{"resources":{"bicep":{"id":"bicep","name":"bicep","fields":{"file":{"name":"file","type":"\u001bbicep.file","title":"Bicep source file","desc":" Examine a single .bicep file: its target scope (resourceGroup, subscription, managementGroup, tenant), declared parameters / variables / resources / modules / outputs, and the raw file content for pattern matching that the typed views can't express.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bbicep.file","title":"All Bicep source files found","provider":"go.mondoo.com/mql/v13/providers/bicep"},"module":{"name":"module","type":"\u001bbicep.module","title":"Bicep module reference","desc":" Examine a `module` declaration: symbolic name, source path or registry reference (br: / ts: flags break the source out by kind), scope, the parameter values passed in, conditional-deployment expression, description and decorators — the unit of cross-file Bicep composition.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true},"output":{"name":"output","type":"\u001bbicep.output","title":"Bicep output declaration","desc":" Examine an `output` statement: name, type, value expression, and @description — useful for spotting outputs that leak secrets or expose resource IDs unintentionally.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true},"parameter":{"name":"parameter","type":"\u001bbicep.parameter","title":"Bicep parameter declaration","desc":" Examine the name, type, default value, @description, @secure flag, @allowed values, and the full raw decorator list — used to flag missing @secure on credential-shaped parameters or unbounded @allowed sets.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true},"resource":{"name":"resource","type":"\u001bbicep.resource","title":"Bicep resource declaration","desc":" Examine the symbolic name, Azure resource type and apiVersion, the resolved name and location expressions, the full properties body, the existing-resource flag, conditional-deployment expression, parent / dependsOn relationships, and decorators — the surface IaC policies match against to enforce Azure resource-shape rules.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true},"template":{"name":"template","type":"\u001bbicep.template","title":"Compiled ARM template (if available via JSON or bicep build)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"variable":{"name":"variable","type":"\u001bbicep.variable","title":"Bicep variable declaration","desc":" Examine the variable name, the raw value expression, and any @description decorator — useful for tracking how derived values flow into resource bodies.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true}},"title":"Bicep / ARM template","desc":" Top-level entry point for analyzing Azure Bicep source or compiled ARM JSON. Exposes the Bicep source files (parameters, variables, resources, modules, outputs) and, when available, the compiled ARM template — the surface for IaC policy checks of Azure infrastructure-as-code without deploying it.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.file":{"id":"bicep.file","name":"bicep.file","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Raw file content","provider":"go.mondoo.com/mql/v13/providers/bicep"},"modules":{"name":"modules","type":"\u0019\u001bbicep.module","title":"Module references","provider":"go.mondoo.com/mql/v13/providers/bicep"},"outputs":{"name":"outputs","type":"\u0019\u001bbicep.output","title":"Output declarations","provider":"go.mondoo.com/mql/v13/providers/bicep"},"parameters":{"name":"parameters","type":"\u0019\u001bbicep.parameter","title":"Parameter declarations","provider":"go.mondoo.com/mql/v13/providers/bicep"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path","provider":"go.mondoo.com/mql/v13/providers/bicep"},"resources":{"name":"resources","type":"\u0019\u001bbicep.resource","title":"Resource declarations","provider":"go.mondoo.com/mql/v13/providers/bicep"},"targetScope":{"name":"targetScope","type":"\u0007","is_mandatory":true,"title":"Target scope (resourceGroup, subscription, managementGroup, tenant)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"variables":{"name":"variables","type":"\u0019\u001bbicep.variable","title":"Variable declarations","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Bicep source file","desc":" Examine a single .bicep file: its target scope (resourceGroup, subscription, managementGroup, tenant), declared parameters / variables / resources / modules / outputs, and the raw file content for pattern matching that the typed views can't express.","min_provider_version":"13.0.0","defaults":"path","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.module":{"id":"bicep.module","name":"bicep.module","fields":{"condition":{"name":"condition","type":"\u0007","is_mandatory":true,"title":"Condition expression","provider":"go.mondoo.com/mql/v13/providers/bicep"},"decorators":{"name":"decorators","type":"\u0019\u0007","is_mandatory":true,"title":"All decorators as raw strings","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/v13/providers/bicep"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description from @description decorator","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/v13/providers/bicep"},"isRegistry":{"name":"isRegistry","type":"\u0004","is_mandatory":true,"title":"Whether this references a Bicep registry (br:)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"isTemplateSpec":{"name":"isTemplateSpec","type":"\u0004","is_mandatory":true,"title":"Whether this references a template spec (ts:)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Symbolic name","provider":"go.mondoo.com/mql/v13/providers/bicep"},"params":{"name":"params","type":"\n","is_mandatory":true,"title":"Parameter values as dict","provider":"go.mondoo.com/mql/v13/providers/bicep"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope expression","provider":"go.mondoo.com/mql/v13/providers/bicep"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Module source path or registry reference","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Bicep module reference","desc":" Examine a `module` declaration: symbolic name, source path or registry reference (br: / ts: flags break the source out by kind), scope, the parameter values passed in, conditional-deployment expression, description and decorators — the unit of cross-file Bicep composition.","min_provider_version":"13.0.0","defaults":"name source","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.output":{"id":"bicep.output","name":"bicep.output","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description from @description decorator","provider":"go.mondoo.com/mql/v13/providers/bicep"},"expression":{"name":"expression","type":"\u0007","is_mandatory":true,"title":"Value expression","provider":"go.mondoo.com/mql/v13/providers/bicep"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Output name","provider":"go.mondoo.com/mql/v13/providers/bicep"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Output type","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Bicep output declaration","desc":" Examine an `output` statement: name, type, value expression, and @description — useful for spotting outputs that leak secrets or expose resource IDs unintentionally.","min_provider_version":"13.0.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.parameter":{"id":"bicep.parameter","name":"bicep.parameter","fields":{"allowed":{"name":"allowed","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed values from @allowed decorator","provider":"go.mondoo.com/mql/v13/providers/bicep"},"decorators":{"name":"decorators","type":"\u0019\u0007","is_mandatory":true,"title":"All decorators as raw strings","provider":"go.mondoo.com/mql/v13/providers/bicep"},"defaultValue":{"name":"defaultValue","type":"\u0007","is_mandatory":true,"title":"Default value expression (empty if required)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description from @description decorator","provider":"go.mondoo.com/mql/v13/providers/bicep"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Parameter name","provider":"go.mondoo.com/mql/v13/providers/bicep"},"secure":{"name":"secure","type":"\u0004","is_mandatory":true,"title":"Whether @secure decorator is present","provider":"go.mondoo.com/mql/v13/providers/bicep"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type (string, int, bool, object, array, or user-defined)","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Bicep parameter declaration","desc":" Examine the name, type, default value, @description, @secure flag, @allowed values, and the full raw decorator list — used to flag missing @secure on credential-shaped parameters or unbounded @allowed sets.","min_provider_version":"13.0.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.resource":{"id":"bicep.resource","name":"bicep.resource","fields":{"apiVersion":{"name":"apiVersion","type":"\u0007","is_mandatory":true,"title":"API version (e.g., \"2023-01-01\")","provider":"go.mondoo.com/mql/v13/providers/bicep"},"condition":{"name":"condition","type":"\u0007","is_mandatory":true,"title":"Condition expression (empty if unconditional)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"decorators":{"name":"decorators","type":"\u0019\u0007","is_mandatory":true,"title":"Decorators","provider":"go.mondoo.com/mql/v13/providers/bicep"},"dependsOn":{"name":"dependsOn","type":"\u0019\u0007","is_mandatory":true,"title":"Dependencies (symbolic names from dependsOn)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"existing":{"name":"existing","type":"\u0004","is_mandatory":true,"title":"Whether this is an existing resource reference","provider":"go.mondoo.com/mql/v13/providers/bicep"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location expression","provider":"go.mondoo.com/mql/v13/providers/bicep"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name