{"resources":{"helm":{"id":"helm","name":"helm","fields":{"chart":{"name":"chart","type":"\u001bhelm.chart","title":"Helm chart","desc":"Examine a chart's Chart.yaml metadata (name, version, apiVersion, type, appVersion, description, keywords, home, sources, icon, deprecated flag), its declared dependencies and maintainers, the Go template files, the default values.yaml, every rendered Kubernetes resource, and the chart's files on disk.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"charts":{"name":"charts","type":"\u0019\u001bhelm.chart","title":"List of all parsed Helm charts","provider":"go.mondoo.com/mql/v13/providers/helm"},"dependency":{"name":"dependency","type":"\u001bhelm.dependency","title":"Helm chart dependency","desc":"Examine an entry from a chart's `dependencies:` list — name, version constraint, repository, conditional-enable expression, tag groupings, the resolved enabled flag, and any alias.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"directive":{"name":"directive","type":"\u001bhelm.directive","title":"Go-template directive in a Helm template","desc":"Examine a single directive (if, range, include, tpl, define, with, block) — type, full expression, and source line — useful for flagging dynamic constructs that policy can't reason about (e.g., `tpl` of unbounded user input).","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"file":{"name":"file","type":"\u001bhelm.file","title":"File within a Helm chart","desc":"Examine a single file shipped with the chart by relative path and lazy content — useful for inspecting NOTES.txt, README, LICENSE, or auxiliary scripts.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"maintainer":{"name":"maintainer","type":"\u001bhelm.maintainer","title":"Helm chart maintainer","desc":"Examine a `maintainers:` entry from Chart.yaml — name, email, and optional URL — useful for supply-chain ownership and contact audits.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"ociRef":{"name":"ociRef","type":"\u001bhelm.ociRef","title":"OCI registry reference for a Helm chart dependency","desc":"Examine the parsed parts of an `oci://` dependency reference (Helm 3.8+): the full reference, the registry host, the repository path, and the pinned tag or digest. Parsing is offline — it classifies and decomposes the reference string and the dependency's version constraint without ever pulling from the registry.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"resource":{"name":"resource","type":"\u001bhelm.resource","title":"Kubernetes resource rendered from a Helm template","desc":"Examine a Kubernetes manifest produced by rendering a chart with its values: apiVersion, kind, name, namespace, labels, annotations, the full manifest dict, and the typed reference back to the template that produced it.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true},"template":{"name":"template","type":"\u001bhelm.template","title":"Helm template file","desc":"Examine a single file under templates/: its path, the raw Go-template source, the rendered YAML produced by applying the chart's values, the Kubernetes resources that render produces, and the directives (if / range / include / tpl / define / with / block) detected in the raw source.","provider":"go.mondoo.com/mql/v13/providers/helm","is_implicit_resource":true}},"title":"Helm chart catalog","desc":"Top-level entry point for analyzing Helm charts. Exposes every parsed chart along with its metadata, templates, rendered Kubernetes resources, dependencies, and bundled files — used to enforce policy on Kubernetes manifests before they ever reach a cluster.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.chart":{"id":"helm.chart","name":"helm.chart","fields":{"annotations":{"name":"annotations","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Chart-level annotations","desc":"From `annotations:` in Chart.yaml. Used by Helm itself (for example `artifacthub.io/changes`, `artifacthub.io/license`, `helm.sh/chart-deprecation`) and by chart consumers for arbitrary metadata.","min_provider_version":"13.0.9","provider":"go.mondoo.com/mql/v13/providers/helm"},"apiVersion":{"name":"apiVersion","type":"\u0007","is_mandatory":true,"title":"API version (v1 or v2)","provider":"go.mondoo.com/mql/v13/providers/helm"},"appVersion":{"name":"appVersion","type":"\u0007","is_mandatory":true,"title":"Application version","provider":"go.mondoo.com/mql/v13/providers/helm"},"dependencies":{"name":"dependencies","type":"\u0019\u001bhelm.dependency","title":"Chart dependencies","provider":"go.mondoo.com/mql/v13/providers/helm"},"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the chart is deprecated","provider":"go.mondoo.com/mql/v13/providers/helm"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Chart description","provider":"go.mondoo.com/mql/v13/providers/helm"},"files":{"name":"files","type":"\u0019\u001bhelm.file","title":"Files