Netskope Remediation UpdateAlert

Netskope Remediation UpdateAlert

Certified

Update the status of a Netskope alert

Patches an alert in Netskope Security Cloud to set its status and optional note.

yaml
type: io.kestra.plugin.netskope.remediation.UpdateAlert
yaml
id: update_netskope_alert
namespace: io.kestra.security
tasks:
  - id: ack_alert
    type: io.kestra.plugin.netskope.remediation.UpdateAlert
    baseUrl: "https://{{ secret('NETSKOPE_TENANT') }}.goskope.com"
    apiToken: "{{ secret('NETSKOPE_V2_TOKEN') }}"
    alertId: "{{ inputs.alert_id }}"
    status: acknowledged
    note: "Reviewed and acknowledged by SOC team"
Installation

Our standard Docker images already include this plugin. If you use a -slim image or another setup, install it with the following command: 

kestractl plugins get io.kestra.plugin:plugin-netskope --compatible-for $KESTRA_VERSION

For kestractl, use your Kestra version with --compatible-for, or specify an exact plugin version.

For Kestra CLI, replace LATEST with a specific version or version range to pin the plugin version.

Properties

The ID of the alert to update

The Netskope v2 API token

The base URL of the Netskope tenant

e.g. https://tenant.goskope.com

The new status for the alert

Must be 'acknowledged' or 'dismissed'

Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.

Definitions
assetFailureBehaviorstring
Possible Values
IGNOREFAILWARN

Asset failure behavior

Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.

enableAutobooleanstring

Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.

inputsarray

The assets consumed as inputs.

id*string
Min length1
typestring
outputs

The assets produced as outputs.

id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*string
Min length1

Custom asset type

descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150

Optional note to attach to the alert update

The ID of the updated alert

The new status that was set on the alert

More Plugins in this Category

OPA (Open Policy Agent)
OPA (Open Policy Agent)
Enterprise

Tasks to manage Open Policy Agent policies and decisions, including upload, evaluation, and partial evaluation.

Infrastructure

5 tasks

4 blueprints

Huawei
Huawei

Huawei plugin for Kestra

CloudDataInfrastructure

45 tasks

6 blueprints