--- title: "POST /v1/{+parent}/findings" method: POST path: "/v1/{+parent}/findings" tags: ["organizations"] --- # POST /v1/{+parent}/findings `POST /v1/{+parent}/findings` ## Path parameters - `parent` string, required ## Query parameters - `findingId` string ## Request body - Finding - `artifactGuardPolicies` ArtifactGuardPolicies - `resourceId` string - `failingPolicies` ArtifactGuardPolicy[] - `type` 'ARTIFACT_GUARD_POLICY_TYPE_UNSPECIFIED' | 'VULNERABILITY' - `failureReason` string - `policyId` string - `attackExposure` AttackExposure - `state` 'STATE_UNSPECIFIED' | 'CALCULATED' | 'NOT_CALCULATED' - `attackExposureResult` string - `exposedHighValueResourcesCount` integer - `score` number, double - `exposedMediumValueResourcesCount` integer - `latestCalculationTime` string, google-datetime - `exposedLowValueResourcesCount` integer - `processes` Process[] - `args` string[] - `script` File - `path` string - `hashedSize` string, int64 - `operations` FileOperation[] - `type` 'OPERATION_TYPE_UNSPECIFIED' | 'OPEN' | 'READ' | 'RENAME' | 'WRITE' | 'EXECUTE' - `fileLoadState` 'FILE_LOAD_STATE_UNSPECIFIED' | 'LOADED_BY_PROCESS' | 'NOT_LOADED_BY_PROCESS' - `diskPath` DiskPath - `relativePath` string - `partitionUuid` string - `contents` string - `size` string, int64 - `sha256` string - `partiallyHashed` boolean - `userId` string, int64 - `binary` File - `path` string - `hashedSize` string, int64 - `operations` FileOperation[] - `type` 'OPERATION_TYPE_UNSPECIFIED' | 'OPEN' | 'READ' | 'RENAME' | 'WRITE' | 'EXECUTE' - `fileLoadState` 'FILE_LOAD_STATE_UNSPECIFIED' | 'LOADED_BY_PROCESS' | 'NOT_LOADED_BY_PROCESS' - `diskPath` DiskPath - `relativePath` string - `partitionUuid` string - `contents` string - `size` string, int64 - `sha256` string - `partiallyHashed` boolean - `libraries` File[] - `path` string - `hashedSize` string, int64 - `operations` FileOperation[] - `type` 'OPERATION_TYPE_UNSPECIFIED' | 'OPEN' | 'READ' | 'RENAME' | 'WRITE' | 'EXECUTE' - `fileLoadState` 'FILE_LOAD_STATE_UNSPECIFIED' | 'LOADED_BY_PROCESS' | 'NOT_LOADED_BY_PROCESS' - `diskPath` DiskPath - `relativePath` string - `partitionUuid` string - `contents` string - `size` string, int64 - `sha256` string - `partiallyHashed` boolean - `envVariablesTruncated` boolean - `pid` string, int64 - `argumentsTruncated` boolean - `name` string - `envVariables` EnvironmentVariable[] - `val` string - `name` string - `parentPid` string, int64 - `complianceDetails` ComplianceDetails - `cloudControl` CloudControl - `policyType` string - `cloudControlName` string - `version` integer - `type` 'CLOUD_CONTROL_TYPE_UNSPECIFIED' | 'BUILT_IN' | 'CUSTOM' - `frameworks` Framework[] - `type` 'FRAMEWORK_TYPE_UNSPECIFIED' | 'FRAMEWORK_TYPE_BUILT_IN' | 'FRAMEWORK_TYPE_CUSTOM' - `controls` Control[] - `controlName` string - `displayName` string - `displayName` string - `category` string[] - `name` string - `cloudControlDeploymentNames` string[] - `contacts` object - `compliances` Compliance[] - `standard` string - `ids` string[] - `version` string - `mitreAttack` MitreAttack - `additionalTactics` string[] - `version` string - `primaryTactic` 'TACTIC_UNSPECIFIED' | 'RECONNAISSANCE' | 'RESOURCE_DEVELOPMENT' | 'INITIAL_ACCESS' | 'EXECUTION' | 'PERSISTENCE' | 'PRIVILEGE_ESCALATION' | 'DEFENSE_EVASION' | 'CREDENTIAL_ACCESS' | 'DISCOVERY' | 'LATERAL_MOVEMENT' | 'COLLECTION' | 'COMMAND_AND_CONTROL' | 