Skip to content

Remediation API

Programmatic access to remediation assignments.

All endpoints require an authenticated session (session cookie, plus the X-CSRFToken header on POST, PUT and DELETE; see Authentication) and operate on the current organization. Creating an assignment additionally requires the organization-admin role; listing and updating do not.

List assignments

curl "https://sentrikat.example.com/api/remediation/assignments?page=1&per_page=25" \
  -b cookies.txt

Supports pagination (page, per_page, max 100), filtering, sorting and search via query parameters.

Get a single assignment

curl https://sentrikat.example.com/api/remediation/assignments/42 \
  -b cookies.txt

Create an assignment

curl -X POST https://sentrikat.example.com/api/remediation/assignments \
  -b cookies.txt \
  -H "X-CSRFToken: $CSRF" \
  -H "Content-Type: application/json" \
  -d '{
    "assigned_to": "[email protected]",
    "match_id": 1234,
    "priority": "high",
    "due_date": "2027-07-01",
    "notes": "Patch before the maintenance window"
  }'
Field Required Description
assigned_to yes The assignee (validated against org users)
match_id / product_id / cve_id one of What the assignment refers to
priority no critical / high / medium (default) / low
due_date no ISO date; if omitted it is derived from the finding's severity (SLA policy)
notes no Free-text note

Update an assignment

curl -X PUT https://sentrikat.example.com/api/remediation/assignments/42 \
  -b cookies.txt \
  -H "X-CSRFToken: $CSRF" \
  -H "Content-Type: application/json" \
  -d '{"priority": "medium", "notes": "Rescheduled"}'

Delete an assignment

curl -X DELETE https://sentrikat.example.com/api/remediation/assignments/42 \
  -b cookies.txt \
  -H "X-CSRFToken: $CSRF"

See also