Add API spec for severity modifiers automation pipelines

cassettes/features/v2/security_monitoring/Delete-a-severity-modifier-rule-returns-Rule-successfully-deleted-response.frozen

@@ -0,0 +1 @@
+2026-08-03T09:17:25.445Z

cassettes/features/v2/security_monitoring/Get-a-severity-modifier-rule-returns-Successfully-retrieved-the-severity-modifier-rule-response.frozen

@@ -0,0 +1 @@
+2026-08-03T09:17:28.616Z

cassettes/features/v2/security_monitoring/Get-all-severity-modifier-rules-returns-Successfully-retrieved-the-list-of-severity-modifier-rules-response.frozen

@@ -0,0 +1 @@
+2026-08-03T09:17:29.711Z

cassettes/features/v2/security_monitoring/Reorder-severity-modifier-rules-returns-Successfully-reordered-the-severity-modifier-rules-response.frozen

@@ -0,0 +1 @@
+2026-08-03T09:17:30.831Z

examples/v2/security-monitoring/CreateSecurityFindingsAutomationSeverityModifierRule.rb

@@ -0,0 +1,29 @@
+# Create a severity modifier rule returns "Successfully created the severity modifier rule" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.create_security_findings_automation_severity_modifier_rule".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SeverityModifierRuleCreateRequest.new({
+  data: DatadogAPIClient::V2::SeverityModifierRuleDataCreate.new({
+    attributes: DatadogAPIClient::V2::SeverityModifierRuleAttributesCreate.new({
+      action: DatadogAPIClient::V2::SeverityModifierRuleSetAction.new({
+        description: "Lower severity for dev environment noise",
+        severity: DatadogAPIClient::V2::SeverityModifierSeverity::LOW,
+        type: DatadogAPIClient::V2::SeverityModifierRuleSetActionType::SET,
+      }),
+      enabled: true,
+      name: "Downgrade misconfigurations in dev",
+      rule: DatadogAPIClient::V2::AutomationRuleScope.new({
+        finding_types: [
+          DatadogAPIClient::V2::SecurityFindingType::MISCONFIGURATION,
+        ],
+        query: "env:prod team:platform",
+      }),
+    }),
+    type: DatadogAPIClient::V2::SeverityModifierRuleType::SEVERITY_MODIFIER_RULES,
+  }),
+})
+p api_instance.create_security_findings_automation_severity_modifier_rule(body)

examples/v2/security-monitoring/DeleteSecurityFindingsAutomationSeverityModifierRule.rb

@@ -0,0 +1,11 @@
+# Delete a severity modifier rule returns "Rule successfully deleted." response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.delete_security_findings_automation_severity_modifier_rule".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+# there is a valid "valid_severity_modifier_rule" in the system
+VALID_SEVERITY_MODIFIER_RULE_DATA_ID = ENV["VALID_SEVERITY_MODIFIER_RULE_DATA_ID"]
+api_instance.delete_security_findings_automation_severity_modifier_rule(VALID_SEVERITY_MODIFIER_RULE_DATA_ID)

examples/v2/security-monitoring/GetSecurityFindingsAutomationSeverityModifierRule.rb

@@ -0,0 +1,11 @@
+# Get a severity modifier rule returns "Successfully retrieved the severity modifier rule" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.get_security_findings_automation_severity_modifier_rule".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+# there is a valid "valid_severity_modifier_rule" in the system
+VALID_SEVERITY_MODIFIER_RULE_DATA_ID = ENV["VALID_SEVERITY_MODIFIER_RULE_DATA_ID"]
+p api_instance.get_security_findings_automation_severity_modifier_rule(VALID_SEVERITY_MODIFIER_RULE_DATA_ID)

examples/v2/security-monitoring/ListSecurityFindingsAutomationSeverityModifierRules.rb

@@ -0,0 +1,8 @@
+# Get all severity modifier rules returns "Successfully retrieved the list of severity modifier rules" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_security_findings_automation_severity_modifier_rules".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.list_security_findings_automation_severity_modifier_rules()

examples/v2/security-monitoring/ReorderSecurityFindingsAutomationSeverityModifierRules.rb

@@ -0,0 +1,20 @@
+# Reorder severity modifier rules returns "Successfully reordered the severity modifier rules" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.reorder_security_findings_automation_severity_modifier_rules".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+# there is a valid "valid_severity_modifier_rule" in the system
+VALID_SEVERITY_MODIFIER_RULE_DATA_ID = ENV["VALID_SEVERITY_MODIFIER_RULE_DATA_ID"]
+
+body = DatadogAPIClient::V2::SeverityModifierRuleReorderRequest.new({
+  data: [
+    DatadogAPIClient::V2::SeverityModifierRuleReorderItem.new({
+      id: VALID_SEVERITY_MODIFIER_RULE_DATA_ID,
+      type: DatadogAPIClient::V2::SeverityModifierRuleType::SEVERITY_MODIFIER_RULES,
+    }),
+  ],
+})
+p api_instance.reorder_security_findings_automation_severity_modifier_rules(body)

examples/v2/security-monitoring/UpdateSecurityFindingsAutomationSeverityModifierRule.rb

@@ -0,0 +1,29 @@
+# Update a severity modifier rule returns "Successfully updated the severity modifier rule" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.update_security_findings_automation_severity_modifier_rule".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SeverityModifierRuleUpdateRequest.new({
+  data: DatadogAPIClient::V2::SeverityModifierRuleDataCreate.new({
+    attributes: DatadogAPIClient::V2::SeverityModifierRuleAttributesCreate.new({
+      action: DatadogAPIClient::V2::SeverityModifierRuleSetAction.new({
+        description: "Lower severity for dev environment noise",
+        severity: DatadogAPIClient::V2::SeverityModifierSeverity::LOW,
+        type: DatadogAPIClient::V2::SeverityModifierRuleSetActionType::SET,
+      }),
+      enabled: true,
+      name: "Downgrade misconfigurations in dev",
+      rule: DatadogAPIClient::V2::AutomationRuleScope.new({
+        finding_types: [
+          DatadogAPIClient::V2::SecurityFindingType::MISCONFIGURATION,
+        ],
+        query: "env:prod team:platform",
+      }),
+    }),
+    type: DatadogAPIClient::V2::SeverityModifierRuleType::SEVERITY_MODIFIER_RULES,
+  }),
+})
+p api_instance.update_security_findings_automation_severity_modifier_rule("00000000-0000-0000-0000-000000000000", body)