Skip to content
GitHub

Let one finding pass the scan gates for a while.

POST
/api/v1/vulnerability-exceptions
curl --request POST \
  --url https://example.com/api/v1/vulnerability-exceptions \
  --header 'Content-Type: application/json' \
  --data '{ "vulnerability": "CVE-2026-12345", "reason": "example", "owner": "platform-team@example.com", "days": 30, "project": "example" }'

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json
object
vulnerability
required

The finding’s id, e.g. CVE-2026-12345 or GHSA-xxxx-xxxx-xxxx.

string
Example
CVE-2026-12345
reason
required
string
owner
required

Who answers for it: a person or a team.

string
Example
platform-team@example.com
days
required

1 to 90 days.

integer format: int32
Example
30
project

Limit it to one project; every project when omitted.

string | null

Responses

Section titled “Responses”

201

Section titled “201”
Media typeapplication/json
object
id
required
string format: uuid
vulnerability
required
string
project
string | null format: uuid
reason
required
string
owner
required
string
createdBy
required
string
createdAt
required
string
expiresAt
required
string
revokedAt
string | null
active
required

In force now.

boolean
Examplegenerated
{
  "id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "vulnerability": "example",
  "project": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "reason": "example",
  "owner": "example",
  "createdBy": "example",
  "createdAt": "example",
  "expiresAt": "example",
  "revokedAt": "example",
  "active": true
}

403

Section titled “403”
Media typeapplication/json

Problem Details body.

object
code
required

Stable machine-readable code, e.g. forbidden.

string
title
required

Short human readable title.

string
status
required

HTTP status.

integer format: int32
detail

Details, if safe to expose.

string | null
Example
{
  "code": "forbidden"
}

404

Section titled “404”
Media typeapplication/json

Problem Details body.

object
code
required

Stable machine-readable code, e.g. forbidden.

string
title
required

Short human readable title.

string
status
required

HTTP status.

integer format: int32
detail

Details, if safe to expose.

string | null
Example
{
  "code": "forbidden"
}

422

Section titled “422”
Media typeapplication/json

Problem Details body.

object
code
required

Stable machine-readable code, e.g. forbidden.

string
title
required

Short human readable title.

string
status
required

HTTP status.

integer format: int32
detail

Details, if safe to expose.

string | null
Example
{
  "code": "forbidden"
}