Add entries for new suppression endpoints

[mrinehart-rz]

Adds entries for the following endpoints:

• POST /org/vulnerabilities/suppress
• POST /org/vulnerability-groups/suppress
• POST /org/findings/suppress

[Copilot]

🟡 Changes recommended

Update the 207 response schemas to represent the documented partial suppression results.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Adds OpenAPI entries for three organization-level suppression endpoints.

Changes:

• Documents vulnerability, vulnerability-group, and finding suppression endpoints.
• Adds request and response schemas.
• Documents authentication and error responses.

File summaries

File	Summary
go/api/openapi.yaml	Defines the new endpoints and schemas. Moderate issue (3 votes): 207 responses at lines 1998, 2057, and 2116 use the generic Problem schema instead of exposing partial suppression results.

Review details

Suppressed comments (2)

go/api/openapi.yaml:2057

• The 207 response is described as containing partial suppression results, but it is modeled as the generic RFC 7807 Problem. That prevents clients from seeing the suppressed, unsuppressed, and per-item errors fields provided by SuppressionResponse; use the result schema for this response (or define a dedicated partial-results schema matching the actual payload).

                $ref: "#/components/schemas/Problem"

go/api/openapi.yaml:2116

• The 207 response is described as containing partial suppression results, but it is modeled as the generic RFC 7807 Problem. That prevents clients from seeing the suppressed, unsuppressed, and per-item errors fields provided by SuppressionResponse; use the result schema for this response (or define a dedicated partial-results schema matching the actual payload).

                $ref: "#/components/schemas/Problem"

• Files reviewed: 1/1 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.