Preview vulnerability disposition policy (browser session)

Session authentication with CSRF; RBAC permission security.triage. Accepted-risk dispositions and previews carrying policy_id require security.manage instead.

POST /org/security/vulnerability-dispositions/preview

Preview vulnerability disposition policy (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/security/vulnerability-dispositions/preview"

payload = {
    "occurrence_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}
headers = {
    "cookie": "ankra_session=",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

200

{
  "affected_addons": 123,
  "affected_clusters": 123,
  "affected_findings": 123,
  "affected_occurrences": 123,
  "exclusions": {
    "ambiguous": 123,
    "fix_available": 123,
    "unattributed": 123
  },
  "observed_to_actionable_delta": {
    "actionable_after": 123,
    "actionable_before": 123,
    "observed_after": 123,
    "observed_before": 123
  },
  "overlaps": [
    {
      "disposition": "<string>",
      "kind": "duplicate",
      "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "selector": {
        "organisation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "addon_slug": "<string>",
        "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "cve_id": "<string>",
        "explicit_broad": true,
        "image_digest": "<string>",
        "package_name": "<string>",
        "package_type": "<string>",
        "workload_kind": "<string>",
        "workload_name": "<string>",
        "workload_namespace": "<string>"
      }
    }
  ],
  "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "selector": {
    "organisation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "addon_slug": "<string>",
    "cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "cve_id": "<string>",
    "explicit_broad": true,
    "image_digest": "<string>",
    "package_name": "<string>",
    "package_type": "<string>",
    "workload_kind": "<string>",
    "workload_name": "<string>",
    "workload_namespace": "<string>"
  },
  "selector_hash": "<string>"
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Body

application/json

Option 1

Option 2

occurrence_id · string<uuid> · required

disposition · enum<string> · required

Available options: acknowledged, accepted_risk

expire_when_fix_available · boolean | null

expires_at · string<date-time> | null

policy_id · string<uuid>

scope · enum<string> · default: organisation_addon

Available options: organisation_addon

Response

200

application/json

Successful response

affected_addons · integer · required

affected_clusters · integer · required

affected_findings · integer · required

affected_occurrences · integer · required

exclusions · object · required

Show child attributes

observed_to_actionable_delta · object · required

Show child attributes

overlaps · object[] · required

Show child attributes

policy_id · string<uuid> | null · required

selector · object · required

Show child attributes

selector_hash · string · required