Resolve a finding with a reason
curl --request POST \
--url https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": true
},
"scope": {
"value": "<string>"
},
"expected_version": 123,
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
'import requests
url = "https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve"
payload = {
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": True
},
"scope": { "value": "<string>" },
"expected_version": 123,
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
reason: {
domain_slug: '<string>',
slug: '<string>',
display_name: '<string>',
suppresses: true
},
scope: {value: '<string>'},
expected_version: 123,
justification: '<string>',
replacement_purl: '<string>',
concluded_license: '<string>'
})
};
fetch('https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'reason' => [
'domain_slug' => '<string>',
'slug' => '<string>',
'display_name' => '<string>',
'suppresses' => true
],
'scope' => [
'value' => '<string>'
],
'expected_version' => 123,
'justification' => '<string>',
'replacement_purl' => '<string>',
'concluded_license' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve"
payload := strings.NewReader("{\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"expected_version\": 123,\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"expected_version\": 123,\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"expected_version\": 123,\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"finding": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"title": "<string>",
"evidence": {
"kind": "oss-diff",
"local_file": "<string>",
"local_line_start": 123,
"local_line_end": 123,
"oss_file": "<string>",
"oss_line_start": 123,
"oss_line_end": 123,
"purl": "<string>",
"match_percent": 123,
"algorithm": "<string>",
"oss_file_path": "<string>",
"spans": [
{
"local_line_start": 123,
"local_line_end": 123,
"oss_line_start": 123,
"oss_line_end": 123
}
],
"match_type": "file"
},
"produced_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"state": "open",
"domain": "oss",
"severity": "critical",
"suppressed": true,
"version": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"purpose": "confidentiality",
"export_signals": [
{
"regime": "<string>",
"regime_version": "<string>",
"vintage": "current",
"test": "<string>",
"state": "met",
"provenance_ref": "<string>"
}
],
"location": {
"purl": "<string>",
"path": "<string>",
"line": 123,
"end_line": 123
},
"producer_kind": "repo",
"producer_ref": "<string>",
"previous_severity": "critical",
"previous_severity_scan_run_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"severity_change_reason": "rescan_lowered",
"enrichments": {
"component": {
"release_date": "2023-11-07T05:31:56Z",
"latest_release_date": "2023-11-07T05:31:56Z",
"age_days": 1,
"versions_behind": 1,
"status": "<string>"
},
"license": {
"spdx_id": "<string>",
"name": "<string>",
"url": "<string>",
"copyleft": true,
"category": "permissive",
"dual_licensed": true,
"source": "<string>"
},
"vulnerabilities": [
{
"kev": true,
"known_ransomware": true,
"fixed_versions": [
"<string>"
],
"cwe": [
"<string>"
],
"cve_id": "<string>",
"cvss_score": 123,
"cvss_vector": "<string>",
"epss_score": 123,
"epss_percentile": 123,
"severity": "critical",
"source": "<string>",
"published": "2023-11-07T05:31:56Z",
"modified": "2023-11-07T05:31:56Z"
}
],
"geoprovenance": {
"countries": [
"<string>"
],
"locations": [
{
"country": "<string>",
"percentage": 123
}
]
},
"model": {
"derivation": {
"parents": [
"<string>"
],
"is_adapter": true,
"transform_kind": "<string>",
"adapter_type": "<string>",
"evidence_source": "<string>",
"source": "<string>"
},
"datasets": [
"<string>"
],
"bias": [
"<string>"
],
"curation": {
"audit_status": "<string>",
"declared_license": "<string>",
