{"resources":{"digitalocean":{"id":"digitalocean","name":"digitalocean","fields":{"account":{"name":"account","type":"\u001bdigitalocean.account","title":"DigitalOcean account","desc":"Examine the DigitalOcean account the provider is authenticated against. Surfaces the account UUID, primary email and email verification status, account `status` (active, warning, locked) and status message, and the per-resource limits the account is permitted (`dropletLimit`, `floatingIpLimit`, `volumeLimit`).","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"alertPolicies":{"name":"alertPolicies","type":"\u0019\u001bdigitalocean.alertPolicy","title":"Monitoring alert policies","provider":"go.mondoo.com/mql/providers/digitalocean"},"alertPolicy":{"name":"alertPolicy","type":"\u001bdigitalocean.alertPolicy","title":"DigitalOcean alert policy","desc":"Examine a DigitalOcean monitoring alert policy. Surfaces the alert `type` (e.g., `v1/insights/droplet/cpu`), the `compare` operator and `value` threshold, the evaluation `window`, the `enabled` flag, the entities and tags the alert applies to, and the email and Slack notification targets.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"app":{"name":"app","type":"\u001bdigitalocean.app","title":"DigitalOcean App Platform application","desc":"Examine an App Platform application — DigitalOcean's managed PaaS for containers and static sites. Surfaces the app's live URL, the `activeDeploymentStatus`, the full `spec` describing services, jobs, workers, static sites, ingresses, environment variables, and linked databases, and creation/update timestamps.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"apps":{"name":"apps","type":"\u0019\u001bdigitalocean.app","title":"App Platform applications","provider":"go.mondoo.com/mql/providers/digitalocean"},"cdn":{"name":"cdn","type":"\u001bdigitalocean.cdn","title":"DigitalOcean CDN endpoint","desc":"Examine a DigitalOcean CDN endpoint fronting a Spaces bucket. Surfaces the origin Spaces endpoint, the public CDN endpoint URL, the cache TTL, the bound TLS certificate ID, the custom domain when configured, and the creation timestamp.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"cdnEndpoints":{"name":"cdnEndpoints","type":"\u0019\u001bdigitalocean.cdn","title":"CDN endpoints","provider":"go.mondoo.com/mql/providers/digitalocean"},"certificate":{"name":"certificate","type":"\u001bdigitalocean.certificate","title":"DigitalOcean TLS certificate","desc":"Examine a TLS certificate held by DigitalOcean for use with load balancers, CDN endpoints, or App Platform. Surfaces the certificate type (custom or lets_encrypt), the issuance state (pending, verified, error), the SHA-1 fingerprint, the DNS names covered, and the `notAfter` expiration timestamp.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"certificates":{"name":"certificates","type":"\u0019\u001bdigitalocean.certificate","title":"TLS certificates","provider":"go.mondoo.com/mql/providers/digitalocean"},"database":{"name":"database","type":"\u001bdigitalocean.database","title":"DigitalOcean managed database cluster","desc":"Examine a DigitalOcean managed database. Surfaces the engine (pg, mysql, redis, mongodb, kafka, opensearch) and version, the cluster size and node count, region, status, the allocated `storageSizeMib` and the logical `dbNames` hosted on the cluster, the owning `projectId`, the `privateNetworkUuid` and resolved `vpc()`, the public and private connection host and port, the `firewallRules()` controlling trusted sources, the `evictionPolicy()` (Redis/Valkey), the maintenance window, the typed children `users()`, `replicas()`, and `pools()`, the rolling list of automated `backups()` plus the derived `latestBackupAt` / `backupCount`, and the `caCertificate()` clients use to verify the cluster's TLS endpoint.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"databases":{"name":"databases","type":"\u0019\u001bdigitalocean.database","title":"Managed databases","provider":"go.mondoo.com/mql/providers/digitalocean"},"domain":{"name":"domain","type":"\u001bdigitalocean.domain","title":"DigitalOcean DNS domain","desc":"Examine a DigitalOcean-managed DNS domain. Surfaces the zone TTL, the raw `zoneFile` contents as DigitalOcean serves them, and the `records()` defined under the domain (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA).","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"domains":{"name":"domains","type":"\u0019\u001bdigitalocean.domain","title":"Domains","provider":"go.mondoo.com/mql/providers/digitalocean"},"droplet":{"name":"droplet","type":"\u001bdigitalocean.droplet","title":"DigitalOcean Droplet","desc":"Examine a DigitalOcean Droplet — the provider's cloud VM offering. Surfaces the droplet `id`, region and size slug, allocated memory, vCPUs and disk, the public/private IPv4 and public IPv6 addresses, the `baseImage()` the droplet runs, applied tags, attached `vpc()`, the enabled features list (e.g., monitoring, backups), backup and monitoring flags, the `locked` flag, the firewalls covering the droplet (resolved by id or tag), and the `missingFirewall()` predicate that flags droplets with no attached firewall.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"droplets":{"name":"droplets","type":"\u0019\u001bdigitalocean.droplet","title":"Droplets (virtual machines)","provider":"go.mondoo.com/mql/providers/digitalocean"},"firewall":{"name":"firewall","type":"\u001bdigitalocean.firewall","title":"DigitalOcean firewall","desc":"Examine a DigitalOcean cloud-firewall rule set. Surfaces the firewall status (waiting, succeeded, failed), the `inboundRules` and `outboundRules` (each a dict describing protocol, ports, sources, and destinations), the tags used to target droplets, and the resolved `droplets()` covered by the firewall (by direct ID or matching tag).","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"firewalls":{"name":"firewalls","type":"\u0019\u001bdigitalocean.firewall","title":"Firewalls","provider":"go.mondoo.com/mql/providers/digitalocean"},"function":{"name":"function","type":"\u001bdigitalocean.function","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"functionNamespaces":{"name":"functionNamespaces","type":"\u0019\u001bdigitalocean.function.namespace","title":"Functions namespaces","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"image":{"name":"image","type":"\u001bdigitalocean.image","title":"DigitalOcean image","desc":"Examine a DigitalOcean image — the bootable disk template a droplet is created from. Surfaces the image `type` (distribution, application, snapshot, backup, custom, admin), the `distribution` and `slug`, the `public` flag (whether the image is shared with every DigitalOcean account or kept private to this one), the `regions` the image is available in, the minimum disk size and on-disk size, the processing `status` and any `errorMessage`, applied tags, and the creation timestamp. Select an image by its numeric `id`. The `images` collection lists the account's own images — custom uploads, snapshots, and backups — while a droplet's `baseImage` may also reference a public DigitalOcean catalog image.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"images":{"name":"images","type":"\u0019\u001bdigitalocean.image","title":"Custom images, snapshots, and backups owned by the account","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"kubernetes":{"name":"kubernetes","type":"\u001bdigitalocean.kubernetes","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"kubernetesClusters":{"name":"kubernetesClusters","type":"\u0019\u001bdigitalocean.kubernetes.cluster","title":"Kubernetes clusters","provider":"go.mondoo.com/mql/providers/digitalocean"},"loadBalancer":{"name":"loadBalancer","type":"\u001bdigitalocean.loadBalancer","title":"DigitalOcean load balancer","desc":"Examine a DigitalOcean load balancer. Surfaces the public IP, region and lifecycle status, the routing algorithm (round_robin or least_connections), the `forwardingRules` list, the `healthCheck` configuration, sticky session settings, the `redirectHttpToHttps`, `enableProxyProtocol`, `enableBackendKeepalive`, and `disableLetsEncryptDnsRecords` flags, the resolved `vpc()`, and the `droplets()` currently attached as backends.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"loadBalancers":{"name":"loadBalancers","type":"\u0019\u001bdigitalocean.loadBalancer","title":"Load balancers","provider":"go.mondoo.com/mql/providers/digitalocean"},"project":{"name":"project","type":"\u001bdigitalocean.project","title":"DigitalOcean project","desc":"Examine a DigitalOcean project — the resource grouping used to organize droplets, databases, load balancers, and other resources. Surfaces the project description, declared `purpose` and `environment` (Development, Staging, Production), the `isDefault` flag, and creation/update timestamps.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"projects":{"name":"projects","type":"\u0019\u001bdigitalocean.project","title":"Projects","provider":"go.mondoo.com/mql/providers/digitalocean"},"registry":{"name":"registry","type":"\u001bdigitalocean.registry","title":"DigitalOcean container registry","desc":"Examine the DigitalOcean Container Registry attached to the account. Surfaces the registry name, region slug, subscription tier, current storage usage in bytes, and creation timestamp. The `digitalocean.registryRepositories()` collection enumerates the repositories hosted in the registry.