suppress' => [
        'reason' => '<string>'
    ],
    'unsuppress' => [
        
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"acceptRisk\": {\n    \"expiresAt\": \"2023-11-07T05:31:56Z\",\n    \"justification\": \"<string>\"\n  },\n  \"assignOwner\": {\n    \"owner\": {\n      \"appOwnerAppId\": \"<string>\",\n      \"identityUserId\": \"<string>\",\n      \"managerOfUserId\": \"<string>\",\n      \"userSetId\": \"<string>\"\n    }\n  },\n  \"refs\": [\n    {\n      \"id\": \"<string>\"\n    }\n  ],\n  \"reopen\": {},\n  \"searchRequest\": {\n    \"appIds\": [\n      \"<string>\"\n    ],\n    \"appResourceIds\": [\n      \"<string>\"\n    ],\n    \"appResourceTraitIds\": [\n      \"<string>\"\n    ],\n    \"appResourceTypeIds\": [\n      \"<string>\"\n    ],\n    \"appUserIds\": [\n      \"<string>\"\n    ],\n    \"appUserTypes\": [],\n    \"connectorIds\": [\n      \"<string>\"\n    ],\n    \"customSubTypes\": [\n      \"<string>\"\n    ],\n    \"decoyIds\": [\n      \"<string>\"\n    ],\n    \"findingTypes\": [],\n    \"includeUnassigned\": true,\n    \"nhiTypes\": [],\n    \"ownerIdentityUserIds\": [\n      \"<string>\"\n    ],\n    \"pageSize\": 123,\n    \"pageToken\": \"<string>\",\n    \"query\": \"<string>\",\n    \"refs\": [\n      {\n        \"id\": \"<string>\"\n      }\n    ],\n    \"scopeToAppOwner\": true,\n    \"severities\": [],\n    \"sourceKinds\": [],\n    \"states\": []\n  },\n  \"snooze\": {\n    \"reason\": \"<string>\",\n    \"snoozeUntil\": \"2023-11-07T05:31:56Z\"\n  },\n  \"suppress\": {\n    \"reason\": \"<string>\"\n  },\n  \"unsuppress\": {}\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"acceptRisk\": {\n    \"expiresAt\": \"2023-11-07T05:31:56Z\",\n    \"justification\": \"<string>\"\n  },\n  \"assignOwner\": {\n    \"owner\": {\n      \"appOwnerAppId\": \"<string>\",\n      \"identityUserId\": \"<string>\",\n      \"managerOfUserId\": \"<string>\",\n      \"userSetId\": \"<string>\"\n    }\n  },\n  \"refs\": [\n    {\n      \"id\": \"<string>\"\n    }\n  ],\n  \"reopen\": {},\n  \"searchRequest\": {\n    \"appIds\": [\n      \"<string>\"\n    ],\n    \"appResourceIds\": [\n      \"<string>\"\n    ],\n    \"appResourceTraitIds\": [\n      \"<string>\"\n    ],\n    \"appResourceTypeIds\": [\n      \"<string>\"\n    ],\n    \"appUserIds\": [\n      \"<string>\"\n    ],\n    \"appUserTypes\": [],\n    \"connectorIds\": [\n      \"<string>\"\n    ],\n    \"customSubTypes\": [\n      \"<string>\"\n    ],\n    \"decoyIds\": [\n      \"<string>\"\n    ],\n    \"findingTypes\": [],\n    \"includeUnassigned\": true,\n    \"nhiTypes\": [],\n    \"ownerIdentityUserIds\": [\n      \"<string>\"\n    ],\n    \"pageSize\": 123,\n    \"pageToken\": \"<string>\",\n    \"query\": \"<string>\",\n    \"refs\": [\n      {\n        \"id\": \"<string>\"\n      }\n    ],\n    \"scopeToAppOwner\": true,\n    \"severities\": [],\n    \"sourceKinds\": [],\n    \"states\": []\n  },\n  \"snooze\": {\n    \"reason\": \"<string>\",\n    \"snoozeUntil\": \"2023-11-07T05:31:56Z\"\n  },\n  \"suppress\": {\n    \"reason\": \"<string>\"\n  },\n  \"unsuppress\": {}\n}"

response = http.request(request)
puts response.read_body

200

{
  "bulkActionId": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The BulkUpdateFindingStateRequest message.

This message contains a oneof named action. Only a single field of the following list may be set at a time:

• snooze
• suppress
• acceptRisk
• unsuppress
• assignOwner
• reopen

acceptRisk · Bulk Accept Risk Action · object | null

The BulkAcceptRiskAction message.

Show child attributes

assignOwner · Bulk Assign Owner Action · object | null

The BulkAssignOwnerAction message.

Show child attributes

refs · Finding Ref · object[] | null

By-ID mode: specify individual finding refs.

Show child attributes

reopen · Bulk Reopen Action · object | null

The BulkReopenAction message.

searchRequest · Finding Search Request · object | null

The FindingSearchRequest message.

Show child attributes

snooze · Bulk Snooze Action · object | null

The BulkSnoozeAction message.

Show child attributes

suppress · Bulk Suppress Action · object | null

The BulkSuppressAction message.

Show child attributes

unsuppress · Bulk Unsuppress Action · object | null · deprecated

The BulkUnsuppressAction message.

Response

200 - application/json

Successful response

The BulkUpdateFindingStateResponse message.

bulkActionId · string

The ID of the asynchronous bulk action, which can be used to track progress.