set_analysis
Update analysis record for a vulnerability finding. Set state, justification, response, details, comment, or suppression using component and vulnerability UUIDs or a finding dict.
Instructions
⚠ WRITE. Update the analysis record for one finding.
Two ways to identify the finding:
Pass
component_uuidandvulnerability_uuiddirectly.Pass
finding— a NormalizedFinding dict as returned bylist_findings,group_findings_by_alias, or entries insidefind_duplicate_analyses. The UUIDs are extracted automatically, avoiding copy-paste errors in the triage loop.
When finding is provided, its UUIDs take precedence.
project_uuid is always required because findings from
find_duplicate_analyses → other_projects may belong to a
different project.
Issues PUT /api/v1/analysis; the connection-layer guard refuses
any other write path. Fields left as None are omitted from the
body, so DT keeps its current value. comment appends to the
history, it does not replace existing comments. Returns the full
normalized analysis after the write.
Args:
project_uuid: DT project UUID.
state: One of NOT_SET, IN_TRIAGE, EXPLOITABLE, FALSE_POSITIVE,
NOT_AFFECTED, RESOLVED.
component_uuid: DT component UUID (required unless finding
is provided).
vulnerability_uuid: DT vulnerability UUID (required unless
finding is provided).
finding: A NormalizedFinding dict. When provided, component_uuid
and vulnerability_uuid are extracted from it.
justification: Optional CycloneDX justification enum
(e.g. CODE_NOT_REACHABLE, REQUIRES_CONFIGURATION).
response: Optional response enum (e.g. CAN_NOT_FIX, WILL_NOT_FIX,
UPDATE, ROLLBACK, WORKAROUND_AVAILABLE).
details: Optional free-text analysis details.
comment: Optional free-text comment appended to the history.
suppressed: Optional bool to suppress/unsuppress the finding.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| project_uuid | Yes | ||
| state | Yes | ||
| component_uuid | No | ||
| vulnerability_uuid | No | ||
| finding | No | ||
| justification | No | ||
| response | No | ||
| details | No | ||
| comment | No | ||
| suppressed | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||