"source": "<string>"
},
"model_card": {
"structured": {
"ethical_considerations": [
"<string>"
],
"authors": [
"<string>"
],
"intended_use": "<string>",
"technical_limitations": "<string>",
"paper_url": "<string>"
},
"source": "<string>"
},
"shards": [
{
"filename": "<string>",
"sha256": "<string>",
"size_bytes": 123
}
],
"name": "<string>",
"author": "<string>",
"architecture": "<string>",
"model_type": "<string>",
"parameter_count": 123,
"quantization": "<string>",
"license": "<string>",
"organization": "<string>",
"source": "<string>",
"considerations": {
"ethical_considerations": [
"<string>"
],
"fairness_assessments": [
"<string>"
],
"environmental_considerations": [
"<string>"
],
"source": "<string>"
},
"modality": "<string>",
"info_code": "<string>",
"info_message": "<string>"
},
"remediation": {
"purl": "<string>",
"version": "<string>",
"coverage": "assessed",
"signals": [
{
"dimension": "vulnerability",
"kind": "<string>",
"effect": "blocking",
"fact": "<string>",
"evidence": [
{
"label": "<string>",
"url": "<string>"
}
]
}
],
"confidence": 0.5,
"confidence_reasons": [
"<string>"
],
"assessed_at": "2023-11-07T05:31:56Z",
"source": {
"provider": "<string>",
"version": "<string>"
},
"priority": "fix_now",
"action": {
"kind": "upgrade",
"upgrade_pain": "none",
"summary": "<string>",
"target_version": "<string>",
"replacement_purl": "<string>"
}
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scan_only": true,
"pending_resolution": {
"reason_slug": "<string>",
"reason_display_name": "<string>",
"justification": "<string>",
"status": "pending_review",
"suppresses": true,
"decided_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"decided_at": "2023-11-07T05:31:56Z",
"decided_by_display": "<string>"
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"resolved_alternatives": [
{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"title": "<string>",
"evidence": {
"kind": "oss-diff",
"local_file": "<string>",
"local_line_start": 123,
"local_line_end": 123,
"oss_file": "<string>",
"oss_line_start": 123,
"oss_line_end": 123,
"purl": "<string>",
"match_percent": 123,
"algorithm": "<string>",
"oss_file_path": "<string>",
"spans": [
{
"local_line_start": 123,
"local_line_end": 123,
"oss_line_start": 123,
"oss_line_end": 123
}
],
"match_type": "file"
},
"produced_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"state": "open",
"domain": "oss",
"severity": "critical",
"suppressed": true,
"version": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"purpose": "confidentiality",
"export_signals": [
{
"regime": "<string>",
"regime_version": "<string>",
"vintage": "current",
"test": "<string>",
"state": "met",
"provenance_ref": "<string>"
}
],
"location": {
"purl": "<string>",
"path": "<string>",
"line": 123,
"end_line": 123
},
"producer_kind": "repo",
"producer_ref": "<string>",
"previous_severity": "critical",
"previous_severity_scan_run_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"severity_change_reason": "rescan_lowered",
"enrichments": {
"component": {
"release_date": "2023-11-07T05:31:56Z",
"latest_release_date": "2023-11-07T05:31:56Z",
"age_days": 1,
"versions_behind": 1,
"status": "<string>"
},
"license": {
"spdx_id": "<string>",
"name": "<string>",
"url": "<string>",
"copyleft": true,
"category": "permissive",
"dual_licensed": true,
"source": "<string>"
},
"vulnerabilities": [
{
"kev": true,
"known_ransomware": true,
"fixed_versions": [
"<string>"
],
"cwe": [
"<string>"
],
"cve_id": "<string>",
"cvss_score": 123,
"cvss_vector": "<string>",
"epss_score": 123,
"epss_percentile": 123,
"severity": "critical",
"source": "<string>",
"published": "2023-11-07T05:31:56Z",
"modified": "2023-11-07T05:31:56Z"
}
],
"geoprovenance": {
"countries": [
"<string>"
],
"locations": [
{
"country": "<string>",
"percentage": 123
