import demistomock as demisto from CommonServerPython import * # noqa: E402 lgtm [py/polluting-import] def _get_incident(): return demisto.incidents()[0] def iot_resolve_alert(): incident = _get_incident() _id = "" for label in incident["labels"]: if label["type"] == "id": _id = label["value"] break if _id == "": raise Exception("id was not found in the incident labels") args = demisto.args() close_reason = args.get("close_reason") demisto.executeCommand( "iot-security-resolve-alert", { "id": _id, "reason": f'resolved by XSOAR incident {incident["id"]}', "reason_type": "Issue Mitigated" if close_reason == "Resolved" else "No Action Needed", }, ) def main(): try: iot_resolve_alert() except Exception as ex: return_error(f"Failed to execute iot-security-alert-post-processing. Error: {ex!s}") if __name__ in ("__main__", "__builtin__", "builtins"): main()