Skip to main content
POST
/
api
/
v1
/
findings
/
bulk
/
state
BulkUpdateFindingState
package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.Finding.BulkUpdateFindingState(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.BulkUpdateFindingStateResponse != nil {
        // handle response
    }
}
import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.finding.bulkUpdateFindingState();

  console.log(result);
}

run();
curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "acceptRisk": {
    "expiresAt": "2023-11-07T05:31:56Z",
    "justification": "<string>"
  },
  "assignOwner": {
    "owner": {
      "appOwnerAppId": "<string>",
      "identityUserId": "<string>",
      "managerOfUserId": "<string>",
      "userSetId": "<string>"
    }
  },
  "refs": [
    {
      "id": "<string>"
    }
  ],
  "reopen": {},
  "searchRequest": {
    "appIds": [
      "<string>"
    ],
    "appUserIds": [
      "<string>"
    ],
    "decoyIds": [
      "<string>"
    ],
    "findingTypes": [],
    "pageSize": 123,
    "pageToken": "<string>",
    "query": "<string>",
    "severities": [],
    "states": []
  },
  "snooze": {
    "reason": "<string>",
    "snoozeUntil": "2023-11-07T05:31:56Z"
  },
  "suppress": {
    "reason": "<string>"
  },
  "unsuppress": {}
}
'
import requests

url = "https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state"

payload = {
    "acceptRisk": {
        "expiresAt": "2023-11-07T05:31:56Z",
        "justification": "<string>"
    },
    "assignOwner": { "owner": {
            "appOwnerAppId": "<string>",
            "identityUserId": "<string>",
            "managerOfUserId": "<string>",
            "userSetId": "<string>"
        } },
    "refs": [{ "id": "<string>" }],
    "reopen": {},
    "searchRequest": {
        "appIds": ["<string>"],
        "appUserIds": ["<string>"],
        "decoyIds": ["<string>"],
        "findingTypes": [],
        "pageSize": 123,
        "pageToken": "<string>",
        "query": "<string>",
        "severities": [],
        "states": []
    },
    "snooze": {
        "reason": "<string>",
        "snoozeUntil": "2023-11-07T05:31:56Z"
    },
    "suppress": { "reason": "<string>" },
    "unsuppress": {}
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)
const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    acceptRisk: {expiresAt: '2023-11-07T05:31:56Z', justification: '<string>'},
    assignOwner: {
      owner: {
        appOwnerAppId: '<string>',
        identityUserId: '<string>',
        managerOfUserId: '<string>',
        userSetId: '<string>'
      }
    },
    refs: [{id: '<string>'}],
    reopen: {},
    searchRequest: {
      appIds: ['<string>'],
      appUserIds: ['<string>'],
      decoyIds: ['<string>'],
      findingTypes: [],
      pageSize: 123,
      pageToken: '<string>',
      query: '<string>',
      severities: [],
      states: []
    },
    snooze: {reason: '<string>', snoozeUntil: '2023-11-07T05:31:56Z'},
    suppress: {reason: '<string>'},
    unsuppress: {}
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));
<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'acceptRisk' => [
        'expiresAt' => '2023-11-07T05:31:56Z',
        'justification' => '<string>'
    ],
    'assignOwner' => [
        'owner' => [
                'appOwnerAppId' => '<string>',
                'identityUserId' => '<string>',
                'managerOfUserId' => '<string>',
                'userSetId' => '<string>'
        ]
    ],
    'refs' => [
        [
                'id' => '<string>'
        ]
    ],
    'reopen' => [
        
    ],
    'searchRequest' => [
        'appIds' => [
                '<string>'
        ],
        'appUserIds' => [
                '<string>'
        ],
        'decoyIds' => [
                '<string>'
        ],
        'findingTypes' => [
                
        ],
        'pageSize' => 123,
        'pageToken' => '<string>',
        'query' => '<string>',
        'severities' => [
                
        ],
        'states' => [
                
        ]
    ],
    'snooze' => [
        'reason' => '<string>',
        'snoozeUntil' => '2023-11-07T05:31:56Z'
    ],
    'suppress' => [
        'reason' => '<string>'
    ],
    'unsuppress' => [
        
