Palo Alto Networks

Palo Alto Networks Risk Findings API

The Risk Findings API from Palo Alto Networks — 3 operation(s) for risk findings.

GitHub OpenAPI

Operations 3

PATCH /v1/risk-findings/id/{id}/status/{status} Update Risk Finding Status #
GET /v1/risk-findings List Risk findings #
GET /v1/risk-findings/id/{id} Describe Risk Finding #

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-risk-findings-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks-risk-findings-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-risk-findings-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Dig Security public Risk Findings API
  description: Dig Security public API. 12 operations across 12 paths.
  version: 1.0.0
  x-description-source: desc/intro.md
servers:
- url: https://api.dig.security
  description: Dig Security public API
- url: PATH_TO_CONSOLE
tags:
- name: Risk Findings
paths:
  /v1/risk-findings/id/{id}/status/{status}:
    patch:
      tags:
      - Risk Findings
      operationId: patch-risk-findings-id-id-status-status
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      - name: status
        in: path
        required: true
        schema:
          type: string
          enum:
          - OPEN
          - CLOSED
          - UNIMPORTANT
          - WRONG
          - HANDLED
          - INVESTIGATING
      - name: dig-api-key
        in: header
        description: Dig token header
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateRiskDetectionResponseDTO'
      summary: Update Risk Finding Status
      description: 'Update Risk Finding Status. PATCH /v1/risk-findings/id/{id}/status/{status} on the Risk Findings API. Takes 2 path parameters. Documented responses: 200.'
      x-description-source: desc/risk-findings/risk-findings_id_status_patch.md
  /v1/risk-findings:
    get:
      tags:
      - Risk Findings
      operationId: get-risk-findings
      parameters:
      - name: ruleName.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: ruleName.equals
        in: query
        required: false
        schema:
          type: string
      - name: ruleName.contains
        in: query
        required: false
        schema:
          type: string
      - name: ruleName.notContain
        in: query
        required: false
        schema:
          type: string
      - name: dspmTagKey.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: dspmTagKey.equals
        in: query
        required: false
        schema:
          type: string
      - name: dspmTagKey.contains
        in: query
        required: false
        schema:
          type: string
      - name: dspmTagKey.notContain
        in: query
        required: false
        schema:
          type: string
      - name: dspmTagValue.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: dspmTagValue.equals
        in: query
        required: false
        schema:
          type: string
      - name: dspmTagValue.contains
        in: query
        required: false
        schema:
          type: string
      - name: dspmTagValue.notContain
        in: query
        required: false
        schema:
          type: string
      - name: projectId.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: projectId.equals
        in: query
        required: false
        schema:
          type: string
      - name: projectId.contains
        in: query
        required: false
        schema:
          type: string
      - name: projectId.notContain
        in: query
        required: false
        schema:
          type: string
      - name: affectedAssetName.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: affectedAssetName.equals
        in: query
        required: false
        schema:
          type: string
      - name: affectedAssetName.contains
        in: query
        required: false
        schema:
          type: string
      - name: affectedAssetName.notContain
        in: query
        required: false
        schema:
          type: string
      - name: cloudProvider.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - AWS
            - AZURE
            - GCP
            - SNOWFLAKE
            - FILE_SHARE
            - O365
      - name: cloudProvider.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
      - name: affects.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - SECURITY
            - COMPLIANCE
            - GOVERNANCE
            - SECURITY_AND_COMPLIANCE
            - SECURITY_AND_GOVERNANCE
            - COMPLIANCE_AND_GOVERNANCE
            - SECURITY_AND_COMPLIANCE_AND_GOVERNANCE
      - name: affects.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - SECURITY
          - COMPLIANCE
          - GOVERNANCE
          - SECURITY_AND_COMPLIANCE
          - SECURITY_AND_GOVERNANCE
          - COMPLIANCE_AND_GOVERNANCE
          - SECURITY_AND_COMPLIANCE_AND_GOVERNANCE
      - name: status.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - OPEN
            - CLOSED
            - UNIMPORTANT
            - WRONG
            - HANDLED
            - INVESTIGATING
      - name: status.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - OPEN
          - CLOSED
          - UNIMPORTANT
          - WRONG
          - HANDLED
          - INVESTIGATING
      - name: severity.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - LOW
            - MEDIUM
            - HIGH
      - name: severity.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
      - name: sort
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: page
        in: query
        required: false
        schema:
          type: integer
          format: int32
      - name: size
        in: query
        required: false
        schema:
          maximum: 50
          type: integer
          default: 20
      - name: dig-api-key
        in: header
        description: Dig token header
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Returns a list of risk findings
          headers:
            X-Total-Count:
              description: The total number of items in the page
              style: simple
              schema:
                type: integer
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RiskDetectionsDTO'
      summary: List Risk findings
      description: 'List Risk findings. GET /v1/risk-findings on the Risk Findings API. Takes 31 query parameters. Documented responses: 200.'
