Update finding state

Demonstrates how to update a finding's state

Code sample

Go

To authenticate to Security Command Center, set up Application Default Credentials. For more information, see Set up authentication for a local development environment .

  import 
  
 ( 
  
 "context" 
  
 "fmt" 
  
 "io" 
  
 "time" 
  
 securitycenter 
  
 "cloud.google.com/go/securitycenter/apiv1" 
  
 "cloud.google.com/go/securitycenter/apiv1/securitycenterpb" 
  
 "github.com/golang/protobuf/ptypes" 
 ) 
 // updateFindingState demonstrates how to update a security finding's state 
 // in CSCC.  findingName is the full resource name of the finding to update. 
 func 
  
 setFindingState 
 ( 
 w 
  
 io 
 . 
 Writer 
 , 
  
 findingName 
  
 string 
 ) 
  
 error 
  
 { 
  
 // findingName := "organizations/111122222444/sources/1234" 
  
 // Instantiate a context and a security service client to make API calls. 
  
 ctx 
  
 := 
  
 context 
 . 
 Background 
 () 
  
 client 
 , 
  
 err 
  
 := 
  
 securitycenter 
 . 
  NewClient 
 
 ( 
 ctx 
 ) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "securitycenter.NewClient: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 defer 
  
 client 
 . 
  Close 
 
 () 
  
 // Closing the client safely cleans up background resources. 
  
 // Use now as the eventTime for the security finding. 
  
 now 
 , 
  
 err 
  
 := 
  
 ptypes 
 . 
 TimestampProto 
 ( 
 time 
 . 
 Now 
 ()) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "TimestampProto: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 req 
  
 := 
  
& securitycenterpb 
 . 
 SetFindingStateRequest 
 { 
  
 Name 
 : 
  
 findingName 
 , 
  
 State 
 : 
  
 securitycenterpb 
 . 
  Finding_INACTIVE 
 
 , 
  
 // New state is effective immediately. 
  
 StartTime 
 : 
  
 now 
 , 
  
 } 
  
 finding 
 , 
  
 err 
  
 := 
  
 client 
 . 
 SetFindingState 
 ( 
 ctx 
 , 
  
 req 
 ) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "SetFindingState: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 fmt 
 . 
 Fprintf 
 ( 
 w 
 , 
  
 "Finding updated: %s\n" 
 , 
  
 finding 
 . 
 Name 
 ) 
  
 fmt 
 . 
 Fprintf 
 ( 
 w 
 , 
  
 "Finding state: %v\n" 
 , 
  
 finding 
 . 
 State 
 ) 
  
 fmt 
 . 
 Fprintf 
 ( 
 w 
 , 
  
 "Event time (Epoch Seconds): %d\n" 
 , 
  
 finding 
 . 
 EventTime 
 . 
 Seconds 
 ) 
  
 return 
  
 nil 
 } 
 

Java

To authenticate to Security Command Center, set up Application Default Credentials. For more information, see Set up authentication for a local development environment .

  static 
  
 Finding 
  
 setFindingState 
 ( 
 FindingName 
  
 findingName 
 ) 
  
 { 
  
 try 
  
 ( 
 SecurityCenterClient 
  
 client 
  
 = 
  
 SecurityCenterClient 
 . 
 create 
 ()) 
  
 { 
  
 // FindingName findingName = FindingName.of(/*organization=*/"123234324", 
  
 // /*source=*/"423432321", /*findingId=*/"samplefindingid2"); 
  
 // Use the current time as the finding "event time". 
  
