Update Finding
update_findingAdvance a security finding to a new lifecycle stage—acknowledged, remediated, verified, or dismissed—while recording notes, rationale, and remediation evidence.
Instructions
Advance a finding through its lifecycle. Mutating: updates the finding's status and metadata.
Use to acknowledge, remediate, verify, or dismiss a finding previously recorded by submit_findings / list_findings. This records a MANUAL status transition — the machine-set auto_resolved state is not among the statuses it accepts; for gaps whose kind has an automatic fix, preview_finding_remediation + apply_finding_remediation perform the actual cleanup instead.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| notes | No | Optional free-text notes recorded on the finding. | |
| reason | No | Optional rationale; required when dismissing (status="dismissed"). | |
| status | Yes | New lifecycle status, one of "discovered", "acknowledged", "remediated", "verified", "dismissed". ``auto_resolved`` is NOT settable here: it asserts that a condition is no longer reproduced, which is a claim only the platform can make from its own re-evaluation. Setting it by hand would forge that claim, so this tool refuses it — use ``dismissed`` (with a reason) to record that a gap does not matter, which is the judgment a person is entitled to make. | |
| model_id | Yes | ID of the threat model. | |
| finding_id | Yes | ID of the finding to update. | |
| server_version | Yes | ||
| remediation_assertion_ids | No | Optional comma-separated assertion IDs that evidence the fix, linking the remediation to the assertions that prove it. Empty by default. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||