      x-description-source: desc/risk-findings/get.md
  /v1/risk-findings/id/{id}:
    get:
      tags:
      - Risk Findings
      operationId: get-risk-findings-id-id
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      - name: dig-api-key
        in: header
        description: Dig token header
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RiskDetectionOfficialApiResponseDTO'
      summary: Describe Risk Finding
      description: 'Describe Risk Finding. GET /v1/risk-findings/id/{id} on the Risk Findings API. Takes 1 path parameter. Documented responses: 200.'
      x-description-source: desc/risk-findings/id_get.md
components:
  schemas:
    RiskDetectionAssetDTO:
      type: object
      properties:
        name:
          type: string
        assetId:
          type: string
        cloudTags:
          type: object
          additionalProperties:
            type: string
        dspmTags:
          type: object
          additionalProperties:
            uniqueItems: true
            type: array
            items:
              type: string
        dataTypes:
          uniqueItems: true
          type: array
          items:
            type: string
        assetLabels:
          uniqueItems: true
          type: array
          items:
            type: string
        service:
          type: string
          enum:
          - ATHENA
          - AURORA
          - AWS_BACKUP
          - DOCUMENTDB
          - DYNAMODB
          - DAX
          - EMR
          - EBS
          - EFS
          - ELASTICACHE
          - FSX
          - KINESIS_DELIVERY_STREAM
          - MEMORYDB
          - NEPTUNE
          - QLDB
          - RDS
          - REDSHIFT
          - S3
          - TIMESTREAM
          - OPENSEARCH
          - OPENSEARCH_SERVERLESS
          - COSMOS_DB
          - SYNAPSE
          - CACHE_FOR_REDIS
          - MARIA_DB
          - MYSQL_SERVER
          - POSTGRESQL_SERVER
          - SQL_SERVER
          - STORAGE_ACCOUNT
          - SQL_MANAGED_INSTANCE
          - ANF
          - CLOUD_STORAGE
          - CLOUD_SQL
          - BIG_QUERY
          - FILE_STORE
          - CLOUD_SPANNER
          - MEMORY_STORE
          - BIG_TABLE
          - FIRE_STORE
          - UNMANAGED_AWS_MYSQL
          - UNMANAGED_AWS_ORACLE_SERVER
          - UNMANAGED_AWS_MONGO_DB
          - UNMANAGED_AWS_POSTGRESQL
          - UNMANAGED_AWS_REDIS
          - UNMANAGED_AWS_SQLITE
          - UNMANAGED_AWS_MS_SQL
          - UNMANAGED_AWS_MARIA_DB
          - UNMANAGED_AWS_NEO4_J
          - UNMANAGED_AWS_ELASTIC
          - UNMANAGED_AWS_COCKROACH_DB
          - UNMANAGED_AWS_AEROSPIKE
          - UNMANAGED_AWS_SCYLLA_DB
          - UNMANAGED_AZURE_MYSQL
          - UNMANAGED_AZURE_ORACLE_SERVER
          - UNMANAGED_AZURE_MONGO_DB
          - UNMANAGED_AZURE_POSTGRESQL
          - UNMANAGED_AZURE_REDIS
          - UNMANAGED_AZURE_SQLITE
          - UNMANAGED_AZURE_MS_SQL
          - UNMANAGED_AZURE_MARIA_DB
          - UNMANAGED_AZURE_NEO4_J
          - UNMANAGED_AZURE_ELASTIC
          - UNMANAGED_AZURE_COCKROACH_DB
          - UNMANAGED_AZURE_AEROSPIKE
          - UNMANAGED_AZURE_SCYLLA_DB
          - UNMANAGED_GCP_MYSQL
          - UNMANAGED_GCP_ORACLE_SERVER
          - UNMANAGED_GCP_MONGO_DB
          - UNMANAGED_GCP_POSTGRESQL
          - UNMANAGED_GCP_REDIS
          - UNMANAGED_GCP_SQLITE
          - UNMANAGED_GCP_MS_SQL
          - UNMANAGED_GCP_MARIA_DB
          - UNMANAGED_GCP_NEO4_J
          - UNMANAGED_GCP_ELASTIC
          - UNMANAGED_GCP_COCKROACH_DB
          - UNMANAGED_GCP_AEROSPIKE
          - UNMANAGED_GCP_SCYLLA_DB
          - SNOWFLAKE_DB
          - FILE_SHARE
          - ONE_DRIVE
          - SHARE_POINT
          - AZURE_OPEN_AI_DEPLOYMENT
          - VERTEX_ENDPOINT
          - BEDROCK_PROVISIONED_THROUGHPUT
          - BEDROCK_AGENT
          - UNMANAGED_AI_AWS_FALCON
          - UNMANAGED_AI_AWS_LLAMA
          - UNMANAGED_AI_AWS_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AWS_GEMMA
          - UNMANAGED_AI_AWS_GPT2
          - UNMANAGED_AI_AWS_MISTRAL
          - UNMANAGED_AI_AWS_PHI
          - UNMANAGED_AI_AWS_QWEN2
          - UNMANAGED_AI_AWS_ROBERTA
          - UNMANAGED_AI_AWS_JAMBA
          - UNMANAGED_AI_AZURE_FALCON
          - UNMANAGED_AI_AZURE_LLAMA
          - UNMANAGED_AI_AZURE_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AZURE_GEMMA
          - UNMANAGED_AI_AZURE_GPT2
          - UNMANAGED_AI_AZURE_MISTRAL
          - UNMANAGED_AI_AZURE_PHI
          - UNMANAGED_AI_AZURE_QWEN2
          - UNMANAGED_AI_AZURE_ROBERTA
          - UNMANAGED_AI_AZURE_JAMBA
          - UNMANAGED_AI_GCP_FALCON
          - UNMANAGED_AI_GCP_LLAMA
          - UNMANAGED_AI_GCP_TRANSFORMERSLLAMA
          - UNMANAGED_AI_GCP_GEMMA
          - UNMANAGED_AI_GCP_GPT2
          - UNMANAGED_AI_GCP_MISTRAL
          - UNMANAGED_AI_GCP_PHI
          - UNMANAGED_AI_GCP_QWEN2
          - UNMANAGED_AI_GCP_ROBERTA
          - UNMANAGED_AI_GCP_JAMBA
    AccessEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          permittedEntities:
            type: array
            items:
              $ref: '#/components/schemas/AccessEvidenceDTO'
    FileEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          files:
            type: array
            items:
              $ref: '#/components/schemas/PublicFileEvidenceDTO'
          filesCount:
            type: integer
            format: int32
    FreshnessEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
    ShadowBackupFileEvidenceDTO:
      type: object
      properties:
        size:
          type: string
        filename:
          type: string
        path:
          type: string
        dataTypes:
          type: array
          items:
            $ref: '#/components/schemas/FileEvidenceDataTypesDTO'
        shadowBackup:
          type: boolean
        deleted:
          type: boolean
    AiContentFilterEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          aiContentFilters:
            type: array
            items:
              $ref: '#/components/schemas/AiContentFilterDataDashboardDTO'
    RiskDetectionsDTO:
      type: object
      properties:
        id:
          type: string
        ruleName:
          type: string
        severity:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
        asset:
          $ref: '#/components/schemas/RiskDetectionsAssetDTO'
        status:
          type: string
          enum:
          - OPEN
          - CLOSED
          - UNIMPORTANT
          - WRONG
          - HANDLED
          - INVESTIGATING
        projectId:
          type: string
        cloudProvider:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
        cloudEnvironment:
          type: string
