{"resources":{"cloudflare":{"id":"cloudflare","name":"cloudflare","fields":{"account":{"name":"account","type":"\u001bcloudflare.account","title":"Cloudflare Account","desc":"Cloudflare account and its account-scoped services. Query `settings` for account-level preferences such as two-factor enforcement, `roles` and `members` for the account's access model, `one` for Zero Trust, `r2` for object storage, `workers` for deployed scripts, `tunnels` for Cloudflare Tunnel connectivity, and `liveInputs` and `videos` for Stream assets.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"accounts":{"name":"accounts","type":"\u0019\u001bcloudflare.account","title":"List available accounts","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"apiToken":{"name":"apiToken","type":"\u001bcloudflare.apiToken","title":"Cloudflare API Token","desc":"User-scoped Cloudflare API token, used to audit programmatic access to the account. The `status` field reports whether the token is active, disabled, or expired, while `expiresOn` and `notBefore` bound its validity window. `ipIn` and `ipNotIn` capture the IP allowlist and blocklist that restrict where the token may be used, and `policies` records the grants that define what the token can do.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"apiTokens":{"name":"apiTokens","type":"\u0019\u001bcloudflare.apiToken","title":"API tokens visible to the calling user","desc":"Cloudflare API tokens are user-scoped, so this reads the tokens of the user the connecting token authenticates as. It requires a token with user-level access (the User API Tokens Read permission); an account-scoped token cannot list them and this returns empty. Account-owned tokens (Enterprise) are not exposed here.","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"corsHeaders":{"name":"corsHeaders","type":"\u001bcloudflare.corsHeaders","title":"CORS headers","desc":"Cross-Origin Resource Sharing settings applied by a Cloudflare Access application. Reports which origins, HTTP methods, and request headers are permitted on cross-origin requests, whether the browser may send credentials, and how long a browser may cache a preflight response. Auditing these settings surfaces permissive combinations (for example allowAllOrigins together with allowCredentials) that weaken the cross-origin protections around a protected application.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"dns":{"name":"dns","type":"\u001bcloudflare.dns","title":"Cloudflare DNS namespace","desc":"DNS records configured for a zone. The `records` field enumerates every record type (A, AAAA, CNAME, MX, TXT, and others) with its content, TTL, and proxy status, which is the starting point for auditing exposed hostnames, mail routing (MX and TXT-carried SPF/DMARC records), and whether traffic is proxied through Cloudflare or served DNS-only.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"loadBalancerPool":{"name":"loadBalancerPool","type":"\u001bcloudflare.loadBalancerPool","title":"Cloudflare load balancer pool","desc":"Named group of origin servers that a load balancer steers traffic to. The `origins` list gives each backend `address`, weight, and enabled state; `monitorId` and `checkRegions` describe the health checks; `minimumOrigins` is the healthy-origin floor below which the pool is considered down; `notificationEmail` receives health alerts; and `latitude`/`longitude` position the pool for proximity steering. Pools are account-scoped and may be shared by several load balancers.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"mtlsCertificate":{"name":"mtlsCertificate","type":"\u001bcloudflare.mtlsCertificate","title":"Cloudflare mTLS certificate","desc":"CA certificate uploaded to a Cloudflare account for mutual TLS authentication, where Cloudflare validates the client certificate a connecting device presents against the CA on file. Reviewing these certificates surfaces which certificate authorities are trusted for client authentication, whether any are self-signed (the ca flag), and when each expires so an mTLS enforcement gap can be caught before the certificate lapses.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"notificationPolicy":{"name":"notificationPolicy","type":"\u001bcloudflare.notificationPolicy","title":"Cloudflare notification policy","desc":"Single notification (alert) policy configured on a Cloudflare account: which `alertType` it subscribes to (for example `dedicated_ssl_certificate_expiration_type`, `universal_ssl_event_type`, `web_analytics_metrics_update`, `dos_attack_l7`), whether it is `enabled`, how alerts are delivered via `mechanisms` (email, PagerDuty, webhook integrations), and any `conditions` or `filters` that narrow the firing criteria. Query it to assert that critical alerts (TLS expiry, DDoS, mTLS revocation, configuration changes) are wired up to an active destination.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"one":{"name":"one","type":"\u001bcloudflare.one","title":"Cloudflare One (Zero Trust) namespace","desc":"Zero Trust configuration for a Cloudflare account, spanning Access, Gateway, and device enrollment. `apps` covers Access application settings (allowed IdPs, session duration, cookie security); `identityProviders` the configured IdPs and their SAML/SCIM settings; `accessPolicies` and `accessGroups` the reusable policy components; `serviceTokens` the machine-to-machine token inventory; `organization` org-wide settings such as auth domain and WARP session duration; `gatewayRules` the DNS/HTTP/L4 traffic policies; `lists`, `locations`, and `dlpProfiles` the Gateway data sources; `devices` the enrolled device inventory; and `devicePostureRules` and `devicePostureIntegrations` the posture-check configuration.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"pages":{"name":"pages","type":"\u001bcloudflare.pages","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"r2":{"name":"r2","type":"\u001bcloudflare.r2","title":"Cloudflare R2 namespace","desc":"Object-storage resources for a Cloudflare account. The buckets field enumerates every R2 bucket, which is the starting point for auditing where account data is stored and which buckets serve objects publicly through the managed r2.dev subdomain.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"streams":{"name":"streams","type":"\u001bcloudflare.streams","title":"Cloudflare Stream namespace","desc":"Grouping for Cloudflare Stream assets, the managed video platform that serves live-streaming inputs alongside uploaded or recorded video-on-demand files. Live inputs are modeled as cloudflare.streams.liveInput and video assets as cloudflare.streams.video, both enumerated from the account.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"tunnel":{"name":"tunnel","type":"\u001bcloudflare.tunnel","title":"Cloudflare tunnel","desc":"Cloudflare Tunnel connecting origin services to Cloudflare's edge over an outbound-only connector, so private applications can be reached without opening inbound firewall ports. Auditing tunnels surfaces their operational health, whether their configuration is managed remotely from the Zero Trust dashboard, and the active connector connections carrying traffic. The `tunnelType` field distinguishes a cloudflared tunnel (cfd_tunnel) from a WARP connector (warp_connector).","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"workers":{"name":"workers","type":"\u001bcloudflare.workers","title":"Cloudflare Workers namespace","desc":"Serverless Workers scripts and Pages projects for an account. Query `workers` for script metadata (size, placement mode, LogPush status), `pages` for Pages deployment details (environment, URL, aliases), `secrets` for the inventory of secrets bound to worker scripts (metadata only, values are never exposed), and `pageEnvVars` for the inventory of environment variables across Pages project environments.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"zone":{"name":"zone","type":"\u001bcloudflare.zone","title":"Cloudflare DNS Zone","desc":"Configuration and security posture of a single Cloudflare DNS zone. A zone corresponds to a registered domain managed through Cloudflare. Query `settings` for TLS, WAF, and HSTS enforcement; `dns` for DNS records; `rulesets` and `wafRules` for firewall policy; `certificatePacks` and `customCertificates` for TLS certificates; `dnssec` for DNSSEC configuration; `botManagement` for bot-mitigation settings; `emailRouting` for SPF/DKIM/DMARC status; and `logpushJobs` for data-export configuration.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"zones":{"name":"zones","type":"\u0019\u001bcloudflare.zone","title":"List all zones","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare","desc":"Cloudflare zones, accounts, API tokens, and account-level services. The `zones` field enumerates DNS zones, `accounts` exposes account-level configuration, and `apiTokens` lists the tokens visible to the calling user for token inventory and policy audits.","min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.account":{"id":"cloudflare.account","name":"cloudflare.account","fields":{"auditLog":{"name":"auditLog","type":"\u001bcloudflare.account.auditLog","title":"Cloudflare audit log entry","desc":"Single change recorded in the Cloudflare account audit log: when it happened, who performed it (`actorEmail`, `actorId`, `actorIp`, and `actorType`, one of `user`, `cloudflare_admin`, `account`, and others), what resource it affected (`resourceType`, `resourceId`), and the action's outcome (`actionType`, `actionResult`). `oldValue` and `newValue` hold structured before/after data when the API returns it. Use for change-detection assertions and to confirm sensitive actions are performed by expected actors.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"auditLogs":{"name":"auditLogs","type":"\u0019\u001bcloudflare.account.auditLog","title":"Recent audit log entries for the account (most recent first; first page only)","desc":"Returns the first page of account audit log entries. The Cloudflare API caps a page at 100 entries; for older history, narrow with a `.where(when \u003e ...)` filter or paginate at the API level outside MQL. Use this to verify a change actor, spot unauthorized configuration changes, or feed an access review.","min_provider_version":"13.4.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the account was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Account identifier","desc":"The 32-character account ID (the account \"tag\") that scopes every account-level API call. It selects an account from the `accounts` list and correlates a discovered asset with its owning account.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"liveInputs":{"name":"liveInputs","type":"\u0019\u001bcloudflare.streams.liveInput","title":"Stream live inputs","desc":"Live streaming ingest endpoints defined for the account. Each entry carries its `uid`, recording retention (`deleteRecordingAfterDays`), and name, covering the account's live-video ingestion surface.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"member":{"name":"member","type":"\u001bcloudflare.account.member","title":"Cloudflare account member","desc":"User (member) of a Cloudflare account, exposing their identity (`email`, `firstName`, `lastName`), enrollment `status` (`accepted`, `pending`, `rejected`), whether `twoFactorAuthenticationEnabled` is on, and the `roles` they hold. Use for access reviews (\"who can administer this account?\"), 2FA enforcement audits, and stale-invite cleanup.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"members":{"name":"members","type":"\u0019\u001bcloudflare.account.member","title":"Account members","desc":"Users belonging to the account, with their invitation `status`, assigned `roles`, and whether each has two-factor authentication enabled (`twoFactorAuthenticationEnabled`), for access and MFA reviews.","min_provider_version":"13.4.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Account name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"notificationPolicies":{"name":"notificationPolicies","type":"\u0019\u001bcloudflare.notificationPolicy","title":"Notification policies configured for the account","desc":"Alert subscriptions that route Cloudflare notifications to email, PagerDuty, or webhooks. Each policy exposes its `alertType`, whether it is `enabled`, and its delivery `mechanisms`.","min_provider_version":"13.4.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"one":{"name":"one","type":"\u001bcloudflare.one","title":"Cloudflare Zero Trust (Cloudflare One)","desc":"Account-wide Zero Trust configuration: Access applications and their policies, Access groups, service tokens, identity providers, the Access organization, Gateway rules, enrolled devices, device-posture rules and integrations, DLP profiles, and network lists and locations.","min_provider_version":"13.6.5","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"r2":{"name":"r2","type":"\u001bcloudflare.r2","title":"Cloudflare R2 object storage","desc":"The account's R2 storage, whose `buckets` list each bucket with its name, location, creation time, and public-access exposure. Requires R2 to be enabled on the account.","min_provider_version":"13.6.5","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"role":{"name":"role","type":"\u001bcloudflare.account.role","title":"Cloudflare account role","desc":"Named permission role defined in a Cloudflare account. Roles group the privileges that can be granted to account members. Query `name` and `description` to review what each role confers during an access review.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"roles":{"name":"roles","type":"\u0019\u001bcloudflare.account.role","title":"Account roles","desc":"The catalog of named roles the account can assign to members, each with an `id`, `name`, and `description`. Cross-reference with `members` to review which privileges a user holds.","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"settings":{"name":"settings","type":"\u001bcloudflare.account.settings","is_mandatory":true,"title":"Account-level configuration and preferences","desc":"Account-wide settings, including whether membership requires two-factor authentication (`enforceTwoFactor`).","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnelRoutes":{"name":"tunnelRoutes","type":"\u0019\u001bcloudflare.tunnel.route","title":"Tunnel routes","desc":"Private-network routes (CIDRs) advertised through the account's tunnels, each naming its target `tunnelId` and optional virtual network.","min_provider_version":"13.6.5","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnelVirtualNetworks":{"name":"tunnelVirtualNetworks","type":"\u0019\u001bcloudflare.tunnel.virtualNetwork","title":"Tunnel virtual networks","desc":"Virtual networks that segment overlapping private IP ranges across the account's tunnel routes, each with its name and whether it is the default network.","min_provider_version":"13.6.5","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnels":{"name":"tunnels","type":"\u0019\u001bcloudflare.tunnel","title":"Cloudflare Tunnels","desc":"Cloudflared tunnels defined for the account, each with its status, tunnel type, and active `connections`, for auditing outbound connectivity into private networks.","min_provider_version":"13.6.5","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Account type","desc":"The account's plan class, for example `standard` or `enterprise`.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"videos":{"name":"videos","type":"\u0019\u001bcloudflare.streams.video","title":"Stream video assets","desc":"On-demand videos uploaded to or recorded through Cloudflare Stream. Query `requireSignedUrls` to audit token-gated playback, alongside duration, size, playback URLs, and readiness for each asset.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"workers":{"name":"workers","type":"\u001bcloudflare.workers","title":"Cloudflare Workers","desc":"The account's Workers platform: deployed `workers` (scripts) with their size, deployment metadata, and logpush setting, plus Pages projects. Covers the serverless code running on the account.","min_provider_version":"13.6.5","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare Account","desc":"Cloudflare account and its account-scoped services. Query `settings` for account-level preferences such as two-factor enforcement, `roles` and `members` for the account's access model, `one` for Zero Trust, `r2` for object storage, `workers` for deployed scripts, `tunnels` for Cloudflare Tunnel connectivity, and `liveInputs` and `videos` for Stream assets.","private":true,"min_provider_version":"11.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.account.auditLog":{"id":"cloudflare.account.auditLog","name":"cloudflare.account.auditLog","fields":{"actionResult":{"name":"actionResult","type":"\u0004","is_mandatory":true,"title":"Whether the action succeeded","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"actionType":{"name":"actionType","type":"\u0007","is_mandatory":true,"title":"Action name (for example `tls.certificate.add`)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"actorEmail":{"name":"actorEmail","type":"\u0007","is_mandatory":true,"title":"Email of the actor that performed the action","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"actorId":{"name":"actorId","type":"\u0007","is_mandatory":true,"title":"Identifier of the actor that performed the action","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"actorIp":{"name":"actorIp","type":"\u0007","is_mandatory":true,"title":"IP address the action was performed from","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"actorType":{"name":"actorType","type":"\u0007","is_mandatory":true,"title":"Actor classification (`user`, `cloudflare_admin`, `account`, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Audit log entry identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"newValue":{"name":"newValue","type":"\n","is_mandatory":true,"title":"Structured after-state of the affected resource (empty when the API does not return it)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"oldValue":{"name":"oldValue","type":"\n","is_mandatory":true,"title":"Structured before-state of the affected resource (empty when the API does not return it)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ownerId":{"name":"ownerId","type":"\u0007","is_mandatory":true,"title":"Identifier of the account that owns the audit log entry","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"resourceId":{"name":"resourceId","type":"\u0007","is_mandatory":true,"title":"Identifier of the resource the action was performed on","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"resourceType":{"name":"resourceType","type":"\u0007","is_mandatory":true,"title":"Type of the resource the action was performed on (for example `zone`, `account_member`, `dns_record`)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"when":{"name":"when","type":"\t","is_mandatory":true,"title":"Time the action was performed","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare audit log entry","desc":"Single change recorded in the Cloudflare account audit log: when it happened, who performed it (`actorEmail`, `actorId`, `actorIp`, and `actorType`, one of `user`, `cloudflare_admin`, `account`, and others), what resource it affected (`resourceType`, `resourceId`), and the action's outcome (`actionType`, `actionResult`). `oldValue` and `newValue` hold structured before/after data when the API returns it. Use for change-detection assertions and to confirm sensitive actions are performed by expected actors.","private":true,"min_provider_version":"13.4.1","defaults":"when actorEmail actionType resourceType","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.account.member":{"id":"cloudflare.account.member","name":"cloudflare.account.member","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Member's email address","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"firstName":{"name":"firstName","type":"\u0007","is_mandatory":true,"title":"Member's first name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Membership identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastName":{"name":"lastName","type":"\u0007","is_mandatory":true,"title":"Member's last name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"roles":{"name":"roles","type":"\u0019\u001bcloudflare.account.role","is_mandatory":true,"title":"Roles assigned to this member","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Member status (`accepted`, `pending`, `rejected`)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"twoFactorAuthenticationEnabled":{"name":"twoFactorAuthenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the member has two-factor authentication enabled on their Cloudflare account","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"Member's Cloudflare user identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare account member","desc":"User (member) of a Cloudflare account, exposing their identity (`email`, `firstName`, `lastName`), enrollment `status` (`accepted`, `pending`, `rejected`), whether `twoFactorAuthenticationEnabled` is on, and the `roles` they hold. Use for access reviews (\"who can administer this account?\"), 2FA enforcement audits, and stale-invite cleanup.","private":true,"min_provider_version":"13.4.1","defaults":"email status twoFactorAuthenticationEnabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.account.role":{"id":"cloudflare.account.role","name":"cloudflare.account.role","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Role description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare account role","desc":"Named permission role defined in a Cloudflare account. Roles group the privileges that can be granted to account members. Query `name` and `description` to review what each role confers during an access review.","private":true,"min_provider_version":"13.1.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.account.settings":{"id":"cloudflare.account.settings","name":"cloudflare.account.settings","fields":{"enforceTwoFactor":{"name":"enforceTwoFactor","type":"\u0004","is_mandatory":true,"title":"Whether membership in this account requires that two-factor authentication is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Account settings","desc":"Account-level security preferences. The `enforceTwoFactor` field reports whether every member of the account is required to have two-factor authentication enabled, a common baseline in access-hardening audits.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.apiToken":{"id":"cloudflare.apiToken","name":"cloudflare.apiToken","fields":{"expiresOn":{"name":"expiresOn","type":"\t","is_mandatory":true,"title":"Time the token expires","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Token identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ipIn":{"name":"ipIn","type":"\u0019\u0007","is_mandatory":true,"title":"IP addresses allowed to use the token (CIDR list)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ipNotIn":{"name":"ipNotIn","type":"\u0019\u0007","is_mandatory":true,"title":"IP addresses blocked from using the token (CIDR list)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"issuedOn":{"name":"issuedOn","type":"\t","is_mandatory":true,"title":"Time the token was issued","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the token was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Token name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"notBefore":{"name":"notBefore","type":"\t","is_mandatory":true,"title":"Earliest time the token is valid","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"policies":{"name":"policies","type":"\u0019\n","is_mandatory":true,"title":"Token policies","desc":"Grant rules that define what the token can do. Each entry has `id` (policy identifier), `effect` (either allow or deny), `resources` (the scopes the policy applies to, decoded from the raw API shape), and `permissionGroups` (a list of objects with `id` and `name` naming the permission groups granted).","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Token status (active, disabled, expired)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare API Token","desc":"User-scoped Cloudflare API token, used to audit programmatic access to the account. The `status` field reports whether the token is active, disabled, or expired, while `expiresOn` and `notBefore` bound its validity window. `ipIn` and `ipNotIn` capture the IP allowlist and blocklist that restrict where the token may be used, and `policies` records the grants that define what the token can do.","private":true,"min_provider_version":"13.1.1","defaults":"name status expiresOn","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.corsHeaders":{"id":"cloudflare.corsHeaders","name":"cloudflare.corsHeaders","fields":{"allowAllHeaders":{"name":"allowAllHeaders","type":"\u0004","is_mandatory":true,"title":"Whether any request header is permitted, ignoring allowedHeaders","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"allowAllMethods":{"name":"allowAllMethods","type":"\u0004","is_mandatory":true,"title":"Whether any HTTP method is permitted, ignoring allowedMethods","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"allowAllOrigins":{"name":"allowAllOrigins","type":"\u0004","is_mandatory":true,"title":"Whether any origin is permitted (the request Origin is reflected), ignoring allowedOrigins","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"allowCredentials":{"name":"allowCredentials","type":"\u0004","is_mandatory":true,"title":"Whether the browser may send credentials (cookies, TLS client certificates, HTTP auth) with cross-origin requests","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"allowedHeaders":{"name":"allowedHeaders","type":"\u0019\u0007","is_mandatory":true,"title":"Request headers permitted on cross-origin requests when allowAllHeaders is false","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"allowedMethods":{"name":"allowedMethods","type":"\u0019\u0007","is_mandatory":true,"title":"HTTP methods permitted on cross-origin requests when allowAllMethods is false","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"allowedOrigins":{"name":"allowedOrigins","type":"\u0019\u0007","is_mandatory":true,"title":"Origins permitted to make cross-origin requests when allowAllOrigins is false","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"maxAge":{"name":"maxAge","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"CORS headers","desc":"Cross-Origin Resource Sharing settings applied by a Cloudflare Access application. Reports which origins, HTTP methods, and request headers are permitted on cross-origin requests, whether the browser may send credentials, and how long a browser may cache a preflight response. Auditing these settings surfaces permissive combinations (for example allowAllOrigins together with allowCredentials) that weaken the cross-origin protections around a protected application.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.dns":{"id":"cloudflare.dns","name":"cloudflare.dns","fields":{"record":{"name":"record","type":"\u001bcloudflare.dns.record","title":"DNS record","desc":"Single DNS record in a Cloudflare zone, covering its type, content, TTL, and whether it is proxied through Cloudflare or served DNS-only. Auditing these records surfaces exposed hostnames, mail-authentication records (SPF, DKIM, and DMARC carried as TXT), and records that point directly at origin IP addresses and so bypass Cloudflare's proxy.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"records":{"name":"records","type":"\u0019\u001bcloudflare.dns.record","title":"List all DNS records","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare DNS namespace","desc":"DNS records configured for a zone. The `records` field enumerates every record type (A, AAAA, CNAME, MX, TXT, and others) with its content, TTL, and proxy status, which is the starting point for auditing exposed hostnames, mail routing (MX and TXT-carried SPF/DMARC records), and whether traffic is proxied through Cloudflare or served DNS-only.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.dns.record":{"id":"cloudflare.dns.record","name":"cloudflare.dns.record","fields":{"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Free-form comment or description for the DNS record","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Content of the record (e.g., hostname or IP Address)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the record was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cloudflare internal ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the record was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Record name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Record priority (used by MX, SRV, and URI records)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"proxiable":{"name":"proxiable","type":"\u0004","is_mandatory":true,"title":"Whether the record can be proxied","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"proxied":{"name":"proxied","type":"\u0004","is_mandatory":true,"title":"Whether the record is proxied (false indicates DNS only)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags for organizing and filtering DNS records","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"Time to live (in seconds)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of record (e.g., A, AAAA, or CNAME)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"DNS record","desc":"Single DNS record in a Cloudflare zone, covering its type, content, TTL, and whether it is proxied through Cloudflare or served DNS-only. Auditing these records surfaces exposed hostnames, mail-authentication records (SPF, DKIM, and DMARC carried as TXT), and records that point directly at origin IP addresses and so bypass Cloudflare's proxy.","private":true,"min_provider_version":"11.0.0","defaults":"type content name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.loadBalancerPool":{"id":"cloudflare.loadBalancerPool","name":"cloudflare.loadBalancerPool","fields":{"checkRegions":{"name":"checkRegions","type":"\u0019\u0007","is_mandatory":true,"title":"Regions health checks are run from; empty means all regions","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the pool was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the pool is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Pool identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"latitude":{"name":"latitude","type":"\u0006","is_mandatory":true,"title":"Latitude used for proximity steering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"longitude":{"name":"longitude","type":"\u0006","is_mandatory":true,"title":"Longitude used for proximity steering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"minimumOrigins":{"name":"minimumOrigins","type":"\u0005","is_mandatory":true,"title":"Minimum number of healthy origins before the pool is considered healthy","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the pool was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"monitorId":{"name":"monitorId","type":"\u0007","is_mandatory":true,"title":"ID of the monitor that health-checks the pool's origins","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Pool name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"notificationEmail":{"name":"notificationEmail","type":"\u0007","is_mandatory":true,"title":"Email address notified when the pool's health changes","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"origins":{"name":"origins","type":"\u0019\n","is_mandatory":true,"title":"Origin servers in the pool (each dict: name, address, enabled, weight, virtualNetworkId)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare load balancer pool","desc":"Named group of origin servers that a load balancer steers traffic to. The `origins` list gives each backend `address`, weight, and enabled state; `monitorId` and `checkRegions` describe the health checks; `minimumOrigins` is the healthy-origin floor below which the pool is considered down; `notificationEmail` receives health alerts; and `latitude`/`longitude` position the pool for proximity steering. Pools are account-scoped and may be shared by several load balancers.","private":true,"min_provider_version":"13.3.6","defaults":"name enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.mtlsCertificate":{"id":"cloudflare.mtlsCertificate","name":"cloudflare.mtlsCertificate","fields":{"ca":{"name":"ca","type":"\u0004","is_mandatory":true,"title":"Whether this is a CA certificate","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Time the certificate expires","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"issuer":{"name":"issuer","type":"\u0007","is_mandatory":true,"title":"Certificate issuer","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Certificate name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"signature":{"name":"signature","type":"\u0007","is_mandatory":true,"title":"Signature type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the certificate was last updated","desc":"Always null. The Cloudflare API response for an mTLS certificate no longer carries a separate last-updated timestamp.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"uploadedOn":{"name":"uploadedOn","type":"\t","is_mandatory":true,"title":"Time the certificate was uploaded","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare mTLS certificate","desc":"CA certificate uploaded to a Cloudflare account for mutual TLS authentication, where Cloudflare validates the client certificate a connecting device presents against the CA on file. Reviewing these certificates surfaces which certificate authorities are trusted for client authentication, whether any are self-signed (the ca flag), and when each expires so an mTLS enforcement gap can be caught before the certificate lapses.","private":true,"min_provider_version":"13.1.0","defaults":"name id","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.notificationPolicy":{"id":"cloudflare.notificationPolicy","name":"cloudflare.notificationPolicy","fields":{"alertType":{"name":"alertType","type":"\u0007","is_mandatory":true,"title":"Alert type the policy subscribes to (see the Cloudflare Notifications API for the full enum)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"conditions":{"name":"conditions","type":"\n","is_mandatory":true,"title":"Conditions further narrowing when the alert fires (shape depends on `alertType`)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Time the policy was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the policy is currently active","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"filters":{"name":"filters","type":"\n","is_mandatory":true,"title":"Filters further scoping which entities the alert applies to (shape depends on `alertType`)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"mechanisms":{"name":"mechanisms","type":"\n","is_mandatory":true,"title":"Delivery destinations grouped by mechanism","desc":"Keyed by mechanism name (`email`, `pagerduty`, `webhooks`); each value is the list of configured integrations for that mechanism, where each integration is an object with `id` and `name`.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modified":{"name":"modified","type":"\t","is_mandatory":true,"title":"Time the policy was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy display name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare notification policy","desc":"Single notification (alert) policy configured on a Cloudflare account: which `alertType` it subscribes to (for example `dedicated_ssl_certificate_expiration_type`, `universal_ssl_event_type`, `web_analytics_metrics_update`, `dos_attack_l7`), whether it is `enabled`, how alerts are delivered via `mechanisms` (email, PagerDuty, webhook integrations), and any `conditions` or `filters` that narrow the firing criteria. Query it to assert that critical alerts (TLS expiry, DDoS, mTLS revocation, configuration changes) are wired up to an active destination.","private":true,"min_provider_version":"13.4.1","defaults":"name alertType enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one":{"id":"cloudflare.one","name":"cloudflare.one","fields":{"accessGroup":{"name":"accessGroup","type":"\u001bcloudflare.one.accessGroup","title":"Cloudflare One access group","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"accessGroups":{"name":"accessGroups","type":"\u0019\u001bcloudflare.one.accessGroup","title":"Access groups","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"accessPolicies":{"name":"accessPolicies","type":"\u0019\u001bcloudflare.one.accessPolicy","title":"Access policies (reusable)","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"accessPolicy":{"name":"accessPolicy","type":"\u001bcloudflare.one.accessPolicy","title":"Cloudflare One access policy","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"app":{"name":"app","type":"\u001bcloudflare.one.app","title":"Cloudflare One application","desc":"Single Cloudflare One (Access) application: the identity providers it accepts, its CORS and cookie hardening, its session and authentication policies, and the deny and launcher experience it presents to users. The Access policies governing the application are available through `policies`.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"apps":{"name":"apps","type":"\u0019\u001bcloudflare.one.app","title":"Cloudflare Zero Trust applications","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"device":{"name":"device","type":"\u001bcloudflare.one.device","title":"Cloudflare One device","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"devicePostureIntegration":{"name":"devicePostureIntegration","type":"\u001bcloudflare.one.devicePostureIntegration","title":"Cloudflare One device posture integration","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"devicePostureIntegrations":{"name":"devicePostureIntegrations","type":"\u0019\u001bcloudflare.one.devicePostureIntegration","title":"Device posture integrations","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"devicePostureRule":{"name":"devicePostureRule","type":"\u001bcloudflare.one.devicePostureRule","title":"Cloudflare One device posture rule","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"devicePostureRules":{"name":"devicePostureRules","type":"\u0019\u001bcloudflare.one.devicePostureRule","title":"Device posture rules","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"devices":{"name":"devices","type":"\u0019\u001bcloudflare.one.device","title":"Registered devices","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dlpProfile":{"name":"dlpProfile","type":"\u001bcloudflare.one.dlpProfile","title":"Cloudflare One DLP profile","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"dlpProfiles":{"name":"dlpProfiles","type":"\u0019\u001bcloudflare.one.dlpProfile","title":"DLP profiles","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"gatewayRule":{"name":"gatewayRule","type":"\u001bcloudflare.one.gatewayRule","title":"Cloudflare One Gateway rule","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"gatewayRules":{"name":"gatewayRules","type":"\u0019\u001bcloudflare.one.gatewayRule","title":"Gateway rules","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"identityProviders":{"name":"identityProviders","type":"\u0019\u001bcloudflare.one.idp","title":"Identity providers","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"idp":{"name":"idp","type":"\u001bcloudflare.one.idp","title":"Cloudflare One identity provider","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"list":{"name":"list","type":"\u001bcloudflare.one.list","title":"Cloudflare One Gateway list","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"lists":{"name":"lists","type":"\u0019\u001bcloudflare.one.list","title":"Gateway lists","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"location":{"name":"location","type":"\u001bcloudflare.one.location","title":"Cloudflare One Gateway location","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"locations":{"name":"locations","type":"\u0019\u001bcloudflare.one.location","title":"Gateway locations","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"organization":{"name":"organization","type":"\u001bcloudflare.one.organization","title":"Access organization configuration","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"serviceToken":{"name":"serviceToken","type":"\u001bcloudflare.one.serviceToken","title":"Cloudflare One access service token","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"serviceTokens":{"name":"serviceTokens","type":"\u0019\u001bcloudflare.one.serviceToken","title":"Access service tokens","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One (Zero Trust) namespace","desc":"Zero Trust configuration for a Cloudflare account, spanning Access, Gateway, and device enrollment. `apps` covers Access application settings (allowed IdPs, session duration, cookie security); `identityProviders` the configured IdPs and their SAML/SCIM settings; `accessPolicies` and `accessGroups` the reusable policy components; `serviceTokens` the machine-to-machine token inventory; `organization` org-wide settings such as auth domain and WARP session duration; `gatewayRules` the DNS/HTTP/L4 traffic policies; `lists`, `locations`, and `dlpProfiles` the Gateway data sources; `devices` the enrolled device inventory; and `devicePostureRules` and `devicePostureIntegrations` the posture-check configuration.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.accessGroup":{"id":"cloudflare.one.accessGroup","name":"cloudflare.one.accessGroup","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the group was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Group identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Group name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the group was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One access group","private":true,"min_provider_version":"13.1.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.accessPolicy":{"id":"cloudflare.one.accessPolicy","name":"cloudflare.one.accessPolicy","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the policy was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"decision":{"name":"decision","type":"\u0007","is_mandatory":true,"title":"The action Access will take if the policy matches (allow, deny, non_identity, bypass)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"exclude":{"name":"exclude","type":"\u0019\n","is_mandatory":true,"title":"Rules that deny access when satisfied (NOT); same dict shape as include","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"include":{"name":"include","type":"\u0019\n","is_mandatory":true,"title":"Rules that grant access — the user must satisfy at least one (OR)","desc":"Each dict is one condition keyed by its rule type (e.g. email, email_domain, ip, ip_list, group, everyone, certificate, gsuite, okta, saml, azureAD, github-organization, service_token, device_posture).","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"precedence":{"name":"precedence","type":"\u0005","is_mandatory":true,"title":"The order in which the policy is executed","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"require":{"name":"require","type":"\u0019\n","is_mandatory":true,"title":"Rules that must all be satisfied (AND); same dict shape as include","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the policy was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One access policy","private":true,"min_provider_version":"13.1.0","defaults":"name decision","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.app":{"id":"cloudflare.one.app","name":"cloudflare.one.app","fields":{"allowedIdentityProviders":{"name":"allowedIdentityProviders","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed identity providers","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"appLauncherVisible":{"name":"appLauncherVisible","type":"\u0004","is_mandatory":true,"title":"Whether the application displays in the App Launcher","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"aud":{"name":"aud","type":"\u0007","is_mandatory":true,"title":"Audience tag","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"autoRedirectToIdentity":{"name":"autoRedirectToIdentity","type":"\u0004","is_mandatory":true,"title":"Whether users skip the identity provider selection step during login","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"corsHeaders":{"name":"corsHeaders","type":"\u001bcloudflare.corsHeaders","is_mandatory":true,"title":"CORS headers","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the application was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"customDenyMessage":{"name":"customDenyMessage","type":"\u0007","is_mandatory":true,"title":"Custom error message shown to a user when they are denied access to the application","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"customDenyUrl":{"name":"customDenyUrl","type":"\u0007","is_mandatory":true,"title":"Custom URL to redirect a user to when they are denied access to the application","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"domain":{"name":"domain","type":"\u0007","is_mandatory":true,"title":"Domain of the application","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enableBindingCookie":{"name":"enableBindingCookie","type":"\u0004","is_mandatory":true,"title":"Whether to allow the binding cookie","desc":"Increases security against compromised authorization tokens and CSRF attacks.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"httpOnlyCookieAttribute":{"name":"httpOnlyCookieAttribute","type":"\u0004","is_mandatory":true,"title":"Whether the HttpOnly cookie attribute is enabled","desc":"Increases security against XSS attacks.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"UUID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"logoUrl":{"name":"logoUrl","type":"\u0007","is_mandatory":true,"title":"URL of the application's logo","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the application","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"optionsPreflightBypass":{"name":"optionsPreflightBypass","type":"\u0004","is_mandatory":true,"title":"Whether preflight requests bypass Access authentication","desc":"When true, preflight requests are allowed to go directly to the origin. Can't be true if corsHeaders is set.