{ "eventId": "6d2d1b77-f3c3-4f70-8a9d-6f2d0c8801ab", "kind": "scanner.event.report.ready", "version": 1, "tenant": "tenant-alpha", "occurredAt": "2025-10-19T12:34:56Z", "recordedAt": "2025-10-19T12:34:57Z", "source": "scanner.webservice", "idempotencyKey": "scanner.event.report.ready:tenant-alpha:report-abc", "correlationId": "report-abc", "traceId": "0af7651916cd43dd8448eb211c80319c", "spanId": "b7ad6b7169203331", "scope": { "namespace": "acme/edge", "repo": "api", "digest": "sha256:feedface" }, "attributes": { "reportId": "report-abc", "policyRevisionId": "rev-42", "policyDigest": "digest-123", "verdict": "blocked" }, "payload": { "reportId": "report-abc", "scanId": "report-abc", "imageDigest": "sha256:feedface", "generatedAt": "2025-10-19T12:34:56Z", "verdict": "fail", "summary": { "total": 1, "blocked": 1, "warned": 0, "ignored": 0, "quieted": 0 }, "delta": { "newCritical": 1, "kev": [ "CVE-2024-9999" ] }, "quietedFindingCount": 0, "policy": { "digest": "digest-123", "revisionId": "rev-42" }, "links": { "ui": "https://scanner.example/ui/reports/report-abc", "report": "https://scanner.example/api/v1/reports/report-abc", "policy": "https://scanner.example/api/v1/policy/revisions/rev-42", "attestation": "https://scanner.example/ui/attestations/report-abc" }, "dsse": { "payloadType": "application/vnd.stellaops.report+json", "payload": "eyJyZXBvcnRJZCI6InJlcG9ydC1hYmMiLCJpbWFnZURpZ2VzdCI6InNoYTI1NjpmZWVkZmFjZSIsImdlbmVyYXRlZEF0IjoiMjAyNS0xMC0xOVQxMjozNDo1NiswMDowMCIsInZlcmRpY3QiOiJibG9ja2VkIiwicG9saWN5Ijp7InJldmlzaW9uSWQiOiJyZXYtNDIiLCJkaWdlc3QiOiJkaWdlc3QtMTIzIn0sInN1bW1hcnkiOnsidG90YWwiOjEsImJsb2NrZWQiOjEsIndhcm5lZCI6MCwiaWdub3JlZCI6MCwicXVpZXRlZCI6MH0sInZlcmRpY3RzIjpbeyJmaW5kaW5nSWQiOiJmaW5kaW5nLTEiLCJzdGF0dXMiOiJCbG9ja2VkIiwic2NvcmUiOjQ3LjUsInNvdXJjZVRydXN0IjoiTlZEIiwicmVhY2hhYmlsaXR5IjoicnVudGltZSJ9XSwiaXNzdWVzIjpbXX0=", "signatures": [ { "keyId": "test-key", "algorithm": "hs256", "signature": "signature-value" } ] }, "report": { "reportId": "report-abc", "generatedAt": "2025-10-19T12:34:56Z", "imageDigest": "sha256:feedface", "policy": { "digest": "digest-123", "revisionId": "rev-42" }, "summary": { "total": 1, "blocked": 1, "warned": 0, "ignored": 0, "quieted": 0 }, "verdict": "blocked", "verdicts": [ { "findingId": "finding-1", "status": "Blocked", "score": 47.5, "sourceTrust": "NVD", "reachability": "runtime" } ], "issues": [] } } }