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}
HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"acceptRisk\": {\n    \"expiresAt\": \"2023-11-07T05:31:56Z\",\n    \"justification\": \"<string>\"\n  },\n  \"assignOwner\": {\n    \"owner\": {\n      \"appOwnerAppId\": \"<string>\",\n      \"identityUserId\": \"<string>\",\n      \"managerOfUserId\": \"<string>\",\n      \"userSetId\": \"<string>\"\n    }\n  },\n  \"refs\": [\n    {\n      \"id\": \"<string>\"\n    }\n  ],\n  \"reopen\": {},\n  \"searchRequest\": {\n    \"appIds\": [\n      \"<string>\"\n    ],\n    \"appUserIds\": [\n      \"<string>\"\n    ],\n    \"decoyIds\": [\n      \"<string>\"\n    ],\n    \"findingTypes\": [],\n    \"pageSize\": 123,\n    \"pageToken\": \"<string>\",\n    \"query\": \"<string>\",\n    \"severities\": [],\n    \"states\": []\n  },\n  \"snooze\": {\n    \"reason\": \"<string>\",\n    \"snoozeUntil\": \"2023-11-07T05:31:56Z\"\n  },\n  \"suppress\": {\n    \"reason\": \"<string>\"\n  },\n  \"unsuppress\": {}\n}")
  .asString();
require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/findings/bulk/state")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"acceptRisk\": {\n    \"expiresAt\": \"2023-11-07T05:31:56Z\",\n    \"justification\": \"<string>\"\n  },\n  \"assignOwner\": {\n    \"owner\": {\n      \"appOwnerAppId\": \"<string>\",\n      \"identityUserId\": \"<string>\",\n      \"managerOfUserId\": \"<string>\",\n      \"userSetId\": \"<string>\"\n    }\n  },\n  \"refs\": [\n    {\n      \"id\": \"<string>\"\n    }\n  ],\n  \"reopen\": {},\n  \"searchRequest\": {\n    \"appIds\": [\n      \"<string>\"\n    ],\n    \"appUserIds\": [\n      \"<string>\"\n    ],\n    \"decoyIds\": [\n      \"<string>\"\n    ],\n    \"findingTypes\": [],\n    \"pageSize\": 123,\n    \"pageToken\": \"<string>\",\n    \"query\": \"<string>\",\n    \"severities\": [],\n    \"states\": []\n  },\n  \"snooze\": {\n    \"reason\": \"<string>\",\n    \"snoozeUntil\": \"2023-11-07T05:31:56Z\"\n  },\n  \"suppress\": {\n    \"reason\": \"<string>\"\n  },\n  \"unsuppress\": {}\n}"

response = http.request(request)
puts response.read_body
{
  "bulkActionId": "<string>"
}

Authorizations

​
Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

​
Authorization
string
header
required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The BulkUpdateFindingStateRequest message.

This message contains a oneof named action. Only a single field of the following list may be set at a time:

  • snooze
  • suppress
  • acceptRisk
  • unsuppress
  • assignOwner
  • reopen
​
acceptRisk
Bulk Accept Risk Action · object | null

The BulkAcceptRiskAction message.

​
assignOwner
Bulk Assign Owner Action · object | null

The BulkAssignOwnerAction message.

​
refs
Finding Ref · object[] | null

By-ID mode: specify individual finding refs.

​
reopen
Bulk Reopen Action · object | null

The BulkReopenAction message.

​
searchRequest
Finding Search Request · object | null

The FindingSearchRequest message.

​
snooze
Bulk Snooze Action · object | null

The BulkSnoozeAction message.

​
suppress
Bulk Suppress Action · object | null

The BulkSuppressAction message.

​
unsuppress
Bulk Unsuppress Action · object | null
deprecated

The BulkUnsuppressAction message.

Response

200 - application/json

Successful response

The BulkUpdateFindingStateResponse message.

​
bulkActionId
string | null

The ID of the asynchronous bulk action, which can be used to track progress.