| Name | Type | Description | Notes |
|---|---|---|---|
| createdAt | OffsetDateTime | ||
| details | Map<String, Object> | Fields specific to the finding type. An IOC has kind and value, a capability has name, a vulnerability has optional cve, cwe and location, and a cross-file flow has steps. | |
| findingId | Long | ||
| findingType | FindingTypeEnum | ||
| investigationId | Long | ||
| severity | SeverityEnum | ||
| source | String | The agent or tool that produced the finding. | |
| summary | String | ||
| title | String |
| Name | Value |
|---|---|
| IOC | "IOC" |
| CAPABILITY | "CAPABILITY" |
| VULNERABILITY | "VULNERABILITY" |
| CROSS_FILE_FLOW | "CROSS_FILE_FLOW" |
| UNKNOWN_DEFAULT_OPEN_API | "unknown_default_open_api" |
| Name | Value |
|---|---|
| CRITICAL | "CRITICAL" |
| HIGH | "HIGH" |
| MEDIUM | "MEDIUM" |
| LOW | "LOW" |
| UNKNOWN_DEFAULT_OPEN_API | "unknown_default_open_api" |