incident

Examples

type Incident {
  id: String!
  caseId: String!
  name: String!
  description: String
  type: IncidentType!
  severity: IncidentSeverity!
  status: IncidentStatus!
  blockedReason: String
  owner: String
  creator: String!
  slaTargetAt: DateTime
  settings: IncidentSettings!
  isOxDeclared: Boolean!
  autoExpandFromSource: Boolean!
  externalReferences: [String!]!
  sourcePublishedAt: DateTime
  counts: IncidentCounts!
  exposureState: ExposureState
  currentSeverity: IncidentSeverity
  isMonitoring: Boolean!
  affectedResourceCount: Int!
  summary: [IncidentSummarySection!]!
  aiSummary: IncidentAiSummary
  indicatorCounts: IncidentIndicatorCounts
  countsAsOf: DateTime
  lastMatchedAt: DateTime
  lastExposureChange: DateTime
  resolvedAt: DateTime
  createdAt: DateTime
  updatedAt: DateTime
  indicators: [Indicator!]
}

Fields

Field	Description	Supported fields
id String!
caseId String!
name String!
description String
type IncidentType!
severity IncidentSeverity!
status IncidentStatus!
blockedReason String
owner String
creator String!
slaTargetAt DateTime
settings IncidentSettings!		allowManualClosure Boolean! autoCloseWhenResolved Boolean! cleanDaysBeforeClose Int! autoReopenOnNewHit Boolean! watchWindowDays Int!
isOxDeclared Boolean!
autoExpandFromSource Boolean!
externalReferences [String!]!
sourcePublishedAt DateTime
counts IncidentCounts!		affectedApps Int! affectedRepos Int! affectedImages Int! openFindings Int! resolvedFindings Int! sbomMatches Int! pipelineHits Int! clearedMatches Int! blockedItems Int! cloudAccounts Int! cloudRunningImages Int! cloudRunningThisVersionImages Int! openFindingsBySeverity IncidentSeverityCounts!
exposureState ExposureState
currentSeverity IncidentSeverity
isMonitoring Boolean!
affectedResourceCount Int!
summary [IncidentSummarySection!]!		title String! bullets [String!]! lines [IncidentSummaryLine!]!
aiSummary IncidentAiSummary		bullets [String!]! generatedAt DateTime model String
indicatorCounts IncidentIndicatorCounts		cve Int! package Int! packageRange Int! image Int! issue Int! advisorySource Int!
countsAsOf DateTime
lastMatchedAt DateTime
lastExposureChange DateTime
resolvedAt DateTime
createdAt DateTime
updatedAt DateTime
indicators [Indicator!]		id String! incidentId String! kind IndicatorKind! value String! versionRange String fixedVersions [String!]! severity IncidentSeverity cvssScore Float addedAt DateTime! source String! addedBy String status String! url String lastFetchedAt DateTime autoExpand Boolean matchState IndicatorMatchState activeMatchCount Int

References

Queries using this object:

• <?> getIncident

Mutations using this object:

• <~> updateIncidentName

• <~> updateIncidentDescription

• <~> updateIncidentSeverity

• <~> updateIncidentType

• <~> updateIncidentStatus

• <~> createIncident

Fields with this object:

• {} IncidentsConnection.items