curl --request POST \
--url https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": true
},
"scope": {
"value": "<string>"
},
"path_prefix": "<string>",
"purl": "<string>",
"finding_ids": [
"3c90c3cc-0d44-4b50-8888-8dd25736052a"
],
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
'import requests
url = "https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve"
payload = {
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": True
},
"scope": { "value": "<string>" },
"path_prefix": "<string>",
"purl": "<string>",
"finding_ids": ["3c90c3cc-0d44-4b50-8888-8dd25736052a"],
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
project_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
domain_slug: '<string>',
reason: {
domain_slug: '<string>',
slug: '<string>',
display_name: '<string>',
suppresses: true
},
scope: {value: '<string>'},
path_prefix: '<string>',
purl: '<string>',
finding_ids: ['3c90c3cc-0d44-4b50-8888-8dd25736052a'],
justification: '<string>',
replacement_purl: '<string>',
concluded_license: '<string>'
})
};
fetch('https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'project_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'domain_slug' => '<string>',
'reason' => [
'domain_slug' => '<string>',
'slug' => '<string>',
'display_name' => '<string>',
'suppresses' => true
],
'scope' => [
'value' => '<string>'
],
'path_prefix' => '<string>',
'purl' => '<string>',
'finding_ids' => [
'3c90c3cc-0d44-4b50-8888-8dd25736052a'
],
'justification' => '<string>',
'replacement_purl' => '<string>',
'concluded_license' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve"
payload := strings.NewReader("{\n \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"domain_slug\": \"<string>\",\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"path_prefix\": \"<string>\",\n \"purl\": \"<string>\",\n \"finding_ids\": [\n \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n ],\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"domain_slug\": \"<string>\",\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"path_prefix\": \"<string>\",\n \"purl\": \"<string>\",\n \"finding_ids\": [\n \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n ],\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"domain_slug\": \"<string>\",\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"path_prefix\": \"<string>\",\n \"purl\": \"<string>\",\n \"finding_ids\": [\n \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n ],\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"affected": 123,
"unchanged": 123,
"skipped": 123,
"failed": 123,
"finding_ids": [
"3c90c3cc-0d44-4b50-8888-8dd25736052a"
]
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Bulk-resolve open OSS findings by component/path scope
Resolves all open OSS findings matching the given project, domain_slug, and optional purl/path_prefix scope in a single transaction. The operation is all-or-nothing: a failure on any finding rolls back all resolutions. Already-resolved findings in scope are skipped idempotently. The same reason-required rule as single-finding resolve applies.
A crypto reason (confirm_usage / false_positive / accepted_risk) scopes itself to evidence.source = 'direct' findings on the purl — the dependency-internal crypto inventory never resolves through this or any bulk verb, however many findings share the purl.