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"registryRepositories":{"name":"registryRepositories","type":"\u0019\u001bdigitalocean.registry.repository","title":"Container registry repositories","provider":"go.mondoo.com/mql/providers/digitalocean"},"reservedIPs":{"name":"reservedIPs","type":"\u0019\u001bdigitalocean.reservedIp","title":"Reserved IPs","provider":"go.mondoo.com/mql/providers/digitalocean"},"reservedIp":{"name":"reservedIp","type":"\u001bdigitalocean.reservedIp","title":"DigitalOcean reserved IP","desc":"Examine a reserved IP — DigitalOcean's static public IPv4 that can be reassigned between droplets. Surfaces the IP address, region slug, owning project, the `locked` flag (in-flight assignment state), and the `dropletId` the IP is currently routed to (zero when unassigned).","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"snapshot":{"name":"snapshot","type":"\u001bdigitalocean.snapshot","title":"DigitalOcean snapshot","desc":"Examine a DigitalOcean snapshot — a point-in-time copy of a droplet or a block-storage volume. Surfaces the `resourceType` (droplet or volume) and the `resourceId` of the source, the `regions` the snapshot is replicated to, the minimum disk size and on-disk size, applied tags, and the creation timestamp. Select a snapshot by its `id`.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"snapshots":{"name":"snapshots","type":"\u0019\u001bdigitalocean.snapshot","title":"Droplet and volume snapshots","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"spacesBucket":{"name":"spacesBucket","type":"\u001bdigitalocean.spacesBucket","title":"DigitalOcean Spaces bucket","desc":"Examine a Spaces bucket — DigitalOcean's S3-compatible object storage. Auditing requires Spaces credentials supplied via `DIGITALOCEAN_SPACES_KEY` and `DIGITALOCEAN_SPACES_SECRET` environment variables (an optional `DIGITALOCEAN_SPACES_REGION` scopes the listing to one region; otherwise the provider iterates the known Spaces regions). Surfaces the bucket `region` and `createdAt`, the resolved access posture (`publicAccessBlocked`, `publicReadAcl`, `publicWriteAcl`, `authenticatedReadAcl`), the encryption settings (`encryptionEnabled`, `encryptionAlgorithm`, `encryptionKmsKeyId`), `versioningStatus` (\"Enabled\", \"Suspended\", or empty), the raw `policy` document (nil when unset), `corsRules`, and the `lifecycleRules` list. Use this to catch public buckets, missing at-rest encryption, missing versioning, and overly permissive CORS / lifecycle policies.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"spacesBuckets":{"name":"spacesBuckets","type":"\u0019\u001bdigitalocean.spacesBucket","title":"Spaces (S3-compatible object storage) buckets — requires Spaces credentials (DIGITALOCEAN_SPACES_KEY / _SECRET)","min_provider_version":"13.2.1","provider":"go.mondoo.com/mql/providers/digitalocean"},"spacesKey":{"name":"spacesKey","type":"\u001bdigitalocean.spacesKey","title":"DigitalOcean Spaces access key","desc":"Examine an access key for DigitalOcean Spaces — the S3-compatible object storage. Surfaces the key name, access key ID, the `grants` list (per-bucket permission bindings), and the creation timestamp. The matching secret is only returned at creation time and is not exposed here.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"spacesKeys":{"name":"spacesKeys","type":"\u0019\u001bdigitalocean.spacesKey","title":"Spaces access keys","provider":"go.mondoo.com/mql/providers/digitalocean"},"sshKey":{"name":"sshKey","type":"\u001bdigitalocean.sshKey","title":"DigitalOcean SSH key","desc":"Examine an SSH key registered to the DigitalOcean account. Surfaces the key name, fingerprint, and the full `publicKey` content as stored by DigitalOcean.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"sshKeys":{"name":"sshKeys","type":"\u0019\u001bdigitalocean.sshKey","title":"SSH keys","provider":"go.mondoo.com/mql/providers/digitalocean"},"tag":{"name":"tag","type":"\u001bdigitalocean.tag","title":"DigitalOcean tag","desc":"Examine a DigitalOcean tag — the cross-resource label used to group droplets, volumes, load balancers, databases, and reserved IPs. Surfaces the tag name and the total count of resources currently labelled with the tag.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"tags":{"name":"tags","type":"\u0019\u001bdigitalocean.tag","title":"Tags","provider":"go.mondoo.com/mql/providers/digitalocean"},"uptimeCheck":{"name":"uptimeCheck","type":"\u001bdigitalocean.uptimeCheck","title":"DigitalOcean uptime check","desc":"Examine a DigitalOcean uptime check. Surfaces the check `type` (ping, http, https), the `target` URL or IP being probed, the list of monitoring `regions` running the check, and the `enabled` flag.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"uptimeChecks":{"name":"uptimeChecks","type":"\u0019\u001bdigitalocean.uptimeCheck","title":"Uptime checks","provider":"go.mondoo.com/mql/providers/digitalocean"},"volume":{"name":"volume","type":"\u001bdigitalocean.volume","title":"DigitalOcean block storage volume","desc":"Examine a DigitalOcean block-storage volume. Surfaces the volume size in GB, region, description, filesystem type and label, applied tags, and the resolved `droplets()` the volume is currently attached to.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"volumes":{"name":"volumes","type":"\u0019\u001bdigitalocean.volume","title":"Block storage volumes","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpc":{"name":"vpc","type":"\u001bdigitalocean.vpc","title":"DigitalOcean VPC","desc":"Examine a DigitalOcean Virtual Private Cloud. Surfaces the VPC's description, IP range (CIDR), region slug, the `default` flag (whether it is the region's default VPC), and the creation timestamp. Droplets, databases, load balancers, and Kubernetes clusters can be filtered or correlated by the VPC they are attached to.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"vpcPeering":{"name":"vpcPeering","type":"\u001bdigitalocean.vpcPeering","title":"DigitalOcean VPC peering","desc":"Examine a peering between two DigitalOcean VPCs. Surfaces the `vpcIds` participating in the peering, the peering status, and the creation timestamp. The peering allows resources in distinct VPCs to reach each other over the private network without traversing the public internet.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"vpcPeerings":{"name":"vpcPeerings","type":"\u0019\u001bdigitalocean.vpcPeering","title":"VPC peerings","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpcs":{"name":"vpcs","type":"\u0019\u001bdigitalocean.vpc","title":"VPCs","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean account","desc":"Use the DigitalOcean namespace as the account-wide entry point for the DigitalOcean provider. Iterate `droplets()` for VMs, `firewalls()` for cloud-firewall rule sets, `databases()` for managed databases, `volumes()` for block storage, `images()` for the account's own images, `snapshots()` for droplet and volume snapshots, `domains()` for DigitalOcean-managed DNS, `loadBalancers()` for L4/L7 LBs, `vpcs()` and `vpcPeerings()` for the network plane, `kubernetesClusters()` for DOKS, `apps()` for App Platform deployments, `functionNamespaces()` for serverless Functions, `cdnEndpoints()` for the CDN, `registryRepositories()` for the container registry, `projects()` for the project grouping, `sshKeys()`, `certificates()`, `reservedIPs()`, `tags()`, `spacesKeys()`, `alertPolicies()`, and `uptimeChecks()`.","min_provider_version":"13.0.1","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.account":{"id":"digitalocean.account","name":"digitalocean.account","fields":{"dropletLimit":{"name":"dropletLimit","type":"\u0005","is_mandatory":true,"title":"Droplet limit","provider":"go.mondoo.com/mql/providers/digitalocean"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Account email","provider":"go.mondoo.com/mql/providers/digitalocean"},"emailVerified":{"name":"emailVerified","type":"\u0004","is_mandatory":true,"title":"Email verified","provider":"go.mondoo.com/mql/providers/digitalocean"},"floatingIpLimit":{"name":"floatingIpLimit","type":"\u0005","is_mandatory":true,"title":"Floating IP limit","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Account status (active, warning, locked)","provider":"go.mondoo.com/mql/providers/digitalocean"},"statusMessage":{"name":"statusMessage","type":"\u0007","is_mandatory":true,"title":"Status message","provider":"go.mondoo.com/mql/providers/digitalocean"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Account UUID","provider":"go.mondoo.com/mql/providers/digitalocean"},"volumeLimit":{"name":"volumeLimit","type":"\u0005","is_mandatory":true,"title":"Volume limit","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean account","desc":"Examine the DigitalOcean account the provider is authenticated against. Surfaces the account UUID, primary email and email verification status, account `status` (active, warning, locked) and status message, and the per-resource limits the account is permitted (`dropletLimit`, `floatingIpLimit`, `volumeLimit`).","min_provider_version":"13.0.1","defaults":"email status","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.alertPolicy":{"id":"digitalocean.alertPolicy","name":"digitalocean.alertPolicy","fields":{"alertEmails":{"name":"alertEmails","type":"\u0019\u0007","is_mandatory":true,"title":"Email notification targets","provider":"go.mondoo.com/mql/providers/digitalocean"},"alertSlack":{"name":"alertSlack","type":"\u0019\n","is_mandatory":true,"title":"Slack notification