For the complete documentation index, see llms.txt. This page is also available as Markdown.

incident

Examples

type Incident {
  id: String!
  caseId: String!
  name: String!
  description: String
  type: IncidentType!
  severity: IncidentSeverity!
  status: IncidentStatus!
  blockedReason: String
  owner: String
  creator: String!
  slaTargetAt: DateTime
  settings: IncidentSettings!
  isOxDeclared: Boolean!
  autoExpandFromSource: Boolean!
  externalReferences: [String!]!
  sourcePublishedAt: DateTime
  counts: IncidentCounts!
  exposureState: ExposureState
  currentSeverity: IncidentSeverity
  isMonitoring: Boolean!
  affectedResourceCount: Int!
  summary: [IncidentSummarySection!]!
  aiSummary: IncidentAiSummary
  indicatorCounts: IncidentIndicatorCounts
  countsAsOf: DateTime
  lastMatchedAt: DateTime
  lastExposureChange: DateTime
  resolvedAt: DateTime
  createdAt: DateTime
  updatedAt: DateTime
  indicators: [Indicator!]
}

Fields

Field
Description
Supported fields

id String!

caseId String!

name String!

description String

blockedReason String

owner String

creator String!

slaTargetAt DateTime

allowManualClosure Boolean! autoCloseWhenResolved Boolean! cleanDaysBeforeClose Int! autoReopenOnNewHit Boolean! watchWindowDays Int!

isOxDeclared Boolean!

autoExpandFromSource Boolean!

externalReferences [String!]!

sourcePublishedAt DateTime

affectedApps Int! affectedRepos Int! affectedImages Int! openFindings Int! resolvedFindings Int! sbomMatches Int! pipelineHits Int! clearedMatches Int! blockedItems Int! cloudAccounts Int! cloudRunningImages Int! cloudRunningThisVersionImages Int! openFindingsBySeverity IncidentSeverityCounts!

exposureState ExposureState

currentSeverity IncidentSeverity

isMonitoring Boolean!

affectedResourceCount Int!

title String! bullets [String!]! lines [IncidentSummaryLine!]!

bullets [String!]! generatedAt DateTime model String

indicatorCounts IncidentIndicatorCounts

cve Int! package Int! packageRange Int! image Int! issue Int! advisorySource Int!

countsAsOf DateTime

lastMatchedAt DateTime

lastExposureChange DateTime

resolvedAt DateTime

createdAt DateTime

updatedAt DateTime

indicators [Indicator!]

id String! incidentId String! kind IndicatorKind! value String! versionRange String fixedVersions [String!]! severity IncidentSeverity cvssScore Float addedAt DateTime! source String! addedBy String status String! url String lastFetchedAt DateTime autoExpand Boolean matchState IndicatorMatchState activeMatchCount Int

References

Queries using this object:

Mutations using this object:

Fields with this object:

Last updated