Reference D: Repository mapping

Map uploaded SARIF findings to Cortex Cloud repository assets.

The collector maps findings to repositories at upload time. Each upload requires repository_id or repository_url.

Parameter	Required	Use when	Description
repository_id	One repository identifier is required.	The Cortex Cloud repository asset ID is known.	Stable and unambiguous. Preferred for CI/CD automation.
repository_url	One repository identifier is required.	The asset ID is unavailable.	Full repository URL, such as https://github.com/org/repo. The platform resolves the matching asset.
branch	Optional.	Findings are branch-specific.	Branch name, such as main, develop, or feature/auth.