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"policies":{"name":"policies","type":"\u0019\u001bcloudflare.one.accessPolicy","title":"Access policies governing the application","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sameSiteCookieAttribute":{"name":"sameSiteCookieAttribute","type":"\u0007","is_mandatory":true,"title":"SameSite cookie setting","desc":"Provides increased security against CSRF attacks.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"serviceAuth401Redirect":{"name":"serviceAuth401Redirect","type":"\u0004","is_mandatory":true,"title":"Whether to return a 401 status code when the request is blocked by a Service Auth policy","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sessionDuration":{"name":"sessionDuration","type":"\u0007","is_mandatory":true,"title":"Amount of time that tokens issued for this application will be valid","desc":"Format is 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, and h.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"skipInterstitial":{"name":"skipInterstitial","type":"\u0004","is_mandatory":true,"title":"Whether automatic authentication through cloudflared is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Application type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the application was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One application","desc":"Single Cloudflare One (Access) application: the identity providers it accepts, its CORS and cookie hardening, its session and authentication policies, and the deny and launcher experience it presents to users. The Access policies governing the application are available through `policies`.","private":true,"min_provider_version":"11.0.0","defaults":"name id","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.device":{"id":"cloudflare.one.device","name":"cloudflare.one.device","fields":{"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Time the device was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"deleted":{"name":"deleted","type":"\u0004","is_mandatory":true,"title":"Whether the device has been deleted","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"deviceType":{"name":"deviceType","type":"\u0007","is_mandatory":true,"title":"Device type (desktop, mobile, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Device identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"Device IP address","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastSeen":{"name":"lastSeen","type":"\t","is_mandatory":true,"title":"Time the device was last seen","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"macAddress":{"name":"macAddress","type":"\u0007","is_mandatory":true,"title":"Device MAC address","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Device manufacturer","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Device model","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"osDistroName":{"name":"osDistroName","type":"\u0007","is_mandatory":true,"title":"OS distribution name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"osDistroRevision":{"name":"osDistroRevision","type":"\u0007","is_mandatory":true,"title":"OS distribution revision","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"OS version","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"revokedAt":{"name":"revokedAt","type":"\t","is_mandatory":true,"title":"Time the device was revoked","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Device serial number","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updated":{"name":"updated","type":"\t","is_mandatory":true,"title":"Time the device was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"WARP client version","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One device","private":true,"min_provider_version":"13.1.0","defaults":"name id","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.devicePostureIntegration":{"id":"cloudflare.one.devicePostureIntegration","name":"cloudflare.one.devicePostureIntegration","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Integration identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"interval":{"name":"interval","type":"\u0007","is_mandatory":true,"title":"Check interval","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Integration name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Integration type (workspace_one, crowdstrike_s2s, uptycs, intune, kolide, tanium, sentinelone_s2s)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One device posture integration","private":true,"min_provider_version":"13.1.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.devicePostureRule":{"id":"cloudflare.one.devicePostureRule","name":"cloudflare.one.devicePostureRule","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Rule description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"expiration":{"name":"expiration","type":"\u0007","is_mandatory":true,"title":"Rule expiration","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"schedule":{"name":"schedule","type":"\u0007","is_mandatory":true,"title":"Check schedule (cron expression)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Rule type (file, application, serial_number, os_version, domain_joined, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One device posture rule","private":true,"min_provider_version":"13.1.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.dlpProfile":{"id":"cloudflare.one.dlpProfile","name":"cloudflare.one.dlpProfile","fields":{"allowedMatchCount":{"name":"allowedMatchCount","type":"\u0005","is_mandatory":true,"title":"Number of matches allowed before triggering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the profile was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Profile description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Profile identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ocrEnabled":{"name":"ocrEnabled","type":"\u0004","is_mandatory":true,"title":"Whether OCR is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Profile type (predefined, custom, integration)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the profile was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One DLP profile","private":true,"min_provider_version":"13.1.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.gatewayRule":{"id":"cloudflare.one.gatewayRule","name":"cloudflare.one.gatewayRule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Rule action (allow, block, isolate, log, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the rule was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Rule description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"devicePosture":{"name":"devicePosture","type":"\u0007","is_mandatory":true,"title":"Filter expression for device posture","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"filters":{"name":"filters","type":"\u0019\u0007","is_mandatory":true,"title":"Which filter types apply (dns, http, l4, egress, resolve)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"identity":{"name":"identity","type":"\u0007","is_mandatory":true,"title":"Filter expression for user identity","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"precedence":{"name":"precedence","type":"\u0005","is_mandatory":true,"title":"Rule precedence (lower numbers execute first)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"traffic":{"name":"traffic","type":"\u0007","is_mandatory":true,"title":"Filter expression for network traffic","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the rule was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Rule version","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One Gateway rule","private":true,"min_provider_version":"13.1.0","defaults":"name action","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.idp":{"id":"cloudflare.one.idp","name":"cloudflare.one.idp","fields":{"attributes":{"name":"attributes","type":"\u0019\u0007","is_mandatory":true,"title":"Additional SAML attributes mapped from the IdP","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"emailAttributeName":{"name":"emailAttributeName","type":"\u0007","is_mandatory":true,"title":"SAML attribute used as the user's email","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"idpPublicCert":{"name":"idpPublicCert","type":"\u0007","is_mandatory":true,"title":"PEM-encoded IdP signing certificate (SAML)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"issuerUrl":{"name":"issuerUrl","type":"\u0007","is_mandatory":true,"title":"SAML/OIDC issuer URL","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"UUID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"saml":{"name":"saml","type":"\u0004","is_mandatory":true,"title":"Whether this IdP is SAML-based (SAML, Centrify, OneLogin, Ping, or Okta-via-the-generic-saml-type; OIDC and social IdPs are excluded)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"scimEnabled":{"name":"scimEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SCIM provisioning is enabled for this IdP","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"signRequest":{"name":"signRequest","type":"\u0004","is_mandatory":true,"title":"Whether SAML AuthnRequests are signed","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ssoTargetUrl":{"name":"ssoTargetUrl","type":"\u0007","is_mandatory":true,"title":"SAML SSO target URL (only set for SAML IdPs)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The name of the identity provider, shown to users on the login page.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One identity provider","private":true,"min_provider_version":"11.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.list":{"id":"cloudflare.one.list","name":"cloudflare.one.list","fields":{"count":{"name":"count","type":"\u0005","is_mandatory":true,"title":"Number of items in the list","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the list was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"List description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"List identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"List name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"List type (SERIAL, URL, DOMAIN, EMAIL, IP)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the list was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One Gateway list","private":true,"min_provider_version":"13.1.0","defaults":"name type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.location":{"id":"cloudflare.one.location","name":"cloudflare.one.location","fields":{"anonymizedLogsEnabled":{"name":"anonymizedLogsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether anonymized logs are enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"clientDefault":{"name":"clientDefault","type":"\u0004","is_mandatory":true,"title":"Whether this is the default client location","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the location was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dohSubdomain":{"name":"dohSubdomain","type":"\u0007","is_mandatory":true,"title":"DoH subdomain for this location","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ecsSupport":{"name":"ecsSupport","type":"\u0004","is_mandatory":true,"title":"Whether ECS (EDNS Client Subnet) is supported","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Location identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"Assigned IPv4 address","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Location name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the location was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One Gateway location","private":true,"min_provider_version":"13.1.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.organization":{"id":"cloudflare.one.organization","name":"cloudflare.one.organization","fields":{"allowAuthenticateViaWarp":{"name":"allowAuthenticateViaWarp","type":"\u0004","is_mandatory":true,"title":"Whether authentication via WARP is allowed","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"authDomain":{"name":"authDomain","type":"\u0007","is_mandatory":true,"title":"Auth domain for the organization (e.g., example.cloudflareaccess.com)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"autoRedirectToIdentity":{"name":"autoRedirectToIdentity","type":"\u0004","is_mandatory":true,"title":"Whether users auto-redirect to identity provider","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the organization was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"isUiReadOnly":{"name":"isUiReadOnly","type":"\u0004","is_mandatory":true,"title":"Whether the UI is read-only","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sessionDuration":{"name":"sessionDuration","type":"\u0007","is_mandatory":true,"title":"Default session duration","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the organization was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"userSeatExpirationInactiveTime":{"name":"userSeatExpirationInactiveTime","type":"\u0007","is_mandatory":true,"title":"Inactivity time before user seat expires","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"warpAuthSessionDuration":{"name":"warpAuthSessionDuration","type":"\u0007","is_mandatory":true,"title":"WARP auth session duration","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One organization configuration","private":true,"min_provider_version":"13.1.0","defaults":"name authDomain","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.one.serviceToken":{"id":"cloudflare.one.serviceToken","name":"cloudflare.one.serviceToken","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"OAuth 2.0 client ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the token was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"duration":{"name":"duration","type":"\u0007","is_mandatory":true,"title":"Token duration before expiration","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Time the token expires","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Token identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastSeenAt":{"name":"lastSeenAt","type":"\t","is_mandatory":true,"title":"Time the token was last seen","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Token name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the token was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare One access service token","private":true,"min_provider_version":"13.1.0","defaults":"name id","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.pages":{"id":"cloudflare.pages","fields":{"envVar":{"name":"envVar","type":"\u001bcloudflare.pages.envVar","title":"Cloudflare Pages environment variable (metadata only; values are intentionally not exposed)","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true}},"is_extension":true},"cloudflare.pages.envVar":{"id":"cloudflare.pages.envVar","name":"cloudflare.pages.envVar","fields":{"environment":{"name":"environment","type":"\u0007","is_mandatory":true,"title":"Environment (preview, production)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"projectName":{"name":"projectName","type":"\u0007","is_mandatory":true,"title":"Pages project name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Variable type (plain_text, secret_text)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare Pages environment variable (metadata only; values are intentionally not exposed)","private":true,"min_provider_version":"13.1.1","defaults":"projectName environment name type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.r2":{"id":"cloudflare.r2","name":"cloudflare.r2","fields":{"bucket":{"name":"bucket","type":"\u001bcloudflare.r2.bucket","title":"Cloudflare R2 bucket","desc":"Single R2 storage bucket, identified by its name. The publicAccessEnabled and publicAccessDomain fields report whether the bucket serves its objects publicly over the managed r2.dev subdomain, the primary exposure to audit for an R2 bucket, alongside its storage location and creation time.