Ingest External Scanner Report
ingest_external_scanDestructive
Parse Trivy, Grype, or Syft JSON scan output and optionally push findings to the control plane, resolving absent findings when specified.
Instructions
Ingest Trivy, Grype, or Syft JSON scan output and optionally push findings to the control plane.
This tool mutates the control plane when ``parse_only`` is false: it bulk-ingests
findings and, with ``reconcile_absent``, resolves open findings absent from the batch.
That write path is gated as a destructive action requiring the ``findings:write`` scope.
``parse_only`` requests parse locally only and stay a read.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| source | No | Source label stored on ingested findings. | external_scan |
| scan_json | Yes | JSON string from Trivy, Grype, or Syft scan output | |
| parse_only | No | When true, parse locally only. When false, bulk-ingest to the control plane when AGENT_BOM_API_URL and credentials are configured. | |
| reconcile_absent | No | When pushing, mark findings absent from this batch as resolved. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |