openapi: 3.2.0
info:
  title: Palo Alto Networks Tas Droplets API
  version: '1.0'
  description: 'Operations tagged Tas-Droplets across 4 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json, palo-alto-cwpp-openapi-34-04-145-saas-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: PATH_TO_CONSOLE
tags:
- name: Tas-Droplets
paths:
  /api/v34.03/tas-droplets:
    get:
      description: 'Get TAS Droplets. GET /api/v34.03/tas-droplets on the Tas-Droplets API. Takes 15 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Retrieves a list of cloud function IDs.

          '
        in: query
        name: id
        schema:
          description: 'Retrieves a list of cloud function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

          '
        in: query
        name: cloudControllerAddresses
        schema:
          description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud runtimes.

          '
        in: query
        name: runtime
        schema:
          description: 'Filters the result based on cloud runtimes.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud function''s versions.

          '
        in: query
        name: version
        schema:
          description: 'Filters the result based on cloud function''s versions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on AWS Lambda Layers.

          '
        in: query
        name: functionLayers
        schema:
          description: 'Filters the result based on AWS Lambda Layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters result based on cloud functions that are connected and protected by a Defender.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Filters result based on compliance IDs.

          '
        in: query
        name: complianceIDs
        schema:
          description: 'Filters result based on compliance IDs.

            '
          items:
            $ref: '#/components/schemas/int'
          type: array
      - description: 'Filters the result based on applied compliance rule name.

          '
        in: query
        name: complianceRuleName
        schema:
          type: string
      - description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

          '
        in: query
        name: platform
        schema:
          description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.

          Default is false.

          '
        in: query
        name: normalizedSeverity
        schema:
          type: boolean
      - description: 'Filters results by issue type.

          '
        in: query
        name: issueType
        schema:
          description: IssueType is used to filter scan results by issue type
          enum:
          - - vulnerabilities
            - compliance
            - ''
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_serverless.FunctionInfo'
          description: ''
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets
      summary: Get TAS Droplets
      x-description-source: desc/tas-droplets/get.md
  /api/v34.03/tas-droplets/addresses:
    get:
      description: 'TAS Cloud Controller Addresses. GET /api/v34.03/tas-droplets/addresses on the Tas-Droplets API. Takes 15 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Retrieves a list of cloud function IDs.

          '
        in: query
        name: id
        schema:
          description: 'Retrieves a list of cloud function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

          '
        in: query
        name: cloudControllerAddresses
        schema:
          description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud runtimes.

          '
        in: query
        name: runtime
        schema:
          description: 'Filters the result based on cloud runtimes.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud function''s versions.

          '
        in: query
        name: version
        schema:
          description: 'Filters the result based on cloud function''s versions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on AWS Lambda Layers.

          '
        in: query
        name: functionLayers
        schema:
          description: 'Filters the result based on AWS Lambda Layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters result based on cloud functions that are connected and protected by a Defender.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Filters result based on compliance IDs.

          '
        in: query
        name: complianceIDs
        schema:
          description: 'Filters result based on compliance IDs.

            '
          items:
            $ref: '#/components/schemas/int'
          type: array
      - description: 'Filters the result based on applied compliance rule name.

          '
        in: query
        name: complianceRuleName
        schema:
          type: string
      - description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

          '
        in: query
        name: platform
        schema:
          description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.

          Default is false.

          '
        in: query
        name: normalizedSeverity
        schema:
          type: boolean
      - description: 'Filters results by issue type.

          '
        in: query
        name: issueType
        schema:
          description: IssueType is used to filter scan results by issue type
          enum:
          - - vulnerabilities
            - compliance
            - ''
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_string'
          description: ''
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets-addresses
      summary: TAS Cloud Controller Addresses
      x-description-source: desc/tas-droplets/get_tas_addresses.md
  /api/v34.03/tas-droplets/download:
    get:
      description: 'Download TAS Droplets. GET /api/v34.03/tas-droplets/download on the Tas-Droplets API. Takes 15 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Retrieves a list of cloud function IDs.

          '
        in: query
        name: id
        schema:
          description: 'Retrieves a list of cloud function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

          '
        in: query
        name: cloudControllerAddresses
        schema:
          description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud runtimes.

          '
        in: query
        name: runtime
        schema:
          description: 'Filters the result based on cloud runtimes.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud function''s versions.

          '
        in: query
        name: version
        schema:
          description: 'Filters the result based on cloud function''s versions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on AWS Lambda Layers.

          '
        in: query
        name: functionLayers
        schema:
          description: 'Filters the result based on AWS Lambda Layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters result based on cloud functions that are connected and protected by a Defender.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Filters result based on compliance IDs.

          '
        in: query
        name: complianceIDs
        schema:
          description: 'Filters result based on compliance IDs.

            '
          items:
            $ref: '#/components/schemas/int'
          type: array
      - description: 'Filters the result based on applied compliance rule name.

          '
        in: query
        name: complianceRuleName
        schema:
          type: string
      - description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

          '
        in: query
        name: platform
        schema:
          description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.

          Default is false.

          '
        in: query
        name: normalizedSeverity
        schema:
          type: boolean
      - description: 'Filters results by issue type.

          '
        in: query
        name: issueType
        schema:
          description: IssueType is used to filter scan results by issue type
          enum:
          - - vulnerabilities
            - compliance
            - ''
          type: string
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets-download
      summary: Download TAS Droplets
      x-description-source: desc/tas-droplets/download_get.md
  /api/v34.03/tas-droplets/progress:
    get:
      description: 'View TAS Droplets Scan Progress. GET /api/v34.03/tas-droplets/progress on the Tas-Droplets API. Documented responses: 200.'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.Progress'
          description: ''
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets-progress
      summary: View TAS Droplets Scan Progress
      x-description-source: desc/tas-droplets/progress_get.md
  /api/v34.03/tas-droplets/scan:
    post:
      description: 'Scan TAS Droplets. POST /api/v34.03/tas-droplets/scan on the Tas-Droplets API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: post-tas-droplets-scan
      summary: Scan TAS Droplets
      x-description-source: desc/tas-droplets/scan_post.md
  /api/v34.03/tas-droplets/stop:
    post:
      description: 'Stop TAS Droplets Ongoing Scan. POST /api/v34.03/tas-droplets/stop on the Tas-Droplets API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: post-tas-droplets-stop
      summary: Stop TAS Droplets Ongoing Scan
      x-description-source: desc/tas-droplets/stop_post.md
  /api/v34.04/tas-droplets:
    get:
      description: 'Get TAS Droplets. GET /api/v34.04/tas-droplets on the Tas-Droplets API. Takes 15 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Retrieves a list of cloud function IDs.

          '
        in: query
        name: id
        schema:
          description: 'Retrieves a list of cloud function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

          '
        in: query
        name: cloudControllerAddresses
        schema:
          description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud runtimes.

          '
        in: query
        name: runtime
        schema:
          description: 'Filters the result based on cloud runtimes.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud function''s versions.

          '
        in: query
        name: version
        schema:
          description: 'Filters the result based on cloud function''s versions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on AWS Lambda Layers.

          '
        in: query
        name: functionLayers
        schema:
          description: 'Filters the result based on AWS Lambda Layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters result based on cloud functions that are connected and protected by a Defender.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Filters result based on compliance IDs.

          '
        in: query
        name: complianceIDs
        schema:
          description: 'Filters result based on compliance IDs.

            '
          items:
            $ref: '#/components/schemas/int'
          type: array
      - description: 'Filters the result based on applied compliance rule name.

          '
        in: query
        name: complianceRuleName
        schema:
          type: string
      - description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

          '
        in: query
        name: platform
        schema:
          description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.

          Default is false.

          '
        in: query
        name: normalizedSeverity
        schema:
          type: boolean
      - description: 'Filters results by issue type.

          '
        in: query
        name: issueType
        schema:
          description: IssueType is used to filter scan results by issue type
          enum:
          - - vulnerabilities
            - compliance
            - ''
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_serverless.FunctionInfo'
          description: ''
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets
      summary: Get TAS Droplets
      x-description-source: desc/tas-droplets/get.md
  /api/v34.04/tas-droplets/addresses:
    get:
      description: 'TAS Cloud Controller Addresses. GET /api/v34.04/tas-droplets/addresses on the Tas-Droplets API. Takes 15 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Retrieves a list of cloud function IDs.

          '
        in: query
        name: id
        schema:
          description: 'Retrieves a list of cloud function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

          '
        in: query
        name: cloudControllerAddresses
        schema:
          description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud runtimes.

          '
        in: query
        name: runtime
        schema:
          description: 'Filters the result based on cloud runtimes.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud function''s versions.

          '
        in: query
        name: version
        schema:
          description: 'Filters the result based on cloud function''s versions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on AWS Lambda Layers.

          '
        in: query
        name: functionLayers
        schema:
          description: 'Filters the result based on AWS Lambda Layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters result based on cloud functions that are connected and protected by a Defender.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Filters result based on compliance IDs.

          '
        in: query
        name: complianceIDs
        schema:
          description: 'Filters result based on compliance IDs.

            '
          items:
            $ref: '#/components/schemas/int'
          type: array
      - description: 'Filters the result based on applied compliance rule name.

          '
        in: query
        name: complianceRuleName
        schema:
          type: string
      - description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

          '
        in: query
        name: platform
        schema:
          description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.

          Default is false.

          '
        in: query
        name: normalizedSeverity
        schema:
          type: boolean
      - description: 'Filters results by issue type.

          '
        in: query
        name: issueType
        schema:
          description: IssueType is used to filter scan results by issue type
          enum:
          - - vulnerabilities
            - compliance
            - ''
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_string'
          description: ''
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets-addresses
      summary: TAS Cloud Controller Addresses
      x-description-source: desc/tas-droplets/get_tas_addresses.md
  /api/v34.04/tas-droplets/download:
    get:
      description: 'Download TAS Droplets. GET /api/v34.04/tas-droplets/download on the Tas-Droplets API. Takes 15 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Retrieves a list of cloud function IDs.

          '
        in: query
        name: id
        schema:
          description: 'Retrieves a list of cloud function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

          '
        in: query
        name: cloudControllerAddresses
        schema:
          description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud runtimes.

          '
        in: query
        name: runtime
        schema:
          description: 'Filters the result based on cloud runtimes.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on cloud function''s versions.

          '
        in: query
        name: version
        schema:
          description: 'Filters the result based on cloud function''s versions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters the result based on AWS Lambda Layers.

          '
        in: query
        name: functionLayers
        schema:
          description: 'Filters the result based on AWS Lambda Layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters result based on cloud functions that are connected and protected by a Defender.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Filters result based on compliance IDs.

          '
        in: query
        name: complianceIDs
        schema:
          description: 'Filters result based on compliance IDs.

            '
          items:
            $ref: '#/components/schemas/int'
          type: array
      - description: 'Filters the result based on applied compliance rule name.

          '
        in: query
        name: complianceRuleName
        schema:
          type: string
      - description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

          '
        in: query
        name: platform
        schema:
          description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.

          Default is false.

          '
        in: query
        name: normalizedSeverity
        schema:
          type: boolean
      - description: 'Filters results by issue type.

          '
        in: query
        name: issueType
        schema:
          description: IssueType is used to filter scan results by issue type
          enum:
          - - vulnerabilities
            - compliance
            - ''
          type: string
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets-download
      summary: Download TAS Droplets
      x-description-source: desc/tas-droplets/download_get.md
  /api/v34.04/tas-droplets/progress:
    get:
      description: 'View TAS Droplets Scan Progress. GET /api/v34.04/tas-droplets/progress on the Tas-Droplets API. Documented responses: 200.'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.Progress'
          description: ''
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-tas-droplets-progress
      summary: View TAS Droplets Scan Progress
      x-description-source: desc/tas-droplets/progress_get.md
  /api/v34.04/tas-droplets/scan:
    post:
      description: 'Scan TAS Droplets. POST /api/v34.04/tas-droplets/scan on the Tas-Droplets API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: post-tas-droplets-scan
      summary: Scan TAS Droplets
      x-description-source: desc/tas-droplets/scan_post.md
  /api/v34.04/tas-droplets/stop:
    post:
      description: 'Stop TAS Droplets Ongoing Scan. POST /api/v34.04/tas-droplets/stop on the Tas-Droplets API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Tas-Droplets
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: post-tas-droplets-stop
      summary: Stop TAS Droplets Ongoing Scan
      x-description-source: desc/tas-droplets/stop_post.md
components:
  schemas:
    vuln.Application:
      description: Application represents a detected application
      properties:
        installedFromPackage:
          description: 'Indicates that the app was installed as an OS package.

            '
          type: boolean
        knownVulnerabilities:
          description: 'Total number of vulnerabilities for this application.

            '
          type: integer
        layerTime:
          description: 'Image layer to which the application belongs - layer creation time.

            '
          format: int64
          type: integer
        md5:
          description: 'MD5 is the md5sum of the app.

            '
          type: string
        name:
          description: 'Name of the application.

            '
          type: string
        originPackageName:
          description: 'OriginPackageName is the name of the app origin package.

            '
          type: string
        path:
          description: 'Path of the detected application.

            '
          type: string
        rpmModule:
          description: 'RPMModule represents the RPM module in which this application is included.

            '
          type: string
        service:
          description: 'Service indicates whether the application is installed as a service.

            '
          type: boolean
        version:
          description: 'Version of the application.

            '
          type: string
      type: object
    vulnerability.ExploitType:
      description: ExploitType represents the source of an exploit
      enum:
      - - ''
        - exploit-db
        - exploit-windows
        - cisa-kev
      type: string
    shared.ImageTag:
      description: ImageTag represents an image repository and its associated tag or registry digest
      properties:
        digest:
          description: 'Image digest (requires V2 or later registry).

            '
          type: string
        id:
          description: 'ID of the image.

            '
          type: string
        registry:
          description: 'Registry name to which the image belongs.

            '
          type: string
        repo:
          description: 'Repository name to which the image belongs.

            '
          type: string
        tag:
          description: 'Image tag.

            '
          type: string
      type: object
    common.CloudMetadata:
      description: CloudMetadata is the metadata for a cloud provider managed asset (e.g., as part of AWS/GCP/Azure/OCI)
      properties:
        accountID:
          description: 'Cloud account ID.

            '
          type: string
        awsExecutionEnv:
          description: 'AWS execution environment (e.g. EC2/Fargate).

            '
          type: string
        azure:
          $ref: '#/components/schemas/common.AzureMetadata'
        gcp:
          $ref: '#/components/schemas/common.GCPCloudMetadata'
        image:
          description: 'The name of the image the cloud managed host or container is based on.

            '
          type: string
        labels:
          description: 'Cloud provider metadata labels.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        name:
          description: 'Resource name.

            '
          type: string
        ociTenantID:
          description: 'OCI Tenant ID.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        region:
          description: 'Resource''s region.

            '
          type: string
        resourceID:
          description: 'Unique ID of the resource.

            '
          type: string
        resourceURL:
          description: 'Server-defined URL for the resource.

            '
          type: string
        type:
          description: 'Instance type.

            '
          type: string
        vmID:
          description: 'Azure unique vm ID.

            '
          type: string
        vmImageID:
          description: 'VMImageID holds the VM instance''s image ID.

            '
          type: string
      type: object
    common.NetworkDeviceIP:
      description: NetworkDeviceIP represents a network device name and address pair
      properties:
        ip:
          description: 'Network device IPv4 address.

            '
          type: string
        name:
          description: 'Network device name.

            '
          type: string
      type: object
    common.Color:
      description: Color is a hexadecimal representation of color code value
      type: string
    common.ACIMetadata:
      properties:
        containerGroup:
          description: '.

            '
          type: string
      type: object
    secrets.SecretScanMetrics:
      description: SecretScanMetrics represents metrics collected during secret scan
      properties:
        failedScans:
          description: 'FailedScans represents number of failed scans caused by scanner errors.

            '
          format: int64
          type: integer
        foundSecrets:
          description: 'FoundSecrets represents number of detected secrets.

            '
          type: integer
        scanTime:
          description: 'ScanTime represents cumulative secret scan time in microseconds.

            '
          format: int64
          type: integer
        scanTimeouts:
          description: 'ScanTimeouts represents number of failed scans caused by timeout.

            '
          format: int64
          type: integer
        scannedFileSize:
          description: 'ScannedFileSize represents accumulated size of scanned files.

            '
          format: int64
          type: integer
        scannedFiles:
          description: 'ScannedFiles represents number of text files scanned for secrets.

            '
          format: int64
          type: integer
        totalBytes:
          description: 'TotalBytes represents accumulated file size.

            '
          format: int64
          type: integer
        totalFiles:
          description: 'TotalFiles represents number of files read for secrets.

            '
          format: int64
          type: integer
        totalTime:
          description: 'TotalTime represents the total time in microseconds.

            '
          format: int64
          type: integer
        typesCount:
          additionalProperties:
            $ref: '#/components/schemas/int'
          description: 'TypesCount represents distribution of secrets by its type.

            '
          type: object
      type: object
    shared.Packages:
      description: Packages is a collection of packages
      properties:
        pkgs:
          description: 'List of packages.

            '
          items:
            $ref: '#/components/schemas/shared.Package'
          type: array
        pkgsType:
          $ref: '#/components/schemas/packages.Type'
      type: object
    vuln.ComplianceTemplate:
      description: ComplianceTemplate represents the compliance template
      enum:
      - - PCI
        - HIPAA
        - NIST SP 800-190
        - GDPR
        - DISA STIG
      type: string
    -_serverless.FunctionInfo:
      items:
        $ref: '#/components/schemas/serverless.FunctionInfo'
      type: array
    -_shared.Progress:
      items:
        $ref: '#/components/schemas/shared.Progress'
      type: array
    vuln.SecretType:
      description: SecretType represents a secret type
      enum:
      - - AWS Access Key ID
        - AWS Secret Key
        - AWS MWS Auth Token
        - Azure Storage Account Access Key
        - Azure Service Principal
        - GCP Service Account Auth Key
        - Private Encryption Key
        - Public Encryption Key
        - PEM X509 Certificate Header
        - SSH Authorized Keys
        - Artifactory API Token
        - Artifactory Password
        - Basic Auth Credentials
        - Mailchimp Access Key
        - NPM Token
        - Slack Token
        - Slack Webhook
        - Square OAuth Secret
        - Notion Integration Token
        - Airtable API Key
        - Atlassian Oauth2 Keys
        - CircleCI Personal Token
        - Databricks Authentication Token
        - GitHub Token
        - GitLab Token
        - Google API key
        - Grafana Token
        - Python Package Index Key (PYPI)
        - Typeform API Token
        - Scalr Token
        - Braintree Access Token
        - Braintree Payments Key
        - Paypal Token Key
        - Braintree Payments ID
        - Datadog Client Token
        - ClickUp Personal API Token
        - OpenAI API Key
        - Java DB Connectivity (JDBC)
        - MongoDB
        - .Net SQL Server
      type: string
    shared.FileDetails:
      description: FileDetails contains file details as the file path, hash checksum
      properties:
        md5:
          description: 'Hash sum of the file using md5.

            '
          type: string
        original_file_location:
          description: 'Path of the original file in a case of archive analysis.

            '
          type: string
        path:
          description: 'Path of the file.

            '
          type: string
        sha1:
          description: 'Hash sum of the file using SHA-1.

            '
          type: string
        sha256:
          description: 'Hash sum of the file using SHA256.

            '
          type: string
      type: object
    common.CloudRunMetadata:
      properties:
        revision:
          description: '.

            '
          type: string
        service:
          description: '.

            '
          type: string
      type: object
    vulnerability.RiskFactors:
      additionalProperties:
        $ref: '#/components/schemas/string'
      description: RiskFactors maps the existence of vulnerability risk factors
      type: object
    vulnerability.Type:
      description: Type represents the vulnerability type
      enum:
      - - container
        - image
        - host_config
        - daemon_config
        - daemon_config_files
        - security_operations
        - k8s_master
        - k8s_worker
        - k8s_federation
        - linux
        - windows
        - istio
        - serverless
        - custom
        - docker_stig
        - openshift_master
        - openshift_worker
        - application_control_linux
        - gke_worker
        - image_malware
        - host_malware
        - aks_worker
        - eks_worker
        - image_secret
        - host_secret
      type: string
    common.CloudProvider:
      description: CloudProvider specifies the cloud provider name
      enum:
      - - aws
        - azure
        - gcp
        - alibaba
        - oci
        - others
      type: string
    vuln.AllCompliance:
      description: AllCompliance contains data regarding passed compliance checks
      properties:
        compliance:
          description: 'Compliance are all the passed compliance checks.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability'
          type: array
        enabled:
          description: 'Enabled indicates whether passed compliance checks is enabled by policy.

            '
          type: boolean
      type: object
    serverless.LayerInfo:
      description: LayerInfo contains information about a lambda layer
      properties:
        id:
          description: 'ID of the layer.

            '
          type: string
        name:
          description: 'Name of the layer.

            '
          type: string
        version:
          description: 'Version of the layer.

            '
          type: string
      type: object
    shared.PkgsTimes:
      description: PkgsTimes are the compressed layer times for pkgs of the specific type
      properties:
        pkgTimes:
          description: '.

            '
          items:
            $ref: '#/components/schemas/int64'
          type: array
        pkgsType:
          $ref: '#/components/schemas/packages.Type'
      type: object
    vulnerability.ExploitData:
      description: ExploitData holds information about an exploit
      properties:
        kind:
          $ref: '#/components/schemas/vulnerability.ExploitKind'
        link:
          description: 'Link is a link to information about the exploit.

