verify_finding
Check a security finding's cited evidence locations against the artifact files to confirm each file and line range exists, returning verified, partial, unverified, or failed per item.
Instructions
Check a finding's evidence against the files it cites. For each evidence item with a location such as "com/acme/Api.java:12" it confirms the file exists in the artifact and the line (or range) is within it; items without a location, or in a single-file artifact, are reported as unverified. Returns { findingId, checkedAt, summary: verified | partial | unverified | failed, items: [{ index, artifactId, entityId?, location?, status, reason }] }. "verified" means the cited place exists - it does not prove the claim is true, so still read the code. It never changes the finding's status; use update_finding for that. Only reads. Errors if the finding doesn't exist.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| findingId | Yes | Id of the finding, from list_findings or create_finding. |