100 lines
3.0 KiB
JSON
100 lines
3.0 KiB
JSON
{
|
|
"eventId": "08a6de24-4a94-4d14-8432-9d14f36f6da3",
|
|
"kind": "scanner.event.scan.completed",
|
|
"version": 1,
|
|
"tenant": "tenant-alpha",
|
|
"occurredAt": "2025-10-19T12:34:56Z",
|
|
"recordedAt": "2025-10-19T12:34:57Z",
|
|
"source": "scanner.webservice",
|
|
"idempotencyKey": "scanner.event.scan.completed:tenant-alpha:report-abc",
|
|
"correlationId": "report-abc",
|
|
"traceId": "4bf92f3577b34da6a3ce929d0e0e4736",
|
|
"scope": {
|
|
"namespace": "acme/edge",
|
|
"repo": "api",
|
|
"digest": "sha256:feedface"
|
|
},
|
|
"attributes": {
|
|
"reportId": "report-abc",
|
|
"policyRevisionId": "rev-42",
|
|
"policyDigest": "digest-123",
|
|
"verdict": "blocked"
|
|
},
|
|
"payload": {
|
|
"reportId": "report-abc",
|
|
"scanId": "report-abc",
|
|
"imageDigest": "sha256:feedface",
|
|
"verdict": "fail",
|
|
"summary": {
|
|
"total": 1,
|
|
"blocked": 1,
|
|
"warned": 0,
|
|
"ignored": 0,
|
|
"quieted": 0
|
|
},
|
|
"delta": {
|
|
"newCritical": 1,
|
|
"kev": [
|
|
"CVE-2024-9999"
|
|
]
|
|
},
|
|
"policy": {
|
|
"digest": "digest-123",
|
|
"revisionId": "rev-42"
|
|
},
|
|
"findings": [
|
|
{
|
|
"id": "finding-1",
|
|
"severity": "Critical",
|
|
"cve": "CVE-2024-9999",
|
|
"purl": "pkg:docker/acme/edge-api@sha256-feedface",
|
|
"reachability": "runtime"
|
|
}
|
|
],
|
|
"links": {
|
|
"ui": "https://scanner.example/ui/reports/report-abc",
|
|
"report": "https://scanner.example/api/v1/reports/report-abc",
|
|
"policy": "https://scanner.example/api/v1/policy/revisions/rev-42",
|
|
"attestation": "https://scanner.example/ui/attestations/report-abc"
|
|
},
|
|
"dsse": {
|
|
"payloadType": "application/vnd.stellaops.report+json",
|
|
"payload": "eyJyZXBvcnRJZCI6InJlcG9ydC1hYmMiLCJpbWFnZURpZ2VzdCI6InNoYTI1NjpmZWVkZmFjZSIsImdlbmVyYXRlZEF0IjoiMjAyNS0xMC0xOVQxMjozNDo1NiswMDowMCIsInZlcmRpY3QiOiJibG9ja2VkIiwicG9saWN5Ijp7InJldmlzaW9uSWQiOiJyZXYtNDIiLCJkaWdlc3QiOiJkaWdlc3QtMTIzIn0sInN1bW1hcnkiOnsidG90YWwiOjEsImJsb2NrZWQiOjEsIndhcm5lZCI6MCwiaWdub3JlZCI6MCwicXVpZXRlZCI6MH0sInZlcmRpY3RzIjpbeyJmaW5kaW5nSWQiOiJmaW5kaW5nLTEiLCJzdGF0dXMiOiJCbG9ja2VkIiwic2NvcmUiOjQ3LjUsInNvdXJjZVRydXN0IjoiTlZEIiwicmVhY2hhYmlsaXR5IjoicnVudGltZSJ9XSwiaXNzdWVzIjpbXX0=",
|
|
"signatures": [
|
|
{
|
|
"keyId": "test-key",
|
|
"algorithm": "hs256",
|
|
"signature": "signature-value"
|
|
}
|
|
]
|
|
},
|
|
"report": {
|
|
"reportId": "report-abc",
|
|
"generatedAt": "2025-10-19T12:34:56Z",
|
|
"imageDigest": "sha256:feedface",
|
|
"policy": {
|
|
"digest": "digest-123",
|
|
"revisionId": "rev-42"
|
|
},
|
|
"summary": {
|
|
"total": 1,
|
|
"blocked": 1,
|
|
"warned": 0,
|
|
"ignored": 0,
|
|
"quieted": 0
|
|
},
|
|
"verdict": "blocked",
|
|
"verdicts": [
|
|
{
|
|
"findingId": "finding-1",
|
|
"status": "Blocked",
|
|
"score": 47.5,
|
|
"sourceTrust": "NVD",
|
|
"reachability": "runtime"
|
|
}
|
|
],
|
|
"issues": []
|
|
}
|
|
}
|
|
}
|