group_findings_by_alias
Deduplicate vulnerability findings by grouping those linked through aliases into clusters, each with a canonical ID and merge trace.
Instructions
Group findings by alias (transitive closure) — dedup CVE/GHSA/OSV.
Vulnerabilities reported under different ids (e.g. CVE-2024-X and
GHSA-Y-Z) often refer to the same issue and are linked via DT's
aliases. This tool runs union-find over that alias graph and returns
one cluster per real issue. Each cluster carries a canonical id
(CVE first, then GHSA, then OSV, then SNYK, then INTERNAL, then
alphabetical), the full alias list, a merge_reason trace of the
edges that joined the cluster, and every finding in the project
belonging to it.
Same filters as list_findings. Pagination applies to groups, not to the findings inside them — a group always ships with all its findings intact. Sorted by highest CVSS score (v3 or v4) descending. Read-only.
include_details=True (v0.3) embeds title/description/references
in every finding's vulnerability summary. The same description text
repeats on each finding inside a group — acceptable tradeoff for a
single-call triage flow.
Args: project_uuid: DT project UUID. suppressed: Include suppressed findings. analysis_states: Whitelist of analysis state strings. severities: Whitelist of severity strings. page: 1-based page of groups (not findings). page_size: Groups per page (max 500). include_details: If true, embed title/description/references in each finding's vulnerability summary (v0.3). Default false.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| project_uuid | Yes | ||
| suppressed | No | ||
| analysis_states | No | ||
| severities | No | ||
| page | No | ||
| page_size | No | ||
| include_details | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||