add_finding
Record a concise finding backed by existing run and evidence IDs to keep detection observations traceable; new findings start as open for review.
Instructions
Record a short statement supported by specific runs, e.g. 'SID 1000042 fires 300 times, 95% from 10.0.4.20'. Run and evidence ids must exist. Starts as status 'open'. Example: add_finding(statement="SID 1000042 is dominated by one scanner", run_ids=["r-0002"])
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| run_ids | Yes | ||
| statement | Yes | ||
| evidence_ids | No |