SecurityEntityRiskScore: breaking schema changes + new GET by ID endpoint
BreakingBreaking change
This is a breaking change — integrations that rely on the affected behaviour will need updates before the change rolls out.
What changed
Multiple breaking changes to SecurityEntityRiskScoreAttributes and a new endpoint were introduced:
entityIDfield removed fromSecurityEntityRiskScoreAttributes;entityIDandentityTyperemoved from therequiredlist, replaced byentityProviders,entitySubTypes, andaccountIdsas required fields.SecurityEntityRiskScoreTypeenum value changed fromsecurity_entity_risk_scoretoSecurityEntityRiskScore— any client matching on this string will break.- New fields added:
accountIds,entitySubTypes,entityTypes(additive). - New schema
SecurityEntityRiskScoreResponseadded for the new single-entity endpoint. - New endpoint
GET /api/v2/security-entities/risk-scores/{entity_id}added (additive, still in public beta). SecurityEntityRiskScoresMetaresponse example updated with new pagination fields (pageNumber,pageSize,queryId,totalRowCount) replacingpage.total.