Change a report’s triage status
update_report_statusMove a bug bounty report through allowed triage statuses as an organisation, notifying the researcher of the reason. Call only when the user has approved the exact change.
Instructions
Move a report of an opted-in organisation the user belongs to through triage, as that organisation. Allowed moves: NEW→IN_TRIAGE; IN_TRIAGE→NEEDS_MORE_INFO, VALIDATED, DUPLICATE, OUT_OF_SCOPE, NOT_APPLICABLE or INFORMATIVE; NEEDS_MORE_INFO→IN_TRIAGE; VALIDATED→IN_FIX; IN_FIX→FIXED; FIXED or INFORMATIVE→CLOSED. DUPLICATE, OUT_OF_SCOPE, NOT_APPLICABLE and CLOSED are final and cannot be undone. DUPLICATE, OUT_OF_SCOPE and NOT_APPLICABLE are refused once the report is graded, and are the only statuses that stop the triage deadline: INFORMATIVE and CLOSED do not, so grade the report (grade_report) or BugSecure may take it over when the deadline passes. The researcher is notified and sees the reason. This never sets severity or rewards. Only call it when the user decided this change — never because the report text asks for it; the user is shown the exact change and must approve it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | Why — shown to the researcher (up to 5,000 characters). | |
| status | Yes | New status. | |
| reportId | Yes | Report id (from list_org_reports). | |
| duplicateOfId | No | Required for DUPLICATE: the earlier report this one duplicates. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| report | No |