ExposedSecretReport
aquasecurity.github.io / v1alpha1
apiVersion: aquasecurity.github.io/v1alpha1
kind: ExposedSecretReport
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
report object required
Report is the actual exposed secret report data.
artifact object required
Artifact represents a standalone, executable package of software that includes everything needed to
run an application.
digest
string
Digest is a unique and immutable identifier of an Artifact.
mimeType
string
MimeType represents a type and format of an Artifact.
repository
string
Repository is the name of the repository in the Artifact registry.
tag
string
Tag is a mutable, human-readable string used to identify an Artifact.
registry object
Registry is the registry the Artifact was pulled from.
server
string
Server the FQDN of registry server.
scanner object required
Scanner is the scanner that generated this report.
name
string required
Name the name of the scanner.
vendor
string required
Vendor the name of the vendor providing the scanner.
version
string required
Version the version of the scanner.
secrets []object required
Exposed secrets is a list of passwords, api keys, tokens and others items found in the Artifact.
category
string required
match
string required
Match where the exposed rule matched.
ruleID
string required
RuleID is rule the identifier.
severity
string required
Severity level of a vulnerability or a configuration audit check.
enum:
CRITICAL, HIGH, MEDIUM, LOW
target
string required
Target is where the exposed secret was found.
title
string required
summary object required
Summary is the exposed secrets counts grouped by Severity.
criticalCount
integer required
CriticalCount is the number of exposed secrets with Critical Severity.
minimum:
0
highCount
integer required
HighCount is the number of exposed secrets with High Severity.
minimum:
0
lowCount
integer required
LowCount is the number of exposed secrets with Low Severity.
minimum:
0
mediumCount
integer required
MediumCount is the number of exposed secrets with Medium Severity.
minimum:
0
updateTimestamp
string required
UpdateTimestamp is a timestamp representing the server time in UTC when this report was updated.
format:
date-timeNo matches. Try .report.artifact for an exact path