# Update finding status

Update the status of a finding (e.g. suppress, review)

Endpoint: PUT /api/v3.0/projects/{projectuuid}/images/findings/security/{findingid}
Version: 3.0
Security: bearer-key

## Security:

  - `bearer-key` (unknown)
    http bearer JWT

## Path parameters:

  - `projectuuid` (string, required)
    UUID of the project

  - `findingid` (string, required)
    vulnerability ID (CVE)

## Request body:

  - `application/json` (unknown)
    Array of finding status update requests. Required fields: packageUUID. For 'suppressed' status, reason is also required.

## Request fields (application/json):

  - `comment` (string)

  - `packageUUID` (string)

  - `reason` (string)
    Enum: "Acceptable risk", "No fix available", "No risk", "Ignore"

  - `status` (string, required)
    Enum: "suppressed", "unreviewed", "reviewed", "suppress", "Issue Created"

  - `vulnerabilityName` (string)

## Response 200:

  - `200` (unknown)
    OK

## Response 200 fields (application/json):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `additionalData.paging` (object)

  - `additionalData.paging.cursor` (integer)
    Example: 5

  - `additionalData.paging.next` (string)
    Example: https://api-saas.mend.io/api/v3.0/projects/<project_uuid>>/images/deployments?cursor=6

  - `additionalData.totalItems` (integer)
    Example: 100

  - `response` (object)

  - `response.applicationuuid` (string)

  - `response.comment` (string)

  - `response.createdAt` (string)
    Example: 2020-01-01T00:00:00Z

  - `response.detectTime` (string)

  - `response.distribution` (string)

  - `response.distributionVersion` (string)

  - `response.email` (string)

  - `response.orguuid` (string)

  - `response.packageDistroID` (integer)

  - `response.packageName` (string)

  - `response.packageUUID` (string)

  - `response.packageVersion` (string)

  - `response.projectuuid` (string)

  - `response.reason` (string)

  - `response.scanuuid` (string)

  - `response.secretUUID` (string)

  - `response.severity` (string)

  - `response.status` (string)

  - `response.updatedAt` (string)
    Example: 2020-01-01T00:00:00Z

  - `response.uuid` (string)
    Example: c4f93b6d-8236-4d0c-a67b-3978def476a3

  - `response.vulnerabilityID` (string)

  - `supportToken` (string)
    Example: 659C0A4730

## Response 400:

  - `400` (unknown)
    Bad request - missing required fields or invalid values

## Response 400 fields (application/json):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `response` (array)

  - `supportToken` (string)

## Response 404:

  - `404` (unknown)
    Project not found

## Response 404 fields (application/json):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `response` (array)

  - `supportToken` (string)

## Response 500:

  - `500` (unknown)
    Failed updating finding status

## Response 500 fields (application/json):

  - `additionalData` (object)

  - `additionalData.error` (string)

  - `response` (array)

  - `supportToken` (string)