Update a malware scan's comment

PATCH

https://api.modulards.com/api/public/v1/site-scans/:site_scan

PATCH

/api/public/v1/site-scans/:site_scan

curl -X PATCH https://api.modulards.com/api/public/v1/site-scans/site_scan \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "comment": "False positive, confirmed by the plugin author."
}'

200Update a malware scan's comment

{
  "data": {
    "attributes": {
      "comment": "False positive, confirmed by the plugin author.",
      "created_at": "2026-09-18T09:00:00.000000Z",
      "db_threats_detected": 0,
      "files_clean": 4198,
      "files_infected": 9,
      "files_malicious": 2,
      "files_suspicious": 1,
      "has_threats": true,
      "method": "manual",
      "omitted": [],
      "site_id": 101,
      "status": "done",
      "updated_at": "2026-09-18T11:20:00.000000Z",
      "verdict": "threats_found"
    },
    "id": "3021",
    "links": {
      "self": "https://api.modulards.com/api/public/v1/site-scans/3021"
    },
    "type": "site-scans"
  },
  "jsonapi": {
    "version": "1.1"
  }
}

Writes the comment of one malware scan, replacing whatever it held: use it to record what you found. Nothing else about the scan changes: to launch a new scan use “Launch malware scans”.

Body

comment (string or null, optional): at most 2500 bytes once HTML tags are stripped (a character outside plain ASCII counts as more than one byte). Send null or omit it to clear the comment.

Errors

422: the comment is not a string or is too long.

Authentication

AuthorizationBearer

Personal access token created in the Modular DS dashboard; read-only tokens can only call GET endpoints.

Path parameters

site_scanstringRequired

Request

This endpoint expects an object.

commentstringOptional

Response

200 - Site scan comment updated

dataobjectOptional

jsonapiobjectOptional