New: Explore the Hacktron Platform for org-wide setup, reviews, billing, and pentests.
curl --request POST \
--url https://api.example.com/findings/{id}/commentsAppend a comment to a finding’s triage thread.
curl --request POST \
--url https://api.example.com/findings/{id}/commentswritecurl -X POST https://api.hacktron.ai/v1/findings/d1e2f3a4-b5c6-7890-1234-567890abcdef/comments \
-H "X-Api-Key: $HACKTRON_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"comment": "Confirmed reproducible on staging. Opened JIRA-4821."
}'
| Parameter | Type | Description |
|---|---|---|
id | UUID | Finding UUID. |
| Field | Type | Required | Description |
|---|---|---|---|
comment | string | Yes | Comment text. 1–4000 characters. |
201 Created
{
"comment_id": "c0ffee01-feed-4bad-badc-0ffee0000002"
}
source: "api" and attributed to the API key’s creator. It then appears in the finding’s triage_thread.
400 — comment missing or exceeds 4000 characters.404 — finding not found or not visible to your organization.