'EXFILTRATION' | 'IMPACT' - `primaryTechniques` string[] - `additionalTechniques` string[] - `affectedResources` AffectedResources - `count` string, int64 - `loadBalancers` LoadBalancer[] - `name` string - `state` 'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE' - `cloudDlpInspection` CloudDlpInspection - `fullScan` boolean - `infoTypeCount` string, int64 - `inspectJob` string - `infoType` string - `eventTime` string, google-datetime - `secret` Secret - `filePath` SecretFilePath - `path` string - `type` string - `environmentVariable` SecretEnvironmentVariable - `key` string - `status` SecretStatus - `lastUpdatedTime` string, google-datetime - `validity` 'SECRET_VALIDITY_UNSPECIFIED' | 'SECRET_VALIDITY_UNSUPPORTED' | 'SECRET_VALIDITY_FAILED' | 'SECRET_VALIDITY_INVALID' | 'SECRET_VALIDITY_VALID' - `dataAccessEvents` DataAccessEvent[] - `operation` 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY' - `eventId` string - `eventTime` string, google-datetime - `principalEmail` string - `access` Access - `serviceAccountDelegationInfo` ServiceAccountDelegationInfo[] - `principalEmail` string - `principalSubject` string - `callerIp` string - `serviceName` string - `userAgentFamily` string - `methodName` string - `principalEmail` string - `userName` string - `principalSubject` string - `serviceAccountKeyName` string - `callerIpGeo` Geolocation - `regionCode` string - `userAgent` string - `exfiltration` Exfiltration - `sources` ExfilResource[] - `name` string - `components` string[] - `totalExfiltratedBytes` string, int64 - `targets` ExfilResource[] - `name` string - `components` string[] - `aiModel` AiModel - `name` string - `library` string - `displayName` string - `location` string - `deploymentPlatform` 'DEPLOYMENT_PLATFORM_UNSPECIFIED' | 'VERTEX_AI' | 'GKE' | 'GCE' | 'FINE_TUNED_MODEL' - `domain` string - `publisher` string - `usageCategory` string - `securityMarks` SecurityMarks - `canonicalName` string - `name` string - `marks` object - `iamDetails` GoogleCloudSecuritycenterV1IamDetails - `iamRolePermissions` GoogleCloudSecuritycenterV1IamRolePermission[] - `name` string - `role` string - `files` File[] - `path` string - `hashedSize` string, int64 - `operations` FileOperation[] - `type` 'OPERATION_TYPE_UNSPECIFIED' | 'OPEN' | 'READ' | 'RENAME' | 'WRITE' | 'EXECUTE' - `fileLoadState` 'FILE_LOAD_STATE_UNSPECIFIED' | 'LOADED_BY_PROCESS' | 'NOT_LOADED_BY_PROCESS' - `diskPath` DiskPath - `relativePath` string - `partitionUuid` string - `contents` string - `size` string, int64 - `sha256` string - `partiallyHashed` boolean - `kubernetes` Kubernetes - `accessReviews` AccessReview[] - `resource` string - `subresource` string - `verb` string - `ns` string - `name` string - `group` string - `version` string - `nodes` Node[] - `name` string - `nodePools` NodePool[] - `nodes` Node[] - `name` string - `name` string - `bindings` GoogleCloudSecuritycenterV1Binding[] - `name` string - `role` Role - `name` string - `kind` 'KIND_UNSPECIFIED' | 'ROLE' | 'CLUSTER_ROLE' - `ns` string - `subjects` Subject[] - `name` string - `kind` 'AUTH_TYPE_UNSPECIFIED' | 'USER' | 'SERVICEACCOUNT' | 'GROUP' - `ns` string - `ns` string - `pods` Pod[] - `labels` Label[] - `value` string - `name` string - `name` string - `ns` string - `containers` Container[] - `createTime` string, google-datetime - `labels` Label[] - `value` string - `name` string - `name` string - `imageId` string - `uri` string - `objects` Object[] - `kind` string - `ns` string - `containers` Container[] - `createTime` string, google-datetime - `labels` Label[] - `value` string - `name` string - `name` string - `imageId` string - `uri` string - `name` string - `group` string - `roles` Role[] - `name` string - `kind` 'KIND_UNSPECIFIED' | 'ROLE' | 'CLUSTER_ROLE' - `ns` string - `job` Job - `errorCode` integer - `name` string - `state` 'JOB_STATE_UNSPECIFIED' | 'PENDING' | 'RUNNING' | 'SUCCEEDED' | 'FAILED' - `location` string - `mute` 'MUTE_UNSPECIFIED' | 'MUTED' | 'UNMUTED' | 'UNDEFINED' - `dataFlowEvents` DataFlowEvent[] - `eventId` string - `eventTime` string, google-datetime - `principalEmail` string - `violatedLocation` string - `operation` 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY' - `agentDataAccessEvents` AgentDataAccessEvent[] - `principalSubject` string - `operation` 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY' - `eventId` string - `eventTime` string, google-datetime - `containers` Container[] - `createTime` string, google-datetime - `labels` Label[] - `value` string - `name` string - `name` string - `imageId` string - `uri` string - `orgPolicies` OrgPolicy[] - `name` string - `resourceName` string - `vertexAi` VertexAi - `pipelines` Pipeline[] - `name` string - `displayName` string - `datasets` Dataset[] - `name` string - `source` string - `displayName` string - `createTime` string, google-datetime - `discoveredWorkload` DiscoveredWorkload - `confidence` 'CONFIDENCE_UNSPECIFIED' | 'CONFIDENCE_HIGH' - `detectedRelevantKeywords` boolean - `workloadType` 'WORKLOAD_TYPE_UNSPECIFIED' | 'MCP_SERVER' | 'AI_INFERENCE' | 'AGENT' - `detectedRelevantPackages` boolean - `detectedRelevantHardware` boolean - `kernelRootkit` KernelRootkit - `name` string - `unexpectedKprobeHandler` boolean - `unexpectedKernelCodePages` boolean - `unexpectedCodeModification` boolean - `unexpectedReadOnlyDataModification` boolean - `unexpectedFtraceHandler` boolean - `unexpectedInterruptHandler` boolean - `unexpectedSystemCallHandler` boolean - `unexpectedProcessesInRunqueue` boolean - `application` Application - `fullUri` string - `baseUri` string - `indicator` Indicator - `signatures` ProcessSignature[] - `memoryHashSignature` MemoryHashSignature - `binaryFamily` string - `detections` Detection[] - `binary` string - `percentPagesMatched` number, double - `yaraRuleSignature` YaraRuleSignature - `yaraRule` string - `signatureType` 'SIGNATURE_TYPE_UNSPECIFIED' | 'SIGNATURE_TYPE_PROCESS' | 'SIGNATURE_TYPE_FILE' - `domains` string[] - `uris` string[] - `ipAddresses` string[] - `moduleName` string - `externalExposure` ExternalExposure - `privatePort` string - `exposedService` string - `hostnameUri` string - `pscServiceAttachment` string - `instanceGroup` string - `privateIpAddress` string - `pscNetworkAttachment` string - `publicIpAddress` string - `backendBucket` string - `backendService` string - `forwardingRule` string - `exposedApplication` string - `loadBalancerFirewallPolicy` string - `networkPathInsightsGenerationTime` string, google-datetime - `exposedEndpoint` string - `internalBackendService` string - `networkEndpointGroup` string - `publicPort` string - `httpResponse` HttpResponse[] - `statusCode` string - `path` string - `serviceFirewallPolicy` string - `networkIngressFirewallPolicy` string - `muteInfo` MuteInfo - `staticMute` StaticMute - `state` 'MUTE_UNSPECIFIED' | 'MUTED' | 'UNMUTED' | 'UNDEFINED' - `applyTime` string, google-datetime - `dynamicMuteRecords` DynamicMuteRecord[] - `matchTime` string, google-datetime - `muteConfig` string - `findingClass` 'FINDING_CLASS_UNSPECIFIED' | 'THREAT' | 'VULNERABILITY' | 'MISCONFIGURATION' | 'OBSERVATION' | 'SCC_ERROR' | 'POSTURE_VIOLATION' | 'TOXIC_COMBINATION' | 'SENSITIVE_DATA_RISK' | 'CHOKEPOINT' | 'EXTERNAL_EXPOSURE' | 'SECRET' - `iamBindings` IamBinding[] - `member` string - `action` 'ACTION_UNSPECIFIED' | 'ADD' | 'REMOVE' - `role` string - `dataRetentionDeletionEvents` DataRetentionDeletionEvent[] - `dataObjectCount` string, int64 - `eventType` 'EVENT_TYPE_UNSPECIFIED' | 'EVENT_TYPE_MAX_TTL_EXCEEDED' | 'EVENT_TYPE_MAX_TTL_FROM_CREATION' | 'EVENT_TYPE_MAX_TTL_FROM_LAST_MODIFICATION' | 'EVENT_TYPE_MIN_TTL_FROM_CREATION' - `minRetentionAllowed` string, google-duration - `eventDetectionTime` string, google-datetime - `maxRetentionAllowed` string, google-duration - `parent` string - `category` string - `canonicalName` string - `vulnerability` Vulnerability - `fixedPackage` Package - `cpeUri` string - `packageName` string - `packageType` string - `packageVersion` string - `providerRiskScore` string, int64 - `cwes` Cwe[] - `references` Reference[] - `source` string - `uri` string - `id` string - `offendingPackage` Package - `cpeUri` string - `packageName` string - `packageType` string - `packageVersion` string - `securityBulletin` SecurityBulletin - `bulletinId` string - `suggestedUpgradeVersion` string - `submissionTime` string, google-datetime - `cve` Cve - `upstreamFixAvailable` boolean - `id` string - `observedInTheWild` boolean - `firstExploitationDate` string, google-datetime - `references` Reference[] - `source` string - `uri` string - `cvssv3` Cvssv3 - `availabilityImpact` 'IMPACT_UNSPECIFIED' | 'IMPACT_HIGH' | 'IMPACT_LOW' | 'IMPACT_NONE' - `integrityImpact` 'IMPACT_UNSPECIFIED' | 'IMPACT_HIGH' | 'IMPACT_LOW' | 'IMPACT_NONE' - `attackComplexity` 'ATTACK_COMPLEXITY_UNSPECIFIED' | 'ATTACK_COMPLEXITY_LOW' | 'ATTACK_COMPLEXITY_HIGH' - `privilegesRequired` 'PRIVILEGES_REQUIRED_UNSPECIFIED' | 'PRIVILEGES_REQUIRED_NONE' | 'PRIVILEGES_REQUIRED_LOW' | 'PRIVILEGES_REQUIRED_HIGH' - `baseScore` number, double - `userInteraction` 'USER_INTERACTION_UNSPECIFIED' | 'USER_INTERACTION_NONE' | 'USER_INTERACTION_REQUIRED' - `confidentialityImpact` 'IMPACT_UNSPECIFIED' | 'IMPACT_HIGH' | 'IMPACT_LOW' | 'IMPACT_NONE' - `scope` 'SCOPE_UNSPECIFIED' | 'SCOPE_UNCHANGED' | 'SCOPE_CHANGED' - `attackVector` 'ATTACK_VECTOR_UNSPECIFIED' | 'ATTACK_VECTOR_NETWORK' | 'ATTACK_VECTOR_ADJACENT' | 'ATTACK_VECTOR_LOCAL' | 'ATTACK_VECTOR_PHYSICAL' - `impact` 'RISK_RATING_UNSPECIFIED' | 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' - `exploitationActivity` 'EXPLOITATION_ACTIVITY_UNSPECIFIED' | 'WIDE' | 'CONFIRMED' | 'AVAILABLE' | 'ANTICIPATED' | 'NO_KNOWN' - `zeroDay` boolean - `exploitReleaseDate` string, google-datetime - `reachable` boolean - `parentDisplayName` string - `database` Database - `name` string - `query` string - `displayName` string - `version` string - `userName` string - `grantees` string[] - `cloudArmor` CloudArmor - `duration` string, google-duration - `requests` Requests - `ratio` number, double - `shortTermAllowed` integer - `longTermAllowed` integer - `longTermDenied` integer - `attack` Attack - `volumeBpsLong` string, int64 - `volumeBps` integer - `classification` string - `volumePps` integer - `volumePpsLong` string, int64 - `securityPolicy` SecurityPolicy - `name` string - `preview` boolean - `type` string - `adaptiveProtection` AdaptiveProtection - `confidence` number, double - `threatVector` string - `disk` Disk - `name` string - `muteUpdateTime` string, google-datetime - `nextSteps` string - `cloudDlpDataProfile` CloudDlpDataProfile - `parentType` 'PARENT_TYPE_UNSPECIFIED' | 'ORGANIZATION' | 'PROJECT' - `infoTypes` InfoType[] - `version` string - `name` string - `sensitivityScore` SensitivityScore - `score` 'SENSITIVITY_SCORE_LEVEL_UNSPECIFIED' | 'SENSITIVITY_LOW' | 'SENSITIVITY_UNKNOWN' | 'SENSITIVITY_MODERATE' | 'SENSITIVITY_HIGH' - `dataProfile` string - `externalUri` string - `severity` 'SEVERITY_UNSPECIFIED' | 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' - `muteInitiator` string - `backupDisasterRecovery` BackupDisasterRecovery - `policies` string[] - `profile` string - `appliance` string - `backupType` string - `host` string - `backupCreateTime` string, google-datetime - `storagePool` string - `policyOptions` string[] - `backupTemplate` string - `applications` string[] - `policyViolationSummary` PolicyViolationSummary - `policyViolationsCount` string, int64 - `conformantResourcesCount` string, int64 - `evaluationErrorsCount` string, int64 - `outOfScopeResourcesCount` string, int64 - `toxicCombination` ToxicCombination - `attackExposureScore` number, double - `relatedFindings` string[] - `securityPosture` SecurityPosture - `name` string - `revisionId` string - `postureDeployment` string - `postureDeploymentResource` string - `changedPolicy` string - `policySet` string - `policy` string - `policyDriftDetails` PolicyDriftDetails[] - `expectedValue` string - `detectedValue` string - `field` string - `externalSystems` object - `ipRules` IpRules - `allowed` Allowed - `ipRules` IpRule[] - `protocol` string - `portRanges` PortRange[] - `min` string, int64 - `max` string, int64 - `sourceIpRanges` string[] - `destinationIpRanges` string[] - `direction` 'DIRECTION_UNSPECIFIED' | 'INGRESS' | 'EGRESS' - `denied` Denied - `ipRules` IpRule[] - `protocol` string - `portRanges` PortRange[] - `min` string, int64 - `max` string, int64 - `exposedServices` string[] - `networks` Network[] - `name` string - `chokepoint` Chokepoint - `relatedFindings` string[] - `logEntries` LogEntry[] - `cloudLoggingEntry` CloudLoggingEntry - `insertId` string - `resourceContainer` string - `logId` string - `timestamp` string, google-datetime - `sourceProperties` object - `groupMemberships` GroupMembership[] - `groupType` 'GROUP_TYPE_UNSPECIFIED' | 'GROUP_TYPE_TOXIC_COMBINATION' | 'GROUP_TYPE_CHOKEPOINT' - `groupId` string - `description` string - `name` string - `notebook` Notebook - `name` string - `lastAuthor` string - `service` string - `notebookUpdateTime` string, google-datetime - `connections` Connection[] - `sourcePort` integer - `sourceIp` string - `protocol` 'PROTOCOL_UNSPECIFIED' | 'ICMP' | 'TCP' | 'UDP' | 'GRE' | 'ESP' - `destinationIp` string - `destinationPort` integer ## Response `200` Successful response --- [API](https://skmtc.net/google/apis/securitycenter.md) · [All operations](https://skmtc.net/google/apis/securitycenter/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/securitycenter/revisions/1dddf1287cd1/schema)