Realizar el triaje masivo de hallazgos

curl --request PATCH \
  --url https://www.corgea.app/api/v1/triage/findings \
  --header 'CORGEA-TOKEN: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "justification": "<string>",
  "rule": {
    "statuses": [],
    "company_wide": false,
    "project_ids": [
      123
    ],
    "team_ids": [
      123
    ],
    "finding_types": [
      "sast",
      "sca"
    ],
    "cwes": [
      "CWE-79"
    ],
    "cves": [
      "CVE-2026-1000"
    ],
    "path_patterns": [
      "tests/**"
    ],
    "severities": [],
    "match": "all"
  },
  "finding_ids": [
    "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  ],
  "apply": true,
  "expiry_date": "2023-11-07T05:31:56Z"
}
'

import requests

url = "https://www.corgea.app/api/v1/triage/findings"

payload = {
    "justification": "<string>",
    "rule": {
        "statuses": [],
        "company_wide": False,
        "project_ids": [123],
        "team_ids": [123],
        "finding_types": ["sast", "sca"],
        "cwes": ["CWE-79"],
        "cves": ["CVE-2026-1000"],
        "path_patterns": ["tests/**"],
        "severities": [],
        "match": "all"
    },
    "finding_ids": ["3c90c3cc-0d44-4b50-8888-8dd25736052a"],
    "apply": True,
    "expiry_date": "2023-11-07T05:31:56Z"
}
headers = {
    "CORGEA-TOKEN": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PATCH',
  headers: {'CORGEA-TOKEN': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    justification: '<string>',
    rule: {
      statuses: [],
      company_wide: false,
      project_ids: [123],
      team_ids: [123],
      finding_types: ['sast', 'sca'],
      cwes: ['CWE-79'],
      cves: ['CVE-2026-1000'],
      path_patterns: ['tests/**'],
      severities: [],
      match: 'all'
    },
    finding_ids: ['3c90c3cc-0d44-4b50-8888-8dd25736052a'],
    apply: true,
    expiry_date: '2023-11-07T05:31:56Z'
  })
};

fetch('https://www.corgea.app/api/v1/triage/findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.corgea.app/api/v1/triage/findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
  CURLOPT_POSTFIELDS => json_encode([
    'justification' => '<string>',
    'rule' => [
        'statuses' => [
                
        ],
        'company_wide' => false,
        'project_ids' => [
                123
        ],
        'team_ids' => [
                123
        ],
        'finding_types' => [
                'sast',
                'sca'
        ],
        'cwes' => [
                'CWE-79'
        ],
        'cves' => [
                'CVE-2026-1000'
        ],
        'path_patterns' => [
                'tests/**'
        ],
        'severities' => [
                
        ],
        'match' => 'all'
    ],
    'finding_ids' => [
        '3c90c3cc-0d44-4b50-8888-8dd25736052a'
    ],
    'apply' => true,
    'expiry_date' => '2023-11-07T05:31:56Z'
  ]),
  CURLOPT_HTTPHEADER => [
    "CORGEA-TOKEN: <api-key>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://www.corgea.app/api/v1/triage/findings"

	payload := strings.NewReader("{\n  \"justification\": \"<string>\",\n  \"rule\": {\n    \"statuses\": [],\n    \"company_wide\": false,\n    \"project_ids\": [\n      123\n    ],\n    \"team_ids\": [\n      123\n    ],\n    \"finding_types\": [\n      \"sast\",\n      \"sca\"\n    ],\n    \"cwes\": [\n      \"CWE-79\"\n    ],\n    \"cves\": [\n      \"CVE-2026-1000\"\n    ],\n    \"path_patterns\": [\n      \"tests/**\"\n    ],\n    \"severities\": [],\n    \"match\": \"all\"\n  },\n  \"finding_ids\": [\n    \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n  ],\n  \"apply\": true,\n  \"expiry_date\": \"2023-11-07T05:31:56Z\"\n}")

	req, _ := http.NewRequest("PATCH", url, payload)