}
]
},
"model": {
"derivation": {
"parents": [
"<string>"
],
"is_adapter": true,
"transform_kind": "<string>",
"adapter_type": "<string>",
"evidence_source": "<string>",
"source": "<string>"
},
"datasets": [
"<string>"
],
"bias": [
"<string>"
],
"curation": {
"audit_status": "<string>",
"declared_license": "<string>",
"source": "<string>"
},
"model_card": {
"structured": {
"ethical_considerations": [
"<string>"
],
"authors": [
"<string>"
],
"intended_use": "<string>",
"technical_limitations": "<string>",
"paper_url": "<string>"
},
"source": "<string>"
},
"shards": [
{
"filename": "<string>",
"sha256": "<string>",
"size_bytes": 123
}
],
"name": "<string>",
"author": "<string>",
"architecture": "<string>",
"model_type": "<string>",
"parameter_count": 123,
"quantization": "<string>",
"license": "<string>",
"organization": "<string>",
"source": "<string>",
"considerations": {
"ethical_considerations": [
"<string>"
],
"fairness_assessments": [
"<string>"
],
"environmental_considerations": [
"<string>"
],
"source": "<string>"
},
"modality": "<string>",
"info_code": "<string>",
"info_message": "<string>"
},
"remediation": {
"purl": "<string>",
"version": "<string>",
"coverage": "assessed",
"signals": [
{
"dimension": "vulnerability",
"kind": "<string>",
"effect": "blocking",
"fact": "<string>",
"evidence": [
{
"label": "<string>",
"url": "<string>"
}
]
}
],
"confidence": 0.5,
"confidence_reasons": [
"<string>"
],
"assessed_at": "2023-11-07T05:31:56Z",
"source": {
"provider": "<string>",
"version": "<string>"
},
"priority": "fix_now",
"action": {
"kind": "upgrade",
"upgrade_pain": "none",
"summary": "<string>",
"target_version": "<string>",
"replacement_purl": "<string>"
}
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scan_only": true,
"pending_resolution": {
"reason_slug": "<string>",
"reason_display_name": "<string>",
"justification": "<string>",
"status": "pending_review",
"suppresses": true,
"decided_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"decided_at": "2023-11-07T05:31:56Z",
"decided_by_display": "<string>"
}
}
]
}{
"finding": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"title": "<string>",
"evidence": {
"kind": "oss-diff",
"local_file": "<string>",
"local_line_start": 123,
"local_line_end": 123,
"oss_file": "<string>",
"oss_line_start": 123,
"oss_line_end": 123,
"purl": "<string>",
"match_percent": 123,
"algorithm": "<string>",
"oss_file_path": "<string>",
"spans": [
{
"local_line_start": 123,
"local_line_end": 123,
"oss_line_start": 123,
"oss_line_end": 123
}
],
"match_type": "file"
},
"produced_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"state": "open",
"domain": "oss",
"severity": "critical",
"suppressed": true,
"version": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"purpose": "confidentiality",
"export_signals": [
{
"regime": "<string>",
"regime_version": "<string>",
"vintage": "current",
"test": "<string>",
"state": "met",
"provenance_ref": "<string>"
}
],
"location": {
"purl": "<string>",
"path": "<string>",
"line": 123,
"end_line": 123
},
"producer_kind": "repo",
"producer_ref": "<string>",
"previous_severity": "critical",
"previous_severity_scan_run_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"severity_change_reason": "rescan_lowered",
"enrichments": {
"component": {
"release_date": "2023-11-07T05:31:56Z",
"latest_release_date": "2023-11-07T05:31:56Z",
"age_days": 1,
"versions_behind": 1,
"status": "<string>"
},
"license": {
"spdx_id": "<string>",
"name": "<string>",
"url": "<string>",
"copyleft": true,
"category": "permissive",
"dual_licensed": true,
"source": "<string>"
},
"vulnerabilities": [
{
"kev": true,
"known_ransomware": true,
"fixed_versions": [
"<string>"
],
"cwe": [
"<string>"
],
"cve_id": "<string>",
"cvss_score": 123,
"cvss_vector": "<string>",
