Track one static-analysis issue as an ordinary finding

POST 
/api/v1/assessments/:assessment_id/codeling/issues/promote

Promote one static-analysis issue to an ordinary Finding.

The promotion unit is the row the results table draws: one Finding per issue, every location one evidence entry. Idempotent: a re-promotion returns the existing row with 200.

All four producers come through here. A dependency issue is the one path that writes finding_source="sca" and populates dependency_evidence, both of which the exporters and the report have read since they were added and nothing has ever written.

Not release-gated. Scope (findings:triage), manager-or-above, the org check and verify_assessment_access are the gates, as they are for every other finding action.

Request

Responses

200

Successful Response

400

Invalid cursor or query.

401

Missing, expired, or invalid credentials.

403

Authenticated but not authorized for this resource. Note: cross-organization reads return 404, not 403.

404

Snapshot unavailable.

409

Bounded aggregation incomplete.

422

Semantic validation failure — request shape was valid but contents were not.

429

Too many requests — rate limited. Retry after the window resets.

500

Internal server error — unexpected failure.

502

Snapshot validation failed.

503

Query resource limit exceeded.