	req.Header.Add("CORGEA-TOKEN", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://www.corgea.app/api/v1/triage/findings")
  .header("CORGEA-TOKEN", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"justification\": \"<string>\",\n  \"rule\": {\n    \"statuses\": [],\n    \"company_wide\": false,\n    \"project_ids\": [\n      123\n    ],\n    \"team_ids\": [\n      123\n    ],\n    \"finding_types\": [\n      \"sast\",\n      \"sca\"\n    ],\n    \"cwes\": [\n      \"CWE-79\"\n    ],\n    \"cves\": [\n      \"CVE-2026-1000\"\n    ],\n    \"path_patterns\": [\n      \"tests/**\"\n    ],\n    \"severities\": [],\n    \"match\": \"all\"\n  },\n  \"finding_ids\": [\n    \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n  ],\n  \"apply\": true,\n  \"expiry_date\": \"2023-11-07T05:31:56Z\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://www.corgea.app/api/v1/triage/findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)
request["CORGEA-TOKEN"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"justification\": \"<string>\",\n  \"rule\": {\n    \"statuses\": [],\n    \"company_wide\": false,\n    \"project_ids\": [\n      123\n    ],\n    \"team_ids\": [\n      123\n    ],\n    \"finding_types\": [\n      \"sast\",\n      \"sca\"\n    ],\n    \"cwes\": [\n      \"CWE-79\"\n    ],\n    \"cves\": [\n      \"CVE-2026-1000\"\n    ],\n    \"path_patterns\": [\n      \"tests/**\"\n    ],\n    \"severities\": [],\n    \"match\": \"all\"\n  },\n  \"finding_ids\": [\n    \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n  ],\n  \"apply\": true,\n  \"expiry_date\": \"2023-11-07T05:31:56Z\"\n}"

response = http.request(request)
puts response.read_body

{
  "status": "ok",
  "action": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "status": "preview",
    "source": "api",
    "target_status": "<string>",
    "justification": "<string>",
    "accepted_risk_expiry_date": "2023-11-07T05:31:56Z",
    "rule": {},
    "source_metadata": {},
    "requires_approval": true,
    "requested_by": 123,
    "approved_by": 123,
    "rejected_by": 123,
    "created_at": "2023-11-07T05:31:56Z",
    "reviewed_at": "2023-11-07T05:31:56Z",
    "applied_at": "2023-11-07T05:31:56Z",
    "counts": {
      "matched": 123,
      "unmatched": 123,
      "ambiguous": 123,
      "applied": 123,
      "conflicts": 123
    }
  },
  "unresolved_ids": [
    "<string>"
  ]
}

{
  "status": "ok",
  "action": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "status": "preview",
    "source": "api",
    "target_status": "<string>",
    "justification": "<string>",
    "accepted_risk_expiry_date": "2023-11-07T05:31:56Z",
    "rule": {},
    "source_metadata": {},
    "requires_approval": true,
    "requested_by": 123,
    "approved_by": 123,
    "rejected_by": 123,
    "created_at": "2023-11-07T05:31:56Z",
    "reviewed_at": "2023-11-07T05:31:56Z",
    "applied_at": "2023-11-07T05:31:56Z",
    "counts": {
      "matched": 123,
      "unmatched": 123,
      "ambiguous": 123,
      "applied": 123,
      "conflicts": 123
    }
  },
  "unresolved_ids": [
    "<string>"
  ]
}

Triaje

Realizar el triaje masivo de hallazgos

Previsualiza o aplica un cambio de estado basado en reglas a un máximo de 5.000 hallazgos SAST o SCA accesibles. En las solicitudes de usuarios que no son administradores, las acciones de falso positivo y riesgo aceptado requieren aprobación cuando está habilitada la configuración de aprobación correspondiente de la empresa; las acciones de riesgo aceptado también requieren aprobación cuando alcanzan el umbral de cantidad de hallazgos o de gravedad de la empresa. Estas acciones devuelven 202 con el estado pending_approval y mantienen los estados de los hallazgos sin cambios hasta que otro administrador de la empresa las apruebe. Las solicitudes de administradores de la empresa aplican las acciones de falso positivo y riesgo aceptado inmediatamente, omitiendo estas configuraciones y umbrales. Proporcione rule o finding_ids, nunca ambos. Cada hallazgo cuenta una vez entre todos los análisis.