          enum:
          - UNKNOWN
          - DEVELOPMENT
          - STAGING
          - TESTING
          - PRODUCTION
        firstDiscovered:
          type: string
          format: date-time
        complianceStandards:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
    MalwareFileEvidenceDTO:
      type: object
      properties:
        size:
          type: string
        filename:
          type: string
        path:
          type: string
        dataTypes:
          type: array
          items:
            $ref: '#/components/schemas/FileEvidenceDataTypesDTO'
        malwareFamily:
          type: array
          items:
            type: object
        malwareConfidence:
          type: string
        malicious:
          type: boolean
        deleted:
          type: boolean
    DataTypeEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          files:
            type: array
            items:
              $ref: '#/components/schemas/FileEvidenceDTO'
          filesCount:
            type: integer
            format: int32
    PublicFileEvidenceDTO:
      type: object
      properties:
        size:
          type: string
        filename:
          type: string
        path:
          type: string
        dataTypes:
          type: array
          items:
            $ref: '#/components/schemas/FileEvidenceDataTypesDTO'
        openToWorld:
          type: boolean
        deleted:
          type: boolean
    DestinationEvidenceDTO:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        projectId:
          type: string
        projectName:
          type: string
        cloudEnvironment:
          type: string
          enum:
          - UNKNOWN
          - DEVELOPMENT
          - STAGING
          - TESTING
          - PRODUCTION
        cloudProvider:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
        region:
          type: string
        serviceType:
          type: string
          enum:
          - ATHENA
          - AURORA
          - AWS_BACKUP
          - DOCUMENTDB
          - DYNAMODB
          - DAX
          - EMR
          - EBS
          - EFS
          - ELASTICACHE
          - FSX
          - KINESIS_DELIVERY_STREAM
          - MEMORYDB
          - NEPTUNE
          - QLDB
          - RDS
          - REDSHIFT
          - S3
          - TIMESTREAM
          - OPENSEARCH
          - OPENSEARCH_SERVERLESS
          - COSMOS_DB
          - SYNAPSE
          - CACHE_FOR_REDIS
          - MARIA_DB
          - MYSQL_SERVER
          - POSTGRESQL_SERVER
          - SQL_SERVER
          - STORAGE_ACCOUNT
          - SQL_MANAGED_INSTANCE
          - ANF
          - CLOUD_STORAGE
          - CLOUD_SQL
          - BIG_QUERY
          - FILE_STORE
          - CLOUD_SPANNER
          - MEMORY_STORE
          - BIG_TABLE
          - FIRE_STORE
          - UNMANAGED_AWS_MYSQL
          - UNMANAGED_AWS_ORACLE_SERVER
          - UNMANAGED_AWS_MONGO_DB
          - UNMANAGED_AWS_POSTGRESQL
          - UNMANAGED_AWS_REDIS
          - UNMANAGED_AWS_SQLITE
          - UNMANAGED_AWS_MS_SQL
          - UNMANAGED_AWS_MARIA_DB
          - UNMANAGED_AWS_NEO4_J
          - UNMANAGED_AWS_ELASTIC
          - UNMANAGED_AWS_COCKROACH_DB
          - UNMANAGED_AWS_AEROSPIKE
          - UNMANAGED_AWS_SCYLLA_DB
          - UNMANAGED_AZURE_MYSQL
          - UNMANAGED_AZURE_ORACLE_SERVER
          - UNMANAGED_AZURE_MONGO_DB
          - UNMANAGED_AZURE_POSTGRESQL
          - UNMANAGED_AZURE_REDIS
          - UNMANAGED_AZURE_SQLITE
          - UNMANAGED_AZURE_MS_SQL
          - UNMANAGED_AZURE_MARIA_DB
          - UNMANAGED_AZURE_NEO4_J
          - UNMANAGED_AZURE_ELASTIC
          - UNMANAGED_AZURE_COCKROACH_DB
          - UNMANAGED_AZURE_AEROSPIKE
          - UNMANAGED_AZURE_SCYLLA_DB
          - UNMANAGED_GCP_MYSQL
          - UNMANAGED_GCP_ORACLE_SERVER
          - UNMANAGED_GCP_MONGO_DB
          - UNMANAGED_GCP_POSTGRESQL
          - UNMANAGED_GCP_REDIS
          - UNMANAGED_GCP_SQLITE
          - UNMANAGED_GCP_MS_SQL
          - UNMANAGED_GCP_MARIA_DB
          - UNMANAGED_GCP_NEO4_J
          - UNMANAGED_GCP_ELASTIC
          - UNMANAGED_GCP_COCKROACH_DB
          - UNMANAGED_GCP_AEROSPIKE
          - UNMANAGED_GCP_SCYLLA_DB
          - SNOWFLAKE_DB
          - FILE_SHARE
          - ONE_DRIVE
          - SHARE_POINT
          - AZURE_OPEN_AI_DEPLOYMENT
          - VERTEX_ENDPOINT
          - BEDROCK_PROVISIONED_THROUGHPUT
          - BEDROCK_AGENT
          - UNMANAGED_AI_AWS_FALCON
          - UNMANAGED_AI_AWS_LLAMA
          - UNMANAGED_AI_AWS_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AWS_GEMMA
          - UNMANAGED_AI_AWS_GPT2
          - UNMANAGED_AI_AWS_MISTRAL
          - UNMANAGED_AI_AWS_PHI
          - UNMANAGED_AI_AWS_QWEN2
          - UNMANAGED_AI_AWS_ROBERTA
          - UNMANAGED_AI_AWS_JAMBA
          - UNMANAGED_AI_AZURE_FALCON
          - UNMANAGED_AI_AZURE_LLAMA
          - UNMANAGED_AI_AZURE_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AZURE_GEMMA
          - UNMANAGED_AI_AZURE_GPT2
          - UNMANAGED_AI_AZURE_MISTRAL
          - UNMANAGED_AI_AZURE_PHI
          - UNMANAGED_AI_AZURE_QWEN2
          - UNMANAGED_AI_AZURE_ROBERTA
          - UNMANAGED_AI_AZURE_JAMBA
          - UNMANAGED_AI_GCP_FALCON
          - UNMANAGED_AI_GCP_LLAMA
          - UNMANAGED_AI_GCP_TRANSFORMERSLLAMA
          - UNMANAGED_AI_GCP_GEMMA
          - UNMANAGED_AI_GCP_GPT2
          - UNMANAGED_AI_GCP_MISTRAL
          - UNMANAGED_AI_GCP_PHI
          - UNMANAGED_AI_GCP_QWEN2
          - UNMANAGED_AI_GCP_ROBERTA
          - UNMANAGED_AI_GCP_JAMBA
        family:
          type: string
          enum:
          - ANALYTICS
          - DB
          - STORAGE
          - AI
        deploymentType:
          type: string
          enum:
          - MANAGED
          - UNMANAGED
          - DBAAS
          - ONPREM
          - SAAS
        assetId:
          type: integer
          format: int64
        assetTags:
          type: object
          additionalProperties:
            type: string
        assetDspmTags:
          type: object
          additionalProperties:
            uniqueItems: true
            type: array
            items:
              type: string
    RiskEvidenceOfficialApiDTO:
      type: object
      properties:
        success:
          type: boolean
        error:
          type: string
        result:
          oneOf:
          - $ref: '#/components/schemas/AccessEvidenceResult'
          - $ref: '#/components/schemas/AiContentFilterEvidenceResult'
          - $ref: '#/components/schemas/AiDatasetPublicEvidenceResult'
          - $ref: '#/components/schemas/ChatHistoryEvidenceResult'
          - $ref: '#/components/schemas/ConfigEvidenceResult'
