Create vulnerability disposition policy (browser session)

Creates a disposition policy from one finding occurrence (occurrence_id) that marks matching vulnerabilities as acknowledged or accepted_risk, with a required reason. Acknowledging needs security.triage and accepting risk needs security.manage plus an expires_at review deadline within one year; returns 409 for a duplicate policy or one that matches nothing unless allow_unmatched is set.

POST /org/security/vulnerability-dispositions

Create vulnerability disposition policy (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/security/vulnerability-dispositions"

payload = {
    "occurrence_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "reason": "<string>"
}
headers = {
    "cookie": "ankra_session=",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

201

{
  "policy": {
    "active_match_count": 123,
    "created_at": "2023-11-07T05:31:56Z",
    "created_by": "<string>",
    "disposition": "acknowledged",
    "expire_when_fix_available": true,
    "expires_at": "2023-11-07T05:31:56Z",
    "fix_available_match_count": 123,
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "last_evaluated_at": "2023-11-07T05:31:56Z",
    "last_matched_at": "2023-11-07T05:31:56Z",
    "match_health": "<string>",
    "matched_occurrence_count": 123,
    "reason": "<string>",
    "revoked_at": "2023-11-07T05:31:56Z",
    "revoked_by": "<string>",
    "revoked_reason": "<string>",
    "selector": {
      "organisation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "addon_slug": "<string>",
      "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "cve_id": "<string>",
      "explicit_broad": true,
      "image_digest": "<string>",
      "package_name": "<string>",
      "package_type": "<string>",
      "workload_kind": "<string>",
      "workload_name": "<string>",
      "workload_namespace": "<string>"
    },
    "selector_hash": "<string>",
    "status": "<string>",
    "updated_at": "2023-11-07T05:31:56Z",
    "updated_by": "<string>"
  },
  "preview": {
    "affected_addons": 123,
    "affected_clusters": 123,
    "affected_findings": 123,
    "affected_occurrences": 123,
    "exclusions": {
      "ambiguous": 123,
      "fix_available": 123,
      "unattributed": 123
    },
    "observed_to_actionable_delta": {
      "actionable_after": 123,
      "actionable_before": 123,
      "observed_after": 123,
      "observed_before": 123
    },
    "overlaps": [
      {
        "disposition": "<string>",
        "kind": "duplicate",
        "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "selector": {
          "organisation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "addon_slug": "<string>",
          "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "cve_id": "<string>",
          "explicit_broad": true,
          "image_digest": "<string>",
          "package_name": "<string>",
          "package_type": "<string>",
          "workload_kind": "<string>",
          "workload_name": "<string>",
          "workload_namespace": "<string>"
        }
      }
    ],
    "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "selector": {
      "organisation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "addon_slug": "<string>",
      "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "cve_id": "<string>",
      "explicit_broad": true,
      "image_digest": "<string>",
      "package_name": "<string>",
      "package_type": "<string>",
      "workload_kind": "<string>",
      "workload_name": "<string>",
      "workload_namespace": "<string>"
    },
    "selector_hash": "<string>"
  }
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Body

application/json

disposition · enum<string> · required

Available options: acknowledged, accepted_risk

occurrence_id · string<uuid> · required

reason · string · required

Required string length: 1 - 2000

allow_unmatched · boolean · default: false

expire_when_fix_available · boolean · default: false

expires_at · string<date-time> | null

scope · enum<string> · default: organisation_addon

Available options: organisation_addon

Response

201

application/json

Successful response

policy · object · required

Show child attributes

preview · object · required

Show child attributes