targets","provider":"go.mondoo.com/mql/providers/digitalocean"},"compare":{"name":"compare","type":"\u0007","is_mandatory":true,"title":"Comparison operator (GreaterThan, LessThan)","provider":"go.mondoo.com/mql/providers/digitalocean"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/providers/digitalocean"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the alert is enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"entities":{"name":"entities","type":"\u0019\u0007","is_mandatory":true,"title":"Entity IDs being monitored","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags","provider":"go.mondoo.com/mql/providers/digitalocean"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Alert type (e.g., v1/insights/droplet/cpu)","provider":"go.mondoo.com/mql/providers/digitalocean"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Alert policy UUID","provider":"go.mondoo.com/mql/providers/digitalocean"},"value":{"name":"value","type":"\u0006","is_mandatory":true,"title":"Threshold value","provider":"go.mondoo.com/mql/providers/digitalocean"},"window":{"name":"window","type":"\u0007","is_mandatory":true,"title":"Window (5m, 10m, 30m, 1h)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean alert policy","desc":"Examine a DigitalOcean monitoring alert policy. Surfaces the alert `type` (e.g., `v1/insights/droplet/cpu`), the `compare` operator and `value` threshold, the evaluation `window`, the `enabled` flag, the entities and tags the alert applies to, and the email and Slack notification targets.","min_provider_version":"13.0.1","defaults":"uuid type enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.app":{"id":"digitalocean.app","name":"digitalocean.app","fields":{"activeDeploymentStatus":{"name":"activeDeploymentStatus","type":"\u0007","is_mandatory":true,"title":"Active deployment status","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"App ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"liveUrl":{"name":"liveUrl","type":"\u0007","is_mandatory":true,"title":"Live URL","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"App name","provider":"go.mondoo.com/mql/providers/digitalocean"},"spec":{"name":"spec","type":"\n","is_mandatory":true,"title":"App spec","provider":"go.mondoo.com/mql/providers/digitalocean"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Updated at","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean App Platform application","desc":"Examine an App Platform application — DigitalOcean's managed PaaS for containers and static sites. Surfaces the app's live URL, the `activeDeploymentStatus`, the full `spec` describing services, jobs, workers, static sites, ingresses, environment variables, and linked databases, and creation/update timestamps.","min_provider_version":"13.0.1","defaults":"id name","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.cdn":{"id":"digitalocean.cdn","name":"digitalocean.cdn","fields":{"certificateId":{"name":"certificateId","type":"\u0007","is_mandatory":true,"title":"TLS certificate ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"customDomain":{"name":"customDomain","type":"\u0007","is_mandatory":true,"title":"Custom domain","provider":"go.mondoo.com/mql/providers/digitalocean"},"endpoint":{"name":"endpoint","type":"\u0007","is_mandatory":true,"title":"CDN endpoint URL","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"CDN ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"origin":{"name":"origin","type":"\u0007","is_mandatory":true,"title":"Origin (Spaces bucket endpoint)","provider":"go.mondoo.com/mql/providers/digitalocean"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"TTL in seconds","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean CDN endpoint","desc":"Examine a DigitalOcean CDN endpoint fronting a Spaces bucket. Surfaces the origin Spaces endpoint, the public CDN endpoint URL, the cache TTL, the bound TLS certificate ID, the custom domain when configured, and the creation timestamp.","min_provider_version":"13.0.1","defaults":"id origin","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.certificate":{"id":"digitalocean.certificate","name":"digitalocean.certificate","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"dnsNames":{"name":"dnsNames","type":"\u0019\u0007","is_mandatory":true,"title":"DNS names","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Certificate name","provider":"go.mondoo.com/mql/providers/digitalocean"},"notAfter":{"name":"notAfter","type":"\t","is_mandatory":true,"title":"Expiration","provider":"go.mondoo.com/mql/providers/digitalocean"},"sha1Fingerprint":{"name":"sha1Fingerprint","type":"\u0007","is_mandatory":true,"title":"SHA-1 fingerprint","provider":"go.mondoo.com/mql/providers/digitalocean"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"State (pending, verified, error)","provider":"go.mondoo.com/mql/providers/digitalocean"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type (custom, lets_encrypt)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean TLS certificate","desc":"Examine a TLS certificate held by DigitalOcean for use with load balancers, CDN endpoints, or App Platform. Surfaces the certificate type (custom or lets_encrypt), the issuance state (pending, verified, error), the SHA-1 fingerprint, the DNS names covered, and the `notAfter` expiration timestamp.","min_provider_version":"13.0.1","defaults":"id name state","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.database":{"id":"digitalocean.database","name":"digitalocean.database","fields":{"backup":{"name":"backup","type":"\u001bdigitalocean.database.backup","title":"DigitalOcean database automated backup","desc":"Examine a single automated backup retained for the parent cluster. Surfaces the `createdAt` time and the on-disk `sizeGigabytes`. Use these to verify that backups are being taken on the expected cadence (no large gap in `createdAt`) and that backup size growth is tracking actual data growth.","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"backupCount":{"name":"backupCount","type":"\u0005","title":"Number of automated backups currently retained","min_provider_version":"13.2.1","provider":"go.mondoo.com/mql/providers/digitalocean"},"backups":{"name":"backups","type":"\u0019\u001bdigitalocean.database.backup","title":"Automated backups currently retained for the cluster","min_provider_version":"13.2.1","provider":"go.mondoo.com/mql/providers/digitalocean"},"caCertificate":{"name":"caCertificate","type":"\u0007","title":"PEM-encoded X.509 CA certificate that signs the cluster's TLS endpoint (clients use this to verify connections)","min_provider_version":"13.2.1","provider":"go.mondoo.com/mql/providers/digitalocean"},"connectionHost":{"name":"connectionHost","type":"\u0007","is_mandatory":true,"title":"Public connection host","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"connectionPort":{"name":"connectionPort","type":"\u0005","is_mandatory":true,"title":"Public connection port","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"dbNames":{"name":"dbNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of the logical databases hosted on the cluster","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"engine":{"name":"engine","type":"\u0007","is_mandatory":true,"title":"Database engine (pg, mysql, redis, mongodb, kafka, opensearch)","provider":"go.mondoo.com/mql/providers/digitalocean"},"evictionPolicy":{"name":"evictionPolicy","type":"\u0007","title":"Key eviction policy for Redis/Valkey clusters","desc":"One of noeviction, allkeys_lru, allkeys_random, volatile_lru, volatile_random, volatile_ttl. Empty for other engines.","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"firewallRules":{"name":"firewallRules","type":"\u0019\n","title":"Firewall rules (trusted sources)","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Database cluster ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"latestBackupAt":{"name":"latestBackupAt","type":"\t","title":"Timestamp of the most recent automated backup; zero when no backups are retained","min_provider_version":"13.2.1","provider":"go.mondoo.com/mql/providers/digitalocean"},"maintenanceWindow":{"name":"maintenanceWindow","type":"\n","is_mandatory":true,"title":"Maintenance window configuration (day, hour, pending status)","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Database cluster name","provider":"go.mondoo.com/mql/providers/digitalocean"},"numNodes":{"name":"numNodes","type":"\u0005","is_mandatory":true,"title":"Number of nodes","provider":"go.mondoo.com/mql/providers/digitalocean"},"pool":{"name":"pool","type":"\u001bdigitalocean.database.pool","title":"DigitalOcean database connection pool","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"pools":{"name":"pools","type":"\u0019\u001bdigitalocean.database.pool","title":"Connection pools","provider":"go.mondoo.com/mql/providers/digitalocean"},"privateConnectionHost":{"name":"privateConnectionHost","type":"\u0007","is_mandatory":true,"title":"Private connection host (reachable within the VPC)","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"privateConnectionPort":{"name":"privateConnectionPort","type":"\u0005","is_mandatory":true,"title":"Private connection port (reachable within the VPC)","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"privateNetworkUuid":{"name":"privateNetworkUuid","type":"\u0007","is_mandatory":true,"title":"Private network UUID","provider":"go.mondoo.com/mql/providers/digitalocean"},"projectId":{"name":"projectId","type":"\u0007","is_mandatory":true,"title":"ID of the project the cluster belongs