          - $ref: '#/components/schemas/DataFlowEvidenceResult'
          - $ref: '#/components/schemas/DataTypeEvidenceResult'
          - $ref: '#/components/schemas/FileEvidenceResult'
          - $ref: '#/components/schemas/FreshnessEvidenceResult'
          - $ref: '#/components/schemas/InferenceDataSourceIngestInForeignAccountEvidenceResult'
          - $ref: '#/components/schemas/LabelEvidenceResult'
          - $ref: '#/components/schemas/MalwareEvidenceResult'
          - $ref: '#/components/schemas/ShadowBackupEvidenceResult'
          - $ref: '#/components/schemas/SnapshotEvidenceResult'
    ConfigEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          configurationOptions:
            type: object
            additionalProperties:
              type: object
    AiDatasetPublicEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          datasetAsset:
            $ref: '#/components/schemas/AssetEvidenceResultDTO'
    ShadowBackupEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          files:
            type: array
            items:
              $ref: '#/components/schemas/ShadowBackupFileEvidenceDTO'
          filesCount:
            type: integer
            format: int32
    RiskEvidenceResult:
      type: object
      properties:
        type:
          type: string
          enum:
          - FILE
          - SNAPSHOT
          - CONFIG
          - FRESHNESS
          - ACCESS
          - MALWARE
          - DATA_FLOW
          - SHADOW_BACKUP
          - DATA_TYPE
          - LABEL
          - AI_DATASET_PUBLIC
          - AI_CHAT_HISTORY
          - INFERENCE_DATA_SOURCE_INGEST_IN_FOREIGN_ACCOUNT
          - AI_CONTENT_FILTER
      discriminator:
        propertyName: type
    RiskDetectionOfficialApiResponseDTO:
      type: object
      properties:
        id:
          type: string
        ruleName:
          type: string
        severity:
          type: string
          enum:
          - LOW
          - MEDIUM
          - HIGH
        asset:
          $ref: '#/components/schemas/RiskDetectionAssetDTO'
        status:
          type: string
          enum:
          - OPEN
          - CLOSED
          - UNIMPORTANT
          - WRONG
          - HANDLED
          - INVESTIGATING
        projectId:
          type: string
        cloudProvider:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
        cloudEnvironment:
          type: string
          enum:
          - UNKNOWN
          - DEVELOPMENT
          - STAGING
          - TESTING
          - PRODUCTION
        firstDiscovered:
          type: string
          format: date-time
        complianceStandards:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
        riskEvidence:
          type: array
          items:
            $ref: '#/components/schemas/RiskEvidenceOfficialApiDTO'
        remediate:
          type: string
        description:
          type: string
    FileEvidenceDTO:
      type: object
      properties:
        size:
          type: string
        filename:
          type: string
        path:
          type: string
        dataTypes:
          type: array
          items:
            $ref: '#/components/schemas/FileEvidenceDataTypesDTO'
        deleted:
          type: boolean
    CloudAccountInformationDTO:
      type: object
      properties:
        name:
          type: string
