Skip to content
Platform API 3.0
/
/
Update a project finding...

Mend API (3.0)

Mend's enhanced API enables automation of workflows in a REST compliant format. The API features:

  • Access for any user with Mend credentials, via a user key available in the user's profile page in the Mend Platform.
  • Improved security with a JWT token per organization, which expires every 30 minutes.
  • Added scalability with support for cursor pagination and limiting results size.
  • Broader functionality available programmatically.
  • New standard API documentation for easy navigation and search.

If you have a dedicated instance of Mend, contact your Mend representative to access this API on your instance.

Download OpenAPI description
3.0.json
3.0.yaml
Languages
Servers
Generated server url
https://baseUrl/

Access Management

Operations

Administration - Groups

Operations

Administration - Users

Operations

Administration - Labels

Operations

Reports

Operations

Scans

Operations

Projects

Operations

Applications

Operations

Findings - Project

Operations

Bulk update of project findings state (review and/or suppression) or severity (SAST)

Request

Bulk update of project findings state (review and/or suppression) or severity

Path
projectUuidstringrequired

UUID of the project

Bodyapplication/jsonrequired

Bulk patch operation to apply to the findings

findingsArray of strings

IDs of findings to modify.

patchOperationobject(dto.PatchFinding)
application/json
{
  "findings": [
    "string"
  ],
  "patchOperation": {
    "customSeverity": "string",
    "origin": "string",
    "reviewed": true,
    "suppressed": true,
    "suppressionReason": "string"
  }
}

Responses

OK

Bodyapplication/json
additionalDataobject
responseobject(dto.SuccessResponse)
supportTokenstring
Response
application/json
{
  "additionalData": {},
  "response": {
    "message": "Operation succeeded",
    "result": null,
    "success": true
  },
  "supportToken": "string"
}

Update a project finding state (review and/or suppression) or severity (SAST)

Request

Update a project finding state (review and/or suppression) or severity

Path
projectUuidstringrequired

UUID of the project

findingSnapshotIdstringrequired

UUID of the finding snapshot

Bodyapplication/jsonrequired

Patch operation to apply to the finding

customSeveritystring

If set, it has to be either High, Medium or Low. Case insensitive, all values are converted to have the first letter uppercase and others lowercase, e.g. High.

originstring

Optional, origin used for telemetry.

reviewedboolean
suppressedboolean
suppressionReasonstring

Has to be unset or empty if suppressed is not set or if it's false.

application/json
{
  "customSeverity": "string",
  "origin": "string",
  "reviewed": true,
  "suppressed": true,
  "suppressionReason": "string"
}

Responses

OK

Body*/*
additionalDataobject
responseobject(dto.SuccessResponse)
supportTokenstring

Get a project finding (SAST)

Request

Get a project finding for a specified project and finding UUID.

Path
projectUuidstringrequired

UUID of the project

findingUuidstringrequired

UUID of the finding

No request payload

Responses

OK

Bodyapplication/json
additionalDataobject
responseobject(dto.FindingV3)
supportTokenstring
Response
application/json
{
  "additionalData": {},
  "response": {
    "ageRating": 0,
    "almIssues": { … },
    "appId": "string",
    "baseline": true,
    "comments": [ … ],
    "confidenceRating": 0,
    "correlatedDastFindingUuids": [ … ],
    "createdTime": "string",
    "dataFlows": [ … ],
    "description": "string",
    "hasRemediation": true,
    "id": "string",
    "isNew": true,
    "issueStatus": 0,
    "projectId": "string",
    "rating": 0,
    "refId": "string",
    "reviewed": true,
    "riskFactors": { … },
    "scanId": "string",
    "severity": "string",
    "severityRating": 0,
    "sharedStep": { … },
    "snapshotId": "string",
    "suppressed": true,
    "suppressedBy": "string",
    "suppressionMessage": "string",
    "suppressionRejected": true,
    "suppressionRequestComment": "string",
    "suppressionRequested": true,
    "suppressionTime": "string",
    "type": { … },
    "workflowViolations": [ … ],
    "workflowViolationsCount": 0
  },
  "supportToken": "string"
}

Findings - Scan

Operations

SAST

Operations

Settings - Organization

Operations

Integrations

Operations

AI

Operations

Red Team

Operations