Skip to content

feat(security): improve findings UX for agents and humans#343

Merged
platinummonkey merged 4 commits into
DataDog:mainfrom
danieldebeer-dd:daniel.debeer/security-findings-ux
Apr 10, 2026
Merged

feat(security): improve findings UX for agents and humans#343
platinummonkey merged 4 commits into
DataDog:mainfrom
danieldebeer-dd:daniel.debeer/security-findings-ux

Conversation

@danieldebeer-dd
Copy link
Copy Markdown
Contributor

@danieldebeer-dd danieldebeer-dd commented Apr 10, 2026

Summary

Implements UX improvements for security findings based on agent feedback. Makes the security command tree more navigable and findings analyze more self-documenting.

Changes

# Change File
1 Add signals vs findings conceptual model to security --help main.rs
2 Group subcommands into Query & Investigate vs Configure main.rs
3 Add common fields quick-reference to findings analyze help main.rs
4 Document filter vs WHERE query boundary main.rs
5 Add 5 example queries (including finding_types filter) main.rs
6 Improve 400 error messages with actionable checklist + common fields security.rs
7 Surface long_about in agent-mode JSON schema (was only showing short about) main.rs
8 Update README: Cloud Security and Application Security now covered README.md

Testing

  • cargo test — 730 pass
  • cargo clippy -- -D warnings — clean
  • cargo fmt --check — clean
  • cargo run -- security --help — verified COMMANDS grouping and CONCEPTS visible in JSON
  • cargo run -- security findings analyze --help — verified common fields, filter vs WHERE, all examples visible in JSON

🤖 Generated with Claude Code

- Add signals vs findings conceptual model to security --help
- Group subcommands: Query & Investigate vs Configure
- Add common fields reference to findings analyze help
- Document filter vs WHERE query boundary
- Add 5 example queries including finding_types filter
- Improve 400 error messages with actionable checklist
- Surface long_about in agent-mode JSON schema
- Update README: Cloud Security and App Security now covered

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
platinummonkey
platinummonkey previously approved these changes Apr 10, 2026
The fetch endpoint expects "advanced_query_fetch_request" but
build_fetch_request was reusing the initial "analysis_workspace_query_request"
type, causing 400 errors on async query polling.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
danieldebeer-dd and others added 2 commits April 10, 2026 12:42
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@platinummonkey platinummonkey merged commit 0fc4432 into DataDog:main Apr 10, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants