---
title: "PATCH /api/v2/secret-scanning/findings"
method: PATCH
path: "/api/v2/secret-scanning/findings"
tags: ["Secret Scanning"]
---

# PATCH /api/v2/secret-scanning/findings

`PATCH /api/v2/secret-scanning/findings`

Update one or more Secret Scanning Findings in a batch.

## Request body

- object[]
  - `findingId` string, required — The ID of the Secret Scanning Finding to update.
  - `status` 'resolved' | 'unresolved' | 'false-positive' | 'ignore' — The updated status of the specified Secret Scanning Finding.
  - `remarks` string, nullable — Remarks pertaining to the status of this finding.

## Response `200`

Default Response

- object
  - `findings` union[], required
    - union
      - object
        - `id` string, uuid, required
        - `dataSourceName` string, required
        - `resourceName` string, required
        - `rule` string, required
        - `severity` string, required
        - `status` string
        - `remarks` string, nullable
        - `fingerprint` string, required
        - `projectId` string, required
        - `scanId` string, uuid, nullable
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `resourceType` 'repository', required
        - `dataSourceType` 'github', required
        - `details` object, required
          - `description` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, required
          - `endColumn` number, required
          - `file` string, required
          - `link` string, required
          - `symlinkFile` string, required
          - `commit` string, required
          - `entropy` number, required
          - `author` string, required
          - `email` string, required
          - `date` string, required
          - `message` string, required
          - `tags` string[], required
          - `ruleID` string, required
          - `fingerprint` string, required
      - object
        - `id` string, uuid, required
        - `dataSourceName` string, required
        - `resourceName` string, required
        - `rule` string, required
        - `severity` string, required
        - `status` string
        - `remarks` string, nullable
        - `fingerprint` string, required
        - `projectId` string, required
        - `scanId` string, uuid, nullable
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `resourceType` 'repository', required
        - `dataSourceType` 'bitbucket', required
        - `details` object, required
          - `description` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, required
          - `endColumn` number, required
          - `file` string, required
          - `link` string, required
          - `symlinkFile` string, required
          - `commit` string, required
          - `entropy` number, required
          - `author` string, required
          - `email` string, required
          - `date` string, required
          - `message` string, required
          - `tags` string[], required
          - `ruleID` string, required
          - `fingerprint` string, required
      - object
        - `id` string, uuid, required
        - `dataSourceName` string, required
        - `resourceName` string, required
        - `rule` string, required
        - `severity` string, required
        - `status` string
        - `remarks` string, nullable
        - `fingerprint` string, required
        - `projectId` string, required
        - `scanId` string, uuid, nullable
        - `createdAt` string, date-time, required
        - `updatedAt` string, date-time, required
        - `resourceType` 'project', required
        - `dataSourceType` 'gitlab', required
        - `details` object, required
          - `description` string, required
          - `startLine` number, required
          - `endLine` number, required
          - `startColumn` number, required
          - `endColumn` number, required
          - `file` string, required
          - `link` string, required
          - `symlinkFile` string, required
          - `commit` string, required
          - `entropy` number, required
          - `author` string, required
          - `email` string, required
          - `date` string, required
          - `message` string, required
          - `tags` string[], required
          - `ruleID` string, required
          - `fingerprint` string, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)