ClusterComplianceReport v1alpha1 — aquasecurity.github.io

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

metadata object

spec object

ReportSpec represent the compliance specification

compliance object required

controls []object required

Control represent the cps controls data and mapping checks

checks []object

id string required

id define the check id as produced by scanner

commands []object

id string required

id define the commands id

defaultStatus string

define the default value for check status in case resource not found

enum: PASS, WARN, FAIL

description string

id string required

id define the control check id

name string required

severity string required

define the severity of the control

enum: CRITICAL, HIGH, MEDIUM, LOW, UNKNOWN

description string required

id string required

platform string required

relatedResources []string required

title string required

type string required

version string required

cron string required

cron define the intervals for report generation

pattern:

^(((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){1}|(([1-5]{1}){1}([0-9]{1}){1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){...

^(((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){1}|(([1-5]{1}){1}([0-9]{1}){1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([0-9]{1}){1}|(([1]{1}){1}([0-9]{1}){1}){1}|([2]{1}){1}([0-3]{1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([1-9]{1}){1}|(([1-2]{1}){1}([0-9]{1}){1}){1}|([3]{1}){1}([0-1]{1}){1}))) ((([\*]{1}){1})|((\*\/){0,1}(([1-9]{1}){1}|(([1-2]{1}){1}([0-9]{1}){1}){1}|([3]{1}){1}([0-1]{1}){1}))|(jan|feb|mar|apr|may|jun|jul|aug|sep|okt|nov|dec)) ((([\*]{1}){1})|((\*\/){0,1}(([0-7]{1}){1}))|(sun|mon|tue|wed|thu|fri|sat)))$

reportType string required

enum: summary, all

status object

detailReport object

ComplianceReport represents a kubernetes scan report

description string

id string

relatedVersion []string

results []object

checks []object required

category string

checkID string required

description string

messages []string

remediation string

Remediation provides description or links to external resources to remediate failing check.

severity string required

Severity level of a vulnerability or a configuration audit check.

success boolean required

target string

title string

description string

id string

name string

severity string

status string

title string

version string

summary object

failCount integer

passCount integer

summaryReport object

SummaryReport represents a kubernetes scan report with consolidated findings

controlCheck []object

id string

name string

severity string

totalFail integer

id string

title string

updateTimestamp string required

format: date-time