List code finding dispositions (browser session)

Lists the organisation’s repository code finding dispositions (Semgrep and Checkov false positives and accepted risks the Ankra Pipelines image gate honours), newest first, optionally for one application or pipeline repository. Requires security.read.

GET /org/security/code-dispositions

List code finding dispositions (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/security/code-dispositions"

headers = {"cookie": "ankra_session="}

response = requests.get(url, headers=headers)

print(response.text)

200

{
  "is_truncated": true,
  "items": [
    {
      "application_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "created_at": "2023-11-07T05:31:56Z",
      "created_by": "<string>",
      "disposition": "false_positive",
      "expires_at": "2023-11-07T05:31:56Z",
      "finding_severity": "HIGH",
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "path": "<string>",
      "reason": "<string>",
      "repository": "<string>",
      "repository_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "revoked_at": "2023-11-07T05:31:56Z",
      "revoked_by": "<string>",
      "revoked_reason": "<string>",
      "rule_id": "<string>",
      "scope": "repository_code",
      "status": "active",
      "tool": "semgrep"
    }
  ]
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Query Parameters

application_id · string<uuid>

Only this application's pipeline repository.

repository_id · string<uuid>

Only this pipeline repository.

include_revoked · boolean · default: false

limit · integer · default: 200

Values above 200 are clamped to 200; is_truncated says when more exist.

Required range: x >= 1

Response

200

application/json

Successful response

is_truncated · boolean · required

items · object[] · required

Show child attributes