799f787de2
- Implemented PolicyDslValidator with command-line options for strict mode and JSON output. - Created PolicySchemaExporter to generate JSON schemas for policy-related models. - Developed PolicySimulationSmoke tool to validate policy simulations against expected outcomes. - Added project files and necessary dependencies for each tool. - Ensured proper error handling and usage instructions across tools.
94 lines
2.8 KiB
JSON
94 lines
2.8 KiB
JSON
{
|
|
"eventId": "6d2d1b77-f3c3-4f70-8a9d-6f2d0c8801ab",
|
|
"kind": "scanner.event.report.ready",
|
|
"version": 1,
|
|
"tenant": "tenant-alpha",
|
|
"occurredAt": "2025-10-19T12:34:56Z",
|
|
"recordedAt": "2025-10-19T12:34:57Z",
|
|
"source": "scanner.webservice",
|
|
"idempotencyKey": "scanner.event.report.ready:tenant-alpha:report-abc",
|
|
"correlationId": "report-abc",
|
|
"traceId": "0af7651916cd43dd8448eb211c80319c",
|
|
"spanId": "b7ad6b7169203331",
|
|
"scope": {
|
|
"namespace": "acme/edge",
|
|
"repo": "api",
|
|
"digest": "sha256:feedface"
|
|
},
|
|
"attributes": {
|
|
"reportId": "report-abc",
|
|
"policyRevisionId": "rev-42",
|
|
"policyDigest": "digest-123",
|
|
"verdict": "blocked"
|
|
},
|
|
"payload": {
|
|
"reportId": "report-abc",
|
|
"scanId": "report-abc",
|
|
"imageDigest": "sha256:feedface",
|
|
"generatedAt": "2025-10-19T12:34:56Z",
|
|
"verdict": "fail",
|
|
"summary": {
|
|
"total": 1,
|
|
"blocked": 1,
|
|
"warned": 0,
|
|
"ignored": 0,
|
|
"quieted": 0
|
|
},
|
|
"delta": {
|
|
"newCritical": 1,
|
|
"kev": [
|
|
"CVE-2024-9999"
|
|
]
|
|
},
|
|
"quietedFindingCount": 0,
|
|
"policy": {
|
|
"digest": "digest-123",
|
|
"revisionId": "rev-42"
|
|
},
|
|
"links": {
|
|
"ui": "https://scanner.example/ui/reports/report-abc",
|
|
"report": "https://scanner.example/api/v1/reports/report-abc",
|
|
"policy": "https://scanner.example/api/v1/policy/revisions/rev-42",
|
|
"attestation": "https://scanner.example/ui/attestations/report-abc"
|
|
},
|
|
"dsse": {
|
|
"payloadType": "application/vnd.stellaops.report+json",
|
|
"payload": "eyJyZXBvcnRJZCI6InJlcG9ydC1hYmMiLCJpbWFnZURpZ2VzdCI6InNoYTI1NjpmZWVkZmFjZSIsImdlbmVyYXRlZEF0IjoiMjAyNS0xMC0xOVQxMjozNDo1NiswMDowMCIsInZlcmRpY3QiOiJibG9ja2VkIiwicG9saWN5Ijp7InJldmlzaW9uSWQiOiJyZXYtNDIiLCJkaWdlc3QiOiJkaWdlc3QtMTIzIn0sInN1bW1hcnkiOnsidG90YWwiOjEsImJsb2NrZWQiOjEsIndhcm5lZCI6MCwiaWdub3JlZCI6MCwicXVpZXRlZCI6MH0sInZlcmRpY3RzIjpbeyJmaW5kaW5nSWQiOiJmaW5kaW5nLTEiLCJzdGF0dXMiOiJCbG9ja2VkIiwic2NvcmUiOjQ3LjUsInNvdXJjZVRydXN0IjoiTlZEIiwicmVhY2hhYmlsaXR5IjoicnVudGltZSJ9XSwiaXNzdWVzIjpbXX0=",
|
|
"signatures": [
|
|
{
|
|
"keyId": "test-key",
|
|
"algorithm": "hs256",
|
|
"signature": "signature-value"
|
|
}
|
|
]
|
|
},
|
|
"report": {
|
|
"reportId": "report-abc",
|
|
"generatedAt": "2025-10-19T12:34:56Z",
|
|
"imageDigest": "sha256:feedface",
|
|
"policy": {
|
|
"digest": "digest-123",
|
|
"revisionId": "rev-42"
|
|
},
|
|
"summary": {
|
|
"total": 1,
|
|
"blocked": 1,
|
|
"warned": 0,
|
|
"ignored": 0,
|
|
"quieted": 0
|
|
},
|
|
"verdict": "blocked",
|
|
"verdicts": [
|
|
{
|
|
"findingId": "finding-1",
|
|
"status": "Blocked",
|
|
"score": 47.5,
|
|
"sourceTrust": "NVD",
|
|
"reachability": "runtime"
|
|
}
|
|
],
|
|
"issues": []
|
|
}
|
|
}
|
|
}
|