        projectId:
          type: string
        cloudProvider:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
        cloudEnvironment:
          type: string
          enum:
          - UNKNOWN
          - DEVELOPMENT
          - STAGING
          - TESTING
          - PRODUCTION
        verifiedVendor:
          type: boolean
        foreign:
          type: boolean
    FileEvidenceDataTypesDTO:
      type: object
      properties:
        name:
          type: string
        label:
          type: string
        count:
          type: integer
          format: int32
    FlowEvidenceDTO:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        type:
          type: string
          enum:
          - REPLICATION_RULE
          - S3_REPLICATION_RULE
          - BIG_QUERY_REPLICATION
          - CLOUD_STORAGE_REPLICATION
          - STORAGE_ACCOUNT_REPLICATION_RULE
    AiChatHistoryDetailsEvidenceDTO:
      type: object
      properties:
        region:
          type: string
        project:
          type: string
        projectName:
          type: string
        cloudEnvironment:
          type: string
          enum:
          - UNKNOWN
          - DEVELOPMENT
          - STAGING
          - TESTING
          - PRODUCTION
        cloudProvider:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
    LabelEvidenceResult:
      type: object
      allOf:
      - $ref: '#/components/schemas/RiskEvidenceResult'
      - type: object
        properties:
          files:
            type: array
            items:
              $ref: '#/components/schemas/FileEvidenceDTO'
          filesCount:
            type: integer
            format: int32
    AssetEvidenceResultDTO:
      type: object
      properties:
        assetId:
          type: integer
          format: int64
        assetName:
          type: string
        projectId:
          type: string
        projectName:
          type: string
        assetRegion:
          type: string
        family:
          type: string
          enum:
          - ANALYTICS
          - DB
          - STORAGE
          - AI
        deploymentType:
          type: string
          enum:
          - MANAGED
          - UNMANAGED
          - DBAAS
          - ONPREM
          - SAAS
        serviceType:
          type: string
          enum:
          - ATHENA
          - AURORA
          - AWS_BACKUP
          - DOCUMENTDB
          - DYNAMODB
          - DAX
          - EMR
          - EBS
          - EFS
          - ELASTICACHE
          - FSX
          - KINESIS_DELIVERY_STREAM
          - MEMORYDB
          - NEPTUNE
          - QLDB
          - RDS
          - REDSHIFT
          - S3
          - TIMESTREAM
          - OPENSEARCH
          - OPENSEARCH_SERVERLESS
          - COSMOS_DB
          - SYNAPSE
          - CACHE_FOR_REDIS
          - MARIA_DB
          - MYSQL_SERVER
          - POSTGRESQL_SERVER
          - SQL_SERVER
          - STORAGE_ACCOUNT
          - SQL_MANAGED_INSTANCE
          - ANF
          - CLOUD_STORAGE
          - CLOUD_SQL
          - BIG_QUERY
          - FILE_STORE
          - CLOUD_SPANNER
          - MEMORY_STORE
          - BIG_TABLE
          - FIRE_STORE
          - UNMANAGED_AWS_MYSQL
          - UNMANAGED_AWS_ORACLE_SERVER
          - UNMANAGED_AWS_MONGO_DB
          - UNMANAGED_AWS_POSTGRESQL
          - UNMANAGED_AWS_REDIS