in the chart","provider":"go.mondoo.com/mql/v13/providers/helm"},"home":{"name":"home","type":"\u0007","is_mandatory":true,"title":"Home URL","provider":"go.mondoo.com/mql/v13/providers/helm"},"icon":{"name":"icon","type":"\u0007","is_mandatory":true,"title":"Icon URL","provider":"go.mondoo.com/mql/v13/providers/helm"},"isSubchart":{"name":"isSubchart","type":"\u0004","is_mandatory":true,"title":"Whether this chart was reached as a vendored subchart of another chart","desc":"True for charts materialized through subcharts(); false for top-level charts loaded directly from the connection path.","min_provider_version":"13.0.10","provider":"go.mondoo.com/mql/v13/providers/helm"},"keywords":{"name":"keywords","type":"\u0019\u0007","is_mandatory":true,"title":"Keywords","provider":"go.mondoo.com/mql/v13/providers/helm"},"kubeVersion":{"name":"kubeVersion","type":"\u0007","is_mandatory":true,"title":"SemVer constraint on the supported Kubernetes versions","desc":"From `kubeVersion:` in Chart.yaml. Empty when unconstrained — audits commonly require every chart to pin a kubeVersion so it can be gated against a cluster's actual version (e.g. `\u003e=1.27.0-0`).","min_provider_version":"13.0.9","provider":"go.mondoo.com/mql/v13/providers/helm"},"maintainers":{"name":"maintainers","type":"\u0019\u001bhelm.maintainer","title":"Maintainers","provider":"go.mondoo.com/mql/v13/providers/helm"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Chart name from Chart.yaml","provider":"go.mondoo.com/mql/v13/providers/helm"},"parent":{"name":"parent","type":"\u001bhelm.chart","title":"Parent chart that vendors this chart as a subchart","desc":"Null for top-level charts. For a vendored subchart, links back to the chart whose charts/ directory it was loaded from, enabling traversal back up the dependency tree.","min_provider_version":"13.0.10","provider":"go.mondoo.com/mql/v13/providers/helm"},"resources":{"name":"resources","type":"\u0019\u001bhelm.resource","title":"All Kubernetes resources across all templates (rendered with values)","provider":"go.mondoo.com/mql/v13/providers/helm"},"sources":{"name":"sources","type":"\u0019\u0007","is_mandatory":true,"title":"Source URLs","provider":"go.mondoo.com/mql/v13/providers/helm"},"subcharts":{"name":"subcharts","type":"\u0019\u001bhelm.chart","title":"Vendored subcharts loaded from charts/","desc":"Each entry is a fully recursive helm.chart for a dependency whose chart body is vendored under the chart's charts/ directory, so every chart field (templates, values, dependencies, maintainers, files, and subcharts again) works per-subchart. Helm's render engine already merges subchart templates into the parent chart's rendered output, so this is for introspecting the source tree — per-subchart values, metadata, and declared dependencies — not for obtaining additional rendered manifests beyond what the parent already renders.","min_provider_version":"13.0.10","provider":"go.mondoo.com/mql/v13/providers/helm"},"templates":{"name":"templates","type":"\u0019\u001bhelm.template","title":"Parsed templates","provider":"go.mondoo.com/mql/v13/providers/helm"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Chart type (application or library)","provider":"go.mondoo.com/mql/v13/providers/helm"},"values":{"name":"values","type":"\n","title":"Default values from values.yaml","provider":"go.mondoo.com/mql/v13/providers/helm"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Chart version","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"Helm chart","desc":"Examine a chart's Chart.yaml metadata (name, version, apiVersion, type, appVersion, description, keywords, home, sources, icon, deprecated flag), its declared dependencies and maintainers, the Go template files, the default values.yaml, every rendered Kubernetes resource, and the chart's files on disk.","min_provider_version":"13.0.0","defaults":"name version","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.dependency":{"id":"helm.dependency","name":"helm.dependency","fields":{"alias":{"name":"alias","type":"\u0007","is_mandatory":true,"title":"Alias for the dependency","provider":"go.mondoo.com/mql/v13/providers/helm"},"condition":{"name":"condition","type":"\u0007","is_mandatory":true,"title":"Condition for enabling","provider":"go.mondoo.com/mql/v13/providers/helm"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether dependency is enabled","provider":"go.mondoo.com/mql/v13/providers/helm"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Dependency name","provider":"go.mondoo.com/mql/v13/providers/helm"},"registryRef":{"name":"registryRef","type":"\u001bhelm.ociRef","title":"OCI registry reference parsed from the repository","desc":"Non-null only when sourceType is \"oci\"; null otherwise. Breaks the `oci://` reference into registry, repository, tag, and digest for offline supply-chain auditing without contacting the registry.","min_provider_version":"13.0.10","provider":"go.mondoo.com/mql/v13/providers/helm"},"repository":{"name":"repository","type":"\u0007","is_mandatory":true,"title":"Repository URL","provider":"go.mondoo.com/mql/v13/providers/helm"},"sourceType":{"name":"sourceType","type":"\u0007","is_mandatory":true,"title":"Classification of the dependency's source","desc":"Derived from the `repository:` value (and `alias`/local path when the repository is empty). One of: \"oci\" for an OCI registry reference (`oci://...