Skip to content

Merge duplicate reviews into one survivor

PATCH
/reviews/merge

Combines multiple same-author reviews within one component into a designated survivor. Non-survivor reviews are marked as duplicates (triage_status=duplicate, duplicate_of_review_id=survivor). Requires admin role on the component's project.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Request Body

application/json
JSON
{
  
"review_ids": [
  
  
[
  
  
  
10,
  
  
  
11,
  
  
  
12
  
  
]
  
],
  
"survivor_id": 10
}

Responses

Reviews merged successfully

application/json
JSON
{
  
"survivor": {
  
  
"id": 10,
  
  
"action": "comment",
  
  
"comment": "The original comment",
  
  
"triage_status": "pending",
  
  
"rule_id": 100,
  
  
"created_at": "2026-05-19 14:08:17 UTC",
  
  
"reactions": {
  
  
  
"up": 0,
  
  
  
"down": 0,
  
  
  
"mine": null
  
  
}
  
},
  
"duplicates": [
  
  
{
  
  
  
"id": 11,
  
  
  
"action": "comment",
  
  
  
"comment": "Duplicate of 10",
  
  
  
"triage_status": "duplicate",
  
  
  
"duplicate_of_review_id": 10,
  
  
  
"rule_id": 100,
  
  
  
"created_at": "2026-05-19 14:10:00 UTC",
  
  
  
"reactions": {
  
  
  
  
"up": 0,
  
  
  
  
"down": 0,
  
  
  
  
"mine": null
  
  
  
}
  
  
}
  
]
}

Playground

Server
Authorization
Body

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)