Skip to main content

CreateOrUpdateFindingPolymorphicInput

Polymorphic wrapper to batch create or update any type of finding. Provide exactly ONE of the finding type keys.

input CreateOrUpdateFindingPolymorphicInput {
assetId: ID!
branch: String
sast: CreateOrUpdateSastFindingInput
sca: CreateOrUpdateScaFindingInput
dast: CreateOrUpdateDastFindingInput
container: CreateOrUpdateContainerFindingInput
iac: CreateOrUpdateSastFindingInput
secret: CreateOrUpdateSastFindingInput
api: CreateOrUpdateApiFindingInput
}

Fields

CreateOrUpdateFindingPolymorphicInput.assetId ● ID! non-null scalar

Given all finding types require an asset, this is hoisted to the polymorphic wrapper to allow single-query authorization.

CreateOrUpdateFindingPolymorphicInput.branch ● String scalar

Name of the Git branch this finding was found on, e.g. "main" or "release/2.0". Optional: when omitted, the finding is recorded on the Asset's default branch, exactly as before. The branch is created if it does not exist yet. Ignored for Assets that are not linked to a Git repository. This is the place to set the branch — it wins over a branch set inside the finding-type input below.

CreateOrUpdateFindingPolymorphicInput.sast ● CreateOrUpdateSastFindingInput input

Data for creating/updating a SAST finding

CreateOrUpdateFindingPolymorphicInput.sca ● CreateOrUpdateScaFindingInput input

Data for creating/updating a SCA finding

CreateOrUpdateFindingPolymorphicInput.dast ● CreateOrUpdateDastFindingInput input

Data for creating/updating a DAST finding

CreateOrUpdateFindingPolymorphicInput.container ● CreateOrUpdateContainerFindingInput input

Data for creating/updating a Container finding

CreateOrUpdateFindingPolymorphicInput.iac ● CreateOrUpdateSastFindingInput input

Data for creating/updating an IaC finding (uses SAST structure)

CreateOrUpdateFindingPolymorphicInput.secret ● CreateOrUpdateSastFindingInput input

Data for creating/updating a Secret finding (uses SAST structure)

CreateOrUpdateFindingPolymorphicInput.api ● CreateOrUpdateApiFindingInput input

Data for creating/updating an API finding (Salt Security)

Member Of

BatchCreateOrUpdateFindingsInput input

Contribute to the Docs

Found something outdated or missing? Help us improve the documentation with a quick suggestion or edit.

How to contribute

Resources

By exploring our content, you'll find resources that will enhance your understanding of the importance of a Security Application Program.

Conviso Blog: Explore our blog, which offers a collection of articles and posts covering a wide range of AppSec topics. The content on the blog is primarily in English.

Conviso's YouTube Channel: Access a wealth of informative videos covering various topics related to AppSec. Please note that the content is primarily in Portuguese.