Skip to main content
POST
Remediate Code Scan Finding

Permissions

Requires a service user with the UseAccountCodeScans permission at the enterprise level.

Behavior

Launches a Devin session to remediate the specified code scan finding: the session analyzes the vulnerable code, implements a fix, and opens a pull request. The session is attributed to the calling principal (the service user or PAT that made the request). Returns 409 Conflict if the finding already has a remediation session.

Authorizations

Authorization
string
header
required

Service User credential (prefix: cog_)

Path Parameters

org_id
string
required

Organization ID (prefix: org-)

Example:

"org-abc123def456"

scan_id
string
required
finding_id
string
required

Response

Successful Response

The remediation session launched for a code scan finding.

finding_id
string
required

The finding that is being remediated.

session_id
string
required

ID of the Devin session launched to remediate the finding.