"epss_score": 123,
"epss_percentile": 123,
"severity": "critical",
"source": "<string>",
"published": "2023-11-07T05:31:56Z",
"modified": "2023-11-07T05:31:56Z"
}
],
"geoprovenance": {
"countries": [
"<string>"
],
"locations": [
{
"country": "<string>",
"percentage": 123
}
]
},
"model": {
"derivation": {
"parents": [
"<string>"
],
"is_adapter": true,
"transform_kind": "<string>",
"adapter_type": "<string>",
"evidence_source": "<string>",
"source": "<string>"
},
"datasets": [
"<string>"
],
"bias": [
"<string>"
],
"curation": {
"audit_status": "<string>",
"declared_license": "<string>",
"source": "<string>"
},
"model_card": {
"structured": {
"ethical_considerations": [
"<string>"
],
"authors": [
"<string>"
],
"intended_use": "<string>",
"technical_limitations": "<string>",
"paper_url": "<string>"
},
"source": "<string>"
},
"shards": [
{
"filename": "<string>",
"sha256": "<string>",
"size_bytes": 123
}
],
"name": "<string>",
"author": "<string>",
"architecture": "<string>",
"model_type": "<string>",
"parameter_count": 123,
"quantization": "<string>",
"license": "<string>",
"organization": "<string>",
"source": "<string>",
"considerations": {
"ethical_considerations": [
"<string>"
],
"fairness_assessments": [
"<string>"
],
"environmental_considerations": [
"<string>"
],
"source": "<string>"
},
"modality": "<string>",
"info_code": "<string>",
"info_message": "<string>"
},
"remediation": {
"purl": "<string>",
"version": "<string>",
"coverage": "assessed",
"signals": [
{
"dimension": "vulnerability",
"kind": "<string>",
"effect": "blocking",
"fact": "<string>",
"evidence": [
{
"label": "<string>",
"url": "<string>"
}
]
}
],
"confidence": 0.5,
"confidence_reasons": [
"<string>"
],
"assessed_at": "2023-11-07T05:31:56Z",
"source": {
"provider": "<string>",
"version": "<string>"
},
"priority": "fix_now",
"action": {
"kind": "upgrade",
"upgrade_pain": "none",
"summary": "<string>",
"target_version": "<string>",
"replacement_purl": "<string>"
}
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scan_only": true,
"pending_resolution": {
"reason_slug": "<string>",
"reason_display_name": "<string>",
"justification": "<string>",
"status": "pending_review",
"suppresses": true,
"decided_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"decided_at": "2023-11-07T05:31:56Z",
"decided_by_display": "<string>"
}
},
"applies_when": "default_branch"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}findings
Resolve a finding with a reason
POST
/
v1
/
findings
/
{findingId}
/
actions
/
resolve
Resolve a finding with a reason
curl --request POST \
--url https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": true
},
"scope": {
"value": "<string>"
},
"expected_version": 123,
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
'import requests
url = "https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve"
payload = {
"reason": {
"domain_slug": "<string>",
"slug": "<string>",
"display_name": "<string>",
"suppresses": True
},
"scope": { "value": "<string>" },
"expected_version": 123,
"justification": "<string>",
"replacement_purl": "<string>",
"concluded_license": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
reason: {
domain_slug: '<string>',
slug: '<string>',
display_name: '<string>',
suppresses: true
},
scope: {value: '<string>'},
expected_version: 123,
justification: '<string>',
replacement_purl: '<string>',
concluded_license: '<string>'
})
};
fetch('https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'reason' => [
'domain_slug' => '<string>',
'slug' => '<string>',
'display_name' => '<string>',
'suppresses' => true
],
'scope' => [
'value' => '<string>'
],
'expected_version' => 123,
'justification' => '<string>',
'replacement_purl' => '<string>',
'concluded_license' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve"
