Audits

Get test snapshot detail for an evidence row

Retrieves the rich detail for a single VANTA_TEST_SNAPSHOT evidence row attached to an information request. The response includes test-level metadata (description, integrations, SLA), the raw test data captured at snapshot time, and the resources that were excluded from the test (out-of-scope resources).

For structured snapshots, the rawTestData array contains one row per resource the test ran against; each row carries resourceId, resourceType, and the raw JSON for that resource.

For unstructured snapshots, the rawTestData array contains a single row with resourceId and resourceType set to null and rawJson containing the entire test-run JSON blob.

The outOfScopeResources field lists resources excluded at the test level (customer-disabled) and the framework level (segment configuration). Empty exclusion groups are filtered out.

GET

audits

{auditId}

information-requests

{requestId}

evidence

{evidenceId}

test-snapshot

TypeScript

import { Vanta } from "vanta-auditor-api-sdk";

const vanta = new Vanta({
  bearerAuth: process.env["VANTA_BEARER_AUTH"] ?? "",
});

async function run() {
  const result = await vanta.audits.getInformationRequestTestSnapshotEvidenceDetail({
    auditId: "<id>",
    requestId: "<id>",
    evidenceId: "<id>",
  });

  console.log(result);
}

run();

{
  "testId": "test.okta.account-creation",
  "testName": "Okta user provisioning test",
  "description": "Verify Okta user accounts are created via SSO.",
  "evaluationCriteria": "Confirms that all human user accounts in Okta were provisioned via the SSO workflow.",
  "integrations": [
    {
      "integrationId": "okta",
      "displayName": "Okta"
    }
  ],
  "slaRemediation": {
    "id": "sla-30d",
    "settings": {
      "numericValue": 30,
      "unit": "DAYS"
    }
  },
  "rawTestData": [
    {
      "resourceId": "6890e473dce1da5d8406f700",
      "resourceType": "OktaUser",
      "rawJson": {
        "id": "6890e473dce1da5d8406f700",
        "status": "ACTIVE"
      }
    }
  ],
  "outOfScopeResources": {
    "testLevel": [
      {
        "reason": "Disabled by customer",
        "entities": [
          {
            "id": "6890e473dce1da5d8406f701",
            "displayName": "service-account@example.com"
          }
        ]
      }
    ],
    "frameworkLevel": []
  }
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

auditId

string

required

requestId

string

required

evidenceId

string

required

Response

200 - application/json

Detail response for a captured automated-test snapshot evidence row.

Combines the test-level metadata (description, integrations, SLA remediation) with a uniform raw-data array so external clients see the same shape regardless of whether the snapshot was structured or unstructured.

testId

string

required

The unique identifier for the test in Vanta's system.

testName

string

required

The display name of the test.

description

string

required

A short description of what the test checks.

evaluationCriteria

string | null

required

Longer-form, formatted description of the test. Null when unset.

integrations

object[]

required

Integrations whose data feeds the test.

Show child attributes

slaRemediation

object

required

SLA remediation policy attached to the test, or null when no SLA is set.

Show child attributes

rawTestData

object[]

required

Raw test data captured at snapshot time.

Show child attributes

outOfScopeResources

object

Resources excluded from the test at snapshot time. Absent when the snapshot data could not be loaded; clients should treat a missing field as "unknown" rather than "nothing excluded".

Show child attributes

Flag evidence for an information requestFlags evidence for an information request when it doesn't meet audit requirements, marking issues that need to be addressed before approval. This action changes the request's approvalStatus to a flagged state and creates an activity log entry. Flagging workflow: 1. Auditor reviews submitted evidence 2. If issues are found, auditor calls this endpoint with detailed reason 3. Request status changes to flagged state 4. Customer is notified and can see the reason in activity logs 5. Customer addresses issues and updates evidence 6. When ready, customer changes status back to awaiting review 7. Auditor reviews again and either flags again or accepts The `reason` field should clearly explain what's missing or incorrect so the customer knows exactly what to fix. This reason is visible to the customer and appears in the activity log.

⌘I

TypeScript

import { Vanta } from "vanta-auditor-api-sdk";

const vanta = new Vanta({
  bearerAuth: process.env["VANTA_BEARER_AUTH"] ?? "",
});

async function run() {
  const result = await vanta.audits.getInformationRequestTestSnapshotEvidenceDetail({
    auditId: "<id>",
    requestId: "<id>",
    evidenceId: "<id>",
  });

  console.log(result);
}

run();

{
  "testId": "test.okta.account-creation",
  "testName": "Okta user provisioning test",
  "description": "Verify Okta user accounts are created via SSO.",
  "evaluationCriteria": "Confirms that all human user accounts in Okta were provisioned via the SSO workflow.",
  "integrations": [
    {
      "integrationId": "okta",
      "displayName": "Okta"
    }
  ],
  "slaRemediation": {
    "id": "sla-30d",
    "settings": {
      "numericValue": 30,
      "unit": "DAYS"
    }
  },
  "rawTestData": [
    {
      "resourceId": "6890e473dce1da5d8406f700",
      "resourceType": "OktaUser",
      "rawJson": {
        "id": "6890e473dce1da5d8406f700",
        "status": "ACTIVE"
      }
    }
  ],
  "outOfScopeResources": {
    "testLevel": [
      {
        "reason": "Disabled by customer",
        "entities": [
          {
            "id": "6890e473dce1da5d8406f701",
            "displayName": "service-account@example.com"
          }
        ]
      }
    ],
    "frameworkLevel": []
  }
}