FindingSummary
¶
Source code in docs_src/capo_continuum/types/finding_summary.py
category
instance-attribute
¶
category: NotRequired[FindingCategory]
The producer's vulnerability category.
completed_at
instance-attribute
¶
completed_at: NotRequired[datetime]
When processing finished, whether by creating an issue or discarding. Absent while the finding is still in flight.
created_issue_id
instance-attribute
¶
created_issue_id: NotRequired[IssueId]
The issue Continuum created from this finding.
discard_reason
instance-attribute
¶
discard_reason: NotRequired[FindingDiscardReason]
Why the finding was not escalated. Present only when status is DISCARDED.
discard_reasoning
instance-attribute
¶
discard_reasoning: NotRequired[FindingStatusMessage]
Customer-facing explanation accompanying discardReason.
duplicate_of_issue_id
instance-attribute
¶
duplicate_of_issue_id: NotRequired[IssueId]
The existing issue this finding duplicates. Present only for the DUPLICATE_OF_* discard reasons.
environment_id
instance-attribute
¶
environment_id: EnvironmentId
The environment that owns the finding.
file_path
instance-attribute
¶
file_path: NotRequired[FindingFilePath]
The file the finding is about, when it has a code location.
reported_at
instance-attribute
¶
reported_at: datetime
When the producer reported the finding -- its own clock, which is not Continuum's ingestion time. createdAt is when Continuum accepted it; these are genuinely different instants and a reader usually wants this one. For CreateCodeFinding, this is the submitted OCSF document's own top-level time. For findings Continuum's scanner produces, it is the finding's own creation time. Continuum does not validate it for plausibility: a producer's value is echoed as given, so a timestamp here asserts the unit and format, not that the instant is genuine.
scan_run_id
instance-attribute
¶
scan_run_id: NotRequired[ScanRunId]
The scan that produced the finding, when it came from one. For a finding Continuum's scanner produced, this is the Continuum scan run (see GetCodeScan). For a finding submitted with CreateCodeFinding, it is the OCSF document's metadata.correlation_uid, when that value is a valid ScanRunId. Absent when the finding did not come from a scan.
source_finding_id
instance-attribute
¶
source_finding_id: SourceFindingId
The producer's own identifier for the finding.
status_message
instance-attribute
¶
status_message: NotRequired[FindingStatusMessage]
Human-readable context about the current status.