payload := strings.NewReader("{\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"expected_version\": 123,\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"expected_version\": 123,\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{tenant}.earnie.dev/v1/findings/{findingId}/actions/resolve")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"reason\": {\n \"domain_slug\": \"<string>\",\n \"slug\": \"<string>\",\n \"display_name\": \"<string>\",\n \"suppresses\": true\n },\n \"scope\": {\n \"value\": \"<string>\"\n },\n \"expected_version\": 123,\n \"justification\": \"<string>\",\n \"replacement_purl\": \"<string>\",\n \"concluded_license\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"finding": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"title": "<string>",
"evidence": {
"kind": "oss-diff",
"local_file": "<string>",
"local_line_start": 123,
"local_line_end": 123,
"oss_file": "<string>",
"oss_line_start": 123,
"oss_line_end": 123,
"purl": "<string>",
"match_percent": 123,
"algorithm": "<string>",
"oss_file_path": "<string>",
"spans": [
{
"local_line_start": 123,
"local_line_end": 123,
"oss_line_start": 123,
"oss_line_end": 123
}
],
"match_type": "file"
},
"produced_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"state": "open",
"domain": "oss",
"severity": "critical",
"suppressed": true,
"version": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"purpose": "confidentiality",
"export_signals": [
{
"regime": "<string>",
"regime_version": "<string>",
"vintage": "current",
"test": "<string>",
"state": "met",
"provenance_ref": "<string>"
}
],
"location": {
"purl": "<string>",
"path": "<string>",
"line": 123,
"end_line": 123
},
"producer_kind": "repo",
"producer_ref": "<string>",
"previous_severity": "critical",
"previous_severity_scan_run_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"severity_change_reason": "rescan_lowered",
"enrichments": {
"component": {
"release_date": "2023-11-07T05:31:56Z",
"latest_release_date": "2023-11-07T05:31:56Z",
"age_days": 1,
"versions_behind": 1,
"status": "<string>"
},
"license": {
"spdx_id": "<string>",
"name": "<string>",
"url": "<string>",
"copyleft": true,
"category": "permissive",
"dual_licensed": true,
"source": "<string>"
},
"vulnerabilities": [
{
"kev": true,
"known_ransomware": true,
"fixed_versions": [
"<string>"
],
"cwe": [
"<string>"
],
"cve_id": "<string>",
"cvss_score": 123,
"cvss_vector": "<string>",
"epss_score": 123,
"epss_percentile": 123,
"severity": "critical",
"source": "<string>",
"published": "2023-11-07T05:31:56Z",
"modified": "2023-11-07T05:31:56Z"
}
],
"geoprovenance": {
"countries": [
"<string>"
],
"locations": [
{
"country": "<string>",
"percentage": 123
}
]
},
"model": {
"derivation": {
"parents": [
"<string>"
],
"is_adapter": true,
"transform_kind": "<string>",
"adapter_type": "<string>",
"evidence_source": "<string>",
"source": "<string>"
},
"datasets": [
"<string>"
],
"bias": [
"<string>"
],
"curation": {
"audit_status": "<string>",
"declared_license": "<string>",
"source": "<string>"
},
"model_card": {
"structured": {
"ethical_considerations": [
"<string>"
],
"authors": [
"<string>"
],
"intended_use": "<string>",
"technical_limitations": "<string>",
"paper_url": "<string>"
},
"source": "<string>"
},
"shards": [
{
"filename": "<string>",
"sha256": "<string>",
"size_bytes": 123
}
],
"name": "<string>",
"author": "<string>",
"architecture": "<string>",
"model_type": "<string>",
"parameter_count": 123,
"quantization": "<string>",
"license": "<string>",
"organization": "<string>",
"source": "<string>",
"considerations": {
"ethical_considerations": [
"<string>"
],
"fairness_assessments": [
"<string>"
],
"environmental_considerations": [
"<string>"
],
"source": "<string>"
},
"modality": "<string>",
"info_code": "<string>",
