update_finding
Change a finding’s status (open, confirmed, or dismissed) or revise its statement while preserving change history for auditable detection case updates.
Instructions
Change a finding's status (open, confirmed, dismissed) or wording; history is kept. Example: update_finding(finding_id="f-0001", status="confirmed")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| status | No | ||
| statement | No | ||
| finding_id | Yes |