Mark a finding as an exception so it no | Comp AI API

Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the.

POST /v1/cloud-security/findings/{findingId}/exception

Mark a finding as an exception so it no longer appears in the active Scan Results list

cURL

curl --request POST \
  --url https://api.trycomp.ai/v1/cloud-security/findings/{findingId}/exception \
  --header 'Content-Type: application/json' \
  --data '
{
  "reason": "Bucket hosts intentionally public marketing assets; writes restricted to the marketing IAM role."
}
'

Path Parameters

findingId · string · required

Body

application/json

reason · string · required

Documentation for why this finding does not apply or is being accepted. Minimum 20 non-whitespace characters.

Example:

"Bucket hosts intentionally public marketing assets; writes restricted to the marketing IAM role."

reviewedBy · string

Free-text reviewer or approval reference.

Example:

"Approved by CISO 2026-Q1"

expiresAt · string

ISO date when this exception should auto-expire. Null/missing = never.

Example:

"2026-08-13"

Response

201 - undefined