expression","provider":"go.mondoo.com/mql/v13/providers/bicep"},"parent":{"name":"parent","type":"\u0007","is_mandatory":true,"title":"Parent resource symbolic name","provider":"go.mondoo.com/mql/v13/providers/bicep"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Resource body as dict","provider":"go.mondoo.com/mql/v13/providers/bicep"},"symbolicName":{"name":"symbolicName","type":"\u0007","is_mandatory":true,"title":"Symbolic name in the Bicep file","provider":"go.mondoo.com/mql/v13/providers/bicep"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Azure resource type (e.g., \"Microsoft.Storage/storageAccounts\")","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Bicep resource declaration","desc":" Examine the symbolic name, Azure resource type and apiVersion, the resolved name and location expressions, the full properties body, the existing-resource flag, conditional-deployment expression, parent / dependsOn relationships, and decorators — the surface IaC policies match against to enforce Azure resource-shape rules.","min_provider_version":"13.0.0","defaults":"type symbolicName","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.template":{"id":"bicep.template","name":"bicep.template","fields":{"contentVersion":{"name":"contentVersion","type":"\u0007","title":"Content version","provider":"go.mondoo.com/mql/v13/providers/bicep"},"outputs":{"name":"outputs","type":"\u001a\u0007\n","title":"Compiled outputs","provider":"go.mondoo.com/mql/v13/providers/bicep"},"parameters":{"name":"parameters","type":"\u001a\u0007\n","title":"Compiled parameters","provider":"go.mondoo.com/mql/v13/providers/bicep"},"resource":{"name":"resource","type":"\u001bbicep.template.resource","title":"Resource in the compiled ARM template","desc":" Examine the resolved Azure resource type, apiVersion, name, location, properties, dependsOn list, and the full ARM manifest for a single resource — the form Azure Resource Manager actually deploys.","provider":"go.mondoo.com/mql/v13/providers/bicep","is_implicit_resource":true},"resources":{"name":"resources","type":"\u0019\u001bbicep.template.resource","title":"Compiled Azure resources","provider":"go.mondoo.com/mql/v13/providers/bicep"},"schema":{"name":"schema","type":"\u0007","title":"ARM schema URL","provider":"go.mondoo.com/mql/v13/providers/bicep"},"variables":{"name":"variables","type":"\u001a\u0007\n","title":"Compiled variables","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Compiled ARM template (from ARM JSON input)","desc":" Examine the resolved schema URL, content version, parameters, variables, resources, and outputs of an ARM template — the post-`bicep build` view, where expressions have been resolved and resources are listed flat. Use this for policy checks that need final values rather than Bicep-level expressions.","min_provider_version":"13.0.0","defaults":"schema","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.template.resource":{"id":"bicep.template.resource","name":"bicep.template.resource","fields":{"apiVersion":{"name":"apiVersion","type":"\u0007","is_mandatory":true,"title":"API version","provider":"go.mondoo.com/mql/v13/providers/bicep"},"dependsOn":{"name":"dependsOn","type":"\u0019\u0007","is_mandatory":true,"title":"Dependencies","provider":"go.mondoo.com/mql/v13/providers/bicep"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location (resolved)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"manifest":{"name":"manifest","type":"\n","is_mandatory":true,"title":"Full manifest","provider":"go.mondoo.com/mql/v13/providers/bicep"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name (resolved)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Full resource properties as dict","provider":"go.mondoo.com/mql/v13/providers/bicep"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Azure resource type","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Resource in the compiled ARM template","desc":" Examine the resolved Azure resource type, apiVersion, name, location, properties, dependsOn list, and the full ARM manifest for a single resource — the form Azure Resource Manager actually deploys.","min_provider_version":"13.0.0","defaults":"type name","provider":"go.mondoo.com/mql/v13/providers/bicep"},"bicep.variable":{"id":"bicep.variable","name":"bicep.variable","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description from @description decorator","provider":"go.mondoo.com/mql/v13/providers/bicep"},"expression":{"name":"expression","type":"\u0007","is_mandatory":true,"title":"Value expression (raw Bicep expression)","provider":"go.mondoo.com/mql/v13/providers/bicep"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/mql/v13/providers/bicep"}},"title":"Bicep variable declaration","desc":" Examine the variable name, the raw value expression, and any @description decorator — useful for tracking how derived values flow into resource bodies.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/bicep"}}}