curl --request POST \
--url https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": true
},
"scope": {
"value": "<string>"
},
"path_prefix": "<string>",
"purl": "<string>",
"finding_ids": [
"3c90c3cc-0d44-4b50-8888-8dd25736052a"
],
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
'import requests
url = "https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve"
payload = {
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": True
},
"scope": { "value": "<string>" },
"path_prefix": "<string>",
"purl": "<string>",
"finding_ids": ["3c90c3cc-0d44-4b50-8888-8dd25736052a"],
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
project_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
domain_slug: '<string>',
reason: {
domain_slug: '<string>',
slug: '<string>',
display_name: '<string>',
suppresses: true
},
scope: {value: '<string>'},
path_prefix: '<string>',
purl: '<string>',
finding_ids: ['3c90c3cc-0d44-4b50-8888-8dd25736052a'],
justification: '<string>',
replacement_purl: '<string>',
concluded_license: '<string>'
})
};
fetch('https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'project_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'domain_slug' => '<string>',
'reason' => [
'domain_slug' => '<string>',
'slug' => '<string>',
'display_name' => '<string>',
'suppresses' => true
],
'scope' => [
'value' => '<string>'
],
'path_prefix' => '<string>',
'purl' => '<string>',
'finding_ids' => [
'3c90c3cc-0d44-4b50-8888-8dd25736052a'
],
'justification' => '<string>',
'replacement_purl' => '<string>',
'concluded_license' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve"
payload := strings.NewReader("{\n \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"domain_slug\": \"<string>\",\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"path_prefix\": \"<string>\",\n \"purl\": \"<string>\",\n \"finding_ids\": [\n \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n ],\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"domain_slug\": \"<string>\",\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"path_prefix\": \"<string>\",\n \"purl\": \"<string>\",\n \"finding_ids\": [\n \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n ],\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenant}.earnie.dev/v1/findings/actions/bulk-resolve")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"project_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"domain_slug\": \"<string>\",\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"path_prefix\": \"<string>\",\n \"purl\": \"<string>\",\n \"finding_ids\": [\n \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n ],\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"affected": 123,
"unchanged": 123,
"skipped": 123,
"failed": 123,
"finding_ids": [
"3c90c3cc-0d44-4b50-8888-8dd25736052a"
]
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Authorizations
An Earnie API key, sent as Authorization: Bearer sk_earnie_.... Create one under Settings > API keys. The key's scopes decide which operations it may call.
Body
Request body for bulk-resolving open OSS findings by component and/or path scope. All matching open OSS findings are resolved in a single transaction. Reason slug must be non-empty when the org's triage_reason_required setting is strict (the default). The bulk operation is all-or-nothing: a failure on any finding rolls back all resolutions.
Project whose findings are targeted.
Producer domain_slug to filter findings (e.g. "oss").
A triage resolution reason. The canonical slugs cover five families: OSS (confirm_match, mark_original, replace_component), declared dependencies (accept_dependency, dismiss_dependency), crypto (confirm_usage, false_positive, accepted_risk), AI usage (confirm_ai_usage, not_ai_usage, approve_ai_usage), and identified AI models (approve_model, reject_model, wrong_identification). Each slug decides findings of its own family only; any other finding answers 400 reason_domain_mismatch. Callers MUST supply a non-empty slug by default; the org-level triage_reason_required setting controls whether an empty slug is permitted (see CAP2). Each slug carries a gate posture, reported by the suppresses field below and applied by the resolve path: resolving with a suppressing reason drops the finding from PR-gate impact, and reopening it undoes that suppression.
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Optional folder path prefix scope filter.
Optional component PURL scope filter.
Optional exact selection, limited to 1000 distinct finding IDs. When present, purl and path_prefix must be absent. Every ID must belong to the authorized organization and project, match domain_slug and the reason domain, and be decidable (not dependency-internal crypto inventory). An invalid selection rejects the entire request before any mutation. Already decided or suppressed findings are unchanged. All selected open findings resolve atomically. For findings with a source path, each resolution and bridge suggestion uses that actual path scope; otherwise the supplied scope is retained.
1 - 1000 elementsOptional human-readable justification for the bulk resolution.
Versioned PURL required when reason.slug is replace_component.
Optional license the operator concluded for the component (an SPDX identifier when picked from the SPDX list). Stored on every created resolution as structured evidence — SBOM export renders it as the component's concluded license rather than NOASSERTION. Distinct from justification, which carries only the operator's free-text note.
Response
Bulk resolution result
Result of a bulk-resolve operation. affected is the count of findings newly resolved in this call. unchanged counts findings that were already non-open and skipped idempotently. skipped counts findings excluded by scope or other non-error conditions. failed counts findings that caused an error (currently at most 1 — the operation aborts on first failure).
Number of findings newly resolved in this call.
Number of findings already resolved or in non-open state (idempotent skip).
Number of findings excluded by scope filter or other non-error conditions.
Number of findings that caused an error (triggers full rollback).
IDs of the findings that were resolved in this call. Callers can use this list to update local state without a full re-fetch.