PATCH

triage

findings

curl --request PATCH \
  --url https://www.corgea.app/api/v1/triage/findings \
  --header 'CORGEA-TOKEN: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "justification": "<string>",
  "rule": {
    "statuses": [],
    "company_wide": false,
    "project_ids": [
      123
    ],
    "team_ids": [
      123
    ],
    "finding_types": [
      "sast",
      "sca"
    ],
    "cwes": [
      "CWE-79"
    ],
    "cves": [
      "CVE-2026-1000"
    ],
    "path_patterns": [
      "tests/**"
    ],
    "severities": [],
    "match": "all"
  },
  "finding_ids": [
    "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  ],
  "apply": true,
  "expiry_date": "2023-11-07T05:31:56Z"
}
'

import requests

url = "https://www.corgea.app/api/v1/triage/findings"

payload = {
    "justification": "<string>",
    "rule": {
        "statuses": [],
        "company_wide": False,
        "project_ids": [123],
        "team_ids": [123],
        "finding_types": ["sast", "sca"],
        "cwes": ["CWE-79"],
        "cves": ["CVE-2026-1000"],
        "path_patterns": ["tests/**"],
        "severities": [],
        "match": "all"
    },
    "finding_ids": ["3c90c3cc-0d44-4b50-8888-8dd25736052a"],
    "apply": True,
    "expiry_date": "2023-11-07T05:31:56Z"
}
headers = {
    "CORGEA-TOKEN": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PATCH',
  headers: {'CORGEA-TOKEN': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    justification: '<string>',
    rule: {
      statuses: [],
      company_wide: false,
      project_ids: [123],
      team_ids: [123],
      finding_types: ['sast', 'sca'],
      cwes: ['CWE-79'],
      cves: ['CVE-2026-1000'],
      path_patterns: ['tests/**'],
      severities: [],
      match: 'all'
    },
    finding_ids: ['3c90c3cc-0d44-4b50-8888-8dd25736052a'],
    apply: true,
    expiry_date: '2023-11-07T05:31:56Z'
  })
};

fetch('https://www.corgea.app/api/v1/triage/findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.corgea.app/api/v1/triage/findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PATCH",
  CURLOPT_POSTFIELDS => json_encode([
    'justification' => '<string>',
    'rule' => [
        'statuses' => [
                
        ],
        'company_wide' => false,
        'project_ids' => [
                123
        ],
        'team_ids' => [
                123
        ],
        'finding_types' => [
                'sast',
                'sca'
        ],
        'cwes' => [
                'CWE-79'
        ],
        'cves' => [
                'CVE-2026-1000'
        ],
        'path_patterns' => [
                'tests/**'
        ],
        'severities' => [
                
        ],
        'match' => 'all'
    ],
    'finding_ids' => [
        '3c90c3cc-0d44-4b50-8888-8dd25736052a'
    ],
    'apply' => true,
    'expiry_date' => '2023-11-07T05:31:56Z'
  ]),
  CURLOPT_HTTPHEADER => [
    "CORGEA-TOKEN: <api-key>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://www.corgea.app/api/v1/triage/findings"

	payload := strings.NewReader("{\n  \"justification\": \"<string>\",\n  \"rule\": {\n    \"statuses\": [],\n    \"company_wide\": false,\n    \"project_ids\": [\n      123\n    ],\n    \"team_ids\": [\n      123\n    ],\n    \"finding_types\": [\n      \"sast\",\n      \"sca\"\n    ],\n    \"cwes\": [\n      \"CWE-79\"\n    ],\n    \"cves\": [\n      \"CVE-2026-1000\"\n    ],\n    \"path_patterns\": [\n      \"tests/**\"\n    ],\n    \"severities\": [],\n    \"match\": \"all\"\n  },\n  \"finding_ids\": [\n    \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n  ],\n  \"apply\": true,\n  \"expiry_date\": \"2023-11-07T05:31:56Z\"\n}")

	req, _ := http.NewRequest("PATCH", url, payload)

	req.Header.Add("CORGEA-TOKEN", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.patch("https://www.corgea.app/api/v1/triage/findings")
  .header("CORGEA-TOKEN", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"justification\": \"<string>\",\n  \"rule\": {\n    \"statuses\": [],\n    \"company_wide\": false,\n    \"project_ids\": [\n      123\n    ],\n    \"team_ids\": [\n      123\n    ],\n    \"finding_types\": [\n      \"sast\",\n      \"sca\"\n    ],\n    \"cwes\": [\n      \"CWE-79\"\n    ],\n    \"cves\": [\n      \"CVE-2026-1000\"\n    ],\n    \"path_patterns\": [\n      \"tests/**\"\n    ],\n    \"severities\": [],\n    \"match\": \"all\"\n  },\n  \"finding_ids\": [\n    \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n  ],\n  \"apply\": true,\n  \"expiry_date\": \"2023-11-07T05:31:56Z\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://www.corgea.app/api/v1/triage/findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Patch.new(url)
request["CORGEA-TOKEN"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"justification\": \"<string>\",\n  \"rule\": {\n    \"statuses\": [],\n    \"company_wide\": false,\n    \"project_ids\": [\n      123\n    ],\n    \"team_ids\": [\n      123\n    ],\n    \"finding_types\": [\n      \"sast\",\n      \"sca\"\n    ],\n    \"cwes\": [\n      \"CWE-79\"\n    ],\n    \"cves\": [\n      \"CVE-2026-1000\"\n    ],\n    \"path_patterns\": [\n      \"tests/**\"\n    ],\n    \"severities\": [],\n    \"match\": \"all\"\n  },\n  \"finding_ids\": [\n    \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n  ],\n  \"apply\": true,\n  \"expiry_date\": \"2023-11-07T05:31:56Z\"\n}"