"info_message": "<string>"
},
"remediation": {
"purl": "<string>",
"version": "<string>",
"coverage": "assessed",
"signals": [
{
"dimension": "vulnerability",
"kind": "<string>",
"effect": "blocking",
"fact": "<string>",
"evidence": [
{
"label": "<string>",
"url": "<string>"
}
]
}
],
"confidence": 0.5,
"confidence_reasons": [
"<string>"
],
"assessed_at": "2023-11-07T05:31:56Z",
"source": {
"provider": "<string>",
"version": "<string>"
},
"priority": "fix_now",
"action": {
"kind": "upgrade",
"upgrade_pain": "none",
"summary": "<string>",
"target_version": "<string>",
"replacement_purl": "<string>"
}
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scan_only": true,
"pending_resolution": {
"reason_slug": "<string>",
"reason_display_name": "<string>",
"justification": "<string>",
"status": "pending_review",
"suppresses": true,
"decided_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"decided_at": "2023-11-07T05:31:56Z",
"decided_by_display": "<string>"
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"resolved_alternatives": [
{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"title": "<string>",
"evidence": {
"kind": "oss-diff",
"local_file": "<string>",
"local_line_start": 123,
"local_line_end": 123,
"oss_file": "<string>",
"oss_line_start": 123,
"oss_line_end": 123,
"purl": "<string>",
"match_percent": 123,
"algorithm": "<string>",
"oss_file_path": "<string>",
"spans": [
{
"local_line_start": 123,
"local_line_end": 123,
"oss_line_start": 123,
"oss_line_end": 123
}
],
"match_type": "file"
},
"produced_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"state": "open",
"domain": "oss",
"severity": "critical",
"suppressed": true,
"version": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"purpose": "confidentiality",
"export_signals": [
{
"regime": "<string>",
"regime_version": "<string>",
"vintage": "current",
"test": "<string>",
"state": "met",
"provenance_ref": "<string>"
}
],
"location": {
"purl": "<string>",
"path": "<string>",
"line": 123,
"end_line": 123
},
"producer_kind": "repo",
"producer_ref": "<string>",
"previous_severity": "critical",
"previous_severity_scan_run_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"severity_change_reason": "rescan_lowered",
"enrichments": {
"component": {
"release_date": "2023-11-07T05:31:56Z",
"latest_release_date": "2023-11-07T05:31:56Z",
"age_days": 1,
"versions_behind": 1,
"status": "<string>"
},
"license": {
"spdx_id": "<string>",
"name": "<string>",
"url": "<string>",
"copyleft": true,
"category": "permissive",
"dual_licensed": true,
"source": "<string>"
},
"vulnerabilities": [
{
"kev": true,
"known_ransomware": true,
"fixed_versions": [
"<string>"
],
"cwe": [
"<string>"
],
"cve_id": "<string>",
"cvss_score": 123,
"cvss_vector": "<string>",
"epss_score": 123,
"epss_percentile": 123,
"severity": "critical",
"source": "<string>",
"published": "2023-11-07T05:31:56Z",
"modified": "2023-11-07T05:31:56Z"
}
],
"geoprovenance": {
"countries": [
"<string>"
],
"locations": [
{
"country": "<string>",
"percentage": 123
}
]
},
"model": {
"derivation": {
"parents": [
"<string>"
],
"is_adapter": true,
"transform_kind": "<string>",
"adapter_type": "<string>",
"evidence_source": "<string>",
"source": "<string>"
},
"datasets": [
"<string>"
],
"bias": [
"<string>"
],
"curation": {
"audit_status": "<string>",
"declared_license": "<string>",
"source": "<string>"
},
"model_card": {
"structured": {
"ethical_considerations": [
"<string>"
],
"authors": [
"<string>"
],
"intended_use": "<string>",
"technical_limitations": "<string>",
"paper_url": "<string>"
},
"source": "<string>"
},
"shards": [
{
"filename": "<string>",
"sha256": "<string>",
"size_bytes": 123
}
],
"name": "<string>",
"author": "<string>",
"architecture": "<string>",
"model_type": "<string>",
"parameter_count": 123,