            '
          type: string
        source:
          $ref: '#/components/schemas/vulnerability.ExploitType'
      type: object
    common.ExternalLabel:
      description: ExternalLabel holds an external label with a source and timestamp
      properties:
        key:
          description: 'Label key.

            '
          type: string
        sourceName:
          description: 'Source name (e.g., for a namespace, the source name can be ''twistlock'').

            '
          type: string
        sourceType:
          $ref: '#/components/schemas/common.ExternalLabelSourceType'
        timestamp:
          description: 'Time when the label was fetched.

            '
          format: date-time
          type: string
        value:
          description: 'Value of the label.

            '
          type: string
      type: object
    string:
      type: string
    common.GCPCloudMetadata:
      properties:
        cloudRun:
          $ref: '#/components/schemas/common.CloudRunMetadata'
      type: object
    vuln.WildFireMalware:
      description: WildFireMalware holds the data for WildFire malicious MD5
      properties:
        md5:
          description: 'MD5 is the hash of the malicious binary.

            '
          type: string
        path:
          description: 'Path is the path to malicious binary.

            '
          type: string
        verdict:
          description: 'Verdict is the malicious source like grayware, malware and phishing.

            '
          type: string
      type: object
    shared.Progress:
      description: Progress displays the scan progress
      properties:
        aisInitialScanInProgress:
          description: 'AISInitialScanInProgress indicates whether agentless next-gen first scheduled scan is in progress.

            '
          type: boolean
        aisOnDemandScanInProgress:
          description: 'AISOnDemandScanInProgress indicates whether agentless next-gen on demand scan is in progress.

            '
          type: boolean
        discovery:
          description: 'Discovery indicates whether the scan is in discovery phase.

            '
          type: boolean
        error:
          description: 'Error is the error that happened during scan.

            '
          type: string
        hostname:
          description: 'Hostname is the hostname for which the progress apply.

            '
          type: string
        id:
          description: 'ID is the ID of the entity being scanned.

            '
          type: string
        onDemand:
          description: 'OnDemand indicates whether the scan was triggered by the user or not (scheduled scan).

            '
          type: boolean
        scanTime:
          description: 'ScanTime is the time of scan.

            '
          format: date-time
          type: string
        scanned:
          description: 'Scanned is the number of entities for which the scan completed.

            '
          type: integer
        title:
          description: 'Title is the progress title (set by the scanning process).

            '
          type: string
        total:
          description: 'Total is the total amount of entities that should be scanned.

            '
          type: integer
        type:
          $ref: '#/components/schemas/shared.ScanType'
      type: object
    vuln.Secret:
      description: Secret represents a secret found on the scanned workload
      properties:
        group:
          description: 'Group is a group name or ID of owner the file metadata containing the secret.

            '
          type: string
        locationInFile:
          description: 'LocationInFile is the line and offset in the file where the secret was found.

            '
          type: string
        metadataModifiedTime:
          description: 'MetadataModifiedTime is the modification time of the file metadata containing the secret.

            '
          format: int64
          type: integer
        modifiedTime:
          description: 'ModifiedTime is the modification time of the file containing the secret.

            '
          format: int64
          type: integer
        originalFileLocation:
          description: '.

            '
          type: string
        path:
          description: 'Path is the path of the file in which the secret was found.

            '
          type: string
        permissions:
          description: 'Permissions are permission bits of the file metadata containing the secret.

            '
          type: string
        secretID:
          description: 'SecretID is the SHA1 of the secret content.

            '
          type: string
        size:
          description: 'Size is the size in bytes of the file in which the secret was found.

            '
          format: int64
          type: integer
        snippet:
          description: 'Snippet is the partial plain secret.

            '
          type: string
        type:
          $ref: '#/components/schemas/vuln.SecretType'
        user:
          description: 'User is a username or ID of owner the file metadata containing the secret.

            '
          type: string
      type: object
    vuln.Vulnerability:
      description: Vulnerability is a general schema for vulnerabilities (e.g., for compliance or packages)
      properties:
        applicableRules:
          description: 'Rules applied on the package.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        binaryPkgs:
          description: 'Names of the distro binary package names (packages which are built from the source of the package).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        block:
          description: 'Indicates if the vulnerability has a block effect (true) or not (false).

            '
          type: boolean
        cause:
          description: 'Additional information regarding the root cause for the vulnerability.

            '
          type: string
        cri:
          description: 'Indicates if this is a CRI-specific vulnerability (true) or not (false).

            '
          type: boolean
        custom:
          description: 'Indicates if the vulnerability is a custom vulnerability (e.g., openscap, sandbox) (true) or not (false).

            '
          type: boolean
        cve:
          description: 'CVE ID of the vulnerability (if applied).

            '
          type: string
        cvss:
          description: 'CVSS score of the vulnerability.

            '
          format: float
          type: number
        description:
          description: 'Description of the vulnerability.

            '
          type: string
        discovered:
          description: 'Specifies the time of discovery for the vulnerability.

            '
          format: date-time
          type: string
        exploit:
          $ref: '#/components/schemas/vulnerability.ExploitType'
        exploits:
          $ref: '#/components/schemas/vulnerability.Exploits'
        fixDate:
          description: 'Date/time when the vulnerability was fixed (in Unix time).

            '
          format: int64
          type: integer
        fixLink:
          description: 'Link to the vendor''s fixed-version information.

            '
          type: string
        functionLayer:
          description: 'Specifies the serverless layer ID in which the vulnerability was discovered.

            '
          type: string
        gracePeriodDays:
          description: 'Number of grace days left for a vulnerability, based on the configured grace period. Nil if no block vulnerability rule applies.

            '
          type: integer
        id:
          description: 'ID of the violation.

            '
          type: integer
        isRPMModule:
          description: 'IsRPMModule indicates whether this vulnerability is specific to an RPM module.

            '
          type: boolean
        layerTime:
          description: 'Date/time of the image layer to which the CVE belongs.

            '
          format: int64
          type: integer
        link:
          description: 'Vendor link to the CVE.

            '
          type: string
        packageName:
          description: 'Name of the package that caused the vulnerability.

            '
          type: string
        packageType:
          $ref: '#/components/schemas/packages.Type'
        packageVersion:
          description: 'Version of the package that caused the vulnerability (or null).

            '
          type: string
        published:
          description: 'Date/time when the vulnerability was published (in Unix time).

            '
          format: int64
          type: integer
        riskFactors:
          $ref: '#/components/schemas/vulnerability.RiskFactors'
        rpmModule:
          description: 'RPMModule specifies the RPM module containing the package affected by this vulnerability.

            '
          type: string
        secret:
          $ref: '#/components/schemas/vuln.Secret'
        severity:
          description: 'Textual representation of the vulnerability''s severity.

            '
          type: string
        status:
          description: 'Vendor status for the vulnerability.

            '
          type: string
        templates:
          description: 'List of templates with which the vulnerability is associated.

            '
          items:
            $ref: '#/components/schemas/vuln.ComplianceTemplate'
          type: array
        text:
          description: 'Description of the violation.

            '
          type: string
        title:
          description: 'Compliance title.

            '
          type: string
        twistlock:
          description: 'Indicates if this is a Twistlock-specific vulnerability (true) or not (false).

            '
          type: boolean
        type:
          $ref: '#/components/schemas/vulnerability.Type'
        vecStr:
          description: 'Textual representation of the metric values used to score the vulnerability.

            '
          type: string
        vulnTagInfos:
          description: 'Tag information for the vulnerability.

            '
          items:
            $ref: '#/components/schemas/vuln.TagInfo'
          type: array
        wildfireMalware:
          $ref: '#/components/schemas/vuln.WildFireMalware'
      type: object
    vuln.Distribution:
      description: Distribution counts the number of vulnerabilities per type
      properties:
        critical:
          description: '.

            '
          type: integer
        high:
          description: '.

            '
          type: integer
        low:
          description: '.

            '
          type: integer
        medium:
          description: '.

            '
          type: integer
        total:
          description: '.

            '
          type: integer
      type: object
    shared.ScanType:
      description: ScanType displays the components for an ongoing scan
      enum:
      - - image
        - ciImage
        - container
        - host
        - agentlessHost
        - registry
        - serverlessScan
        - ciServerless
        - vm
        - tas
        - ciTas
        - cloudDiscovery
        - serverlessRadar
        - serverlessAutoDeploy
        - hostAutoDeploy
        - codeRepo
        - ciCodeRepo
      type: string
    common.ExternalLabelSourceType:
      description: ExternalLabelSourceType indicates the source of the labels
      enum:
      - - namespace
        - deployment
        - pod
        - aws
        - azure
        - gcp
        - oci
      type: string
    shared.Binary:
      description: Binary represents a detected binary file (ELF)
      properties:
        altered:
          description: 'Indicates if the binary was installed from a package manager and modified/replaced (true) or not (false).

            '
          type: boolean
        cveCount:
          description: 'Total number of CVEs for this specific binary.

            '
          type: integer
        deps:
          description: 'Third-party package files which are used by the binary.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        fileMode:
          description: 'Represents the file''s mode and permission bits.

            '
          type: integer
        functionLayer:
          description: 'ID of the serverless layer in which the package was discovered.

            '
          type: string
        md5:
          description: 'Md5 hashset of the binary.

            '
          type: string
        missingPkg:
          description: 'Indicates if this binary is not related to any package (true) or not (false).

            '
          type: boolean
        name:
          description: 'Name of the binary.

            '
          type: string
        path:
          description: 'Path is the path of the binary.

            '
          type: string
        pkgRootDir:
          description: 'Path for searching packages used by the binary.

            '
          type: string
        services:
          description: 'Names of services which use the binary.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        version:
          description: 'Version of the binary.

            '
          type: string
      type: object
    common.ClusterType:
      description: ClusterType is the cluster type
      enum:
      - - AKS
        - ECS
        - EKS
        - GKE
        - Kubernetes
      type: string
    -_string:
      items:
        $ref: '#/components/schemas/string'
      type: array
    shared.CompressedLayerTimes:
      description: CompressedLayerTimes represent the compressed layer times of the image apps and pkgs
      properties:
        appTimes:
          description: '.

            '
          items:
            $ref: '#/components/schemas/int64'
          type: array
        pkgsTimes:
          description: '.

            '
          items:
            $ref: '#/components/schemas/shared.PkgsTimes'
          type: array
      type: object
    shared.ImageHistory:
      description: ImageHistory represent a layer in the image's history
      properties:
        baseLayer:
          description: 'Indicates if this layer originated from the base image (true) or not (false).

            '
          type: boolean
        created:
          description: 'Date/time when the image layer was created.

            '
          format: int64
          type: integer
        emptyLayer:
          description: 'Indicates if this instruction didn''t create a separate layer (true) or not (false).

            '
          type: boolean
        id:
          description: 'ID of the layer.

            '
          type: string
        instruction:
          description: 'Docker file instruction and arguments used to create this layer.

            '
          type: string
        sizeBytes:
          description: 'Size of the layer (in bytes).

