Compliance

Compliance posture dashboards and framework mappings.

📄️ Per-Framework Compliance KPIs

Return open/fixed counts, severity split, affected assets and violated controls per compliance framework. Frameworks default to the client's configured regulations, filtered by plan entitlement; supports repository_id, asset_type and severities filters. Requires the compliance plan feature (403 otherwise).

📄️ Compliance Risk Flow (Sankey)

Return sankey-diagram counts flowing from total findings through fixed/remaining state, severity and asset group down to compliance framework. Supports repository_id, asset_type, severities and frameworks filters; returns 400 for an invalid asset_type.

📄️ Findings per Repository and Framework

Return open finding counts per repository x compliance framework for the busiest repositories (up to max_assets, default capped at 100). Supports repository_id, asset_type, severities and frameworks filters; returns 400 for an invalid asset_type.

📄️ Framework Risk Quadrant

Return risk-quadrant points combining open finding counts and affected-repository scope per framework and severity. Supports repository_id, asset_type, severities and frameworks filters; returns 400 for an invalid asset_type.

📄️ Most Violated Compliance Controls

Return a control-level drill-down with a severity breakdown per framework control, ordered by violation count and truncated to `limit` entries (1-200). Supports repository_id, asset_type, severities and frameworks filters.

📄️ Weekly Compliance Finding Trends

Return weekly new-finding counts per compliance framework over the last `days` days (1-365), split by whether the findings are currently solved. Supports repository_id, asset_type, severities and frameworks filters.