to","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"replica":{"name":"replica","type":"\u001bdigitalocean.database.replica","title":"DigitalOcean database replica","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"replicas":{"name":"replicas","type":"\u0019\u001bdigitalocean.database.replica","title":"Database replicas","provider":"go.mondoo.com/mql/providers/digitalocean"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"Size slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (creating, online, resizing, migrating, forking)","provider":"go.mondoo.com/mql/providers/digitalocean"},"storageSizeMib":{"name":"storageSizeMib","type":"\u0005","is_mandatory":true,"title":"Allocated storage size, in mebibytes","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags","provider":"go.mondoo.com/mql/providers/digitalocean"},"user":{"name":"user","type":"\u001bdigitalocean.database.user","title":"DigitalOcean database user","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bdigitalocean.database.user","title":"Database users","provider":"go.mondoo.com/mql/providers/digitalocean"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Database engine version","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpc":{"name":"vpc","type":"\u001bdigitalocean.vpc","title":"VPC the cluster is attached to (resolved from privateNetworkUuid)","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean managed database cluster","desc":"Examine a DigitalOcean managed database. Surfaces the engine (pg, mysql, redis, mongodb, kafka, opensearch) and version, the cluster size and node count, region, status, the allocated `storageSizeMib` and the logical `dbNames` hosted on the cluster, the owning `projectId`, the `privateNetworkUuid` and resolved `vpc()`, the public and private connection host and port, the `firewallRules()` controlling trusted sources, the `evictionPolicy()` (Redis/Valkey), the maintenance window, the typed children `users()`, `replicas()`, and `pools()`, the rolling list of automated `backups()` plus the derived `latestBackupAt` / `backupCount`, and the `caCertificate()` clients use to verify the cluster's TLS endpoint.","min_provider_version":"13.0.1","defaults":"id name engine","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.database.backup":{"id":"digitalocean.database.backup","name":"digitalocean.database.backup","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the backup was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"databaseId":{"name":"databaseId","type":"\u0007","is_mandatory":true,"title":"ID of the parent database cluster","provider":"go.mondoo.com/mql/providers/digitalocean"},"sizeGigabytes":{"name":"sizeGigabytes","type":"\u0006","is_mandatory":true,"title":"Backup size in gigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean database automated backup","desc":"Examine a single automated backup retained for the parent cluster. Surfaces the `createdAt` time and the on-disk `sizeGigabytes`. Use these to verify that backups are being taken on the expected cadence (no large gap in `createdAt`) and that backup size growth is tracking actual data growth.","private":true,"min_provider_version":"13.2.1","defaults":"databaseId createdAt sizeGigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.database.pool":{"id":"digitalocean.database.pool","name":"digitalocean.database.pool","fields":{"database":{"name":"database","type":"\u0007","is_mandatory":true,"title":"Database name the pool connects to","provider":"go.mondoo.com/mql/providers/digitalocean"},"databaseId":{"name":"databaseId","type":"\u0007","is_mandatory":true,"title":"ID of the parent database cluster","provider":"go.mondoo.com/mql/providers/digitalocean"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Connection mode (transaction, session, statement)","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Pool name","provider":"go.mondoo.com/mql/providers/digitalocean"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Pool size","provider":"go.mondoo.com/mql/providers/digitalocean"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"Database user the pool authenticates as","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean database connection pool","private":true,"min_provider_version":"13.0.1","defaults":"name mode","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.database.replica":{"id":"digitalocean.database.replica","name":"digitalocean.database.replica","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"databaseId":{"name":"databaseId","type":"\u0007","is_mandatory":true,"title":"ID of the parent database cluster","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Replica name","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"Size slug (DigitalOcean droplet size identifier)","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Replica status (e.g., creating, online, forking, migrating, offline)","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to the replica","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean database replica","private":true,"min_provider_version":"13.0.1","defaults":"name status","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.database.user":{"id":"digitalocean.database.user","name":"digitalocean.database.user","fields":{"databaseId":{"name":"databaseId","type":"\u0007","is_mandatory":true,"title":"ID of the parent database cluster","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Username","provider":"go.mondoo.com/mql/providers/digitalocean"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Role (primary, normal)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean database user","private":true,"min_provider_version":"13.0.1","defaults":"name role","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.domain":{"id":"digitalocean.domain","name":"digitalocean.domain","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Domain name","provider":"go.mondoo.com/mql/providers/digitalocean"},"record":{"name":"record","type":"\u001bdigitalocean.domain.record","title":"DigitalOcean DNS record","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"records":{"name":"records","type":"\u0019\u001bdigitalocean.domain.record","title":"DNS records","provider":"go.mondoo.com/mql/providers/digitalocean"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"TTL in seconds","provider":"go.mondoo.com/mql/providers/digitalocean"},"zoneFile":{"name":"zoneFile","type":"\u0007","is_mandatory":true,"title":"Zone file contents","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean DNS domain","desc":"Examine a DigitalOcean-managed DNS domain. Surfaces the zone TTL, the raw `zoneFile` contents as DigitalOcean serves them, and the `records()` defined under the domain (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA).","min_provider_version":"13.0.1","defaults":"name","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.domain.record":{"id":"digitalocean.domain.record","name":"digitalocean.domain.record","fields":{"data":{"name":"data","type":"\u0007","is_mandatory":true,"title":"Record data (IP, hostname, etc.)","provider":"go.mondoo.com/mql/providers/digitalocean"},"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"Name of the parent domain","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Record ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Record name (subdomain)","provider":"go.mondoo.com/mql/providers/digitalocean"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Port (SRV)","provider":"go.mondoo.com/mql/providers/digitalocean"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Priority (MX, SRV)","provider":"go.mondoo.com/mql/providers/digitalocean"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"TTL in seconds","provider":"go.mondoo.com/mql/providers/digitalocean"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Record type (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA)","provider":"go.mondoo.com/mql/providers/digitalocean"},"weight":{"name":"weight","type":"\u0005","is_mandatory":true,"title":"Weight (SRV)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean DNS record","private":true,"min_provider_version":"13.0.1","defaults":"type name data","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.droplet":{"id":"digitalocean.droplet","name":"digitalocean.droplet","fields":{"backupsEnabled":{"name":"backupsEnabled","type":"\u0004","is_mandatory":true,"title":"Backup enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"baseImage":{"name":"baseImage","type":"\u001bdigitalocean.image","title":"Base image the droplet runs","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"disk":{"name":"disk","type":"\u0005","is_mandatory":true,"title":"Disk capacity allocated to the droplet, in gigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"features":{"name":"features","type":"\u0019\u0007","is_mandatory":true,"title":"Features (e.g., monitoring, backups)","provider":"go.mondoo.com/mql/providers/digitalocean"},"firewalls":{"name":"firewalls","type":"\u0019\u001bdigitalocean.firewall","title":"Firewalls covering this droplet (by id or matching tag)","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Droplet ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"image":{"name":"image","type":"\n","is_mandatory":true,"title":"DEPRECATED: use baseImage instead. Image details (id, name, distribution, slug)","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"},"locked":{"name":"locked","type":"\u0004","is_mandatory":true,"title":"Whether the droplet is locked while an action is