            '
          format: int64
          type: integer
        tags:
          description: 'Holds the image tags.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        vulnerabilities:
          description: 'Vulnerabilities which originated from this layer.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability'
          type: array
      type: object
    packages.Type:
      description: Type describes the package type
      enum:
      - - nodejs
        - gem
        - python
        - jar
        - package
        - windows
        - binary
        - nuget
        - go
        - app
        - unknown
      type: string
    vuln.TagInfo:
      description: TagInfo is the tag info in a specific vulnerability context
      properties:
        color:
          $ref: '#/components/schemas/common.Color'
        comment:
          description: 'Tag comment in a specific vulnerability context.

            '
          type: string
        name:
          description: 'Name of the tag.

            '
          type: string
      type: object
    int:
      type: integer
    shared.Image:
      description: Image represents a container image
      properties:
        created:
          description: 'Date/time when the image was created.

            '
          format: date-time
          type: string
        entrypoint:
          description: 'Combined entrypoint of the image (entrypoint + CMD).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        env:
          description: 'Image environment variables.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        healthcheck:
          description: 'Indicates if health checks are enabled (true) or not (false).

            '
          type: boolean
        history:
          description: 'Holds the image history.

            '
          items:
            $ref: '#/components/schemas/shared.ImageHistory'
          type: array
        id:
          description: 'ID of the image.

            '
          type: string
        labels:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'Image labels.

            '
          type: object
        layers:
          description: 'Image filesystem layers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        os:
          description: 'Image os type.

            '
          type: string
        repoDigest:
          description: 'Image repo digests.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        repoTags:
          description: 'Image repo tags.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        user:
          description: 'Image user.

            '
          type: string
        workingDir:
          description: 'Base working directory of the image.

            '
          type: string
      type: object
    int16:
      type: integer
    serverless.FunctionInfo:
      description: FunctionInfo contains function information collected during function scan
      properties:
        Secrets:
          description: 'Secrets are paths to embedded secrets inside the image

            Note: capital letter JSON annotation is kept to avoid converting all images for backward-compatibility support.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        _id:
          description: 'ID of the function.

            '
          type: string
        accountID:
          description: 'Cloud account ID.

            '
          type: string
        allCompliance:
          $ref: '#/components/schemas/vuln.AllCompliance'
        applicationName:
          description: 'Name of the application with which the function is associated.

            '
          type: string
        applications:
          description: 'Products in the image.

            '
          items:
            $ref: '#/components/schemas/vuln.Application'
          type: array
        architecture:
          description: 'Architecture that the function supports.

            '
          type: string
        baseImage:
          description: 'Image’s base image name. Used when filtering the vulnerabilities by base images.

            '
          type: string
        binaries:
          description: 'Binaries in the image.

            '
          items:
            $ref: '#/components/schemas/shared.Binary'
          type: array
        cloudControllerAddress:
          description: 'Address of the TAS cloud controller API.

            '
          type: string
        cloudMetadata:
          $ref: '#/components/schemas/common.CloudMetadata'
        clusterType:
          $ref: '#/components/schemas/common.ClusterType'
        clusters:
          description: 'Cluster names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        collections:
          description: 'Matched function collections.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        complianceDistribution:
          $ref: '#/components/schemas/vuln.Distribution'
        complianceIssues:
          description: 'All the compliance issues.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability'
          type: array
        complianceIssuesCount:
          description: 'Number of compliance issues.

            '
          type: integer
        complianceRiskScore:
          description: 'Compliance risk score for the image.

            '
          format: float
          type: number
        compressed:
          description: 'Compressed indicates if this image seems to be compressed - currently only relevant for buildah images.

            '
          type: boolean
        compressedLayerTimes:
          $ref: '#/components/schemas/shared.CompressedLayerTimes'
        creationTime:
          description: 'Specifies the time of creation for the latest version of the image.

            '
          format: date-time
          type: string
        defended:
          description: 'Indicates status of runtime defense. Covers both manually and automatically deployed function defense.

            '
          type: boolean
        defenderLayerARN:
          description: 'Prisma Defender Layer ARN, if it exists.

            '
          type: string
        description:
          description: 'User-provided description of the function.

            '
          type: string
        distro:
          description: 'Full name of the distribution.

            '
          type: string
        ecsClusterName:
          description: 'ECS cluster name.

            '
          type: string
        environment:
          description: 'GCPEnvironment is the function generation - relevant for GCP Cloud Functions.

            '
          type: string
        envvars:
          description: 'Function environment variables.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        err:
          description: 'Description of an error that occurred during the scan.

            '
          type: string
        externalLabels:
          description: 'Kubernetes external labels of all containers running this image.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        files:
          description: 'Files in the container.

            '
          items:
            $ref: '#/components/schemas/shared.FileDetails'
          type: array
        firstScanTime:
          description: 'Specifies the time of the scan for the first version of the image. This time is preserved even after the version update.

            '
          format: date-time
          type: string
        foundSecrets:
          description: 'FoundSecrets are secrets with metadata that were found in the secrets'' scan. Requires json tag for reporting secrets from image scan.

            '
          items:
            $ref: '#/components/schemas/vuln.Secret'
          type: array
        functionLayers:
          description: 'Layer ARNs used by this function.

            '
          items:
            $ref: '#/components/schemas/serverless.LayerInfo'
          type: array
        functionTags:
          description: 'Cloud provider metadata tags.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        handler:
          description: 'Handler is the function handler.

            '
          type: string
        hash:
          description: 'Hash of the function.

            '
          type: string
        history:
          description: 'Docker image history.

            '
          items:
            $ref: '#/components/schemas/shared.ImageHistory'
          type: array
        hostDevices:
          description: 'Map from host network device name to IP address.

            '
          items:
            $ref: '#/components/schemas/common.NetworkDeviceIP'
          type: array
        hostname:
          description: 'Hostname of the scanner.

            '
          type: string
        id:
          description: 'Image ID.

            '
          type: string
        image:
          $ref: '#/components/schemas/shared.Image'
        installedProducts:
          $ref: '#/components/schemas/shared.InstalledProducts'
        invocations:
          description: 'Invocations is the function invocation count.

            '
          format: double
          type: number
        isARM64:
          description: 'IsARM64 indicates if the architecture of the image is aarch64.

            '
          type: boolean
        k8sClusterAddr:
          description: 'Endpoint of the Kubernetes API server.

            '
          type: string
        labels:
          description: 'Image labels.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        lastModified:
          description: 'Date/time when the function was last modified.

            '
          format: date-time
          type: string
        layers:
          description: 'Image''s filesystem layers. Each layer is a SHA256 digest of the filesystem diff

            See: https://windsock.io/explaining-docker-image-ids/.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        memory:
          description: 'Memory size, in MB, configured for the function.

            '
          format: int64
          type: integer
        missingDistroVulnCoverage:
          description: 'Indicates if the image OS is covered in the IS (true) or not (false).

            '
          type: boolean
        name:
          description: 'Name of the function.

            '
          type: string
        namespaces:
          description: 'k8s namespaces of all the containers running this image.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        osDistro:
          description: 'Name of the OS distribution.

            '
          type: string
        osDistroRelease:
          description: 'OS distribution release.

            '
          type: string
        osDistroVersion:
          description: 'OS distribution version.

            '
          type: string
        packageManager:
          description: 'Indicates if the package manager is installed for the OS.

            '
          type: boolean
        packages:
          description: 'Packages which exist in the image.

            '
          items:
            $ref: '#/components/schemas/shared.Packages'
          type: array
        platform:
          description: 'Platform is the function OS.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        pushTime:
          description: 'PushTime is the image push time to the registry.

            '
          format: date-time
          type: string
        redHatNonRPMImage:
          description: 'RedHatNonRPMImage indicates whether the image is a Red Hat image with non-RPM content.

            '
          type: boolean
        region:
          description: 'Function''s region.

            '
          type: string
        registryNamespace:
          description: 'IBM cloud namespace to which the image belongs.

            '
          type: string
        registryTags:
          description: 'RegistryTags are the tags of the registry this image is stored.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        registryType:
          description: 'RegistryType indicates the registry type where the image is stored.

            '
          type: string
        repoDigests:
          description: 'Digests of the image. Used for content trust (notary). Has one digest per tag.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        repoTag:
          $ref: '#/components/schemas/shared.ImageTag'
        resourceGroupName:
          description: 'Name of the resource group to which the resource belongs (only for Azure).

            '
          type: string
        rhelRepos:
          description: 'RhelRepositories are the (RPM) repositories IDs from which the packages in this image were installed

            Used for matching vulnerabilities by Red Hat CPEs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        rhelReposRelativeURLs:
          description: 'RhelRepositoriesRelativeURLs are the relative URLs of the repositories from which the packages in this image were installed

            Used for matching vulnerabilities by Red Hat CPEs when the repository IDs are not available in the repository-to-cpe mapping file.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        riskFactors:
          $ref: '#/components/schemas/vulnerability.RiskFactors'
        role:
          description: 'AWS execution role.

            '
          type: string
        runtime:
          description: 'Runtime environment for the function (e.g., nodejs).

            '
          type: string
        scanBuildDate:
          description: 'Scanner build date that published the image.

            '
          type: string
        scanTime:
          description: 'Date/time when the scan of the function was performed.

            '
          format: date-time
          type: string
        scanVersion:
          description: 'Scanner version that published the image.

            '
          type: string
        scannerVersion:
          description: 'Scanner version.

            '
          type: string
        secretScanMetrics:
          $ref: '#/components/schemas/secrets.SecretScanMetrics'
        startupBinaries:
          description: 'Binaries which are expected to run when the container is created from this image.

            '
          items:
            $ref: '#/components/schemas/shared.Binary'
          type: array
        status:
          description: 'Status of the function (e.g., running).

            '
          type: string
        tags:
          description: 'Tags associated with the given image.

            '
          items:
            $ref: '#/components/schemas/shared.ImageTag'
          type: array
        timeout:
          description: 'Function execution time at which the function will be terminated.

            '
          format: int64
          type: integer
        topLayer:
          description: 'SHA256 of the image''s last layer that is the last element of the Layers field.

            '
          type: string
        twistlockImage:
          description: 'Indicates if the image is a Twistlock image (true) or not (false).

            '
          type: boolean
        type:
          $ref: '#/components/schemas/shared.ScanType'
        underlyingDistro:
          description: 'UnderlyingDistro is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        underlyingDistroRelease:
          description: 'UnderlyingDistroRelease is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        version:
          description: 'Version of the function.

            '
          type: string
        vulnerabilities:
          description: 'CVE vulnerabilities of the image.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability'
          type: array
        vulnerabilitiesCount:
          description: 'Total number of vulnerabilities.

            '
          type: integer
        vulnerabilityDistribution:
          $ref: '#/components/schemas/vuln.Distribution'
        vulnerabilityRiskScore:
          description: 'Image''s CVE risk score.

            '
          format: float
          type: number
      type: object
    shared.InstalledProducts:
      description: 'InstalledProducts contains data regarding products running in environment

        TODO #34713: Swarm support was deprecated in Joule, remove swarm node/manager boolean (and related compliance) in Lagrange'
      properties:
        agentless:
          description: 'Agentless indicates whether the scan was performed with agentless approach.

            '
          type: boolean
        apache:
          description: 'Apache indicates the apache server version, empty in case apache not running.

            '
          type: string
        awsCloud:
          description: 'AWSCloud indicates whether AWS cloud is used.

            '
          type: boolean
        clusterType:
          $ref: '#/components/schemas/common.ClusterType'
        crio:
          description: 'CRI indicates whether the container runtime is CRI (and not docker).

            '
          type: boolean
        docker:
          description: 'Docker represents the docker daemon version.

            '
          type: string
        dockerEnterprise:
          description: 'DockerEnterprise indicates whether the enterprise version of Docker is installed.

            '
          type: boolean
        hasPackageManager:
          description: 'HasPackageManager indicates whether package manager is installed on the OS.

            '
          type: boolean
        k8sApiServer:
          description: 'K8sAPIServer indicates whether a kubernetes API server is running.

            '
          type: boolean
        k8sControllerManager:
          description: 'K8sControllerManager indicates whether a kubernetes controller manager is running.

            '
          type: boolean
        k8sEtcd:
          description: 'K8sEtcd indicates whether etcd is running.

            '
          type: boolean
        k8sFederationApiServer:
          description: 'K8sFederationAPIServer indicates whether a federation API server is running.

            '
          type: boolean
        k8sFederationControllerManager:
          description: 'K8sFederationControllerManager indicates whether a federation controller manager is running.

            '
          type: boolean
        k8sKubelet:
          description: 'K8sKubelet indicates whether kubelet is running.

            '
          type: boolean
        k8sProxy:
          description: 'K8sProxy indicates whether a kubernetes proxy is running.

            '
          type: boolean
        k8sScheduler:
          description: 'K8sScheduler indicates whether the kubernetes scheduler is running.

            '
          type: boolean
        kubernetes:
          description: 'Kubernetes represents the kubernetes version.

            '
          type: string
        managedClusterVersion:
          description: 'ManagedClusterVersion is the version of the managed Kubernetes service, e.g. AKS/EKS/GKE/etc.

            '
          type: string
        openshift:
          description: 'Openshift indicates whether openshift is deployed.

            '
          type: boolean
        openshiftVersion:
          description: 'OpenshiftVersion represents the running openshift version.

            '
          type: string
        osDistro:
          description: 'OSDistro specifies the os distribution.

            '
          type: string
        serverless:
          description: 'Serverless indicates whether evaluated on a serverless environment.

            '
          type: boolean
        swarmManager:
          description: 'SwarmManager indicates whether a swarm manager is running.

            '
          type: boolean
        swarmNode:
          description: 'SwarmNode indicates whether the node is part of an active swarm.

            '
          type: boolean
      type: object
    int64:
      format: int64
      type: integer
    shared.Package:
      description: Package stores relevant package information
      properties:
        author:
          description: 'Author is the package''s author.

            '
          type: string
        binaryIdx:
          description: 'Indexes of the top binaries which use the package.

            '
          items:
            $ref: '#/components/schemas/int16'
          type: array
        binaryPkgs:
          description: 'Names of the distro binary packages (packages which are built on the source of the package).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        cveCount:
          description: 'Total number of CVEs for this specific package.

            '
          type: integer
        defaultGem:
          description: 'DefaultGem indicates this is a gem default package (and not a bundled package).

            '
          type: boolean
        files:
          description: 'List of package-related files and their hashes. Only included when the appropriate scan option is set.

            '
          items:
            $ref: '#/components/schemas/shared.FileDetails'
          type: array
        functionLayer:
          description: 'ID of the serverless layer in which the package was discovered.

            '
          type: string
        goPkg:
          description: 'GoPkg indicates this is a Go package (and not module).

            '
          type: boolean
        isRPMModule:
          description: 'IsRPMModule indicates whether this package data represents an RPM module.

            '
          type: boolean
        jarIdentifier:
          description: 'JarIdentifier holds an additional identification detail of a JAR package.

            '
          type: string
        layerTime:
          description: 'Image layer to which the package belongs (layer creation time).

            '
          format: int64
          type: integer
        license:
          description: 'License information for the package.

            '
          type: string
        md5:
          description: 'MD5SUM is the md5sum of the package - currently only relevant for go main modules.

            '
          type: string
        name:
          description: 'Name of the package.

            '
          type: string
        originPackageName:
          description: 'OriginPackageName is the name of the third-party origin package.

            '
          type: string
        osPackage:
          description: 'OSPackage indicates that a python/java package was installed as an OS package.

            '
          type: boolean
        path:
          description: 'Full package path (e.g., JAR or Node.js package path).

            '
          type: string
        purl:
          description: 'PURL is a package URL identifier for this package.

            '
          type: string
        rpmModule:
          description: 'RPMModule represents the RPM module in which this package is included.

            '
          type: string
        securityRepoPkg:
          description: 'SecurityRepoPkg determines if this package is available in a security repository.

            '
          type: boolean
        symbols:
          description: 'Symbols contains names of vulnerable functions that are linked in the executable binary, empty if the entire package is vulnerable.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        version:
          description: 'Package version.

            '
          type: string
      type: object
    common.AzureMetadata:
      properties:
        aci:
          $ref: '#/components/schemas/common.ACIMetadata'
        resourceGroup:
          description: '.

            '
          type: string
      type: object
    vulnerability.ExploitKind:
      description: ExploitKind represents the kind of the exploit
      enum:
      - - poc
        - in-the-wild
      type: string
    vulnerability.Exploits:
      description: Exploits represents the exploits data found for a CVE
      items:
        $ref: '#/components/schemas/vulnerability.ExploitData'
      type: array
    vulnerability.VulnerabilityAttribute:
      description: VulnerabilityAttribute represents a specific vulnerability property whose value may come from different sources
      type: integer
    vuln.Vulnerability_2:
      description: Vulnerability is a general schema for vulnerabilities (e.g., for compliance or packages)
      properties:
        applicableRules:
          description: 'Rules applied on the package.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        binaryPkgs:
          description: 'Names of the distro binary package names (packages which are built from the source of the package).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        block:
          description: 'Indicates if the vulnerability has a block effect (true) or not (false).

            '
          type: boolean
        cause:
          description: 'Additional information regarding the root cause for the vulnerability.

            '
          type: string
        cri:
          description: 'Indicates if this is a CRI-specific vulnerability (true) or not (false).

            '
          type: boolean
        custom:
          description: 'Indicates if the vulnerability is a custom vulnerability (e.g., openscap, sandbox) (true) or not (false).

            '
          type: boolean
        cve:
          description: 'CVE ID of the vulnerability (if applied).

            '
          type: string
        cvss:
          description: 'CVSS score of the vulnerability.

            '
          format: float
          type: number
        description:
          description: 'Description of the vulnerability.

            '
          type: string
        discovered:
          description: 'Specifies the time of discovery for the vulnerability.

            '
          format: date-time
          type: string
        exploit:
          $ref: '#/components/schemas/vulnerability.ExploitType'
        exploits:
          $ref: '#/components/schemas/vulnerability.Exploits'
        fixDate:
          description: 'Date/time when the vulnerability was fixed (in Unix time).

            '
          format: int64
          type: integer
        fixLink:
          description: 'Link to the vendor''s fixed-version information.

            '
          type: string
        functionLayer:
          description: 'Specifies the serverless layer ID in which the vulnerability was discovered.

            '
          type: string
        gracePeriodDays:
          description: 'Number of grace days left for a vulnerability, based on the configured grace period. Nil if no block vulnerability rule applies.

            '
          type: integer
        id:
          description: 'ID of the violation.

            '
          type: integer
        layerTime:
          description: 'Date/time of the image layer to which the CVE belongs.

            '
          format: int64
          type: integer
        link:
          description: 'Vendor link to the CVE.

            '
          type: string
        packageName:
          description: 'Name of the package that caused the vulnerability.

            '
          type: string
        packageType:
          $ref: '#/components/schemas/packages.Type'
        packageVersion:
          description: 'Version of the package that caused the vulnerability (or null).

            '
          type: string
        published:
          description: 'Date/time when the vulnerability was published (in Unix time).

            '
          format: int64
          type: integer
        riskFactors:
          $ref: '#/components/schemas/vulnerability.RiskFactors'
        rpmModule:
          description: 'RPMModule specifies the RPM module containing the package affected by this vulnerability.

            '
          type: string
        secret:
          $ref: '#/components/schemas/vuln.Secret'
        severity:
          description: 'Textual representation of the vulnerability''s severity.

            '
          type: string
        status:
          description: 'Vendor status for the vulnerability.

            '
          type: string
        templates:
          description: 'List of templates with which the vulnerability is associated.

            '
          items:
            $ref: '#/components/schemas/vuln.ComplianceTemplate'
          type: array
        text:
          description: 'Description of the violation.

            '
          type: string
        title:
          description: 'Compliance title.

            '
          type: string
        twistlock:
          description: 'Indicates if this is a Twistlock-specific vulnerability (true) or not (false).

            '
          type: boolean
        type:
          $ref: '#/components/schemas/vulnerability.Type'
        vecStr:
          description: 'Textual representation of the metric values used to score the vulnerability.

            '
          type: string
        vulnTagInfos:
          description: 'Tag information for the vulnerability.

            '
          items:
            $ref: '#/components/schemas/vuln.TagInfo'
          type: array
        vulnerabilityDataSources:
          $ref: '#/components/schemas/vulnerability.VulnerabilityDataSources'
        wildfireMalware:
          $ref: '#/components/schemas/vuln.WildFireMalware'
      type: object
    vulnerability.VulnerabilityDataSource:
      description: 'VulnerabilityDataSource identifies the source of a specific vulnerability attribute.

        Example: CVSS from NVD, Severity from RedHat.'
      properties:
        attribute:
          $ref: '#/components/schemas/vulnerability.VulnerabilityAttribute'
        source:
          $ref: '#/components/schemas/vulnerability.VulnerabilitySource'
      type: object
    vulnerability.VulnerabilityDataSources:
      description: VulnerabilityDataSources is a slice of VulnerabilityDataSource that implements the sql.Scanner and driver.Valuer interfaces
      items:
        $ref: '#/components/schemas/vulnerability.VulnerabilityDataSource'
      type: array
    vulnerability.VulnerabilitySource:
      description: VulnerabilitySource represents the authority that provided vulnerability-related data (severity, CVSS, links).
      type: integer
    serverless.FunctionInfo_2:
      description: FunctionInfo contains function information collected during function scan
      properties:
        Secrets:
          description: 'Secrets are paths to embedded secrets inside the image

            Note: capital letter JSON annotation is kept to avoid converting all images for backward-compatibility support.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        _id:
          description: 'ID of the function.

            '
          type: string
        accountID:
          description: 'Cloud account ID.

            '
          type: string
        additionalDistroReleaseData:
          description: 'AdditionalDistroReleaseData contains extra metadata about the distro release (e.g., the "9.6" version for AlmaLinux TuxCare ESU supported image).

