update
Modify a code finding's status, severity, notes, tags, or metadata to keep review records current.
Instructions
Update a finding's status, severity, notes, tags, or metadata.
Args:
finding_id: The finding ID (e.g. CB-1)
status: New status: open, in_progress, fixed, not_a_bug, wont_fix, stale. Aliases accepted: done/resolved/implemented/closed → fixed, wontfix → wont_fix, invalid → not_a_bug, active/working/in-progress → in_progress
severity: Re-triage the finding: critical, high, medium, or low. Case-insensitive, but no aliases — unlike status, "crit" and "P0" are refused.
notes: REPLACES the notes wholesale, discarding whatever was there. To add to an existing record without destroying it, use append_note instead. If meta_update also carries a "notes" key, the meta_update value is the one that lands — see meta_update for why that is deliberate.
append_note: Appends a newline-joined line, preserving the prior notes. This is the safe way to add evidence to a long-lived card.
tags: Replace tags list
meta_update: Merge additional metadata keys. The three meta-writing arguments compose over ONE dict, in this order: notes replaces, append_note then extends that replacement, and meta_update merges LAST. So passing both notes= and meta_update={"notes": ...} in a single call is neither an error nor a refusal — meta_update wins the collision, on every key it names. That precedence is deliberate rather than incidental: meta_update names the storage key directly, which makes it the repair path for keys no other argument can reach (similar_to, category_minted, fingerprint_refusals), and a stamp no argument could overwrite would be an unrepairable one.
reported_at_ref: Update version/tag label (e.g. "v2.1.0"). This is the SANCTIONED manual mutation of an observation-frozen column (BT-4): observations never move it, this call does — a release is tagged after filing.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| notes | No | ||
| status | No | ||
| severity | No | ||
| finding_id | Yes | ||
| append_note | No | ||
| meta_update | No | ||
| reported_at_ref | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||