Skip to main content
POST
Override attestation

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

flow_name
string
required

Name of a flow in the org

Pattern: ^[a-zA-Z0-9][a-zA-Z0-9\.\-_~]*$
trail_name
string
required

Name of a trail in the flow

Pattern: ^[a-zA-Z0-9][a-zA-Z0-9\.\-_~]*$
org
string
required

Body

application/json
attestation_name
string
required

Name of the attestation, as the flow template names it when it expects one

Pattern: ^[a-zA-Z0-9\-_,]+$
reason
string
required
new_compliance_status
boolean
required
original_attestation_type
required
Available options:
generic,
junit,
snyk,
pull_request,
jira,
sonar
origin_url
string | null

URL of where the attestation was made, such as a CI job

description
string | null

Free-text description of the attestation

artifact_fingerprint
string | null

SHA-256 fingerprint of an artifact, 64 lowercase hex characters

Pattern: ^[a-f0-9]{64}$
target_artifacts
string[] | null

Template names of the artifacts the attestation is for. At most one with artifact_fingerprint; without it, git_commit_info is required

Pattern: ^[a-zA-Z0-9\-_,]+$
git_commit_info
GitCommit · object | null

Git commit the attestation is associated with

repo_info
RepoInfoPostInput · object | null

Repository the git commit belongs to

external_urls
External Urls · object | null

Links to external evidence, keyed by a label of your choosing

attachment_upload_id
null
annotations
Annotations · object | null

Searchable key-value pairs to record on the attestation

user_data

Any JSON to store with the attestation, kept as sent

Response

Successful Response

The response is of type string.