 Instant 
  
 eventTime 
  
 = 
  
 Instant 
 . 
 now 
 (); 
  
 Finding 
  
 response 
  
 = 
  
 client 
 . 
 setFindingState 
 ( 
  
 findingName 
 , 
  
 State 
 . 
 INACTIVE 
 , 
  
 Timestamp 
 . 
 newBuilder 
 () 
  
 . 
 setSeconds 
 ( 
 eventTime 
 . 
 getEpochSecond 
 ()) 
  
 . 
 setNanos 
 ( 
 eventTime 
 . 
 getNano 
 ()) 
  
 . 
 build 
 ()); 
  
 System 
 . 
 out 
 . 
 println 
 ( 
 "Updated Finding: " 
  
 + 
  
 response 
 ); 
  
 return 
  
 response 
 ; 
  
 } 
  
 catch 
  
 ( 
 IOException 
  
 e 
 ) 
  
 { 
  
 throw 
  
 new 
  
 RuntimeException 
 ( 
 "Couldn't create client." 
 , 
  
 e 
 ); 
  
 } 
 } 
 

Node.js

To authenticate to Security Command Center, set up Application Default Credentials. For more information, see Set up authentication for a local development environment .

  // Imports the Google Cloud client library. 
 const 
  
 { 
 SecurityCenterClient 
 } 
  
 = 
  
 require 
 ( 
 ' @google-cloud/security-center 
' 
 ); 
 // Creates a new client. 
 const 
  
 client 
  
 = 
  
 new 
  
  SecurityCenterClient 
 
 (); 
 // findingName is the full resource name of the source the finding should 
 // be associated with. 
 /* 
 * TODO(developer): Uncomment the following lines 
 */ 
 // const findingName = 
 // "organizations/111122222444/sources/1234/findings/findingid"; 
 async 
  
 function 
  
 setFindingState 
 () 
  
 { 
  
 const 
  
 eventTime 
  
 = 
  
 new 
  
 Date 
 (); 
  
 const 
  
 [ 
 updatedFinding 
 ] 
  
 = 
  
 await 
  
 client 
 . 
 setFindingState 
 ({ 
  
 name 
 : 
  
 findingName 
 , 
  
 state 
 : 
  
 'INACTIVE' 
 , 
  
 // use now as the time when the new state takes effect. 
  
 startTime 
 : 
  
 { 
  
 seconds 
 : 
  
 Math 
 . 
 floor 
 ( 
 eventTime 
 . 
 getTime 
 () 
  
 / 
  
 1000 
 ), 
  
 nanos 
 : 
  
 ( 
 eventTime 
 . 
 getTime 
 () 
  
 % 
  
 1000 
 ) 
  
 * 
  
 1e6 
 , 
  
 }, 
  
 }); 
  
 console 
 . 
 log 
 ( 
 'Updated Finding: %j' 
 , 
  
 updatedFinding 
 ); 
 } 
 setFindingState 
 (); 
 

Python

To authenticate to Security Command Center, set up Application Default Credentials. For more information, see Set up authentication for a local development environment .

  from 
  
 datetime 
  
 import 
 datetime 
 , 
 timezone 
 from 
  
 google.cloud 
  
 import 
 securitycenter_v1 
 from 
  
 google.cloud.securitycenter_v1 
  
 import 
 Finding 
 # Create a client. 
 client 
 = 
 securitycenter_v1 
 . 
 SecurityCenterClient 
 () 
 # 'source_name' is the resource path for a source that has been 
 # created previously (you can use list_sources to find a specific one). 
 # Its format is: 
 # source_name = "organizations/{organization_id}/sources/{source_id}" 
 # e.g.: 
 # source_name = "organizations/111122222444/sources/1234" 
 finding_name 
 = 
 f 
 " 
 { 
 source_name 
 } 
 /findings/samplefindingid2" 
 # Call the API to change the finding state to inactive as of now. 
 new_finding 
 = 
 client 
 . 
  set_finding_state 
 
 ( 
 request 
 = 
 { 
 "name" 
 : 
 finding_name 
 , 
 "state" 
 : 
 Finding 
 . 
 State 
 . 
 INACTIVE 
 , 
 "start_time" 
 : 
 datetime 
 . 
 now 
 ( 
 timezone 
 . 
 utc 
 ), 
 } 
 ) 
 print 
 ( 
 f 
 "New state: 
 { 
 new_finding 
 . 
 state 
 } 
 " 
 ) 
 

What's next

To search and filter code samples for other Google Cloud products, see the Google Cloud sample browser .

Create a Mobile Website
View Site in Mobile | Classic
Share by: