autofix.completed

POST

An autofix job finished (fixed, low confidence or cannot fix). Subscribing needs the autofix:read scope.

Parameters

Header Parameters

X-DevSecure-Signature

required

string

T=,v1=<hex HMAC-SHA256 of “.”>[,v1=…]

X-DevSecure-Event

required

string

The event type.

X-DevSecure-Event-Id

required

string

The event id; the same on every retry and redelivery.

X-DevSecure-Delivery

required

string

The delivery id.

X-DevSecure-Webhook-Id

required

string

The webhook subscription id.

Request Body^required

Media typeapplication/json

object

id

required

Event id.

string format: uuid

type

required

string

Allowed value: autofix.completed

api_version

required

string

Allowed value: v1

created_at

required

string format: date-time

data

required

object

autofix_job

required

AutofixJob

object

id

required

Id

string format: uuid

status

required

Status

string

Allowed values: queued running completed low_confidence cannot_fix failed unknown

remediation_status

Any of:

string

string

Allowed values: fixed cannot_fix escalated

null

null

issue_id

Any of:

string

string format: uuid

null

null

scan_id

Any of:

string

string

null

null

repository

Any of:

ScanRepository

ScanRepository

object

id

required

Id

string

provider

required

Provider

string

Allowed values: github gitlab bitbucket container

name

required

Name

string

null

null

target_branch

Any of:

string

string

null

null

fix_branch

Any of:

string

string

null

null

pull_request

Any of:

PullRequest

PullRequest

object

url

Any of:

string

string

null

null

number

Any of:

integer

integer

null

null

null

null

finding

required

AutofixFinding

object

title

Any of:

string

string

null

null

severity

Any of:

string

string

Allowed values: critical high medium low info

null

null

cve

Any of:

string

string

null

null

file_path

Any of:

string

string

null

null

scores

required

AutofixScores

object

priority

Any of:

integer

integer

null

null

remediation_safety

Any of:

integer

integer

null

null

calibrated_confidence

Any of:

number

number

null

null

low_confidence

Any of:

boolean

boolean

null

null

cannot_fix_reason

Any of:

string

string

null

null

created_at

Any of:

string

string

null

null

started_at

Any of:

string

string

null

null

completed_at

Any of:

string

string

null

null

Responses

410

Gone: DevSecure turns the webhook off.

2XX

Received. Any 2xx status counts as delivered.

default

Anything else (or no answer in 10 s) is retried.