            '
          type: string
        allCompliance:
          $ref: '#/components/schemas/vuln.AllCompliance'
        applicationName:
          description: 'Name of the application with which the function is associated.

            '
          type: string
        applications:
          description: 'Products in the image.

            '
          items:
            $ref: '#/components/schemas/vuln.Application'
          type: array
        architecture:
          description: 'Architecture that the function supports.

            '
          type: string
        baseImage:
          description: 'Image’s base image name. Used when filtering the vulnerabilities by base images.

            '
          type: string
        binaries:
          description: 'Binaries in the image.

            '
          items:
            $ref: '#/components/schemas/shared.Binary'
          type: array
        cloudControllerAddress:
          description: 'Address of the TAS cloud controller API.

            '
          type: string
        cloudMetadata:
          $ref: '#/components/schemas/common.CloudMetadata'
        clusterType:
          $ref: '#/components/schemas/common.ClusterType'
        clusters:
          description: 'Cluster names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        collections:
          description: 'Matched function collections.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        complianceDistribution:
          $ref: '#/components/schemas/vuln.Distribution'
        complianceIssues:
          description: 'All the compliance issues.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability_2'
          type: array
        complianceIssuesCount:
          description: 'Number of compliance issues.

            '
          type: integer
        complianceRiskScore:
          description: 'Compliance risk score for the image.

            '
          format: float
          type: number
        compressed:
          description: 'Compressed indicates if this image seems to be compressed - currently only relevant for buildah images.

            '
          type: boolean
        compressedLayerTimes:
          $ref: '#/components/schemas/shared.CompressedLayerTimes'
        creationTime:
          description: 'Specifies the time of creation for the latest version of the image.

            '
          format: date-time
          type: string
        defended:
          description: 'Indicates status of runtime defense. Covers both manually and automatically deployed function defense.

            '
          type: boolean
        defenderLayerARN:
          description: 'Prisma Defender Layer ARN, if it exists.

            '
          type: string
        description:
          description: 'User-provided description of the function.

            '
          type: string
        distro:
          description: 'Full name of the distribution.

            '
          type: string
        ecsClusterName:
          description: 'ECS cluster name.

            '
          type: string
        environment:
          description: 'GCPEnvironment is the function generation - relevant for GCP Cloud Functions.

            '
          type: string
        envvars:
          description: 'Function environment variables.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        err:
          description: 'Description of an error that occurred during the scan.

            '
          type: string
        externalLabels:
          description: 'Kubernetes external labels of all containers running this image.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        files:
          description: 'Files in the container.

            '
          items:
            $ref: '#/components/schemas/shared.FileDetails'
          type: array
        firstScanTime:
          description: 'Specifies the time of the scan for the first version of the image. This time is preserved even after the version update.

            '
          format: date-time
          type: string
        foundSecrets:
          description: 'FoundSecrets are secrets with metadata that were found in the secrets'' scan. Requires json tag for reporting secrets from image scan.

            '
          items:
            $ref: '#/components/schemas/vuln.Secret'
          type: array
        functionLayers:
          description: 'Layer ARNs used by this function.

            '
          items:
            $ref: '#/components/schemas/serverless.LayerInfo'
          type: array
        functionTags:
          description: 'Cloud provider metadata tags.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        handler:
          description: 'Handler is the function handler.

            '
          type: string
        hash:
          description: 'Hash of the function.

            '
          type: string
        history:
          description: 'Docker image history.

            '
          items:
            $ref: '#/components/schemas/shared.ImageHistory'
          type: array
        hostDevices:
          description: 'Map from host network device name to IP address.

            '
          items:
            $ref: '#/components/schemas/common.NetworkDeviceIP'
          type: array
        hostname:
          description: 'Hostname of the scanner.

            '
          type: string
        id:
          description: 'Image ID.

            '
          type: string
        image:
          $ref: '#/components/schemas/shared.Image'
        installedProducts:
          $ref: '#/components/schemas/shared.InstalledProducts_2'
        invocations:
          description: 'Invocations is the function invocation count.

            '
          format: double
          type: number
        isARM64:
          description: 'IsARM64 indicates if the architecture of the image is aarch64.

            '
          type: boolean
        k8sClusterAddr:
          description: 'Endpoint of the Kubernetes API server.

            '
          type: string
        labels:
          description: 'Image labels.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        lastModified:
          description: 'Date/time when the function was last modified.

            '
          format: date-time
          type: string
        layers:
          description: 'Image''s filesystem layers. Each layer is a SHA256 digest of the filesystem diff

            See: https://windsock.io/explaining-docker-image-ids/.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        memory:
          description: 'Memory size, in MB, configured for the function.

            '
          format: int64
          type: integer
        missingDistroVulnCoverage:
          description: 'Indicates if the image OS is covered in the IS (true) or not (false).

            '
          type: boolean
        name:
          description: 'Name of the function.

            '
          type: string
        namespaces:
          description: 'k8s namespaces of all the containers running this image.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        osDistro:
          description: 'Name of the OS distribution.

            '
          type: string
        osDistroRelease:
          description: 'OS distribution release.

            '
          type: string
        osDistroVersion:
          description: 'OS distribution version.

            '
          type: string
        packageManager:
          description: 'Indicates if the package manager is installed for the OS.

            '
          type: boolean
        packages:
          description: 'Packages which exist in the image.

            '
          items:
            $ref: '#/components/schemas/shared.Packages'
          type: array
        platform:
          description: 'Platform is the function OS.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        pushTime:
          description: 'PushTime is the image push time to the registry.

            '
          format: date-time
          type: string
        redHatNonRPMImage:
          description: 'RedHatNonRPMImage indicates whether the image is a Red Hat image with non-RPM content.

            '
          type: boolean
        region:
          description: 'Function''s region.

            '
          type: string
        registryNamespace:
          description: 'IBM cloud namespace to which the image belongs.

            '
          type: string
        registryTags:
          description: 'RegistryTags are the tags of the registry this image is stored.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        registryType:
          description: 'RegistryType indicates the registry type where the image is stored.

            '
          type: string
        repoDigests:
          description: 'Digests of the image. Used for content trust (notary). Has one digest per tag.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        repoTag:
          $ref: '#/components/schemas/shared.ImageTag'
        resourceGroupName:
          description: 'Name of the resource group to which the resource belongs (only for Azure).

            '
          type: string
        rhelRepos:
          description: 'RhelRepositories are the (RPM) repositories IDs from which the packages in this image were installed

            Used for matching vulnerabilities by Red Hat CPEs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        rhelReposRelativeURLs:
          description: 'RhelRepositoriesRelativeURLs are the relative URLs of the repositories from which the packages in this image were installed

            Used for matching vulnerabilities by Red Hat CPEs when the repository IDs are not available in the repository-to-cpe mapping file.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        riskFactors:
          $ref: '#/components/schemas/vulnerability.RiskFactors'
        role:
          description: 'AWS execution role.

            '
          type: string
        runtime:
          description: 'Runtime environment for the function (e.g., nodejs).

            '
          type: string
        scanBuildDate:
          description: 'Scanner build date that published the image.

            '
          type: string
        scanTime:
          description: 'Date/time when the scan of the function was performed.

            '
          format: date-time
          type: string
        scanVersion:
          description: 'Scanner version that published the image.

            '
          type: string
        scannerVersion:
          description: 'Scanner version.

            '
          type: string
        secretScanMetrics:
          $ref: '#/components/schemas/secrets.SecretScanMetrics'
        startupBinaries:
          description: 'Binaries which are expected to run when the container is created from this image.

            '
          items:
            $ref: '#/components/schemas/shared.Binary'
          type: array
        status:
          description: 'Status of the function (e.g., running).

            '
          type: string
        tags:
          description: 'Tags associated with the given image.

            '
          items:
            $ref: '#/components/schemas/shared.ImageTag'
          type: array
        timeout:
          description: 'Function execution time at which the function will be terminated.

            '
          format: int64
          type: integer
        topLayer:
          description: 'SHA256 of the image''s last layer that is the last element of the Layers field.

            '
          type: string
        twistlockImage:
          description: 'Indicates if the image is a Twistlock image (true) or not (false).

            '
          type: boolean
        type:
          $ref: '#/components/schemas/shared.ScanType'
        underlyingDistro:
          description: 'UnderlyingDistro is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        underlyingDistroRelease:
          description: 'UnderlyingDistroRelease is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        version:
          description: 'Version of the function.

            '
          type: string
        vulnerabilities:
          description: 'CVE vulnerabilities of the image.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability_2'
          type: array
        vulnerabilitiesCount:
          description: 'Total number of vulnerabilities.

            '
          type: integer
        vulnerabilityDistribution:
          $ref: '#/components/schemas/vuln.Distribution'
        vulnerabilityRiskScore:
          description: 'Image''s CVE risk score.

            '
          format: float
          type: number
      type: object
    shared.InstalledProducts_2:
      description: 'InstalledProducts contains data regarding products running in environment

        TODO #34713: Swarm support was deprecated in Joule, remove swarm node/manager boolean (and related compliance) in Lagrange'
      properties:
        agentless:
          description: 'Agentless indicates whether the scan was performed with agentless approach.

            '
          type: boolean
        apache:
          description: 'Apache indicates the apache server version, empty in case apache not running.

            '
          type: string
        awsCloud:
          description: 'AWSCloud indicates whether AWS cloud is used.

            '
          type: boolean
        clusterType:
          $ref: '#/components/schemas/common.ClusterType'
        crio:
          description: 'CRI indicates whether the container runtime is CRI (and not docker).

            '
          type: boolean
        distroName:
          description: 'DistroName specifies the distribution name.

            '
          type: string
        docker:
          description: 'Docker represents the docker daemon version.

            '
          type: string
        dockerEnterprise:
          description: 'DockerEnterprise indicates whether the enterprise version of Docker is installed.

            '
          type: boolean
        hasPackageManager:
          description: 'HasPackageManager indicates whether package manager is installed on the OS.

            '
          type: boolean
        k8sApiServer:
          description: 'K8sAPIServer indicates whether a kubernetes API server is running.

            '
          type: boolean
        k8sControllerManager:
          description: 'K8sControllerManager indicates whether a kubernetes controller manager is running.

            '
          type: boolean
        k8sEtcd:
          description: 'K8sEtcd indicates whether etcd is running.

            '
          type: boolean
        k8sFederationApiServer:
          description: 'K8sFederationAPIServer indicates whether a federation API server is running.

            '
          type: boolean
        k8sFederationControllerManager:
          description: 'K8sFederationControllerManager indicates whether a federation controller manager is running.

            '
          type: boolean
        k8sKubelet:
          description: 'K8sKubelet indicates whether kubelet is running.

            '
          type: boolean
        k8sProxy:
          description: 'K8sProxy indicates whether a kubernetes proxy is running.

            '
          type: boolean
        k8sScheduler:
          description: 'K8sScheduler indicates whether the kubernetes scheduler is running.

