Ctrlk
Book a demoOX Security
For the complete documentation index, see llms.txt. This page is also available as Markdown.

incidentEvidenceGroup

Examples

type IncidentEvidenceGroup {
  category: EvidenceCategory!
  totalCount: Int!
  stateCounts: [EvidenceStateCount!]!
  stateBreakdown: [IncidentNamedCount!]!
  latestAsOf: DateTime
  severityCounts: [SeverityHistogramBucket!]!
  breakdownCounts: [IncidentNamedCount!]!
  items: [IncidentEvidenceItem!]!
  columnPresence: IncidentEvidenceColumnPresence!
}

Fields

Field
Description
Supported fields

category EvidenceCategory!

totalCount Int!

stateCounts [EvidenceStateCount!]!

state EvidenceState! count Int!

stateBreakdown [IncidentNamedCount!]!

label String! count Int!

latestAsOf DateTime

severityCounts [SeverityHistogramBucket!]!

severity IncidentSeverity! count Int!

breakdownCounts [IncidentNamedCount!]!

label String! count Int!

items [IncidentEvidenceItem!]!

id String! incidentId String! category EvidenceCategory! state EvidenceState! severity IncidentSeverity title String! resourceName String! resourceDetail String pipelineOutcome PipelineOutcome targetBranch String appName String appType String hitIndicatorValues [String!]! foundVersion String libraryName String libraryVersion String isRunning Boolean runtimeStatus String cloudRunState CloudRunState isUsed Boolean aiSimulation AiSimulationVerdict exploitabilityVerdict ExploitabilityVerdict cveExploitability [CveExploitability!] cveExploitabilityOverflow Int linkedIssueId String factorEvidence [IncidentEvidenceFactorEvidence!] isInternetExposed Boolean dependencyType EvidenceDependencyType pinState String stateReason String externalUrl String asOf DateTime! developerEmail String commandRanAt DateTime devEnvironmentOutcome DevEnvironmentOutcome resourceOwner String issueId String joinableIssueId String jiraTicketKeys [String!] sbomAppId String sbomLibrary String isFixAvailable Boolean hasTicket Boolean commentCount Int latestCommentText String latestCommentAuthorName String latestCommentAt DateTime isGptAvailable Boolean isExcluded Boolean hasJiraTicket Boolean hasNonJiraTicket Boolean hasSeverityOverride Boolean originalIssueSeverity IncidentSeverity hasOwnerOverride Boolean originalOwnerName String originalOwnerEmail String currentOwnerName String currentOwnerEmail String hasMessages Boolean isFixApplied Boolean isExcludedByAlert Boolean isFalsePositive Boolean isCanceledFalsePositive Boolean appTags [String!]! businessUnits [IncidentBusinessUnitRef!]! hasPullRequest Boolean hasFalsePositiveDetails Boolean falsePositiveComment String cancelFalsePositiveComment String

columnPresence IncidentEvidenceColumnPresence!

Whether the AI Simulation, Used and Runtime verdict columns have at least one value in this section, computed over every row of the section rather than the loaded page.

aiSimulation Boolean! isUsed Boolean! runtimeStatus Boolean!

References

Fields with this object:

Last updated