> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Update Finding State > Update finding workflow state (snooze, accept risk, suppress, reopen, resolve). ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/findings/{finding_id}/state openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/findings/{finding_id}/state: post: tags: - Findings summary: Update Finding State description: >- Update finding workflow state (snooze, accept risk, suppress, reopen, resolve). operationId: c1.api.finding.v1.FindingService.UpdateFindingState parameters: - in: path name: finding_id required: true schema: description: The ID of the finding whose state to update. type: string requestBody: content: application/json: schema: $ref: >- #/components/schemas/c1.api.finding.v1.UpdateFindingStateRequestInput responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.finding.v1.UpdateFindingStateResponse description: Successful response x-codeSamples: - lang: go label: UpdateFindingState source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/operations\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.Finding.UpdateFindingState(ctx, operations.C1APIFindingV1FindingServiceUpdateFindingStateRequest{\n FindingID: \"\",\n })\n if err != nil {\n log.Fatal(err)\n }\n if res.UpdateFindingStateResponse != nil {\n // handle response\n }\n}" - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.finding.updateFindingState({ findingId: "", }); console.log(result); } run(); components: schemas: c1.api.finding.v1.UpdateFindingStateRequestInput: description: > The UpdateFindingStateRequest message. This message contains a oneof named action. Only a single field of the following list may be set at a time: - snooze - suppress - acceptRisk - unsuppress - resolve - reopen properties: acceptRisk: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.AcceptRiskAction' - type: 'null' reopen: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.ReopenAction' - type: 'null' resolve: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.ResolveAction' - type: 'null' snooze: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.SnoozeAction' - type: 'null' suppress: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.SuppressStateAction' - type: 'null' unsuppress: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.UnsuppressAction' - type: 'null' title: Update Finding State Request type: object x-speakeasy-name-override: UpdateFindingStateRequest c1.api.finding.v1.UpdateFindingStateResponse: description: The UpdateFindingStateResponse message. properties: finding: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.Finding' - type: 'null' title: Update Finding State Response type: object x-speakeasy-name-override: UpdateFindingStateResponse c1.api.finding.v1.AcceptRiskAction: description: AcceptRiskAction parameters for UpdateFindingState. properties: expiresAt: format: date-time type: - string - 'null' justification: description: The justification field. type: - string - 'null' title: Accept Risk Action type: object x-speakeasy-name-override: AcceptRiskAction c1.api.finding.v1.ReopenAction: description: ReopenAction parameters for UpdateFindingState. title: Reopen Action type: object x-speakeasy-name-override: ReopenAction c1.api.finding.v1.ResolveAction: description: ResolveAction parameters for UpdateFindingState (manual resolve). properties: reason: description: The reason field. type: - string - 'null' title: Resolve Action type: object x-speakeasy-name-override: ResolveAction c1.api.finding.v1.SnoozeAction: description: SnoozeAction parameters for UpdateFindingState. properties: reason: description: The reason field. type: - string - 'null' snoozeUntil: format: date-time type: - string - 'null' title: Snooze Action type: object x-speakeasy-name-override: SnoozeAction c1.api.finding.v1.SuppressStateAction: description: SuppressStateAction parameters for UpdateFindingState. properties: reason: description: The reason field. type: - string - 'null' title: Suppress State Action type: object x-speakeasy-name-override: SuppressStateAction c1.api.finding.v1.UnsuppressAction: deprecated: true description: UnsuppressAction parameters for UpdateFindingState. title: Unsuppress Action type: object x-speakeasy-name-override: UnsuppressAction c1.api.finding.v1.Finding: description: > The Finding message. This message contains a oneof named finding_type. Only a single field of the following list may be set at a time: - similarUsernameMatch - serviceAccountMisclassification - decoyCredentialUsed This message contains a oneof named target. Only a single field of the following list may be set at a time: - identityUserTarget - appUserTarget - decoyTarget This message contains a oneof named evidence. Only a single field of the following list may be set at a time: - similarUsernameMatchEvidence - serviceAccountMisclassificationEvidence properties: appId: description: The appId field. type: - string - 'null' appUserTarget: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.AppUserTarget' - type: 'null' assignedOwner: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.FindingOwnerRef' - type: 'null' computedOwner: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.FindingOwnerRef' - type: 'null' createdAt: format: date-time type: - string - 'null' customTags: additionalProperties: type: string description: The customTags field. type: object decoyCredentialUsed: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.DecoyCredentialUsedType' - type: 'null' decoyTarget: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.DecoyTarget' - type: 'null' fingerprint: description: The fingerprint field. type: - string - 'null' firstObservedAt: format: date-time type: - string - 'null' id: description: The id field. type: - string - 'null' identityUserTarget: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.IdentityUserTarget' - type: 'null' lastObservedAt: format: date-time type: - string - 'null' recurrenceCount: description: The recurrenceCount field. format: uint32 type: - integer - 'null' remediationDescription: description: The remediationDescription field. type: - string - 'null' resolvedAt: format: date-time type: - string - 'null' riskAcceptanceExpiresAt: format: date-time type: - string - 'null' riskAcceptanceJustification: description: The riskAcceptanceJustification field. type: - string - 'null' riskScore: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.FindingRiskScore' - type: 'null' serviceAccountMisclassification: oneOf: - $ref: >- #/components/schemas/c1.api.finding.v1.ServiceAccountMisclassificationType - type: 'null' serviceAccountMisclassificationEvidence: oneOf: - $ref: >- #/components/schemas/c1.api.finding.v1.ServiceAccountMisclassificationEvidence - type: 'null' severity: description: The severity field. enum: - FINDING_SEVERITY_UNSPECIFIED - FINDING_SEVERITY_INFO - FINDING_SEVERITY_LOW - FINDING_SEVERITY_MEDIUM - FINDING_SEVERITY_HIGH - FINDING_SEVERITY_CRITICAL type: - string - 'null' x-speakeasy-unknown-values: allow similarUsernameMatch: oneOf: - $ref: '#/components/schemas/c1.api.finding.v1.SimilarUsernameMatchType' - type: 'null' similarUsernameMatchEvidence: oneOf: - $ref: >- #/components/schemas/c1.api.finding.v1.SimilarUsernameMatchEvidence - type: 'null' snoozeReason: description: The snoozeReason field. type: - string - 'null' snoozeUntil: format: date-time type: - string - 'null' sourceDetectorId: description: The sourceDetectorId field. type: - string - 'null' state: description: The state field. enum: - FINDING_STATE_UNSPECIFIED - FINDING_STATE_OPEN - FINDING_STATE_IN_PROGRESS - FINDING_STATE_RESOLVED - FINDING_STATE_SNOOZED - FINDING_STATE_RISK_ACCEPTED - FINDING_STATE_SUPPRESSED type: - string - 'null' x-speakeasy-unknown-values: allow stateUpdatedById: description: The stateUpdatedById field. type: - string - 'null' suppressReason: description: The suppressReason field. type: - string - 'null' taskId: description: The taskId field. type: - string - 'null' updatedAt: format: date-time type: - string - 'null' title: Finding type: object x-speakeasy-name-override: Finding c1.api.finding.v1.AppUserTarget: description: The AppUserTarget message. properties: appId: description: The appId field. type: - string - 'null' appUserId: description: The appUserId field. type: - string - 'null' title: App User Target type: object x-speakeasy-name-override: AppUserTarget c1.api.finding.v1.FindingOwnerRef: description: > The FindingOwnerRef message. This message contains a oneof named owner. Only a single field of the following list may be set at a time: - identityUserId - appOwnerAppId - managerOfUserId - userSetId properties: appOwnerAppId: description: >- The appOwnerAppId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details. type: - string - 'null' identityUserId: description: >- The identityUserId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details. type: - string - 'null' managerOfUserId: description: >- The managerOfUserId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details. type: - string - 'null' userSetId: description: >- The userSetId field. This field is part of the `owner` oneof. See the documentation for `c1.api.finding.v1.FindingOwnerRef` for more details. type: - string - 'null' title: Finding