"quantization": "<string>",
"license": "<string>",
"organization": "<string>",
"source": "<string>",
"considerations": {
"ethical_considerations": [
"<string>"
],
"fairness_assessments": [
"<string>"
],
"environmental_considerations": [
"<string>"
],
"source": "<string>"
},
"modality": "<string>",
"info_code": "<string>",
"info_message": "<string>"
},
"remediation": {
"purl": "<string>",
"version": "<string>",
"coverage": "assessed",
"signals": [
{
"dimension": "vulnerability",
"kind": "<string>",
"effect": "blocking",
"fact": "<string>",
"evidence": [
{
"label": "<string>",
"url": "<string>"
}
]
}
],
"confidence": 0.5,
"confidence_reasons": [
"<string>"
],
"assessed_at": "2023-11-07T05:31:56Z",
"source": {
"provider": "<string>",
"version": "<string>"
},
"priority": "fix_now",
"action": {
"kind": "upgrade",
"upgrade_pain": "none",
"summary": "<string>",
"target_version": "<string>",
"replacement_purl": "<string>"
}
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scan_only": true,
"pending_resolution": {
"reason_slug": "<string>",
"reason_display_name": "<string>",
"justification": "<string>",
"status": "pending_review",
"suppresses": true,
"decided_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"decided_at": "2023-11-07T05:31:56Z",
"decided_by_display": "<string>"
}
}
]
}{
"finding": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"org_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"domain_slug": "<string>",
"title": "<string>",
"evidence": {
"kind": "oss-diff",
"local_file": "<string>",
"local_line_start": 123,
"local_line_end": 123,
"oss_file": "<string>",
"oss_line_start": 123,
"oss_line_end": 123,
"purl": "<string>",
"match_percent": 123,
"algorithm": "<string>",
"oss_file_path": "<string>",
"spans": [
{
"local_line_start": 123,
"local_line_end": 123,
"oss_line_start": 123,
"oss_line_end": 123
}
],
"match_type": "file"
},
"produced_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"state": "open",
"domain": "oss",
"severity": "critical",
"suppressed": true,
"version": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"purpose": "confidentiality",
"export_signals": [
{
"regime": "<string>",
"regime_version": "<string>",
"vintage": "current",
"test": "<string>",
"state": "met",
"provenance_ref": "<string>"
}
],
"location": {
"purl": "<string>",
"path": "<string>",
"line": 123,
"end_line": 123
},
"producer_kind": "repo",
"producer_ref": "<string>",
"previous_severity": "critical",
"previous_severity_scan_run_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"severity_change_reason": "rescan_lowered",
"enrichments": {
"component": {
"release_date": "2023-11-07T05:31:56Z",
"latest_release_date": "2023-11-07T05:31:56Z",
"age_days": 1,
"versions_behind": 1,
"status": "<string>"
},
"license": {
"spdx_id": "<string>",
"name": "<string>",
"url": "<string>",
"copyleft": true,
"category": "permissive",
"dual_licensed": true,
"source": "<string>"
},
"vulnerabilities": [
{
"kev": true,
"known_ransomware": true,
"fixed_versions": [
"<string>"
],
"cwe": [
"<string>"
],
"cve_id": "<string>",
"cvss_score": 123,
"cvss_vector": "<string>",
"epss_score": 123,
"epss_percentile": 123,
"severity": "critical",
"source": "<string>",
"published": "2023-11-07T05:31:56Z",
"modified": "2023-11-07T05:31:56Z"
}
],
"geoprovenance": {
"countries": [
"<string>"
],
"locations": [
{
"country": "<string>",
"percentage": 123
}
]
},
"model": {
"derivation": {
"parents": [
"<string>"
],
"is_adapter": true,
"transform_kind": "<string>",
"adapter_type": "<string>",
"evidence_source": "<string>",
"source": "<string>"
},
"datasets": [
"<string>"
],
"bias": [
"<string>"
],
"curation": {
"audit_status": "<string>",
"declared_license": "<string>",
"source": "<string>"
},
"model_card": {
"structured": {
"ethical_considerations": [