response = http.request(request)
puts response.read_body

{
  "status": "ok",
  "action": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "status": "preview",
    "source": "api",
    "target_status": "<string>",
    "justification": "<string>",
    "accepted_risk_expiry_date": "2023-11-07T05:31:56Z",
    "rule": {},
    "source_metadata": {},
    "requires_approval": true,
    "requested_by": 123,
    "approved_by": 123,
    "rejected_by": 123,
    "created_at": "2023-11-07T05:31:56Z",
    "reviewed_at": "2023-11-07T05:31:56Z",
    "applied_at": "2023-11-07T05:31:56Z",
    "counts": {
      "matched": 123,
      "unmatched": 123,
      "ambiguous": 123,
      "applied": 123,
      "conflicts": 123
    }
  },
  "unresolved_ids": [
    "<string>"
  ]
}

{
  "status": "ok",
  "action": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "status": "preview",
    "source": "api",
    "target_status": "<string>",
    "justification": "<string>",
    "accepted_risk_expiry_date": "2023-11-07T05:31:56Z",
    "rule": {},
    "source_metadata": {},
    "requires_approval": true,
    "requested_by": 123,
    "approved_by": 123,
    "rejected_by": 123,
    "created_at": "2023-11-07T05:31:56Z",
    "reviewed_at": "2023-11-07T05:31:56Z",
    "applied_at": "2023-11-07T05:31:56Z",
    "counts": {
      "matched": 123,
      "unmatched": 123,
      "ambiguous": 123,
      "applied": 123,
      "conflicts": 123
    }
  },
  "unresolved_ids": [
    "<string>"
  ]
}

Autorizaciones

CORGEA-TOKEN

string

header

requerido

Clave de API para la autenticación Se rechazan los tokens de API de usuarios inactivos.

Cuerpo

application/json

Con rule
Con finding_ids

Selecciona los findings con rule o con finding_ids, nunca ambos en la misma llamada.

target_status

enum<string>

requerido

fix_in_progress solo está disponible cuando finding_types contiene únicamente sast.

Opciones disponibles:

open,

fixed,

false_positive,

accepted_risk,

duplicate,

fix_in_progress

justification

string

requerido

Minimum string length: 1

rule

object

requerido

Selecciona un ámbito con company_wide, project_ids o team_ids. Los filtros usan match para combinar los criterios aplicables; los filtros CWE se aplican a SAST y los filtros CVE y de alcanzabilidad a SCA.

Show child attributes

finding_ids

string<uuid>[]

Ids de finding (de /findings o del finding_id de los elementos de incidencia) o ids de incidencia. Un id de finding equivale a la detección más reciente del finding, y la decisión alcanza a todas sus detecciones. Los ids que no resuelven a nada se devuelven en unresolved_ids y cuentan como no coincidentes. Los findings de contenedores e IaC quedan fuera del triaje masivo, por lo que sus ids también se devuelven en unresolved_ids.

apply

boolean

predeterminado:true

Establécelo en false para crear una vista previa sin cambiar los hallazgos.

expiry_date

string<date-time> | null

Fecha y hora de expiración futura, solo para acciones accepted_risk.

Respuesta

Acción previsualizada o aplicada

status

string

Ejemplo:

"ok"

action

object

Show child attributes

unresolved_ids

string[]

Ids de finding_ids que no coincidieron con ningún finding ni incidencia. Vacío cuando los findings se seleccionaron con rule.

Referencia de la API

Autenticación

Escaneos

Hallazgos

Findings

Triaje

Dependencias

Dependencies

Inicio de un escaneo de Corgea

Carga de escaneos de terceros

Skills

Proyectos

Políticas

Notificaciones

Equipos

Integraciones de Harness

Users

Realizar el triaje masivo de hallazgos

Autorizaciones

Cuerpo

Respuesta