View a markdown version of this page

FindingValidation - AWS Continuum for Code Vulnerabilities

FindingValidation

A validator's assessment of a finding. Present only when validation actually ran — absent for finding types that are ingested untested, rather than reporting a verdict Continuum did not reach.

Contents

verdict

A validator's conclusion about whether a finding is real.

Type: String

Valid Values: TRUE_POSITIVE | FALSE_POSITIVE | BENIGN_TRUE_POSITIVE | NEEDS_REVIEW

Required: Yes

blockingReason

Why a validator rejected a finding. NONE accompanies a true positive.

Type: String

Valid Values: UNREACHABLE | PROTECTED | MISCLASSIFIED | EXCLUDED | NOT_FEASIBLE | RISK_MITIGATED | NONE

Required: No

confidence

The confidence.

Type: Double

Required: No

evidence

The evidence.

Type: Array of FindingEvidence objects

Array Members: Minimum number of 0 items. Maximum number of 64 items.

Required: No

mitigatingControls

The mitigating Controls.

Type: Array of strings

Array Members: Minimum number of 0 items. Maximum number of 256 items.

Length Constraints: Minimum length of 1. Maximum length of 8192.

Required: No

preconditions

The preconditions.

Type: Array of strings

Array Members: Minimum number of 0 items. Maximum number of 256 items.

Length Constraints: Minimum length of 1. Maximum length of 8192.

Required: No

rationale

The rationale.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 65536.

Required: No

severityAdjustment

A validator's severity conclusion. UNCHANGED means the producer's reported severity stands.

Type: String

Valid Values: CRITICAL | HIGH | MEDIUM | LOW | INFORMATIONAL | UNCHANGED

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: