FindingSearchService.GetSearchTerms has a public VIEWER RPC and returns cascaded facet values plus optional match counts, but its proto has no apigw.v1.method.operations annotation. The generated finding OpenAPI contracts expose Search but not this operation, so c1i cannot add a first-class command against the public API.
Evidence: protos/c1api/c1/api/finding/v1/finding.proto defines GetSearchTerms immediately after public Search; Search is annotated POST /api/v1/findings/search, while GetSearchTerms has no REST route. The other absent findings RPCs explicitly state that they are internal-only and should remain excluded: BulkGetFindingSummaries, BulkGetAppResourceFindingSummaries, SearchAppNHIFindings, GetShadowMcpStats, and NotifyShadowMCPUsers.
Follow-up: define and release a public REST route for GetSearchTerms, regenerate OpenAPI/gateway artifacts, then add the corresponding c1i command and live validation.
FindingSearchService.GetSearchTermshas a public VIEWER RPC and returns cascaded facet values plus optional match counts, but its proto has noapigw.v1.method.operationsannotation. The generated finding OpenAPI contracts exposeSearchbut not this operation, so c1i cannot add a first-class command against the public API.Evidence:
protos/c1api/c1/api/finding/v1/finding.protodefinesGetSearchTermsimmediately after publicSearch;Searchis annotatedPOST /api/v1/findings/search, whileGetSearchTermshas no REST route. The other absent findings RPCs explicitly state that they are internal-only and should remain excluded:BulkGetFindingSummaries,BulkGetAppResourceFindingSummaries,SearchAppNHIFindings,GetShadowMcpStats, andNotifyShadowMCPUsers.Follow-up: define and release a public REST route for
GetSearchTerms, regenerate OpenAPI/gateway artifacts, then add the corresponding c1i command and live validation.