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"buckets":{"name":"buckets","type":"\u0019\u001bcloudflare.r2.bucket","title":"R2 buckets in the account","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare R2 namespace","desc":"Object-storage resources for a Cloudflare account. The buckets field enumerates every R2 bucket, which is the starting point for auditing where account data is stored and which buckets serve objects publicly through the managed r2.dev subdomain.","private":true,"min_provider_version":"11.0.0","defaults":"buckets","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.r2.bucket":{"id":"cloudflare.r2.bucket","name":"cloudflare.r2.bucket","fields":{"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the bucket was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Bucket location","desc":"Cloudflare region hint for where the bucket's data is stored. One of apac, eeur, enam, weur, wnam, or oc.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Bucket name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"publicAccessDomain":{"name":"publicAccessDomain","type":"\u0007","title":"Managed r2.dev domain assigned to the bucket (empty when public access is disabled)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"publicAccessEnabled":{"name":"publicAccessEnabled","type":"\u0004","title":"Whether public access via the managed r2.dev subdomain is enabled","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare R2 bucket","desc":"Single R2 storage bucket, identified by its name. The publicAccessEnabled and publicAccessDomain fields report whether the bucket serves its objects publicly over the managed r2.dev subdomain, the primary exposure to audit for an R2 bucket, alongside its storage location and creation time.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.streams":{"id":"cloudflare.streams","name":"cloudflare.streams","fields":{"liveInput":{"name":"liveInput","type":"\u001bcloudflare.streams.liveInput","title":"Cloudflare live input (stream)","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"video":{"name":"video","type":"\u001bcloudflare.streams.video","title":"Cloudflare videos and recordings","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true}},"title":"Cloudflare Stream namespace","desc":"Grouping for Cloudflare Stream assets, the managed video platform that serves live-streaming inputs alongside uploaded or recorded video-on-demand files. Live inputs are modeled as cloudflare.streams.liveInput and video assets as cloudflare.streams.video, both enumerated from the account.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.streams.liveInput":{"id":"cloudflare.streams.liveInput","name":"cloudflare.streams.liveInput","fields":{"deleteRecordingAfterDays":{"name":"deleteRecordingAfterDays","type":"\u0005","is_mandatory":true,"title":"Number of days after which to delete the recording","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Input name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"uid":{"name":"uid","type":"\u0007","is_mandatory":true,"title":"Unique identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare live input (stream)","private":true,"min_provider_version":"11.0.0","defaults":"uid name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.streams.video":{"id":"cloudflare.streams.video","name":"cloudflare.streams.video","fields":{"creator":{"name":"creator","type":"\u0007","is_mandatory":true,"title":"Creator ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dash":{"name":"dash","type":"\u0007","is_mandatory":true,"title":"Dash URL","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"duration":{"name":"duration","type":"\u0006","is_mandatory":true,"title":"Video duration in seconds","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"height":{"name":"height","type":"\u0005","is_mandatory":true,"title":"Height (px)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hls":{"name":"hls","type":"\u0007","is_mandatory":true,"title":"HLS URL","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"liveInput":{"name":"liveInput","type":"\u0007","is_mandatory":true,"title":"Live input ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Display name of the video","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"preview":{"name":"preview","type":"\u0007","is_mandatory":true,"title":"Preview URL","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ready":{"name":"ready","type":"\u0004","is_mandatory":true,"title":"Whether the video is ready to stream","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"requireSignedUrls":{"name":"requireSignedUrls","type":"\u0004","is_mandatory":true,"title":"Whether playback requires a signed URL token rather than the plain UID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"scheduledDeletion":{"name":"scheduledDeletion","type":"\t","is_mandatory":true,"title":"Date and time at which the video will be deleted (No value or a null value means that the video won't be deleted.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Size in Bytes","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"thumbnail":{"name":"thumbnail","type":"\u0007","is_mandatory":true,"title":"Thumbnail URL","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"thumbnailTimestampPct":{"name":"thumbnailTimestampPct","type":"\u0006","is_mandatory":true,"title":"Timestamp for a thumbnail image, as a percentage of the video's duration","desc":"To convert from a second-wise timestamp to a percentage, divide the desired timestamp by the total duration of the video. If this value is not set, the default thumbnail image is taken from 0s of the video.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"uid":{"name":"uid","type":"\u0007","is_mandatory":true,"title":"Unique identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"uploaded":{"name":"uploaded","type":"\t","is_mandatory":true,"title":"Time the video was uploaded","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"width":{"name":"width","type":"\u0005","is_mandatory":true,"title":"Width (px)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare videos and recordings","private":true,"min_provider_version":"11.0.0","defaults":"name uid","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.tunnel":{"id":"cloudflare.tunnel","name":"cloudflare.tunnel","fields":{"connection":{"name":"connection","type":"\u001bcloudflare.tunnel.connection","title":"Cloudflare tunnel connection","desc":"Active connection between a tunnel's connector and a Cloudflare data center. Each connection records which data center it terminates in (`coloName`), the connector that established it (`clientId`), the connector software version (`clientVersion`), and the origin IP the connector runs on, which helps audit connector fleet health and detect outdated connector versions.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"connections":{"name":"connections","type":"\u0019\u001bcloudflare.tunnel.connection","is_mandatory":true,"title":"Active connections for this tunnel","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the tunnel was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"deletedAt":{"name":"deletedAt","type":"\t","is_mandatory":true,"title":"Time the tunnel was deleted","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Tunnel identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Tunnel name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"remoteConfig":{"name":"remoteConfig","type":"\u0004","is_mandatory":true,"title":"Whether the tunnel is configured remotely","desc":"True when the tunnel's configuration is managed remotely from the Zero Trust dashboard rather than by a local cloudflared config file. Remotely managed tunnels have their ingress rules controlled through the Cloudflare API instead of on the connector host.","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"route":{"name":"route","type":"\u001bcloudflare.tunnel.route","title":"Cloudflare tunnel route","desc":"Private network route that maps a CIDR range to a tunnel, defining which internal IP ranges are reachable through the tunnel by Cloudflare WARP clients. Reviewing routes shows how much of a private network each tunnel exposes and which virtual network it belongs to, which matters for network segmentation. The `network` field carries the routed CIDR block.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Tunnel health status","desc":"One of inactive (no connections ever registered), degraded (fewer connections than expected for high availability), healthy (all connections established), or down (all connections lost).","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnelType":{"name":"tunnelType","type":"\u0007","is_mandatory":true,"title":"Tunnel type (cfd_tunnel, warp_connector)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"virtualNetwork":{"name":"virtualNetwork","type":"\u001bcloudflare.tunnel.virtualNetwork","title":"Cloudflare tunnel virtual network","desc":"Virtual network used to segment tunnel routes, allowing overlapping private CIDR ranges to coexist by isolating them into separate routing scopes. The `isDefaultNetwork` field marks the virtual network that routes fall into when no explicit virtual network is assigned. Select a virtual network by name, for example `cloudflare.tunnel.virtualNetwork(name: \"default\")`.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true}},"title":"Cloudflare tunnel","desc":"Cloudflare Tunnel connecting origin services to Cloudflare's edge over an outbound-only connector, so private applications can be reached without opening inbound firewall ports. Auditing tunnels surfaces their operational health, whether their configuration is managed remotely from the Zero Trust dashboard, and the active connector connections carrying traffic. The `tunnelType` field distinguishes a cloudflared tunnel (cfd_tunnel) from a WARP connector (warp_connector).","private":true,"min_provider_version":"13.1.0","defaults":"name status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.tunnel.connection":{"id":"cloudflare.tunnel.connection","name":"cloudflare.tunnel.connection","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"Client connector ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"clientVersion":{"name":"clientVersion","type":"\u0007","is_mandatory":true,"title":"Client connector version","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"coloName":{"name":"coloName","type":"\u0007","is_mandatory":true,"title":"Cloudflare data center name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Connection identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"isPendingReconnect":{"name":"isPendingReconnect","type":"\u0004","is_mandatory":true,"title":"Whether the connection is pending reconnect","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"openedAt":{"name":"openedAt","type":"\t","is_mandatory":true,"title":"Time the connection was opened","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"originIp":{"name":"originIp","type":"\u0007","is_mandatory":true,"title":"Origin IP address","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare tunnel connection","desc":"Active connection between a tunnel's connector and a Cloudflare data center. Each connection records which data center it terminates in (`coloName`), the connector that established it (`clientId`), the connector software version (`clientVersion`), and the origin IP the connector runs on, which helps audit connector fleet health and detect outdated connector versions.","private":true,"min_provider_version":"13.1.0","defaults":"id coloName","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.tunnel.route":{"id":"cloudflare.tunnel.route","name":"cloudflare.tunnel.route","fields":{"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Route comment","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the route was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"deletedAt":{"name":"deletedAt","type":"\t","is_mandatory":true,"title":"Time the route was deleted","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"network":{"name":"network","type":"\u0007","is_mandatory":true,"title":"CIDR network range","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnelId":{"name":"tunnelId","type":"\u0007","is_mandatory":true,"title":"Tunnel identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnelName":{"name":"tunnelName","type":"\u0007","is_mandatory":true,"title":"Tunnel name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"virtualNetwork":{"name":"virtualNetwork","type":"\u001bcloudflare.tunnel.virtualNetwork","title":"Virtual network","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare tunnel route","desc":"Private network route that maps a CIDR range to a tunnel, defining which internal IP ranges are reachable through the tunnel by Cloudflare WARP clients. Reviewing routes shows how much of a private network each tunnel exposes and which virtual network it belongs to, which matters for network segmentation. The `network` field carries the routed CIDR block.","private":true,"min_provider_version":"13.1.0","defaults":"network tunnelName","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.tunnel.virtualNetwork":{"id":"cloudflare.tunnel.virtualNetwork","name":"cloudflare.tunnel.virtualNetwork","fields":{"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Virtual network comment","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the virtual network was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"deletedAt":{"name":"deletedAt","type":"\t","is_mandatory":true,"title":"Time the virtual network was deleted","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Virtual network identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"isDefaultNetwork":{"name":"isDefaultNetwork","type":"\u0004","is_mandatory":true,"title":"Whether this is the default network","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Virtual network name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare tunnel virtual network","desc":"Virtual network used to segment tunnel routes, allowing overlapping private CIDR ranges to coexist by isolating them into separate routing scopes. The `isDefaultNetwork` field marks the virtual network that routes fall into when no explicit virtual network is assigned. Select a virtual network by name, for example `cloudflare.tunnel.virtualNetwork(name: \"default\")`.","private":true,"min_provider_version":"13.1.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.workers":{"id":"cloudflare.workers","name":"cloudflare.workers","fields":{"page":{"name":"page","type":"\u001bcloudflare.workers.page","title":"Cloudflare Pages page","desc":"Cloudflare Pages deployment, selected by `shortId`. Exposes the deployment environment (preview or production), its public URL, custom domain aliases, the production branch, and created and modified timestamps. Useful for auditing what a Pages project publishes and where it is reachable.