Owner Ref type: object x-speakeasy-name-override: FindingOwnerRef c1.api.finding.v1.DecoyCredentialUsedType: description: |- DecoyCredentialUsedType: a planted decoy credential authenticated successfully. properties: decoyId: description: The decoyId field. type: - string - 'null' kind: description: The kind field. enum: - DECOY_CREDENTIAL_KIND_UNSPECIFIED - DECOY_CREDENTIAL_KIND_USER_CLIENT_CREDENTIAL - DECOY_CREDENTIAL_KIND_CONNECTOR_CLIENT - DECOY_CREDENTIAL_KIND_WORKLOAD_FEDERATION - DECOY_CREDENTIAL_KIND_ACCESS_TOKEN type: - string - 'null' x-speakeasy-unknown-values: allow title: Decoy Credential Used Type type: object x-speakeasy-name-override: DecoyCredentialUsedType c1.api.finding.v1.DecoyTarget: description: |- DecoyTarget points at the planted decoy that produced this finding. Populated for findings whose subject is the decoy artifact itself (e.g. decoy_credential_used), giving the UI and routing rules a uniform handle to the decoy alongside the finding_type payload. properties: decoyId: description: The decoyId field. type: - string - 'null' title: Decoy Target type: object x-speakeasy-name-override: DecoyTarget c1.api.finding.v1.IdentityUserTarget: description: The IdentityUserTarget message. properties: identityUserId: description: The identityUserId field. type: - string - 'null' title: Identity User Target type: object x-speakeasy-name-override: IdentityUserTarget c1.api.finding.v1.FindingRiskScore: description: The FindingRiskScore message. properties: originalScore: description: The originalScore field. format: uint32 type: - integer - 'null' overrideByUserId: description: The overrideByUserId field. type: - string - 'null' overrideScore: description: The overrideScore field. format: uint32 type: - integer - 'null' riskFactors: description: The riskFactors field. items: $ref: '#/components/schemas/c1.api.finding.v1.FindingRiskFactor' type: - array - 'null' score: description: The score field. format: uint32 type: - integer - 'null' systemScore: description: The systemScore field. format: uint32 type: - integer - 'null' title: Finding Risk Score type: object x-speakeasy-name-override: FindingRiskScore c1.api.finding.v1.ServiceAccountMisclassificationType: description: The ServiceAccountMisclassificationType message. properties: currentAccountType: description: The currentAccountType field. enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: - string - 'null' x-speakeasy-unknown-values: allow detectedAccountType: description: The detectedAccountType field. enum: - APP_USER_TYPE_UNSPECIFIED - APP_USER_TYPE_USER - APP_USER_TYPE_SERVICE_ACCOUNT - APP_USER_TYPE_SYSTEM_ACCOUNT type: - string - 'null' x-speakeasy-unknown-values: allow title: Service Account Misclassification Type type: object x-speakeasy-name-override: ServiceAccountMisclassificationType c1.api.finding.v1.ServiceAccountMisclassificationEvidence: description: The ServiceAccountMisclassificationEvidence message. properties: detectionReason: description: The detectionReason field. type: - string - 'null' title: Service Account Misclassification Evidence type: object x-speakeasy-name-override: ServiceAccountMisclassificationEvidence c1.api.finding.v1.SimilarUsernameMatchType: description: The SimilarUsernameMatchType message. properties: proposedIdentityUserId: description: The proposedIdentityUserId field. type: - string - 'null' title: Similar Username Match Type type: object x-speakeasy-name-override: SimilarUsernameMatchType c1.api.finding.v1.SimilarUsernameMatchEvidence: description: The SimilarUsernameMatchEvidence message. properties: appUsername: description: The appUsername field. type: - string - 'null' identityUsername: description: The identityUsername field. type: - string - 'null' similarityScore: description: The similarityScore field. type: - number - 'null' title: Similar Username Match Evidence type: object x-speakeasy-name-override: SimilarUsernameMatchEvidence c1.api.finding.v1.FindingRiskFactor: description: The FindingRiskFactor message. properties: description: description: The description field. type: - string - 'null' name: description: The name field. type: - string - 'null' severity: description: The severity field. enum: - FINDING_SEVERITY_UNSPECIFIED - FINDING_SEVERITY_INFO - FINDING_SEVERITY_LOW - FINDING_SEVERITY_MEDIUM - FINDING_SEVERITY_HIGH - FINDING_SEVERITY_CRITICAL type: - string - 'null' x-speakeasy-unknown-values: allow weight: description: The weight field. format: uint32 type: - integer - 'null' title: Finding Risk Factor type: object x-speakeasy-name-override: FindingRiskFactor securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````