            '
          type: boolean
        kubernetes:
          description: 'Kubernetes represents the kubernetes version.

            '
          type: string
        managedClusterVersion:
          description: 'ManagedClusterVersion is the version of the managed Kubernetes service, e.g. AKS/EKS/GKE/etc.

            '
          type: string
        openshift:
          description: 'Openshift indicates whether openshift is deployed.

            '
          type: boolean
        openshiftVersion:
          description: 'OpenshiftVersion represents the running openshift version.

            '
          type: string
        osDistro:
          description: 'OSDistro specifies the os distribution.

            '
          type: string
        serverless:
          description: 'Serverless indicates whether evaluated on a serverless environment.

            '
          type: boolean
        swarmManager:
          description: 'SwarmManager indicates whether a swarm manager is running.

            '
          type: boolean
        swarmNode:
          description: 'SwarmNode indicates whether the node is part of an active swarm.

            '
          type: boolean
      type: object
    shared.Package_2:
      description: Package stores relevant package information
      properties:
        author:
          description: 'Author is the package''s author.

            '
          type: string
        binaryIdx:
          description: 'Indexes of the top binaries which use the package.

            '
          items:
            $ref: '#/components/schemas/int16'
          type: array
        binaryPkgs:
          description: 'Names of the distro binary packages (packages which are built on the source of the package).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        cveCount:
          description: 'Total number of CVEs for this specific package.

            '
          type: integer
        defaultGem:
          description: 'DefaultGem indicates this is a gem default package (and not a bundled package).

            '
          type: boolean
        files:
          description: 'List of package-related files and their hashes. Only included when the appropriate scan option is set.

            '
          items:
            $ref: '#/components/schemas/shared.FileDetails'
          type: array
        functionLayer:
          description: 'ID of the serverless layer in which the package was discovered.

            '
          type: string
        goPkg:
          description: 'GoPkg indicates this is a Go package (and not module).

            '
          type: boolean
        jarIdentifier:
          description: 'JarIdentifier holds an additional identification detail of a JAR package.

            '
          type: string
        layerTime:
          description: 'Image layer to which the package belongs (layer creation time).

            '
          format: int64
          type: integer
        license:
          description: 'License information for the package.

            '
          type: string
        md5:
          description: 'MD5SUM is the md5sum of the package - currently only relevant for go main modules and python packages.

            '
          type: string
        name:
          description: 'Name of the package.

            '
          type: string
        originPackageName:
          description: 'OriginPackageName is the name of the third-party origin package.

            '
          type: string
        osPackage:
          description: 'OSPackage indicates that a python/java package was installed as an OS package.

            '
          type: boolean
        path:
          description: 'Full package path (e.g., JAR or Node.js package path).

            '
          type: string
        purl:
          description: 'PURL is a package URL identifier for this package.

            '
          type: string
        rpmModule:
          description: 'RPMModule represents the RPM module in which this package is included.

            '
          type: string
        securityRepoPkg:
          description: 'SecurityRepoPkg determines if this package is available in a security repository.

            '
          type: boolean
        symbols:
          description: 'Symbols contains names of vulnerable functions that are linked in the executable binary, empty if the entire package is vulnerable.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        version:
          description: 'Package version.

            '
          type: string
      type: object
    vuln.Vulnerability_3:
      description: Vulnerability is a general schema for vulnerabilities (e.g., for compliance or packages)
      properties:
        applicableRules:
          description: 'Rules applied on the package.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        binaryPkgs:
          description: 'Names of the distro binary package names (packages which are built from the source of the package).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        block:
          description: 'Indicates if the vulnerability has a block effect (true) or not (false).

            '
          type: boolean
        cause:
          description: 'Additional information regarding the root cause for the vulnerability.

            '
          type: string
        cri:
          description: 'Indicates if this is a CRI-specific vulnerability (true) or not (false).

            '
          type: boolean
        custom:
          description: 'Indicates if the vulnerability is a custom vulnerability (e.g., openscap, sandbox) (true) or not (false).

            '
          type: boolean
        cve:
          description: 'CVE ID of the vulnerability (if applied).

            '
          type: string
        cvss:
          description: 'CVSS score of the vulnerability.

            '
          format: float
          type: number
        description:
          description: 'Description of the vulnerability.

            '
          type: string
        discovered:
          description: 'Specifies the time of discovery for the vulnerability.

            '
          format: date-time
          type: string
        exploit:
          $ref: '#/components/schemas/vulnerability.ExploitType'
        exploits:
          $ref: '#/components/schemas/vulnerability.Exploits'
        fixDate:
          description: 'Date/time when the vulnerability was fixed (in Unix time).

            '
          format: int64
          type: integer
        fixLink:
          description: 'Link to the vendor''s fixed-version information.

            '
          type: string
        functionLayer:
          description: 'Specifies the serverless layer ID in which the vulnerability was discovered.

            '
          type: string
        gracePeriodDays:
          description: 'Number of grace days left for a vulnerability, based on the configured grace period. Nil if no block vulnerability rule applies.

            '
          type: integer
        id:
          description: 'ID of the violation.

            '
          type: integer
        layerTime:
          description: 'Date/time of the image layer to which the CVE belongs.

            '
          format: int64
          type: integer
        link:
          description: 'Vendor link to the CVE.

            '
          type: string
        packageName:
          description: 'Name of the package that caused the vulnerability.

            '
          type: string
        packageType:
          $ref: '#/components/schemas/packages.Type'
        packageVersion:
          description: 'Version of the package that caused the vulnerability (or null).

            '
          type: string
        published:
          description: 'Date/time when the vulnerability was published (in Unix time).

            '
          format: int64
          type: integer
        riskFactors:
          $ref: '#/components/schemas/vulnerability.RiskFactors'
        rpmModule:
          description: 'RPMModule specifies the RPM module containing the package affected by this vulnerability.

            '
          type: string
        secret:
          $ref: '#/components/schemas/vuln.Secret'
        severity:
          description: 'Textual representation of the vulnerability''s severity.

            '
          type: string
        status:
          description: 'Vendor status for the vulnerability.

            '
          type: string
        templates:
          description: 'List of templates with which the vulnerability is associated.

            '
          items:
            $ref: '#/components/schemas/vuln.ComplianceTemplate'
          type: array
        text:
          description: 'Description of the violation.

            '
          type: string
        title:
          description: 'Compliance title.

            '
          type: string
        twistlock:
          description: 'Indicates if this is a Twistlock-specific vulnerability (true) or not (false).

            '
          type: boolean
        type:
          $ref: '#/components/schemas/vulnerability.Type'
        vecStr:
          description: 'Textual representation of the metric values used to score the vulnerability.

            '
          type: string
        vulnTagInfos:
          description: 'Tag information for the vulnerability.

            '
          items:
            $ref: '#/components/schemas/vuln.TagInfo'
          type: array
        vulnerabilityDataSources:
          $ref: '#/components/schemas/vulnerability.VulnerabilityDataSources'
        wildfireMalware:
          $ref: '#/components/schemas/vuln.WildFireMalware'
      type: object
    serverless.FunctionInfo_3:
      description: FunctionInfo contains function information collected during function scan
      properties:
        Secrets:
          description: 'Secrets are paths to embedded secrets inside the image

            Note: capital letter JSON annotation is kept to avoid converting all images for backward-compatibility support.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        _id:
          description: 'ID of the function.

            '
          type: string
        accountID:
          description: 'Cloud account ID.

            '
          type: string
        additionalDistroReleaseData:
          description: 'AdditionalDistroReleaseData contains extra metadata about the distro release (e.g., the "9.6" version for AlmaLinux TuxCare ESU supported image).

            '
          type: string
        allCompliance:
          $ref: '#/components/schemas/vuln.AllCompliance'
        applicationName:
          description: 'Name of the application with which the function is associated.

            '
          type: string
        applications:
          description: 'Products in the image.

            '
          items:
            $ref: '#/components/schemas/vuln.Application'
          type: array
        architecture:
          description: 'Architecture that the function supports.

            '
          type: string
        baseImage:
          description: 'Image’s base image name. Used when filtering the vulnerabilities by base images.

            '
          type: string
        binaries:
          description: 'Binaries in the image.

            '
          items:
            $ref: '#/components/schemas/shared.Binary'
          type: array
        cloudControllerAddress:
          description: 'Address of the TAS cloud controller API.

            '
          type: string
        cloudMetadata:
          $ref: '#/components/schemas/common.CloudMetadata'
        clusterType:
          $ref: '#/components/schemas/common.ClusterType'
        clusters:
          description: 'Cluster names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        collections:
          description: 'Matched function collections.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        complianceDistribution:
          $ref: '#/components/schemas/vuln.Distribution'
        complianceIssues:
          description: 'All the compliance issues.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability_3'
          type: array
        complianceIssuesCount:
          description: 'Number of compliance issues.

            '
          type: integer
        complianceRiskScore:
          description: 'Compliance risk score for the image.

            '
          format: float
          type: number
        compressed:
          description: 'Compressed indicates if this image seems to be compressed - currently only relevant for buildah images.

            '
          type: boolean
        compressedLayerTimes:
          $ref: '#/components/schemas/shared.CompressedLayerTimes'
        creationTime:
          description: 'Specifies the time of creation for the latest version of the image.

            '
          format: date-time
          type: string
        defended:
          description: 'Indicates status of runtime defense. Covers both manually and automatically deployed function defense.

            '
          type: boolean
        defenderLayerARN:
          description: 'Prisma Defender Layer ARN, if it exists.

            '
          type: string
        description:
          description: 'User-provided description of the function.

            '
          type: string
        distro:
          description: 'Full name of the distribution.

            '
          type: string
        ecsClusterName:
          description: 'ECS cluster name.

            '
          type: string
        environment:
          description: 'GCPEnvironment is the function generation - relevant for GCP Cloud Functions.

            '
          type: string
        envvars:
          description: 'Function environment variables.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        err:
          description: 'Description of an error that occurred during the scan.

            '
          type: string
        externalLabels:
          description: 'Kubernetes external labels of all containers running this image.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        files:
          description: 'Files in the container.

            '
          items:
            $ref: '#/components/schemas/shared.FileDetails'
          type: array
        firstScanTime:
          description: 'Specifies the time of the scan for the first version of the image. This time is preserved even after the version update.

            '
          format: date-time
          type: string
        foundSecrets:
          description: 'FoundSecrets are secrets with metadata that were found in the secrets'' scan. Requires json tag for reporting secrets from image scan.

            '
          items:
            $ref: '#/components/schemas/vuln.Secret'
          type: array
        functionLayers:
          description: 'Layer ARNs used by this function.

            '
          items:
            $ref: '#/components/schemas/serverless.LayerInfo'
          type: array
        functionTags:
          description: 'Cloud provider metadata tags.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        handler:
          description: 'Handler is the function handler.

            '
          type: string
        hash:
          description: 'Hash of the function.

            '
          type: string
        history:
          description: 'Docker image history.