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"pageEnvVars":{"name":"pageEnvVars","type":"\u0019\u001bcloudflare.pages.envVar","title":"Inventory of environment variables bound to Pages projects across preview and production environments (metadata only, values are not exposed)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"pages":{"name":"pages","type":"\u0019\u001bcloudflare.workers.page","title":"List all pages","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"secret":{"name":"secret","type":"\u001bcloudflare.workers.secret","title":"Cloudflare Workers script secret","desc":"Secret binding attached to a Workers script, selected by script name and secret name. Metadata only: the name and secret type are exposed, never the value, since Cloudflare's API never returns secret values. Useful for inventorying which secrets each script depends on.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"secrets":{"name":"secrets","type":"\u0019\u001bcloudflare.workers.secret","title":"Inventory of secrets bound to all worker scripts (metadata only, values are not exposed)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"worker":{"name":"worker","type":"\u001bcloudflare.workers.worker","title":"Cloudflare worker","desc":"Deployed Workers script and its deployment metadata: code size, placement mode, active deployment and pipeline identifiers, LogPush setting, and created and modified timestamps. Shows which scripts run in an account and how each one is deployed.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"workers":{"name":"workers","type":"\u0019\u001bcloudflare.workers.worker","title":"List all workers","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare Workers namespace","desc":"Serverless Workers scripts and Pages projects for an account. Query `workers` for script metadata (size, placement mode, LogPush status), `pages` for Pages deployment details (environment, URL, aliases), `secrets` for the inventory of secrets bound to worker scripts (metadata only, values are never exposed), and `pageEnvVars` for the inventory of environment variables across Pages project environments.","private":true,"min_provider_version":"11.0.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.workers.page":{"id":"cloudflare.workers.page","name":"cloudflare.workers.page","fields":{"aliases":{"name":"aliases","type":"\u0019\u0007","is_mandatory":true,"title":"Custom domain aliases pointing at this deployment","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the deployment was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"environment":{"name":"environment","type":"\u0007","is_mandatory":true,"title":"Deployment environment (preview or production)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Deployment ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the deployment was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"productionBranch":{"name":"productionBranch","type":"\u0007","is_mandatory":true,"title":"Branch from which production deployments are built","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"projectId":{"name":"projectId","type":"\u0007","is_mandatory":true,"title":"Pages project identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"projectName":{"name":"projectName","type":"\u0007","is_mandatory":true,"title":"Pages project name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"shortId":{"name":"shortId","type":"\u0007","is_mandatory":true,"title":"Short deployment ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Public URL of the deployment","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare Pages page","desc":"Cloudflare Pages deployment, selected by `shortId`. Exposes the deployment environment (preview or production), its public URL, custom domain aliases, the production branch, and created and modified timestamps. Useful for auditing what a Pages project publishes and where it is reachable.","private":true,"min_provider_version":"11.0.0","defaults":"shortId","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.workers.secret":{"id":"cloudflare.workers.secret","name":"cloudflare.workers.secret","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Secret name (binding identifier)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"scriptName":{"name":"scriptName","type":"\u0007","is_mandatory":true,"title":"Worker script name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"secretType":{"name":"secretType","type":"\u0007","is_mandatory":true,"title":"Secret type (e.g., secret_text)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare Workers script secret","desc":"Secret binding attached to a Workers script, selected by script name and secret name. Metadata only: the name and secret type are exposed, never the value, since Cloudflare's API never returns secret values. Useful for inventorying which secrets each script depends on.","private":true,"min_provider_version":"13.1.1","defaults":"scriptName name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.workers.worker":{"id":"cloudflare.workers.worker","name":"cloudflare.workers.worker","fields":{"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the worker was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"deploymentId":{"name":"deploymentId","type":"\u0007","is_mandatory":true,"title":"Deployment for the worker","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Worker etag","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Worker ID","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastDeployedFrom":{"name":"lastDeployedFrom","type":"\u0007","is_mandatory":true,"title":"Worker was last deployed from","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"logPush":{"name":"logPush","type":"\u0004","is_mandatory":true,"title":"Whether LogPush is enabled for the worker","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the worker was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"pipelineHash":{"name":"pipelineHash","type":"\u0007","is_mandatory":true,"title":"CI/CD pipeline for the worker","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"placementMode":{"name":"placementMode","type":"\u0007","is_mandatory":true,"title":"Placement mode for the worker (e.g., smart)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Worker size","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare worker","desc":"Deployed Workers script and its deployment metadata: code size, placement mode, active deployment and pipeline identifiers, LogPush setting, and created and modified timestamps. Shows which scripts run in an account and how each one is deployed.","private":true,"min_provider_version":"11.0.0","defaults":"id","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone":{"id":"cloudflare.zone","name":"cloudflare.zone","fields":{"account":{"name":"account","type":"\u001bcloudflare.zone.account","is_mandatory":true,"title":"Zone owner account","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"botManagement":{"name":"botManagement","type":"\u001bcloudflare.zone.botManagement","title":"Bot management settings","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"certificatePack":{"name":"certificatePack","type":"\u001bcloudflare.zone.certificatePack","title":"Cloudflare managed certificate pack (Cloudflare-issued)","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"certificatePacks":{"name":"certificatePacks","type":"\u0019\u001bcloudflare.zone.certificatePack","title":"Managed certificate packs (Cloudflare-issued)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the zone was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"customCertificate":{"name":"customCertificate","type":"\u001bcloudflare.zone.customCertificate","title":"Cloudflare custom SSL certificate (user-uploaded)","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"customCertificates":{"name":"customCertificates","type":"\u0019\u001bcloudflare.zone.customCertificate","title":"Custom SSL certificates (user-uploaded)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"customHostname":{"name":"customHostname","type":"\u001bcloudflare.zone.customHostname","title":"Cloudflare custom hostname","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"customHostnames":{"name":"customHostnames","type":"\u0019\u001bcloudflare.zone.customHostname","title":"Custom hostnames","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dns":{"name":"dns","type":"\u001bcloudflare.dns","title":"DNS records associated with the zone","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dnssec":{"name":"dnssec","type":"\u001bcloudflare.zone.dnssec","title":"DNSSEC configuration for the zone","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"emailRouting":{"name":"emailRouting","type":"\u001bcloudflare.zone.emailRouting","title":"Email routing configuration (SPF/DKIM/DMARC awareness)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"firewallRule":{"name":"firewallRule","type":"\u001bcloudflare.zone.firewallRule","title":"Legacy Cloudflare zone firewall rule","desc":"Deprecated in favor of `cloudflare.zone.ruleset`.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true,"maturity":"deprecated"},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bcloudflare.zone.firewallRule","title":"Firewall rules (legacy)","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Zone identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"liveInputs":{"name":"liveInputs","type":"\u0019\u001bcloudflare.streams.liveInput","title":"Stream live inputs","desc":"Deprecated in favor of cloudflare.account.liveInputs. Stream is account-scoped, so a zone returned the same account-wide live inputs regardless of which zone it was read from.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"loadBalancer":{"name":"loadBalancer","type":"\u001bcloudflare.zone.loadBalancer","title":"Cloudflare load balancer","desc":"Traffic director that steers requests for a hostname across one or more origin pools. The `steeringPolicy` selects which pool serves a request, `proxied` and `enabled` give its serving state, and session affinity configuration controls stickiness. The `fallbackPool`, `defaultPools`, and `pools` references resolve the backing pools, while `regionPools`, `popPools`, and `countryPools` hold the geo-steering maps of pool IDs.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"loadBalancers":{"name":"loadBalancers","type":"\u0019\u001bcloudflare.zone.loadBalancer","title":"Load balancers","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"logpushJob":{"name":"logpushJob","type":"\u001bcloudflare.zone.logpushJob","title":"Cloudflare zone logpush job","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"logpushJobs":{"name":"logpushJobs","type":"\u0019\u001bcloudflare.zone.logpushJob","title":"Logpush jobs","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the zone was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"mtlsCertificates":{"name":"mtlsCertificates","type":"\u0019\u001bcloudflare.mtlsCertificate","title":"mTLS certificates","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Zone name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"nameServers":{"name":"nameServers","type":"\u0019\u0007","is_mandatory":true,"title":"Nameservers for this zone","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"one":{"name":"one","type":"\u001bcloudflare.one","title":"Cloudflare One (Zero Trust)","desc":"Deprecated in favor of cloudflare.account.one. Zero Trust is account-scoped, so a zone returned the same account-wide configuration regardless of which zone it was read from.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"originCACertificate":{"name":"originCACertificate","type":"\u001bcloudflare.zone.originCACertificate","title":"Cloudflare origin CA certificate","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"originCACertificates":{"name":"originCACertificates","type":"\u0019\u001bcloudflare.zone.originCACertificate","title":"Origin CA certificates","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"originalNameServers":{"name":"originalNameServers","type":"\u0019\u0007","is_mandatory":true,"title":"Original name servers","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"owner":{"name":"owner","type":"\u001bcloudflare.zone.owner","is_mandatory":true,"title":"Zone owner","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"pageRule":{"name":"pageRule","type":"\u001bcloudflare.zone.pageRule","title":"Cloudflare zone page rule","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"pageRules":{"name":"pageRules","type":"\u0019\u001bcloudflare.zone.pageRule","title":"Page rules","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"paused":{"name":"paused","type":"\u0004","is_mandatory":true,"title":"Whether the zone is paused","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"plan":{"name":"plan","type":"\u001bcloudflare.zone.plan","is_mandatory":true,"title":"Zone plan. Deprecated and will be removed in the next major release.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"r2":{"name":"r2","type":"\u001bcloudflare.r2","title":"Cloudflare R2 storage","desc":"Deprecated in favor of cloudflare.account.r2. R2 is account-scoped, so a zone returned the same account-wide buckets regardless of which zone it was read from.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"rateLimitRule":{"name":"rateLimitRule","type":"\u001bcloudflare.zone.rateLimitRule","title":"Cloudflare zone rate-limit rule (legacy rate-limiting product)","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"rateLimitRules":{"name":"rateLimitRules","type":"\u0019\u001bcloudflare.zone.rateLimitRule","title":"Rate-limit rules (legacy rate-limiting product)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ruleset":{"name":"ruleset","type":"\u001bcloudflare.zone.ruleset","title":"Cloudflare zone ruleset","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"rulesets":{"name":"rulesets","type":"\u0019\u001bcloudflare.zone.ruleset","title":"Managed and custom rulesets evaluated for this zone","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"settings":{"name":"settings","type":"\u001bcloudflare.zone.settings","title":"Zone security settings","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"The current status of the zone (initializing, pending, active, or moved)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tunnelRoutes":{"name":"tunnelRoutes","type":"\u0019\u001bcloudflare.tunnel.route","title":"Tunnel routes","desc":"Deprecated in favor of cloudflare.account.tunnelRoutes.","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"tunnelVirtualNetworks":{"name":"tunnelVirtualNetworks","type":"\u0019\u001bcloudflare.tunnel.virtualNetwork","title":"Tunnel virtual networks","desc":"Deprecated in favor of cloudflare.account.tunnelVirtualNetworks.","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"tunnels":{"name":"tunnels","type":"\u0019\u001bcloudflare.tunnel","title":"Cloudflare tunnels","desc":"Deprecated in favor of cloudflare.account.tunnels. Tunnels are account-scoped, so a zone returned the same account-wide tunnels regardless of which zone it was read from.","min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"DNS zone type (full or partial)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"videos":{"name":"videos","type":"\u0019\u001bcloudflare.streams.video","title":"Stream video assets","desc":"Deprecated in favor of cloudflare.account.videos. Stream is account-scoped, so a zone returned the same account-wide videos regardless of which zone it was read from.