Dependency-Track unofficial
PUT/v1/violation/analysis

Record a policy violation analysis decision

Records an analysis decision for a policy violation affecting a component. Provide the component and policyViolation UUIDs, and optionally set analysisState, add a comment, or update suppression status. The authenticated user needs POLICY_VIOLATION_ANALYSIS permission.

6 body fields

Policy violation analysis data. When a body is supplied, component and policyViolation are required.

analysisStatestringoptional
The analysis decision: `APPROVED`, `REJECTED`, or `NOT_SET`.
Allowed:APPROVEDREJECTEDNOT_SET
commentstringoptional
A comment containing whitespace, letters, marks, symbols, numbers, punctuation, or line-break characters.
componentstringrequired
The component UUID associated with the policy violation.
isSuppressedbooleanoptional
Whether to suppress the policy violation; this input field is write-only.
policyViolationstringrequired
The UUID of the policy violation to analyze.
suppressedbooleanoptional
Whether the policy violation is suppressed.

4 status codes
200Returns the created violation analysis, including its analysis state, suppression status, and comment audit trail.
analysisCommentsarray<object>required
Audit trail of analysis comments
analysisStatestringrequired
The state of the analysis decision
Allowed:APPROVEDREJECTEDNOT_SET
isSuppressedbooleanrequired
Whether the policy violation is suppressed
401Returned when the request is unauthorized.
403Returned when access to the requested project is forbidden.
detailstringrequired
Human-readable explanation specific to this occurrence of the problem
instancestringoptional
Reference URI that identifies the specific occurrence of the problem
statusintegerrequired
HTTP status code generated by the origin server for this occurrence of the problem
titlestringrequired
Short, human-readable summary of the problem type
typestringoptional
A URI reference that identifies the problem type
404Returned when the component or policy violation cannot be found.

Error handling

A 401 indicates an unauthorized request, and a 403 indicates that the authenticated user lacks POLICY_VIOLATION_ANALYSIS permission or access to the project. A 404 is returned when the component or policy violation cannot be found. When submitting a body, include component and policyViolation as UUIDs; analysisState, if provided, must be APPROVED, REJECTED, or NOT_SET.