            '
          items:
            $ref: '#/components/schemas/shared.ImageHistory'
          type: array
        hostDevices:
          description: 'Map from host network device name to IP address.

            '
          items:
            $ref: '#/components/schemas/common.NetworkDeviceIP'
          type: array
        hostname:
          description: 'Hostname of the scanner.

            '
          type: string
        id:
          description: 'Image ID.

            '
          type: string
        image:
          $ref: '#/components/schemas/shared.Image'
        installedProducts:
          $ref: '#/components/schemas/shared.InstalledProducts_3'
        invocations:
          description: 'Invocations is the function invocation count.

            '
          format: double
          type: number
        isARM64:
          description: 'IsARM64 indicates if the architecture of the image is aarch64.

            '
          type: boolean
        k8sClusterAddr:
          description: 'Endpoint of the Kubernetes API server.

            '
          type: string
        labels:
          description: 'Image labels.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        lastModified:
          description: 'Date/time when the function was last modified.

            '
          format: date-time
          type: string
        layers:
          description: 'Image''s filesystem layers. Each layer is a SHA256 digest of the filesystem diff

            See: https://windsock.io/explaining-docker-image-ids/.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        memory:
          description: 'Memory size, in MB, configured for the function.

            '
          format: int64
          type: integer
        missingDistroVulnCoverage:
          description: 'Indicates if the image OS is covered in the IS (true) or not (false).

            '
          type: boolean
        name:
          description: 'Name of the function.

            '
          type: string
        namespaces:
          description: 'k8s namespaces of all the containers running this image.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        osDistro:
          description: 'Name of the OS distribution.

            '
          type: string
        osDistroRelease:
          description: 'OS distribution release.

            '
          type: string
        osDistroVersion:
          description: 'OS distribution version.

            '
          type: string
        packageManager:
          description: 'Indicates if the package manager is installed for the OS.

            '
          type: boolean
        packages:
          description: 'Packages which exist in the image.

            '
          items:
            $ref: '#/components/schemas/shared.Packages'
          type: array
        platform:
          description: 'Platform is the function OS.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        pushTime:
          description: 'PushTime is the image push time to the registry.

            '
          format: date-time
          type: string
        redHatNonRPMImage:
          description: 'RedHatNonRPMImage indicates whether the image is a Red Hat image with non-RPM content.

            '
          type: boolean
        region:
          description: 'Function''s region.

            '
          type: string
        registryNamespace:
          description: 'IBM cloud namespace to which the image belongs.

            '
          type: string
        registryTags:
          description: 'RegistryTags are the tags of the registry this image is stored.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        registryType:
          description: 'RegistryType indicates the registry type where the image is stored.

            '
          type: string
        repoDigests:
          description: 'Digests of the image. Used for content trust (notary). Has one digest per tag.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        repoTag:
          $ref: '#/components/schemas/shared.ImageTag'
        resourceGroupName:
          description: 'Name of the resource group to which the resource belongs (only for Azure).

            '
          type: string
        rhelRepos:
          description: 'RhelRepositories are the (RPM) repositories IDs from which the packages in this image were installed

            Used for matching vulnerabilities by Red Hat CPEs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        rhelReposRelativeURLs:
          description: 'RhelRepositoriesRelativeURLs are the relative URLs of the repositories from which the packages in this image were installed

            Used for matching vulnerabilities by Red Hat CPEs when the repository IDs are not available in the repository-to-cpe mapping file.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        riskFactors:
          $ref: '#/components/schemas/vulnerability.RiskFactors'
        role:
          description: 'AWS execution role.

            '
          type: string
        runtime:
          description: 'Runtime environment for the function (e.g., nodejs).

            '
          type: string
        scanBuildDate:
          description: 'Scanner build date that published the image.

            '
          type: string
        scanTime:
          description: 'Date/time when the scan of the function was performed.

            '
          format: date-time
          type: string
        scanVersion:
          description: 'Scanner version that published the image.

            '
          type: string
        scannerVersion:
          description: 'Scanner version.

            '
          type: string
        secretScanMetrics:
          $ref: '#/components/schemas/secrets.SecretScanMetrics'
        startupBinaries:
          description: 'Binaries which are expected to run when the container is created from this image.

            '
          items:
            $ref: '#/components/schemas/shared.Binary'
          type: array
        status:
          description: 'Status of the function (e.g., running).

            '
          type: string
        tags:
          description: 'Tags associated with the given image.

            '
          items:
            $ref: '#/components/schemas/shared.ImageTag'
          type: array
        timeout:
          description: 'Function execution time at which the function will be terminated.

            '
          format: int64
          type: integer
        topLayer:
          description: 'SHA256 of the image''s last layer that is the last element of the Layers field.

            '
          type: string
        twistlockImage:
          description: 'Indicates if the image is a Twistlock image (true) or not (false).

            '
          type: boolean
        type:
          $ref: '#/components/schemas/shared.ScanType'
        underlyingDistro:
          description: 'UnderlyingDistro is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        underlyingDistroRelease:
          description: 'UnderlyingDistroRelease is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        version:
          description: 'Version of the function.

            '
          type: string
        vulnerabilities:
          description: 'CVE vulnerabilities of the image.

            '
          items:
            $ref: '#/components/schemas/vuln.Vulnerability_3'
          type: array
        vulnerabilitiesCount:
          description: 'Total number of vulnerabilities.

            '
          type: integer
        vulnerabilityDistribution:
          $ref: '#/components/schemas/vuln.Distribution'
        vulnerabilityRiskScore:
          description: 'Image''s CVE risk score.

            '
          format: float
          type: number
      type: object
    shared.InstalledProducts_3:
      description: 'InstalledProducts contains data regarding products running in environment

        TODO #34713: Swarm support was deprecated in Joule, remove swarm node/manager boolean (and related compliance) in Lagrange'
      properties:
        agentless:
          description: 'Agentless indicates whether the scan was performed with agentless approach.

            '
          type: boolean
        apache:
          description: 'Apache indicates the apache server version, empty in case apache not running.

            '
          type: string
        awsCloud:
          description: 'AWSCloud indicates whether AWS cloud is used.

            '
          type: boolean
        clusterType:
          $ref: '#/components/schemas/common.ClusterType'
        crio:
          description: 'CRI indicates whether the container runtime is CRI (and not docker).

            '
          type: boolean
        distroName:
          description: 'DistroName specifies the distribution name.

            '
          type: string
        docker:
          description: 'Docker represents the docker daemon version.

            '
          type: string
        dockerEnterprise:
          description: 'DockerEnterprise indicates whether the enterprise version of Docker is installed.

            '
          type: boolean
        hasPackageManager:
          description: 'HasPackageManager indicates whether package manager is installed on the OS.

            '
          type: boolean
        k8sApiServer:
          description: 'K8sAPIServer indicates whether a kubernetes API server is running.

            '
          type: boolean
        k8sControllerManager:
          description: 'K8sControllerManager indicates whether a kubernetes controller manager is running.

            '
          type: boolean
        k8sEtcd:
          description: 'K8sEtcd indicates whether etcd is running.

            '
          type: boolean
        k8sFederationApiServer:
          description: 'K8sFederationAPIServer indicates whether a federation API server is running.

            '
          type: boolean
        k8sFederationControllerManager:
          description: 'K8sFederationControllerManager indicates whether a federation controller manager is running.

            '
          type: boolean
        k8sKubelet:
          description: 'K8sKubelet indicates whether kubelet is running.

            '
          type: boolean
        k8sProxy:
          description: 'K8sProxy indicates whether a kubernetes proxy is running.

            '
          type: boolean
        k8sScheduler:
          description: 'K8sScheduler indicates whether the kubernetes scheduler is running.

            '
          type: boolean
        kubernetes:
          description: 'Kubernetes represents the kubernetes version.

            '
          type: string
        managedClusterVersion:
          description: 'ManagedClusterVersion is the version of the managed Kubernetes service, e.g. AKS/EKS/GKE/etc.

            '
          type: string
        openshift:
          description: 'Openshift indicates whether openshift is deployed.

            '
          type: boolean
        openshiftVersion:
          description: 'OpenshiftVersion represents the running openshift version.

            '
          type: string
        osDistro:
          description: 'OSDistro specifies the os distribution.

            '
          type: string
        serverless:
          description: 'Serverless indicates whether evaluated on a serverless environment.

            '
          type: boolean
        swarmManager:
          description: 'SwarmManager indicates whether a swarm manager is running.

            '
          type: boolean
        swarmNode:
          description: 'SwarmNode indicates whether the node is part of an active swarm.

            '
          type: boolean
      type: object
    shared.Package_3:
      description: Package stores relevant package information
      properties:
        author:
          description: 'Author is the package''s author.

            '
          type: string
        binaryIdx:
          description: 'Indexes of the top binaries which use the package.

            '
          items:
            $ref: '#/components/schemas/int16'
          type: array
        binaryPkgs:
          description: 'Names of the distro binary packages (packages which are built on the source of the package).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        cveCount:
          description: 'Total number of CVEs for this specific package.

            '
          type: integer
        defaultGem:
          description: 'DefaultGem indicates this is a gem default package (and not a bundled package).

            '
          type: boolean
        files:
          description: 'List of package-related files and their hashes. Only included when the appropriate scan option is set.

            '
          items:
            $ref: '#/components/schemas/shared.FileDetails'
          type: array
        functionLayer:
          description: 'ID of the serverless layer in which the package was discovered.

            '
          type: string
        goPkg:
          description: 'GoPkg indicates this is a Go package (and not module).

            '
          type: boolean
        jarIdentifier:
          description: 'JarIdentifier holds an additional identification detail of a JAR package.

            '
          type: string
        layerTime:
          description: 'Image layer to which the package belongs (layer creation time).

            '
          format: int64
          type: integer
        license:
          description: 'License information for the package.

            '
          type: string
        md5:
          description: 'MD5SUM is the md5sum of the package - currently only relevant for go main modules and python packages.

            '
          type: string
        name:
          description: 'Name of the package.

            '
          type: string
        originPackageName:
          description: 'OriginPackageName is the name of the third-party origin package.

            '
          type: string
        osPackage:
          description: 'OSPackage indicates that a python/java package was installed as an OS package.

            '
          type: boolean
        path:
          description: 'Full package path (e.g., JAR or Node.js package path).

            '
          type: string
        purl:
          description: 'PURL is a package URL identifier for this package.

            '
          type: string
        rpmModule:
          description: 'RPMModule represents the RPM module in which this package is included.

            '
          type: string
        securityRepoPkg:
          description: 'SecurityRepoPkg determines if this package is available in a security repository.

            '
          type: boolean
        symbols:
          description: 'Symbols contains names of vulnerable functions that are linked in the executable binary, empty if the entire package is vulnerable.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        version:
          description: 'Package version.

            '
          type: string
      type: object
x-refined-from:
- palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json
- palo-alto-compute-openapi-34-04-145-sh-openapi.json
- palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json
- palo-alto-cwpp-openapi-34-04-145-saas-openapi.json