Vulnerabilities

Link a pull request to a vulnerability

Stores a pull request or merge request URL as the vulnerability’s fix PR. Works for every finding, including black-box findings with no repository. Accepts GitHub pull requests, GitLab merge requests and Bitbucket pull requests on any host, including self-hosted instances. Strix attaches the pull request to each Linear or Jira ticket of the finding. A previous pull request on the finding is replaced and removed from those tickets. Tickets created later pick up the stored pull request automatically. Returns 409 when the stored pull request changed while the request was in flight.

PUT

vulnerabilities

{vulnerabilityId}

fix-pr

Error

A valid request URL is required to generate request examples

{
  "fix_pr_url": "<string>",
  "ticket_links": {
    "attached": [
      "<string>"
    ],
    "unsupported": [
      "<string>"
    ],
    "failed": [
      {
        "ticket": "<string>",
        "provider": "jira",
        "detail": "<string>"
      }
    ],
    "error": "<string>"
  },
  "replaced": {
    "fix_pr_url": "<string>",
    "ticket_links": {
      "detached": [
        "<string>"
      ],
      "unsupported": [
        "<string>"
      ],
      "failed": [
        {
          "ticket": "<string>",
          "provider": "jira",
          "detail": "<string>"
        }
      ],
      "error": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Authorizations

Authorization

string

header

required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Path Parameters

vulnerabilityId

string

required

ID of the vulnerability. Use the id field of a finding from listVulnerabilities.

Body

application/json

url

string<uri>

required

Pull request or merge request URL.

Example:

"https://github.com/acme/api/pull/42"

expected_fix_pr_url

string<uri> | null

The pull request the caller believes the vulnerability currently stores; null when it should have none. When present, the request only succeeds if that is still the case and returns 409 otherwise. Use it to restore a link without overwriting one added in the meantime.

Example:

null

Response

Pull request linked. ticket_links reports the attachment to the finding's tickets.

fix_pr_url

string

required

Canonical form of the stored URL.

ticket_links

object

required

Result of attaching the pull request to the finding's tickets. Every list is empty when the finding has no ticket.

Show child attributes

replaced

object | null

required

The pull request this one replaced, when the finding already had one.

Show child attributes

Error

A valid request URL is required to generate request examples

{
  "fix_pr_url": "<string>",
  "ticket_links": {
    "attached": [
      "<string>"
    ],
    "unsupported": [
      "<string>"
    ],
    "failed": [
      {
        "ticket": "<string>",
        "provider": "jira",
        "detail": "<string>"
      }
    ],
    "error": "<string>"
  },
  "replaced": {
    "fix_pr_url": "<string>",
    "ticket_links": {
      "detached": [
        "<string>"
      ],
      "unsupported": [
        "<string>"
      ],
      "failed": [
        {
          "ticket": "<string>",
          "provider": "jira",
          "detail": "<string>"
        }
      ],
      "error": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Analytics

Asset Discovery

Audit

Billing

Chat

CLI

Connectors

Containers

Assets

Test Users

Integrations

Knowledge

License

LLM

Run Logs

Organization

Invitations

Members

PR Reviews

Vulnerabilities

Supply Chain

Scans

Schedules

Search

Tokens

Uploads

Webhooks

Workspaces

Repositories

Link a pull request to a vulnerability

Authorizations

Path Parameters

Body

Response