          - UNMANAGED_AWS_SQLITE
          - UNMANAGED_AWS_MS_SQL
          - UNMANAGED_AWS_MARIA_DB
          - UNMANAGED_AWS_NEO4_J
          - UNMANAGED_AWS_ELASTIC
          - UNMANAGED_AWS_COCKROACH_DB
          - UNMANAGED_AWS_AEROSPIKE
          - UNMANAGED_AWS_SCYLLA_DB
          - UNMANAGED_AZURE_MYSQL
          - UNMANAGED_AZURE_ORACLE_SERVER
          - UNMANAGED_AZURE_MONGO_DB
          - UNMANAGED_AZURE_POSTGRESQL
          - UNMANAGED_AZURE_REDIS
          - UNMANAGED_AZURE_SQLITE
          - UNMANAGED_AZURE_MS_SQL
          - UNMANAGED_AZURE_MARIA_DB
          - UNMANAGED_AZURE_NEO4_J
          - UNMANAGED_AZURE_ELASTIC
          - UNMANAGED_AZURE_COCKROACH_DB
          - UNMANAGED_AZURE_AEROSPIKE
          - UNMANAGED_AZURE_SCYLLA_DB
          - UNMANAGED_GCP_MYSQL
          - UNMANAGED_GCP_ORACLE_SERVER
          - UNMANAGED_GCP_MONGO_DB
          - UNMANAGED_GCP_POSTGRESQL
          - UNMANAGED_GCP_REDIS
          - UNMANAGED_GCP_SQLITE
          - UNMANAGED_GCP_MS_SQL
          - UNMANAGED_GCP_MARIA_DB
          - UNMANAGED_GCP_NEO4_J
          - UNMANAGED_GCP_ELASTIC
          - UNMANAGED_GCP_COCKROACH_DB
          - UNMANAGED_GCP_AEROSPIKE
          - UNMANAGED_GCP_SCYLLA_DB
          - SNOWFLAKE_DB
          - FILE_SHARE
          - ONE_DRIVE
          - SHARE_POINT
          - AZURE_OPEN_AI_DEPLOYMENT
          - VERTEX_ENDPOINT
          - BEDROCK_PROVISIONED_THROUGHPUT
          - BEDROCK_AGENT
          - UNMANAGED_AI_AWS_FALCON
          - UNMANAGED_AI_AWS_LLAMA
          - UNMANAGED_AI_AWS_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AWS_GEMMA
          - UNMANAGED_AI_AWS_GPT2
          - UNMANAGED_AI_AWS_MISTRAL
          - UNMANAGED_AI_AWS_PHI
          - UNMANAGED_AI_AWS_QWEN2
          - UNMANAGED_AI_AWS_ROBERTA
          - UNMANAGED_AI_AWS_JAMBA
          - UNMANAGED_AI_AZURE_FALCON
          - UNMANAGED_AI_AZURE_LLAMA
          - UNMANAGED_AI_AZURE_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AZURE_GEMMA
          - UNMANAGED_AI_AZURE_GPT2
          - UNMANAGED_AI_AZURE_MISTRAL
          - UNMANAGED_AI_AZURE_PHI
          - UNMANAGED_AI_AZURE_QWEN2
          - UNMANAGED_AI_AZURE_ROBERTA
          - UNMANAGED_AI_AZURE_JAMBA
          - UNMANAGED_AI_GCP_FALCON
          - UNMANAGED_AI_GCP_LLAMA
          - UNMANAGED_AI_GCP_TRANSFORMERSLLAMA
          - UNMANAGED_AI_GCP_GEMMA
          - UNMANAGED_AI_GCP_GPT2
          - UNMANAGED_AI_GCP_MISTRAL
          - UNMANAGED_AI_GCP_PHI
          - UNMANAGED_AI_GCP_QWEN2
          - UNMANAGED_AI_GCP_ROBERTA
          - UNMANAGED_AI_GCP_JAMBA
        snapshotServiceType:
          type: string
          enum:
          - SNAPSHOT_RDS_INSTANCE
          - SNAPSHOT_FILE_STORE
          - SNAPSHOT_CLOUD_SPANNER
          - SNAPSHOT_BIG_TABLE
        cloudEnvironment:
          type: string
          enum:
          - UNKNOWN
          - DEVELOPMENT
          - STAGING
          - TESTING
          - PRODUCTION
        cloud:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
        assetTags:
          type: object
          additionalProperties:
            type: string
        assetDspmTags:
          type: object
          additionalProperties:
            uniqueItems: true
            type: array
  

# --- truncated at 32 KB (43 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-risk-findings-api-openapi.yml