"<string>"
],
"authors": [
"<string>"
],
"intended_use": "<string>",
"technical_limitations": "<string>",
"paper_url": "<string>"
},
"source": "<string>"
},
"shards": [
{
"filename": "<string>",
"sha256": "<string>",
"size_bytes": 123
}
],
"name": "<string>",
"author": "<string>",
"architecture": "<string>",
"model_type": "<string>",
"parameter_count": 123,
"quantization": "<string>",
"license": "<string>",
"organization": "<string>",
"source": "<string>",
"considerations": {
"ethical_considerations": [
"<string>"
],
"fairness_assessments": [
"<string>"
],
"environmental_considerations": [
"<string>"
],
"source": "<string>"
},
"modality": "<string>",
"info_code": "<string>",
"info_message": "<string>"
},
"remediation": {
"purl": "<string>",
"version": "<string>",
"coverage": "assessed",
"signals": [
{
"dimension": "vulnerability",
"kind": "<string>",
"effect": "blocking",
"fact": "<string>",
"evidence": [
{
"label": "<string>",
"url": "<string>"
}
]
}
],
"confidence": 0.5,
"confidence_reasons": [
"<string>"
],
"assessed_at": "2023-11-07T05:31:56Z",
"source": {
"provider": "<string>",
"version": "<string>"
},
"priority": "fix_now",
"action": {
"kind": "upgrade",
"upgrade_pain": "none",
"summary": "<string>",
"target_version": "<string>",
"replacement_purl": "<string>"
}
}
},
"resolution_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scan_only": true,
"pending_resolution": {
"reason_slug": "<string>",
"reason_display_name": "<string>",
"justification": "<string>",
"status": "pending_review",
"suppresses": true,
"decided_by": {
"kind": "user",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"decided_at": "2023-11-07T05:31:56Z",
"decided_by_display": "<string>"
}
},
"applies_when": "default_branch"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Authorizations
An Earnie API key, sent as Authorization: Bearer sk_earnie_.... Create one under Settings > API keys. The key's scopes decide which operations it may call.
Path Parameters
Body
application/json
A triage resolution reason. The canonical slugs cover five families: OSS (confirm_match, mark_original, replace_component), declared dependencies (accept_dependency, dismiss_dependency), crypto (confirm_usage, false_positive, accepted_risk), AI usage (confirm_ai_usage, not_ai_usage, approve_ai_usage), and identified AI models (approve_model, reject_model, wrong_identification). Each slug decides findings of its own family only; any other finding answers 400 reason_domain_mismatch. Callers MUST supply a non-empty slug by default; the org-level triage_reason_required setting controls whether an empty slug is permitted (see CAP2). Each slug carries a gate posture, reported by the suppresses field below and applied by the resolve path: resolving with a suppressing reason drops the finding from PR-gate impact, and reopening it undoes that suppression.
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Versioned purl required when reason.slug is replace_component.
Optional license the operator concluded for the component (an SPDX identifier when picked from the SPDX list). Stored on the resolution as structured evidence — SBOM export renders it as the component's concluded license rather than NOASSERTION. Distinct from justification, which carries only the operator's free-text note.
Response
Finding after resolution + resolution ID
Show child attributes
Show child attributes
The other candidates of the same file that this decision resolved, as they now stand. Confirming a code match identifies its file, so the file's other full-file matches, and its other snippets whose line ranges overlap, are resolved with the reason another_candidate_identified. Reopening the confirmed finding reopens them. Empty for every other decision.
Show child attributes
Show child attributes