Skip to main content

UpdatePolicyControlsInput

Autogenerated input type of UpdatePolicyControls

input UpdatePolicyControlsInput {
companyId: ID!
vulnerabilityPolicies: [String!]
vulnerabilityLevels: [String!]
sendVulnerability: Boolean
sendVulnerabilityLevel: Boolean
falsePositiveAgentBaseStatuses: [String!]
enableFalsePositiveAgent: Boolean
enableFalsePositiveBranchSync: Boolean
falsePositiveBranchSyncScope: FalsePositiveBranchSyncScopeEnum
securityGateRules: [SecurityGateRulesWithSourceInput!]
securityGatePrEvaluationScope: SecurityGatePrEvaluationScopeEnum
enableAutofixQueue: Boolean
autofixAssets: JSON
enableMcpWrite: Boolean
clientMutationId: String
}

Fields​

UpdatePolicyControlsInput.companyId ● ID! non-null scalar​

The ID of the company

UpdatePolicyControlsInput.vulnerabilityPolicies ● [String!] list scalar​

List of vulnerability severity policies (all_vuln, low, medium, high, critical)

UpdatePolicyControlsInput.vulnerabilityLevels ● [String!] list scalar​

List of vulnerability severity levels to process (all_vuln, low, medium, high, critical)

UpdatePolicyControlsInput.sendVulnerability ● Boolean scalar​

Whether to send vulnerability notifications

UpdatePolicyControlsInput.sendVulnerabilityLevel ● Boolean scalar​

Whether to send vulnerability level notifications

UpdatePolicyControlsInput.falsePositiveAgentBaseStatuses ● [String!] list scalar​

List of base statuses for false positive findings (identified; created is still accepted for configurations that hold it). The agent does not analyze DRAFT, so draft is refused

UpdatePolicyControlsInput.enableFalsePositiveAgent ● Boolean scalar​

Whether to enable false positive agent

UpdatePolicyControlsInput.enableFalsePositiveBranchSync ● Boolean scalar​

Whether to sync a false positive to the same finding on the asset's other branches

UpdatePolicyControlsInput.falsePositiveBranchSyncScope ● FalsePositiveBranchSyncScopeEnum enum​

Which branches a synced false positive may come from: only the default branch, or any branch

UpdatePolicyControlsInput.securityGateRules ● [SecurityGateRulesWithSourceInput!] list input​

Security gate rules to create or update the company configuration

UpdatePolicyControlsInput.securityGatePrEvaluationScope ● SecurityGatePrEvaluationScopeEnum enum​

How pull request-triggered gate runs count findings for the company-wide configuration. Omit to leave unchanged; independent of securityGateRules.

UpdatePolicyControlsInput.enableAutofixQueue ● Boolean scalar​

Enable automatic Autofix for eligible findings

UpdatePolicyControlsInput.autofixAssets ● JSON scalar​

Automatic Autofix controls keyed by company asset ID. Autofix runs only for severities explicitly set to true; setting enabled to false blocks the entire asset

UpdatePolicyControlsInput.enableMcpWrite ● Boolean scalar​

Whether to allow the MCP server to perform write operations

UpdatePolicyControlsInput.clientMutationId ● String scalar​

A unique identifier for the client performing the mutation.

Member Of​

updatePolicyControls mutation

Contribute to the Docs

Found something outdated or missing? Help us improve the documentation with a quick suggestion or edit.

How to contribute

Resources

By exploring our content, you'll find resources that will enhance your understanding of the importance of a Security Application Program.

Conviso Blog: Explore our blog, which offers a collection of articles and posts covering a wide range of AppSec topics. The content on the blog is primarily in English.

Conviso's YouTube Channel: Access a wealth of informative videos covering various topics related to AppSec. Please note that the content is primarily in Portuguese.