findings

Creates, updates, deletes, gets or lists a findings resource.

Overview

Name	findings
Type	Resource
Id	aws.securityagent.findings

Fields

The following fields are returned by SELECT queries:

batch_get_findings

Name	Datatype	Description
findings	array	The list of findings that were found.
not_found	array	The list of finding identifiers that were not found.

list_findings

Name	Datatype	Description
name	string	The name of the finding.
agent_space_id	string	The unique identifier of the agent space associated with the finding.
code_review_id	string	The unique identifier of the code review associated with the finding.
code_review_job_id	string	The unique identifier of the code review job that produced the finding.
confidence	string	Finding confidence level. (FALSE_POSITIVE, UNCONFIRMED, LOW, MEDIUM, HIGH)
created_at	string (date-time)	The date and time the finding was created, in UTC format.
finding_id	string	The unique identifier of the finding.
pentest_id	string	The unique identifier of the pentest associated with the finding.
pentest_job_id	string	The unique identifier of the pentest job that produced the finding.
risk_level	string	Risk severity level. (UNKNOWN, INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL)
risk_type	string	The type of security risk identified by the finding.
status	string	Finding status. (ACTIVE, RESOLVED, ACCEPTED, FALSE_POSITIVE)
updated_at	string (date-time)	The date and time the finding was last updated, in UTC format.
validation_status	string	The simulated validation status of the finding. (CONFIRMED, NOT_REPRODUCED, VALIDATION_FAILED, VALIDATING, NOT_VALIDATED)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
batch_get_findings	select	region		Retrieves information about one or more security findings in an agent space.
list_findings	select	region		Lists the security findings for a pentest job.
update_finding	update	region, findingId, agentSpaceId		Updates the status or risk level of a security finding.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

batch_get_findings

Retrieves information about one or more security findings in an agent space.

SELECT
findings,
not_found
FROM aws.securityagent.findings
WHERE region = '{{ region }}' -- required
;

list_findings

Lists the security findings for a pentest job.

SELECT
name,
agent_space_id,
code_review_id,
code_review_job_id,
confidence,
created_at,
finding_id,
pentest_id,
pentest_job_id,
risk_level,
risk_type,
status,
updated_at,
validation_status
FROM aws.securityagent.findings
WHERE region = '{{ region }}' -- required
;

UPDATE examples

update_finding

Updates the status or risk level of a security finding.

UPDATE aws.securityagent.findings
SET 
findingId = '{{ findingId }}',
agentSpaceId = '{{ agentSpaceId }}',
name = '{{ name }}',
description = '{{ description }}',
riskType = '{{ riskType }}',
riskLevel = '{{ riskLevel }}',
riskScore = '{{ riskScore }}',
attackScript = '{{ attackScript }}',
reasoning = '{{ reasoning }}',
status = '{{ status }}',
customerNote = '{{ customerNote }}'
WHERE 
region = '{{ region }}' --required
AND findingId = '{{ findingId }}' --required
AND agentSpaceId = '{{ agentSpaceId }}' --required;