{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/prisma-cloud-compute-api-host-structure.json",
  "name": "Host",
  "description": "Host schema from Palo Alto Networks Prisma Cloud Compute API",
  "type": "object",
  "properties": {
    "_id": {
      "type": "string",
      "description": "Unique host identifier."
    },
    "hostname": {
      "type": "string",
      "description": "Host machine hostname."
    },
    "scanTime": {
      "type": "datetime",
      "description": "Timestamp of the most recent host scan."
    },
    "osDistro": {
      "type": "string",
      "description": "Operating system distribution."
    },
    "osDistroVersion": {
      "type": "string",
      "description": "Operating system version."
    },
    "kernelVersion": {
      "type": "string",
      "description": "Linux kernel version."
    },
    "cloudMetadata": {
      "type": "object",
      "description": "Cloud provider metadata for the host.",
      "properties": {
        "provider": {
          "type": "string",
          "enum": [
            "aws",
            "azure",
            "gcp",
            "oci"
          ]
        },
        "accountId": {
          "type": "string"
        },
        "region": {
          "type": "string"
        },
        "instanceId": {
          "type": "string"
        }
      }
    },
    "vulnerabilities": {
      "type": "array",
      "description": "Vulnerabilities discovered on the host.",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "CVE identifier (e.g., CVE-2024-1234)."
          },
          "status": {
            "type": "string",
            "description": "Fix availability status.",
            "enum": [
              "fixed in",
              "needed",
              "will not fix",
              "deferred"
            ]
          },
          "cvss": {
            "type": "float",
            "description": "CVSS v3 base score."
          },
          "severity": {
            "type": "string",
            "description": "Severity level derived from CVSS score.",
            "enum": [
              "critical",
              "high",
              "medium",
              "low"
            ]
          },
          "packageName": {
            "type": "string",
            "description": "Name of the affected package."
          },
          "packageVersion": {
            "type": "string",
            "description": "Installed version of the affected package."
          },
          "fixedVersion": {
            "type": "string",
            "description": "Version that contains the fix, if available."
          },
          "link": {
            "type": "string",
            "description": "URL to the CVE advisory or details page."
          },
          "description": {
            "type": "string",
            "description": "Brief description of the vulnerability."
          },
          "publishedDate": {
            "type": "datetime",
            "description": "Date the vulnerability was publicly disclosed."
          }
        }
      }
    },
    "vulnerabilitiesCount": {
      "type": "int32",
      "description": "Total number of vulnerabilities found."
    },
    "vulnerabilityDistribution": {
      "type": "object",
      "properties": {
        "critical": {
          "type": "int32"
        },
        "high": {
          "type": "int32"
        },
        "medium": {
          "type": "int32"
        },
        "low": {
          "type": "int32"
        }
      }
    },
    "complianceIssues": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "int32",
            "description": "Compliance check ID."
          },
          "title": {
            "type": "string",
            "description": "Title of the compliance check."
          },
          "severity": {
            "type": "string",
            "description": "Severity of the compliance issue.",
            "enum": [
              "critical",
              "high",
              "medium",
              "low"
            ]
          },
          "cause": {
            "type": "string",
            "description": "Explanation of why the resource failed the check."
          },
          "description": {
            "type": "string",
            "description": "Detailed description of the compliance requirement."
          }
        }
      }
    },
    "complianceIssuesCount": {
      "type": "int32"
    }
  }
}