Method: organizations.sources.findings.patch

Creates or updates a finding. If no location is specified, finding is assumed to be in global. The corresponding source must exist for a finding creation to succeed.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



The relative resource name of the finding. The following list shows some examples:

+ organizations/{organization_id}/sources/{source_id}/findings/{findingId} + organizations/{organization_id}/sources/{source_id}/locations/{locationId}/findings/{findingId} + folders/{folder_id}/sources/{source_id}/findings/{findingId} + folders/{folder_id}/sources/{source_id}/locations/{locationId}/findings/{findingId} + projects/{projectId}/sources/{source_id}/findings/{findingId} + projects/{projectId}/sources/{source_id}/locations/{locationId}/findings/{findingId}

Query parameters


string (FieldMask format)

The FieldMask to use when updating the finding resource. This field should not be specified when creating a finding.

When updating a finding, an empty mask is treated as updating all mutable fields and replacing sourceProperties. Individual sourceProperties can be added/updated by using "sourceProperties." in the field mask.

Request body

The request body contains an instance of Finding.

Response body

If successful, the response body contains an instance of Finding.

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.