Set the state of a finding¶

For AI agents

An agent with a write or write_risk_accept token sets the state of one finding with the tool set_triage. The tool takes the finding_key of the finding from search_findings. A finding with an accepted risk keeps its state. Use the MCP server tells how to connect.

Prerequisites¶

A role that allows triage: triager, security_lead or admin (What your role lets you do).

Steps¶

Open a finding from the Findings table. The triage panel sets the state of this one finding.
Select Not affected. Not affected needs a reason: select one of the five standard reasons.
Select Save to audit trail. The state changes immediately.
Only this finding changes. The finding of the other scanner stays Open.
The Activity card of the finding shows who changed the state and when.
To see all the triage changes, open the Audit log from the side menu. The new entry is at the top: when, who, and what changed.

Next: Accept a risk, with an expiry date.