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"wafRule":{"name":"wafRule","type":"\u001bcloudflare.zone.wafRule","title":"Cloudflare zone WAF rule (a single rule from a managed or custom ruleset)","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/cloudflare","is_implicit_resource":true},"wafRules":{"name":"wafRules","type":"\u0019\u001bcloudflare.zone.wafRule","title":"WAF rules (managed and custom rulesets, expanded into individual rules)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"workers":{"name":"workers","type":"\u001bcloudflare.workers","title":"Cloudflare Workers configuration and deployments","desc":"Deprecated in favor of cloudflare.account.workers. Workers are account-scoped, so a zone returned the same account-wide scripts regardless of which zone it was read from.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"}},"title":"Cloudflare DNS Zone","desc":"Configuration and security posture of a single Cloudflare DNS zone. A zone corresponds to a registered domain managed through Cloudflare. Query `settings` for TLS, WAF, and HSTS enforcement; `dns` for DNS records; `rulesets` and `wafRules` for firewall policy; `certificatePacks` and `customCertificates` for TLS certificates; `dnssec` for DNSSEC configuration; `botManagement` for bot-mitigation settings; `emailRouting` for SPF/DKIM/DMARC status; and `logpushJobs` for data-export configuration.","private":true,"min_provider_version":"11.0.0","defaults":"name account.name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.account":{"id":"cloudflare.zone.account","name":"cloudflare.zone.account","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Account email. Deprecated and will be removed in the next major release.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Account identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Account name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Account type. Deprecated and will be removed in the next major release.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"}},"title":"Cloudflare account","private":true,"min_provider_version":"11.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.botManagement":{"id":"cloudflare.zone.botManagement","name":"cloudflare.zone.botManagement","fields":{"aiBotsProtection":{"name":"aiBotsProtection","type":"\u0007","is_mandatory":true,"title":"AI bots protection setting (block, disabled)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"autoUpdateModel":{"name":"autoUpdateModel","type":"\u0004","is_mandatory":true,"title":"Whether the model auto-updates","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enableJs":{"name":"enableJs","type":"\u0004","is_mandatory":true,"title":"Whether JavaScript detections are enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"fightMode":{"name":"fightMode","type":"\u0004","is_mandatory":true,"title":"Whether bot fight mode is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"optimizeWordpress":{"name":"optimizeWordpress","type":"\u0004","is_mandatory":true,"title":"Whether WordPress optimization is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sbfmDefinitelyAutomated":{"name":"sbfmDefinitelyAutomated","type":"\u0007","is_mandatory":true,"title":"Action for definitely automated requests (block, managed_challenge, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sbfmLikelyAutomated":{"name":"sbfmLikelyAutomated","type":"\u0007","is_mandatory":true,"title":"Action for likely automated requests","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sbfmStaticResourceProtection":{"name":"sbfmStaticResourceProtection","type":"\u0004","is_mandatory":true,"title":"Whether static resource protection is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sbfmVerifiedBots":{"name":"sbfmVerifiedBots","type":"\u0007","is_mandatory":true,"title":"Action for verified bots","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"usingLatestModel":{"name":"usingLatestModel","type":"\u0004","is_mandatory":true,"title":"Whether the latest model is being used","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone bot management settings","private":true,"min_provider_version":"13.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.certificatePack":{"id":"cloudflare.zone.certificatePack","name":"cloudflare.zone.certificatePack","fields":{"certificateAuthority":{"name":"certificateAuthority","type":"\u0007","is_mandatory":true,"title":"Certificate authority used","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hosts":{"name":"hosts","type":"\u0019\u0007","is_mandatory":true,"title":"Hostnames covered by the certificate pack","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate pack identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Certificate pack status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Certificate pack type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"validationMethod":{"name":"validationMethod","type":"\u0007","is_mandatory":true,"title":"Domain control validation method","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"validityDays":{"name":"validityDays","type":"\u0005","is_mandatory":true,"title":"Certificate validity in days","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare managed certificate pack (Cloudflare-issued)","private":true,"min_provider_version":"11.1.0","defaults":"id status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.customCertificate":{"id":"cloudflare.zone.customCertificate","name":"cloudflare.zone.customCertificate","fields":{"bundleMethod":{"name":"bundleMethod","type":"\u0007","is_mandatory":true,"title":"Certificate bundle method","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Time the certificate expires","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hosts":{"name":"hosts","type":"\u0019\u0007","is_mandatory":true,"title":"Hostnames covered by the certificate","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"issuer":{"name":"issuer","type":"\u0007","is_mandatory":true,"title":"Certificate issuer","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedAt":{"name":"modifiedAt","type":"\t","is_mandatory":true,"title":"Time the certificate was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Certificate priority","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"signature":{"name":"signature","type":"\u0007","is_mandatory":true,"title":"Signature type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Certificate status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"uploadedAt":{"name":"uploadedAt","type":"\t","is_mandatory":true,"title":"Time the certificate was uploaded","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare custom SSL certificate (user-uploaded)","private":true,"min_provider_version":"11.1.0","defaults":"id status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.customHostname":{"id":"cloudflare.zone.customHostname","name":"cloudflare.zone.customHostname","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the custom hostname was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"customOriginServer":{"name":"customOriginServer","type":"\u0007","is_mandatory":true,"title":"Custom origin server","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"customOriginSni":{"name":"customOriginSni","type":"\u0007","is_mandatory":true,"title":"Custom origin SNI","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"The custom hostname","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Custom hostname identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sslMethod":{"name":"sslMethod","type":"\u0007","is_mandatory":true,"title":"SSL validation method","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sslStatus":{"name":"sslStatus","type":"\u0007","is_mandatory":true,"title":"SSL certificate status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sslType":{"name":"sslType","type":"\u0007","is_mandatory":true,"title":"SSL certificate type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Custom hostname status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare custom hostname","private":true,"min_provider_version":"13.1.0","defaults":"hostname status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.dnssec":{"id":"cloudflare.zone.dnssec","name":"cloudflare.zone.dnssec","fields":{"algorithm":{"name":"algorithm","type":"\u0007","is_mandatory":true,"title":"DNSKEY algorithm","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"digest":{"name":"digest","type":"\u0007","is_mandatory":true,"title":"DS digest hex value","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"digestAlgorithm":{"name":"digestAlgorithm","type":"\u0007","is_mandatory":true,"title":"DS digest algorithm","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"digestType":{"name":"digestType","type":"\u0007","is_mandatory":true,"title":"DS digest type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ds":{"name":"ds","type":"\u0007","is_mandatory":true,"title":"DS resource record (parent-zone-ready string)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"flags":{"name":"flags","type":"\u0005","is_mandatory":true,"title":"DNSKEY flags","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"keyTag":{"name":"keyTag","type":"\u0005","is_mandatory":true,"title":"DNSKEY key tag","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"keyType":{"name":"keyType","type":"\u0007","is_mandatory":true,"title":"DNSKEY key type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the configuration was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"publicKey":{"name":"publicKey","type":"\u0007","is_mandatory":true,"title":"DNSKEY public key","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"DNSSEC status (active, disabled, pending)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone DNSSEC configuration","private":true,"min_provider_version":"13.1.1","defaults":"status algorithm","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.emailRouting":{"id":"cloudflare.zone.emailRouting","name":"cloudflare.zone.emailRouting","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the configuration was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dmarcConfigured":{"name":"dmarcConfigured","type":"\u0004","title":"Whether a DMARC (TXT v=DMARC1) record is published for the zone","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"dnsRecords":{"name":"dnsRecords","type":"\u0019\n","title":"Suggested DNS records (MX, SPF/TXT, DKIM/TXT, DMARC) required for email-routing configuration","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether email routing is enabled for the zone","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedAt":{"name":"modifiedAt","type":"\t","is_mandatory":true,"title":"Time the configuration was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"mxConfigured":{"name":"mxConfigured","type":"\u0004","title":"Whether at least one MX record consistent with email-routing is in place","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Email routing display name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"spfConfigured":{"name":"spfConfigured","type":"\u0004","title":"Whether an SPF (TXT v=spf1) record consistent with email-routing is in place","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Email routing status (ready, unconfigured, misconfigured, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare email-routing configuration","private":true,"min_provider_version":"13.1.1","defaults":"enabled status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.firewallRule":{"id":"cloudflare.zone.firewallRule","name":"cloudflare.zone.firewallRule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Rule action (block, challenge, js_challenge, managed_challenge, allow, log, bypass)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the rule was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Rule description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"filterExpression":{"name":"filterExpression","type":"\u0007","is_mandatory":true,"title":"Filter expression","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"paused":{"name":"paused","type":"\u0004","is_mandatory":true,"title":"Whether the rule is paused","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"products":{"name":"products","type":"\u0019\u0007","is_mandatory":true,"title":"Products this rule applies to","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ref":{"name":"ref","type":"\u0007","is_mandatory":true,"title":"Rule reference tag","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the rule was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Legacy Cloudflare zone firewall rule","desc":"Deprecated in favor of `cloudflare.zone.ruleset`.","private":true,"min_provider_version":"13.1.0","defaults":"id action","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"cloudflare.zone.loadBalancer":{"id":"cloudflare.zone.loadBalancer","name":"cloudflare.zone.loadBalancer","fields":{"countryPools":{"name":"countryPools","type":"\n","is_mandatory":true,"title":"Pool IDs keyed by country code, used under geo steering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"createdOn":{"name":"createdOn","type":"\t","is_mandatory":true,"title":"Time the load balancer was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"defaultPools":{"name":"defaultPools","type":"\u0019\u001bcloudflare.loadBalancerPool","title":"Pools used in the default (non-geo) ordering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the load balancer is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"fallbackPool":{"name":"fallbackPool","type":"\u001bcloudflare.loadBalancerPool","title":"Pool used when no other pool is healthy","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Load balancer identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"modifiedOn":{"name":"modifiedOn","type":"\t","is_mandatory":true,"title":"Time the load balancer was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"DNS hostname the load balancer answers for","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"pools":{"name":"pools","type":"\u0019\u001bcloudflare.loadBalancerPool","title":"Every distinct pool the load balancer references (default, fallback, and geo)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"popPools":{"name":"popPools","type":"\n","is_mandatory":true,"title":"Pool IDs keyed by Cloudflare PoP, used under geo steering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"proxied":{"name":"proxied","type":"\u0004","is_mandatory":true,"title":"Whether traffic is proxied through Cloudflare (orange-cloud)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"regionPools":{"name":"regionPools","type":"\n","is_mandatory":true,"title":"Pool IDs keyed by region code, used under geo steering","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sessionAffinity":{"name":"sessionAffinity","type":"\u0007","is_mandatory":true,"title":"Session affinity mode (none, cookie, ip_cookie, header)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sessionAffinityAttributes":{"name":"sessionAffinityAttributes","type":"\n","is_mandatory":true,"title":"Session