in progress","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"memory":{"name":"memory","type":"\u0005","is_mandatory":true,"title":"Memory allocated to the droplet, in megabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"missingFirewall":{"name":"missingFirewall","type":"\u0004","title":"True when no firewall is attached to the droplet (by id or tag); does not check inbound rule restrictiveness — for that, query `firewalls`","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"monitoringEnabled":{"name":"monitoringEnabled","type":"\u0004","is_mandatory":true,"title":"Monitoring enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Droplet name","provider":"go.mondoo.com/mql/providers/digitalocean"},"privateIpv4":{"name":"privateIpv4","type":"\u0007","is_mandatory":true,"title":"Private IPv4 address","provider":"go.mondoo.com/mql/providers/digitalocean"},"publicIpv4":{"name":"publicIpv4","type":"\u0007","is_mandatory":true,"title":"Public IPv4 address","provider":"go.mondoo.com/mql/providers/digitalocean"},"publicIpv6":{"name":"publicIpv6","type":"\u0007","is_mandatory":true,"title":"Public IPv6 address","min_provider_version":"13.1.7","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug (DigitalOcean datacenter identifier, e.g., nyc3, ams3)","provider":"go.mondoo.com/mql/providers/digitalocean"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"Size slug (DigitalOcean droplet size identifier, e.g., s-1vcpu-1gb)","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (new, active, off, archive)","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to the droplet","provider":"go.mondoo.com/mql/providers/digitalocean"},"vcpus":{"name":"vcpus","type":"\u0005","is_mandatory":true,"title":"Number of virtual CPUs allocated to the droplet","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpc":{"name":"vpc","type":"\u001bdigitalocean.vpc","title":"VPC the droplet is attached to","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpcUuid":{"name":"vpcUuid","type":"\u0007","is_mandatory":true,"title":"DEPRECATED: use vpc() instead. VPC UUID","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"}},"title":"DigitalOcean Droplet","desc":"Examine a DigitalOcean Droplet — the provider's cloud VM offering. Surfaces the droplet `id`, region and size slug, allocated memory, vCPUs and disk, the public/private IPv4 and public IPv6 addresses, the `baseImage()` the droplet runs, applied tags, attached `vpc()`, the enabled features list (e.g., monitoring, backups), backup and monitoring flags, the `locked` flag, the firewalls covering the droplet (resolved by id or tag), and the `missingFirewall()` predicate that flags droplets with no attached firewall.","min_provider_version":"13.0.1","defaults":"id name status","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.firewall":{"id":"digitalocean.firewall","name":"digitalocean.firewall","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"dropletIds":{"name":"dropletIds","type":"\u0019\u0005","is_mandatory":true,"title":"DEPRECATED: use droplets() instead. Droplet IDs protected by this firewall","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"},"droplets":{"name":"droplets","type":"\u0019\u001bdigitalocean.droplet","title":"Droplets covered by this firewall (by direct ID or matching tag)","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"inboundRules":{"name":"inboundRules","type":"\u0019\n","is_mandatory":true,"title":"Rules controlling incoming traffic to protected droplets","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall name","provider":"go.mondoo.com/mql/providers/digitalocean"},"outboundRules":{"name":"outboundRules","type":"\u0019\n","is_mandatory":true,"title":"Rules controlling outgoing traffic from protected droplets","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (waiting, succeeded, failed)","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags used to target droplets","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean firewall","desc":"Examine a DigitalOcean cloud-firewall rule set. Surfaces the firewall status (waiting, succeeded, failed), the `inboundRules` and `outboundRules` (each a dict describing protocol, ports, sources, and destinations), the tags used to target droplets, and the resolved `droplets()` covered by the firewall (by direct ID or matching tag).","min_provider_version":"13.0.1","defaults":"id name status","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.function":{"id":"digitalocean.function","fields":{"namespace":{"name":"namespace","type":"\u001bdigitalocean.function.namespace","title":"DigitalOcean Functions namespace","desc":"Examine a DigitalOcean Functions namespace — the deployment unit that groups serverless functions and their schedules. Surfaces the namespace `label`, the API host serving the functions, the region, the internal namespace identifier, and the `triggers()` that invoke functions on a schedule.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"trigger":{"name":"trigger","type":"\u001bdigitalocean.function.trigger","title":"DigitalOcean Functions trigger","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true}},"is_extension":true},"digitalocean.function.namespace":{"id":"digitalocean.function.namespace","name":"digitalocean.function.namespace","fields":{"apiHost":{"name":"apiHost","type":"\u0007","is_mandatory":true,"title":"API host serving the namespace's functions","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Human-readable namespace label","provider":"go.mondoo.com/mql/providers/digitalocean"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"Internal namespace identifier used in API paths","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"triggers":{"name":"triggers","type":"\u0019\u001bdigitalocean.function.trigger","title":"Scheduled triggers in the namespace","provider":"go.mondoo.com/mql/providers/digitalocean"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the resource was last updated","provider":"go.mondoo.com/mql/providers/digitalocean"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Namespace UUID","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean Functions namespace","desc":"Examine a DigitalOcean Functions namespace — the deployment unit that groups serverless functions and their schedules. Surfaces the namespace `label`, the API host serving the functions, the region, the internal namespace identifier, and the `triggers()` that invoke functions on a schedule.","min_provider_version":"13.1.7","defaults":"uuid label region","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.function.trigger":{"id":"digitalocean.function.trigger","name":"digitalocean.function.trigger","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"cron":{"name":"cron","type":"\u0007","is_mandatory":true,"title":"Cron schedule expression (for scheduled triggers)","provider":"go.mondoo.com/mql/providers/digitalocean"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the trigger is enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"function":{"name":"function","type":"\u0007","is_mandatory":true,"title":"Name of the function the trigger invokes","provider":"go.mondoo.com/mql/providers/digitalocean"},"lastRunAt":{"name":"lastRunAt","type":"\t","is_mandatory":true,"title":"Time the trigger last fired","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Trigger name","provider":"go.mondoo.com/mql/providers/digitalocean"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"Internal identifier of the parent namespace","provider":"go.mondoo.com/mql/providers/digitalocean"},"nextRunAt":{"name":"nextRunAt","type":"\t","is_mandatory":true,"title":"Time the trigger is next scheduled to fire","provider":"go.mondoo.com/mql/providers/digitalocean"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Trigger type (e.g., SCHEDULED)","provider":"go.mondoo.com/mql/providers/digitalocean"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the resource was last updated","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean Functions trigger","private":true,"min_provider_version":"13.1.7","defaults":"name function enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.image":{"id":"digitalocean.image","name":"digitalocean.image","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/providers/digitalocean"},"distribution":{"name":"distribution","type":"\u0007","is_mandatory":true,"title":"Operating system distribution","provider":"go.mondoo.com/mql/providers/digitalocean"},"errorMessage":{"name":"errorMessage","type":"\u0007","is_mandatory":true,"title":"Error message set when image processing failed","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Image ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"minDiskSize":{"name":"minDiskSize","type":"\u0005","is_mandatory":true,"title":"Minimum disk size a droplet must have to use this image, in gigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Image name","provider":"go.mondoo.com/mql/providers/digitalocean"},"public":{"name":"public","type":"\u0004","is_mandatory":true,"title":"Whether the image is public (shared with every DigitalOcean account)","provider":"go.mondoo.com/mql/providers/digitalocean"},"regions":{"name":"regions","type":"\u0019\u0007","is_mandatory":true,"title":"Region slugs the image is available in","provider":"go.mondoo.com/mql/providers/digitalocean"},"sizeGigabytes":{"name":"sizeGigabytes","type":"\u0006","is_mandatory":true,"title":"Size of the image on disk, in gigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"slug":{"name":"slug","type":"\u0007","is_mandatory":true,"title":"Image slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Processing status (NEW, available, pending, deleted, retired)","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to the image","provider":"go.mondoo.com/mql/providers/digitalocean"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Image type (distribution, application, snapshot, backup, custom, admin)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean image","desc":"Examine a DigitalOcean image — the bootable disk template a droplet is created from. Surfaces the image `type` (distribution, application, snapshot, backup, custom, admin), the `distribution` and `slug`, the `public` flag (whether the image is shared with every DigitalOcean account or kept private to this one), the `regions` the image is available in, the minimum disk size and on-disk size, the processing `status` and any `errorMessage`, applied tags, and the creation timestamp. Select an image by its numeric `id`. The `images` collection lists the account's own images — custom uploads, snapshots, and backups — while a droplet's `baseImage` may also reference a public DigitalOcean catalog image.","min_provider_version":"13.1.7","defaults":"id name distribution","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.kubernetes":{"id":"digitalocean.kubernetes","fields":{"cluster":{"name":"cluster","type":"\u001bdigitalocean.kubernetes.cluster","title":"DigitalOcean Kubernetes cluster","desc":"Examine a DOKS (DigitalOcean Kubernetes Service) cluster. Surfaces the Kubernetes version, region, lifecycle status, the cluster and service subnet CIDRs, the resolved `vpc()`, the auto-upgrade, surge-upgrade, and HA control plane flags, the SSO posture (`ssoEnabled`, `ssoRequired`, `ssoIssuerUrl`, `ssoClientId`), the maintenance policy, and applied tags.","provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"nodePool":{"name":"nodePool","type":"\u001bdigitalocean.kubernetes.nodePool","title":"DigitalOcean Kubernetes node pool","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true}},"is_extension":true},"digitalocean.kubernetes.cluster":{"id":"digitalocean.kubernetes.cluster","name":"digitalocean.kubernetes.cluster","fields":{"autoUpgrade":{"name":"autoUpgrade","type":"\u0004","is_mandatory":true,"title":"Auto-upgrade enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"clusterSubnet":{"name":"clusterSubnet","type":"\u0007","is_mandatory":true,"title":"Cluster subnet","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"ha":{"name":"ha","type":"\u0004","is_mandatory":true,"title":"HA control plane enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cluster ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"maintenancePolicy":{"name":"maintenancePolicy","type":"\n","is_mandatory":true,"title":"Maintenance policy","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cluster name","provider":"go.mondoo.com/mql/providers/digitalocean"},"nodePools":{"name":"nodePools","type":"\u0019\u001bdigitalocean.kubernetes.nodePool","title":"Node pools","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"serviceSubnet":{"name":"serviceSubnet","type":"\u0007","is_mandatory":true,"title":"Service subnet","provider":"go.mondoo.com/mql/providers/digitalocean"},"ssoClientId":{"name":"ssoClientId","type":"\u0007","is_mandatory":true,"title":"OAuth client ID configured for cluster SSO","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"ssoEnabled":{"name":"ssoEnabled","type":"\u0004","is_mandatory":true,"title":"Whether single sign-on is enabled for the cluster","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"ssoIssuerUrl":{"name":"ssoIssuerUrl","type":"\u0007","is_mandatory":true,"title":"OIDC issuer URL configured for cluster SSO","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"ssoRequired":{"name":"ssoRequired","type":"\u0004","is_mandatory":true,"title":"Whether single sign-on is required for the cluster","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (running, provisioning, degraded, error, deleted, upgrading)","provider":"go.mondoo.com/mql/providers/digitalocean"},"surgeUpgrade":{"name":"surgeUpgrade","type":"\u0004","is_mandatory":true,"title":"Surge upgrade enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags","provider":"go.mondoo.com/mql/providers/digitalocean"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Updated at","provider":"go.mondoo.com/mql/providers/digitalocean"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Kubernetes version","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpc":{"name":"vpc","type":"\u001bdigitalocean.vpc","title":"VPC the cluster is attached to","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpcUuid":{"name":"vpcUuid","type":"\u0007","is_mandatory":true,"title":"DEPRECATED: use vpc() instead. VPC UUID","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"}},"title":"DigitalOcean Kubernetes cluster","desc":"Examine a DOKS (DigitalOcean Kubernetes Service) cluster. Surfaces the Kubernetes version, region, lifecycle status, the cluster and service subnet CIDRs, the resolved `vpc()`, the auto-upgrade, surge-upgrade, and HA control plane flags, the SSO posture (`ssoEnabled`, `ssoRequired`, `ssoIssuerUrl`, `ssoClientId`), the maintenance policy, and applied tags.","min_provider_version":"13.0.1","defaults":"id name version","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.kubernetes.nodePool":{"id":"digitalocean.kubernetes.nodePool","name":"digitalocean.kubernetes.nodePool","fields":{"autoScale":{"name":"autoScale","type":"\u0004","is_mandatory":true,"title":"Auto-scale enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"clusterId":{"name":"clusterId","type":"\u0007","is_mandatory":true,"title":"Cluster ID (parent)","provider":"go.mondoo.com/mql/providers/digitalocean"},"count":{"name":"count","type":"\u0005","is_mandatory":true,"title":"Number of nodes","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Node pool ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"labels":{"name":"labels","type":"\n","is_mandatory":true,"title":"Kubernetes labels applied to nodes in this pool","provider":"go.mondoo.com/mql/providers/digitalocean"},"maxNodes":{"name":"maxNodes","type":"\u0005","is_mandatory":true,"title":"Maximum nodes (if auto-scale)","provider":"go.mondoo.com/mql/providers/digitalocean"},"minNodes":{"name":"minNodes","type":"\u0005","is_mandatory":true,"title":"Minimum nodes (if auto-scale)","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name","provider":"go.mondoo.com/mql/providers/digitalocean"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"Droplet size slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to nodes in this pool","provider":"go.mondoo.com/mql/providers/digitalocean"},"taints":{"name":"taints","type":"\u0019\n","is_mandatory":true,"title":"Kubernetes taints applied to nodes in this pool (each dict: key, value, effect)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean Kubernetes node pool","private":true,"min_provider_version":"13.0.1","defaults":"id name size","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.loadBalancer":{"id":"digitalocean.loadBalancer","name":"digitalocean.loadBalancer","fields":{"algorithm":{"name":"algorithm","type":"\u0007","is_mandatory":true,"title":"Algorithm (round_robin, least_connections)","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"disableLetsEncryptDnsRecords":{"name":"disableLetsEncryptDnsRecords","type":"\u0004","is_mandatory":true,"title":"Disable automatic Let's Encrypt DNS records","provider":"go.mondoo.com/mql/providers/digitalocean"},"dropletIds":{"name":"dropletIds","type":"\u0019\u0005","is_mandatory":true,"title":"DEPRECATED: use droplets() instead. Droplet IDs","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"},"droplets":{"name":"droplets","type":"\u0019\u001bdigitalocean.droplet","title":"Droplets attached to this load balancer","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"enableBackendKeepalive":{"name":"enableBackendKeepalive","type":"\u0004","is_mandatory":true,"title":"Enable backend keepalive","provider":"go.mondoo.com/mql/providers/digitalocean"},"enableProxyProtocol":{"name":"enableProxyProtocol","type":"\u0004","is_mandatory":true,"title":"Enable proxy protocol","provider":"go.mondoo.com/mql/providers/digitalocean"},"forwardingRules":{"name":"forwardingRules","type":"\u0019\n","is_mandatory":true,"title":"Forwarding rules","provider":"go.mondoo.com/mql/providers/digitalocean"},"healthCheck":{"name":"healthCheck","type":"\n","is_mandatory":true,"title":"Health check configuration","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Load balancer ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"Public IP address","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name","provider":"go.mondoo.com/mql/providers/digitalocean"},"redirectHttpToHttps":{"name":"redirectHttpToHttps","type":"\u0004","is_mandatory":true,"title":"Redirect HTTP to HTTPS","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (new, active, errored)","provider":"go.mondoo.com/mql/providers/digitalocean"},"stickySessions":{"name":"stickySessions","type":"\n","is_mandatory":true,"title":"Sticky sessions configuration","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpc":{"name":"vpc","type":"\u001bdigitalocean.vpc","title":"VPC the load balancer is attached to","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpcUuid":{"name":"vpcUuid","type":"\u0007","is_mandatory":true,"title":"DEPRECATED: use vpc() instead. VPC UUID","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"}},"title":"DigitalOcean load balancer","desc":"Examine a DigitalOcean load balancer. Surfaces the public IP, region and lifecycle status, the routing algorithm (round_robin or least_connections), the `forwardingRules` list, the `healthCheck` configuration, sticky session settings, the `redirectHttpToHttps`, `enableProxyProtocol`, `enableBackendKeepalive`, and `disableLetsEncryptDnsRecords` flags, the resolved `vpc()`, and the `droplets()` currently attached as backends.","min_provider_version":"13.0.1","defaults":"id name status","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.project":{"id":"digitalocean.project","name":"digitalocean.project","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/providers/digitalocean"},"environment":{"name":"environment","type":"\u0007","is_mandatory":true,"title":"Environment (Development, Staging, Production)","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Project ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"isDefault":{"name":"isDefault","type":"\u0004","is_mandatory":true,"title":"Whether this is the default project","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name","provider":"go.mondoo.com/mql/providers/digitalocean"},"purpose":{"name":"purpose","type":"\u0007","is_mandatory":true,"title":"Purpose","provider":"go.mondoo.com/mql/providers/digitalocean"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Updated at","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean project","desc":"Examine a DigitalOcean project — the resource grouping used to organize droplets, databases, load balancers, and other resources. Surfaces the project description, declared `purpose` and `environment` (Development, Staging, Production), the `isDefault` flag, and creation/update timestamps.","min_provider_version":"13.0.1","defaults":"id name environment","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.registry":{"id":"digitalocean.registry","name":"digitalocean.registry","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Registry name","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"repository":{"name":"repository","type":"\u001bdigitalocean.registry.repository","title":"DigitalOcean container registry repository","is_private":true,"provider":"go.mondoo.com/mql/providers/digitalocean","is_implicit_resource":true},"storageUsageBytes":{"name":"storageUsageBytes","type":"\u0005","is_mandatory":true,"title":"Storage usage in bytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"subscriptionTier":{"name":"subscriptionTier","type":"\u0007","is_mandatory":true,"title":"Subscription tier","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean container registry","desc":"Examine the DigitalOcean Container Registry attached to the account. Surfaces the registry name, region slug, subscription tier, current storage usage in bytes, and creation timestamp. The `digitalocean.registryRepositories()` collection enumerates the repositories hosted in the registry.","min_provider_version":"13.0.1","defaults":"name region","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.registry.repository":{"id":"digitalocean.registry.repository","name":"digitalocean.registry.repository","fields":{"manifestCount":{"name":"manifestCount","type":"\u0005","is_mandatory":true,"title":"Number of manifests","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Repository name","provider":"go.mondoo.com/mql/providers/digitalocean"},"registryName":{"name":"registryName","type":"\u0007","is_mandatory":true,"title":"Registry name (parent)","provider":"go.mondoo.com/mql/providers/digitalocean"},"tagCount":{"name":"tagCount","type":"\u0005","is_mandatory":true,"title":"Number of tags","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean container registry repository","private":true,"min_provider_version":"13.0.1","defaults":"name tagCount","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.reservedIp":{"id":"digitalocean.reservedIp","name":"digitalocean.reservedIp","fields":{"dropletId":{"name":"dropletId","type":"\u0005","is_mandatory":true,"title":"Droplet ID (0 if unassigned)","provider":"go.mondoo.com/mql/providers/digitalocean"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"IP address","provider":"go.mondoo.com/mql/providers/digitalocean"},"locked":{"name":"locked","type":"\u0004","is_mandatory":true,"title":"Whether the IP is locked","provider":"go.mondoo.com/mql/providers/digitalocean"},"projectId":{"name":"projectId","type":"\u0007","is_mandatory":true,"title":"Project ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean reserved IP","desc":"Examine a reserved IP — DigitalOcean's static public IPv4 that can be reassigned between droplets. Surfaces the IP address, region slug, owning project, the `locked` flag (in-flight assignment state), and the `dropletId` the IP is currently routed to (zero when unassigned).","min_provider_version":"13.0.1","defaults":"ip region","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.snapshot":{"id":"digitalocean.snapshot","name":"digitalocean.snapshot","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Snapshot ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"minDiskSize":{"name":"minDiskSize","type":"\u0005","is_mandatory":true,"title":"Minimum disk size a droplet must have to use this snapshot, in gigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Snapshot name","provider":"go.mondoo.com/mql/providers/digitalocean"},"regions":{"name":"regions","type":"\u0019\u0007","is_mandatory":true,"title":"Region slugs the snapshot is replicated to","provider":"go.mondoo.com/mql/providers/digitalocean"},"resourceId":{"name":"resourceId","type":"\u0007","is_mandatory":true,"title":"ID of the source resource the snapshot was taken from","provider":"go.mondoo.com/mql/providers/digitalocean"},"resourceType":{"name":"resourceType","type":"\u0007","is_mandatory":true,"title":"Type of the source resource (droplet, volume)","provider":"go.mondoo.com/mql/providers/digitalocean"},"sizeGigabytes":{"name":"sizeGigabytes","type":"\u0006","is_mandatory":true,"title":"Size of the snapshot on disk, in gigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to the snapshot","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean snapshot","desc":"Examine a DigitalOcean snapshot — a point-in-time copy of a droplet or a block-storage volume. Surfaces the `resourceType` (droplet or volume) and the `resourceId` of the source, the `regions` the snapshot is replicated to, the minimum disk size and on-disk size, applied tags, and the creation timestamp. Select a snapshot by its `id`.","min_provider_version":"13.1.7","defaults":"id name resourceType","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.spacesBucket":{"id":"digitalocean.spacesBucket","name":"digitalocean.spacesBucket","fields":{"aclGrants":{"name":"aclGrants","type":"\u0019\n","is_mandatory":true,"title":"Raw ACL grants (each entry: granteeType, granteeUri, granteeDisplayName, permission)","provider":"go.mondoo.com/mql/providers/digitalocean"},"authenticatedReadAcl":{"name":"authenticatedReadAcl","type":"\u0004","is_mandatory":true,"title":"Whether the bucket ACL grants READ to the AuthenticatedUsers group (any DO/AWS-compatible account can list)","provider":"go.mondoo.com/mql/providers/digitalocean"},"corsRules":{"name":"corsRules","type":"\u0019\n","is_mandatory":true,"title":"CORS rules configured on the bucket","desc":"Each entry: allowedHeaders, allowedMethods, allowedOrigins, exposeHeaders, maxAgeSeconds, id.","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the bucket was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"encryptionAlgorithm":{"name":"encryptionAlgorithm","type":"\u0007","is_mandatory":true,"title":"Default encryption algorithm (\"AES256\" or \"aws:kms\"); empty when encryption is not configured","provider":"go.mondoo.com/mql/providers/digitalocean"},"encryptionEnabled":{"name":"encryptionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether server-side encryption is configured on the bucket","provider":"go.mondoo.com/mql/providers/digitalocean"},"encryptionKmsKeyId":{"name":"encryptionKmsKeyId","type":"\u0007","is_mandatory":true,"title":"KMS key id used for default encryption when `encryptionAlgorithm` is \"aws:kms\"","provider":"go.mondoo.com/mql/providers/digitalocean"},"lifecycleRules":{"name":"lifecycleRules","type":"\u0019\n","is_mandatory":true,"title":"Lifecycle rules configured on the bucket","desc":"Each entry: id, status, prefix, expirationDays, noncurrentVersionExpirationDays, abortIncompleteMultipartUploadDays.","provider":"go.mondoo.com/mql/providers/digitalocean"},"mfaDeleteEnabled":{"name":"mfaDeleteEnabled","type":"\u0004","is_mandatory":true,"title":"Whether MFA delete is required for permanent version deletion","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Bucket name (globally unique within DigitalOcean Spaces)","provider":"go.mondoo.com/mql/providers/digitalocean"},"policy":{"name":"policy","type":"\n","is_mandatory":true,"title":"Bucket policy JSON document; nil when no policy is set","provider":"go.mondoo.com/mql/providers/digitalocean"},"publicAccessBlocked":{"name":"publicAccessBlocked","type":"\u0004","is_mandatory":true,"title":"Whether the bucket-level Public Access Block is fully in effect (all four block flags on)","desc":"True when `BlockPublicAcls`, `BlockPublicPolicy`, `IgnorePublicAcls`, and `RestrictPublicBuckets` are all set on the bucket's `PublicAccessBlock` configuration. DigitalOcean's S3-compatible API exposes this at the bucket level only — there is no account-wide toggle. False can mean either an explicit weakening or no configuration at all.","provider":"go.mondoo.com/mql/providers/digitalocean"},"publicReadAcl":{"name":"publicReadAcl","type":"\u0004","is_mandatory":true,"title":"Whether the bucket ACL grants READ to the AllUsers group (anonymous read)","provider":"go.mondoo.com/mql/providers/digitalocean"},"publicWriteAcl":{"name":"publicWriteAcl","type":"\u0004","is_mandatory":true,"title":"Whether the bucket ACL grants WRITE to the AllUsers group (anonymous write — should always be false)","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Spaces region the bucket lives in (e.g., \"nyc3\", \"sfo3\", \"ams3\", \"sgp1\", \"fra1\", \"syd1\", \"tor1\", \"blr1\")","provider":"go.mondoo.com/mql/providers/digitalocean"},"versioningStatus":{"name":"versioningStatus","type":"\u0007","is_mandatory":true,"title":"Versioning state (\"Enabled\", \"Suspended\"); empty when versioning has never been configured","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean Spaces bucket","desc":"Examine a Spaces bucket — DigitalOcean's S3-compatible object storage. Auditing requires Spaces credentials supplied via `DIGITALOCEAN_SPACES_KEY` and `DIGITALOCEAN_SPACES_SECRET` environment variables (an optional `DIGITALOCEAN_SPACES_REGION` scopes the listing to one region; otherwise the provider iterates the known Spaces regions). Surfaces the bucket `region` and `createdAt`, the resolved access posture (`publicAccessBlocked`, `publicReadAcl`, `publicWriteAcl`, `authenticatedReadAcl`), the encryption settings (`encryptionEnabled`, `encryptionAlgorithm`, `encryptionKmsKeyId`), `versioningStatus` (\"Enabled\", \"Suspended\", or empty), the raw `policy` document (nil when unset), `corsRules`, and the `lifecycleRules` list. Use this to catch public buckets, missing at-rest encryption, missing versioning, and overly permissive CORS / lifecycle policies.","min_provider_version":"13.2.1","defaults":"name region publicAccessBlocked encryptionEnabled versioningStatus","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.spacesKey":{"id":"digitalocean.spacesKey","name":"digitalocean.spacesKey","fields":{"accessKey":{"name":"accessKey","type":"\u0007","is_mandatory":true,"title":"Access key ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"grants":{"name":"grants","type":"\u0019\n","is_mandatory":true,"title":"Grants (bucket permissions)","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Key name","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean Spaces access key","desc":"Examine an access key for DigitalOcean Spaces — the S3-compatible object storage. Surfaces the key name, access key ID, the `grants` list (per-bucket permission bindings), and the creation timestamp. The matching secret is only returned at creation time and is not exposed here.","min_provider_version":"13.0.1","defaults":"name accessKey","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.sshKey":{"id":"digitalocean.sshKey","name":"digitalocean.sshKey","fields":{"fingerprint":{"name":"fingerprint","type":"\u0007","is_mandatory":true,"title":"Public key fingerprint","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"SSH key ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Key name","provider":"go.mondoo.com/mql/providers/digitalocean"},"publicKey":{"name":"publicKey","type":"\u0007","is_mandatory":true,"title":"Public key content","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean SSH key","desc":"Examine an SSH key registered to the DigitalOcean account. Surfaces the key name, fingerprint, and the full `publicKey` content as stored by DigitalOcean.","min_provider_version":"13.0.1","defaults":"id name","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.tag":{"id":"digitalocean.tag","name":"digitalocean.tag","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Tag name","provider":"go.mondoo.com/mql/providers/digitalocean"},"resourceCount":{"name":"resourceCount","type":"\u0005","is_mandatory":true,"title":"Total number of resources with this tag","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean tag","desc":"Examine a DigitalOcean tag — the cross-resource label used to group droplets, volumes, load balancers, databases, and reserved IPs. Surfaces the tag name and the total count of resources currently labelled with the tag.","min_provider_version":"13.0.1","defaults":"name","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.uptimeCheck":{"id":"digitalocean.uptimeCheck","name":"digitalocean.uptimeCheck","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the check is enabled","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Check ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Check name","provider":"go.mondoo.com/mql/providers/digitalocean"},"regions":{"name":"regions","type":"\u0019\u0007","is_mandatory":true,"title":"Monitoring regions","provider":"go.mondoo.com/mql/providers/digitalocean"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Target URL or IP","provider":"go.mondoo.com/mql/providers/digitalocean"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Check type (ping, http, https)","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean uptime check","desc":"Examine a DigitalOcean uptime check. Surfaces the check `type` (ping, http, https), the `target` URL or IP being probed, the list of monitoring `regions` running the check, and the `enabled` flag.","min_provider_version":"13.0.1","defaults":"id name type","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.volume":{"id":"digitalocean.volume","name":"digitalocean.volume","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/providers/digitalocean"},"dropletIds":{"name":"dropletIds","type":"\u0019\u0005","is_mandatory":true,"title":"DEPRECATED: use droplets() instead. Droplet IDs attached to this volume","provider":"go.mondoo.com/mql/providers/digitalocean","maturity":"deprecated"},"droplets":{"name":"droplets","type":"\u0019\u001bdigitalocean.droplet","title":"Droplets this volume is attached to","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/providers/digitalocean"},"filesystemLabel":{"name":"filesystemLabel","type":"\u0007","is_mandatory":true,"title":"Filesystem label","provider":"go.mondoo.com/mql/providers/digitalocean"},"filesystemType":{"name":"filesystemType","type":"\u0007","is_mandatory":true,"title":"Filesystem type","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Volume ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Volume name","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"},"sizeGigabytes":{"name":"sizeGigabytes","type":"\u0005","is_mandatory":true,"title":"Size in GB","provider":"go.mondoo.com/mql/providers/digitalocean"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean block storage volume","desc":"Examine a DigitalOcean block-storage volume. Surfaces the volume size in GB, region, description, filesystem type and label, applied tags, and the resolved `droplets()` the volume is currently attached to.","min_provider_version":"13.0.1","defaults":"id name sizeGigabytes","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.vpc":{"id":"digitalocean.vpc","name":"digitalocean.vpc","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"default":{"name":"default","type":"\u0004","is_mandatory":true,"title":"Whether this is the default VPC","provider":"go.mondoo.com/mql/providers/digitalocean"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VPC ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"ipRange":{"name":"ipRange","type":"\u0007","is_mandatory":true,"title":"IP range (CIDR)","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name","provider":"go.mondoo.com/mql/providers/digitalocean"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region slug","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean VPC","desc":"Examine a DigitalOcean Virtual Private Cloud. Surfaces the VPC's description, IP range (CIDR), region slug, the `default` flag (whether it is the region's default VPC), and the creation timestamp. Droplets, databases, load balancers, and Kubernetes clusters can be filtered or correlated by the VPC they are attached to.","min_provider_version":"13.0.1","defaults":"id name region","provider":"go.mondoo.com/mql/providers/digitalocean"},"digitalocean.vpcPeering":{"id":"digitalocean.vpcPeering","name":"digitalocean.vpcPeering","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the resource was created","provider":"go.mondoo.com/mql/providers/digitalocean"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Peering ID","provider":"go.mondoo.com/mql/providers/digitalocean"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Peering name","provider":"go.mondoo.com/mql/providers/digitalocean"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status","provider":"go.mondoo.com/mql/providers/digitalocean"},"vpcIds":{"name":"vpcIds","type":"\u0019\u0007","is_mandatory":true,"title":"VPC IDs in this peering","provider":"go.mondoo.com/mql/providers/digitalocean"}},"title":"DigitalOcean VPC peering","desc":"Examine a peering between two DigitalOcean VPCs. Surfaces the `vpcIds` participating in the peering, the peering status, and the creation timestamp. The peering allows resources in distinct VPCs to reach each other over the private network without traversing the public internet.","min_provider_version":"13.0.1","defaults":"id name status","provider":"go.mondoo.com/mql/providers/digitalocean"}}}