Bulk Update Compliance Findings

PATCH 
/api/v1/compliance/compliance-findings/bulk

Bulk-transition multiple compliance findings to one decision.

Per-row lifecycle validation still runs — a row whose current decision can't legally transition to body.decision is reported in skipped (with reason="illegal_transition") instead of failing the whole batch. Risk-tracked findings with an open Risk are also skipped (reason="risk_tracked"); the linked Risk has to be closed first via the Risk lifecycle. Missing ids are skipped with reason="not_found".

The reviewer (reviewed_by / reviewed_at) is set to the caller on every successful row, mirroring the per-row endpoint.

NOTE: this route MUST be declared before the single-row PATCH /compliance/compliance-findings/{finding_id} so FastAPI matches the literal bulk segment first. Don't reorder.

Request

Responses

200

Successful Response

422

Validation Error