Add MuteSecurityFindings endpoint spec

.generator/schemas/v2/openapi.yaml

@@ -45082,6 +45082,125 @@ components:
         meta:
           $ref: "#/components/schemas/MonthlyCostAttributionMeta"
       type: object
+    MuteDataType:
+      default: mute
+      description: Mute resource type.
+      enum:
+        - mute
+      example: mute
+      type: string
+      x-enum-varnames:
+        - MUTE
+    MuteFindingsMuteAttributes:
+      description: Mute properties to apply to the findings.
+      properties:
+        description:
+          description: Additional information about the reason why the findings are muted or unmuted. This field has a limit of 280 characters.
+          example: "To be resolved later."
+          type: string
+        expire_at:
+          description: >-
+            The expiration date of the mute action (Unix ms). It must be set to a value greater than the current timestamp. If this field is not provided, the findings remain muted indefinitely.
+          example: 1778721573794
+          format: int64
+          type: integer
+        is_muted:
+          description: Whether the findings should be muted or unmuted.
+          example: true
+          type: boolean
+        reason:
+          $ref: "#/components/schemas/MuteFindingsReason"
+          description: The reason why the findings are muted or unmuted.
+      required:
+        - is_muted
+        - reason
+      type: object
+    MuteFindingsReason:
+      description: The reason why the findings are muted or unmuted.
+      enum:
+        - PENDING_FIX
+        - FALSE_POSITIVE
+        - OTHER
+        - NO_FIX
+        - DUPLICATE
+        - RISK_ACCEPTED
+        - NO_PENDING_FIX
+        - HUMAN_ERROR
+        - NO_LONGER_ACCEPTED_RISK
+      example: PENDING_FIX
+      type: string
+      x-enum-varnames:
+        - PENDING_FIX
+        - FALSE_POSITIVE
+        - OTHER
+        - NO_FIX
+        - DUPLICATE
+        - RISK_ACCEPTED
+        - NO_PENDING_FIX
+        - HUMAN_ERROR
+        - NO_LONGER_ACCEPTED_RISK
+    MuteFindingsRequest:
+      description: Request to mute or unmute security findings.
+      properties:
+        data:
+          $ref: "#/components/schemas/MuteFindingsRequestData"
+      required:
+        - data
+      type: object
+    MuteFindingsRequestData:
+      description: Data of the mute request.
+      properties:
+        attributes:
+          $ref: "#/components/schemas/MuteFindingsRequestDataAttributes"
+        id:
+          description: Unique identifier of the mute request.
+          example: "93bfeb70-af47-424d-908a-948d3f08e37f"
+          type: string
+        relationships:
+          $ref: "#/components/schemas/MuteFindingsRequestDataRelationships"
+        type:
+          $ref: "#/components/schemas/MuteDataType"
+      required:
+        - attributes
+        - relationships
+        - type
+      type: object
+    MuteFindingsRequestDataAttributes:
+      description: Attributes of the mute request.
+      properties:
+        mute:
+          $ref: "#/components/schemas/MuteFindingsMuteAttributes"
+      required:
+        - mute
+      type: object
+    MuteFindingsRequestDataRelationships:
+      description: Relationships of the mute request.
+      properties:
+        findings:
+          $ref: "#/components/schemas/Findings"
+          description: Security findings to mute or unmute.
+      required:
+        - findings
+      type: object
+    MuteFindingsResponse:
+      description: Response for the mute or unmute request.
+      properties:
+        data:
+          $ref: "#/components/schemas/MuteFindingsResponseData"
+      type: object
+    MuteFindingsResponseData:
+      description: Data of the mute response.
+      properties:
+        id:
+          description: Unique identifier of the mute request.
+          example: "93bfeb70-af47-424d-908a-948d3f08e37f"
+          type: string
+        type:
+          $ref: "#/components/schemas/MuteDataType"
+      required:
+        - type
+        - id
+      type: object
     NotebookCreateData:
       description: Notebook creation data
       properties:
@@ -118827,6 +118946,74 @@ paths:
         permissions:
           - security_monitoring_findings_write
           - appsec_vm_write
+  /api/v2/security/findings/mute:
+    patch:
+      description: >-
+        Mute or unmute security findings.
+
+        You can mute or unmute up to 100 security findings per request. The request body must include `is_muted` and `reason` attributes. The allowed reasons depend on whether the finding is being muted or unmuted:
+          - To mute a finding: `PENDING_FIX`, `FALSE_POSITIVE`, `OTHER`, `NO_FIX`, `DUPLICATE`, `RISK_ACCEPTED`.
+          - To unmute a finding: `NO_PENDING_FIX`, `HUMAN_ERROR`, `NO_LONGER_ACCEPTED_RISK`, `OTHER`.
+      operationId: MuteSecurityFindings
+      requestBody:
+        content:
+          application/json:
+            examples:
+              default:
+                value:
+                  data:
+                    attributes:
+                      mute:
+                        description: "To be resolved later."
+                        expire_at: 1778721573794
+                        is_muted: true
+                        reason: "RISK_ACCEPTED"
+                    relationships:
+                      findings:
+                        data:
+                          - id: "ZGVmLTAwcC1pZXJ-aS0wZjhjNjMyZDNmMzRlZTgzNw=="
+                            type: "findings"
+                    type: "mute"
+            schema:
+              $ref: "#/components/schemas/MuteFindingsRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/MuteFindingsResponse"
+          description: Accepted
+        "400":
+          $ref: "#/components/responses/BadRequestResponse"
+        "401":
+          $ref: "#/components/responses/UnauthorizedResponse"
+        "404":
+          $ref: "#/components/responses/NotFoundResponse"
+        "422":
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/JSONAPIErrorResponse"
+          description: "Unprocessable Entity"
+        "429":
+          $ref: "#/components/responses/TooManyRequestsResponse"
+      security:
+        - apiKeyAuth: []
+          appKeyAuth: []
+        - AuthZ: []
+      summary: Mute or unmute security findings
+      tags:
+        - "Security Monitoring"
+      x-codegen-request-body-name: body
+      "x-permission":
+        operator: OR
+        permissions:
+          - security_monitoring_findings_write
+          - appsec_vm_write
+      x-unstable: |-
+        **Note**: This endpoint is in preview and is subject to change.
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
   /api/v2/security/findings/search:
     post:
       description: |-

cassettes/features/v2/security_monitoring/Mute-security-findings-returns-Accepted-response.frozen

@@ -0,0 +1 @@
+2026-04-27T16:46:59.369Z

cassettes/features/v2/security_monitoring/Mute-security-findings-returns-Not-Found-response.frozen

@@ -0,0 +1 @@
+2026-04-27T16:13:25.084Z

cassettes/features/v2/security_monitoring/Mute-security-findings-returns-Unprocessable-Entity-response.frozen

@@ -0,0 +1 @@
+2026-04-27T16:19:46.205Z

cassettes/features/v2/security_monitoring/Unmute-security-findings-returns-Accepted-response.frozen

@@ -0,0 +1 @@
+2026-04-27T16:48:26.948Z

cassettes/features/v2/security_monitoring/Unmute-security-findings-returns-Not-Found-response.frozen

@@ -0,0 +1 @@
+2026-04-27T16:23:28.911Z

cassettes/features/v2/security_monitoring/Unmute-security-findings-returns-Unprocessable-Entity-response.frozen

@@ -0,0 +1 @@
+2026-04-27T16:23:50.077Z