affinity cookie attributes (samesite, secure, drain_duration, zero_downtime_failover, headers, require_all_headers)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"sessionAffinityTtl":{"name":"sessionAffinityTtl","type":"\u0005","is_mandatory":true,"title":"Session affinity TTL, in seconds","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"steeringPolicy":{"name":"steeringPolicy","type":"\u0007","is_mandatory":true,"title":"Pool selection logic (off, geo, dynamic_latency, random, proximity, least_outstanding_requests, least_connections)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"DNS record TTL, in seconds (ignored when proxied)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare load balancer","desc":"Traffic director that steers requests for a hostname across one or more origin pools. The `steeringPolicy` selects which pool serves a request, `proxied` and `enabled` give its serving state, and session affinity configuration controls stickiness. The `fallbackPool`, `defaultPools`, and `pools` references resolve the backing pools, while `regionPools`, `popPools`, and `countryPools` hold the geo-steering maps of pool IDs.","private":true,"min_provider_version":"13.3.6","defaults":"name steeringPolicy enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.logpushJob":{"id":"cloudflare.zone.logpushJob","name":"cloudflare.zone.logpushJob","fields":{"dataset":{"name":"dataset","type":"\u0007","is_mandatory":true,"title":"Dataset being pushed","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"destinationConf":{"name":"destinationConf","type":"\u0007","is_mandatory":true,"title":"Destination configuration URI","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the job is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"errorMessage":{"name":"errorMessage","type":"\u0007","is_mandatory":true,"title":"Last error message","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"frequency":{"name":"frequency","type":"\u0007","is_mandatory":true,"title":"Push frequency (high, low)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Job identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastComplete":{"name":"lastComplete","type":"\t","is_mandatory":true,"title":"Time of last successful push","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastError":{"name":"lastError","type":"\t","is_mandatory":true,"title":"Time of last error","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"logpullOptions":{"name":"logpullOptions","type":"\u0007","is_mandatory":true,"title":"Logpull options string","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Job name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone logpush job","private":true,"min_provider_version":"13.1.0","defaults":"name dataset","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.originCACertificate":{"id":"cloudflare.zone.originCACertificate","name":"cloudflare.zone.originCACertificate","fields":{"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Time the certificate expires","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hostnames":{"name":"hostnames","type":"\u0019\u0007","is_mandatory":true,"title":"Hostnames covered by the certificate","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"requestType":{"name":"requestType","type":"\u0007","is_mandatory":true,"title":"Certificate request type (origin-rsa, origin-ecc)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"requestValidity":{"name":"requestValidity","type":"\u0005","is_mandatory":true,"title":"Requested validity in days","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"revokedAt":{"name":"revokedAt","type":"\t","is_mandatory":true,"title":"Time the certificate was revoked","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare origin CA certificate","private":true,"min_provider_version":"13.1.0","defaults":"id requestType","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.owner":{"id":"cloudflare.zone.owner","name":"cloudflare.zone.owner","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Owner email. Deprecated and will be removed in the next major release.","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Owner identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Owner name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ownerType":{"name":"ownerType","type":"\u0007","is_mandatory":true,"title":"Owner type","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone owner","private":true,"min_provider_version":"11.1.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.pageRule":{"id":"cloudflare.zone.pageRule","name":"cloudflare.zone.pageRule","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the page rule was created","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Page rule identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Page rule priority","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Page rule status (active, disabled)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the page rule was last modified","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone page rule","private":true,"min_provider_version":"13.1.0","defaults":"id status","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.plan":{"id":"cloudflare.zone.plan","name":"cloudflare.zone.plan","fields":{"currency":{"name":"currency","type":"\u0007","is_mandatory":true,"title":"Plan currency","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"frequency":{"name":"frequency","type":"\u0007","is_mandatory":true,"title":"Plan frequency","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Plan identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"isSubscribed":{"name":"isSubscribed","type":"\u0004","is_mandatory":true,"title":"Whether the zone is subscribed to this plan","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plan name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"price":{"name":"price","type":"\u0005","is_mandatory":true,"title":"Plan price","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone plan","desc":"Cloudflare service plan attached to a zone (plan name, price, billing frequency, and subscription state). Will be removed in the next major release.","private":true,"min_provider_version":"11.1.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/cloudflare","maturity":"deprecated"},"cloudflare.zone.rateLimitRule":{"id":"cloudflare.zone.rateLimitRule","name":"cloudflare.zone.rateLimitRule","fields":{"action":{"name":"action","type":"\n","is_mandatory":true,"title":"Action taken when the threshold is exceeded ({mode, timeout, response})","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Rule description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is disabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"methods":{"name":"methods","type":"\u0019\u0007","is_mandatory":true,"title":"HTTP methods matched by this rule","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"period":{"name":"period","type":"\u0005","is_mandatory":true,"title":"Window over which `threshold` is measured (seconds)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"responseStatuses":{"name":"responseStatuses","type":"\u0019\u0005","is_mandatory":true,"title":"Origin response status codes matched by this rule","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"schemes":{"name":"schemes","type":"\u0019\u0007","is_mandatory":true,"title":"HTTP schemes matched by this rule (HTTP, HTTPS, _ALL_)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"threshold":{"name":"threshold","type":"\u0005","is_mandatory":true,"title":"Number of requests allowed within `period` before the action triggers","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"urlPattern":{"name":"urlPattern","type":"\u0007","is_mandatory":true,"title":"Request URL pattern matched by this rule","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone rate-limit rule (legacy rate-limiting product)","private":true,"min_provider_version":"13.1.1","defaults":"id action.mode threshold","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.ruleset":{"id":"cloudflare.zone.ruleset","name":"cloudflare.zone.ruleset","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Ruleset description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Ruleset identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Ruleset kind (managed, root, zone, custom)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Ruleset name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"phase":{"name":"phase","type":"\u0007","is_mandatory":true,"title":"Ruleset phase (http_request_firewall_managed, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the ruleset was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Ruleset version","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone ruleset","private":true,"min_provider_version":"13.1.0","defaults":"name phase","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.settings":{"id":"cloudflare.zone.settings","name":"cloudflare.zone.settings","fields":{"alwaysUseHttps":{"name":"alwaysUseHttps","type":"\u0007","is_mandatory":true,"title":"Whether HTTPS is always used (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"automaticHttpsRewrites":{"name":"automaticHttpsRewrites","type":"\u0007","is_mandatory":true,"title":"Automatic HTTPS rewrites (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"browserCheck":{"name":"browserCheck","type":"\u0007","is_mandatory":true,"title":"Browser integrity check (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"challengeTtl":{"name":"challengeTtl","type":"\u0005","is_mandatory":true,"title":"Challenge page TTL, how long a visitor's challenge clearance lasts, in seconds","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"emailObfuscation":{"name":"emailObfuscation","type":"\u0007","is_mandatory":true,"title":"Email obfuscation (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hotlinkProtection":{"name":"hotlinkProtection","type":"\u0007","is_mandatory":true,"title":"Hotlink protection (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hstsEnabled":{"name":"hstsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether HSTS (Strict-Transport-Security) is enabled for the zone","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hstsIncludeSubdomains":{"name":"hstsIncludeSubdomains","type":"\u0004","is_mandatory":true,"title":"Whether HSTS applies to subdomains","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hstsMaxAge":{"name":"hstsMaxAge","type":"\u0005","is_mandatory":true,"title":"HSTS max-age (in seconds)","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hstsNoSniff":{"name":"hstsNoSniff","type":"\u0004","is_mandatory":true,"title":"Whether the X-Content-Type-Options: nosniff header is sent alongside HSTS","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"hstsPreload":{"name":"hstsPreload","type":"\u0004","is_mandatory":true,"title":"Whether the domain is signaled as eligible for HSTS preload list inclusion","min_provider_version":"13.1.1","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"http3":{"name":"http3","type":"\u0007","is_mandatory":true,"title":"HTTP/3 (QUIC) support (on, off)","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ipGeolocation":{"name":"ipGeolocation","type":"\u0007","is_mandatory":true,"title":"IP geolocation header that adds CF-IPCountry to origin requests (on, off)","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"minTlsVersion":{"name":"minTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version (1.0, 1.1, 1.2, 1.3)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"opportunisticEncryption":{"name":"opportunisticEncryption","type":"\u0007","is_mandatory":true,"title":"Opportunistic encryption (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"securityLevel":{"name":"securityLevel","type":"\u0007","is_mandatory":true,"title":"Security level (essentially_off, low, medium, high, under_attack)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"serverSideExcludes":{"name":"serverSideExcludes","type":"\u0007","is_mandatory":true,"title":"Server-side excludes (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ssl":{"name":"ssl","type":"\u0007","is_mandatory":true,"title":"SSL/TLS encryption mode (off, flexible, full, strict)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"tls13":{"name":"tls13","type":"\u0007","is_mandatory":true,"title":"TLS 1.3 support (on, off, zrt)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"trueClientIpHeader":{"name":"trueClientIpHeader","type":"\u0007","is_mandatory":true,"title":"True-Client-IP header sent to the origin (on, off; Enterprise only)","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"waf":{"name":"waf","type":"\u0007","is_mandatory":true,"title":"Web Application Firewall (on, off)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"websockets":{"name":"websockets","type":"\u0007","is_mandatory":true,"title":"WebSocket connections support (on, off)","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"zeroRtt":{"name":"zeroRtt","type":"\u0007","is_mandatory":true,"title":"0-RTT connection resumption (on, off)","min_provider_version":"13.3.6","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone security settings","private":true,"min_provider_version":"11.1.0","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"cloudflare.zone.wafRule":{"id":"cloudflare.zone.wafRule","name":"cloudflare.zone.wafRule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action (block, challenge, managed_challenge, log, skip, etc.)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Rule description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"expression":{"name":"expression","type":"\u0007","is_mandatory":true,"title":"Filter expression","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule identifier","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"lastUpdated":{"name":"lastUpdated","type":"\t","is_mandatory":true,"title":"Time the rule was last updated","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"ref":{"name":"ref","type":"\u0007","is_mandatory":true,"title":"Rule reference tag","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"rulesetId":{"name":"rulesetId","type":"\u0007","is_mandatory":true,"title":"Ruleset this rule belongs to","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"rulesetKind":{"name":"rulesetKind","type":"\u0007","is_mandatory":true,"title":"Ruleset kind (managed, custom, root, zone)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"rulesetName":{"name":"rulesetName","type":"\u0007","is_mandatory":true,"title":"Ruleset name","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"rulesetPhase":{"name":"rulesetPhase","type":"\u0007","is_mandatory":true,"title":"Ruleset phase (e.g., http_request_firewall_managed, http_request_firewall_custom)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"scoreThreshold":{"name":"scoreThreshold","type":"\u0005","is_mandatory":true,"title":"Score threshold for the rule (managed rulesets)","provider":"go.mondoo.com/mql/v13/providers/cloudflare"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Rule version","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}},"title":"Cloudflare zone WAF rule (a single rule from a managed or custom ruleset)","private":true,"min_provider_version":"13.1.1","defaults":"rulesetKind action description","provider":"go.mondoo.com/mql/v13/providers/cloudflare"}}}