`, Helm 3.8+), \"http\" or \"https\" for a classic chart repository URL, \"file\" for a `file://` or local relative path, \"alias\" when the dependency references a sibling chart by alias with no repository, or \"unknown\" when the source can't be classified.","min_provider_version":"13.0.10","provider":"go.mondoo.com/mql/v13/providers/helm"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags for grouping","provider":"go.mondoo.com/mql/v13/providers/helm"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version constraint","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"Helm chart dependency","desc":"Examine an entry from a chart's `dependencies:` list — name, version constraint, repository, conditional-enable expression, tag groupings, the resolved enabled flag, and any alias.","min_provider_version":"13.0.0","defaults":"name version","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.directive":{"id":"helm.directive","name":"helm.directive","fields":{"expression":{"name":"expression","type":"\u0007","is_mandatory":true,"title":"Full expression (e.g., \".Values.replicaCount\", \"include \\\"mychart.labels\\\" .\")","provider":"go.mondoo.com/mql/v13/providers/helm"},"line":{"name":"line","type":"\u0005","is_mandatory":true,"title":"Line number in the template","provider":"go.mondoo.com/mql/v13/providers/helm"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Directive type (if, range, include, tpl, define, with, block)","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"Go-template directive in a Helm template","desc":"Examine a single directive (if, range, include, tpl, define, with, block) — type, full expression, and source line — useful for flagging dynamic constructs that policy can't reason about (e.g., `tpl` of unbounded user input).","min_provider_version":"13.0.0","defaults":"type expression","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.file":{"id":"helm.file","name":"helm.file","fields":{"content":{"name":"content","type":"\u0007","title":"File content","provider":"go.mondoo.com/mql/v13/providers/helm"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path relative to chart root","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"File within a Helm chart","desc":"Examine a single file shipped with the chart by relative path and lazy content — useful for inspecting NOTES.txt, README, LICENSE, or auxiliary scripts.","min_provider_version":"13.0.0","defaults":"path","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.maintainer":{"id":"helm.maintainer","name":"helm.maintainer","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Maintainer email","provider":"go.mondoo.com/mql/v13/providers/helm"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Maintainer name","provider":"go.mondoo.com/mql/v13/providers/helm"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Maintainer URL","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"Helm chart maintainer","desc":"Examine a `maintainers:` entry from Chart.yaml — name, email, and optional URL — useful for supply-chain ownership and contact audits.","min_provider_version":"13.0.0","defaults":"name email","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.ociRef":{"id":"helm.ociRef","name":"helm.ociRef","fields":{"digest":{"name":"digest","type":"\u0007","is_mandatory":true,"title":"Digest the reference is pinned to","desc":"A `sha256:...` digest when the reference or version pins one (via an `@sha256:` suffix); empty otherwise.","provider":"go.mondoo.com/mql/v13/providers/helm"},"reference":{"name":"reference","type":"\u0007","is_mandatory":true,"title":"Full OCI reference (e.g., oci://ghcr.io/acme/charts/redis)","provider":"go.mondoo.com/mql/v13/providers/helm"},"registry":{"name":"registry","type":"\u0007","is_mandatory":true,"title":"Registry host (e.g., ghcr.io)","provider":"go.mondoo.com/mql/v13/providers/helm"},"repository":{"name":"repository","type":"\u0007","is_mandatory":true,"title":"Repository path within the registry (e.g., acme/charts/redis)","provider":"go.mondoo.com/mql/v13/providers/helm"},"tag":{"name":"tag","type":"\u0007","is_mandatory":true,"title":"Tag the reference resolves to","desc":"Taken from the dependency's version constraint when it's a concrete version, or from a `:tag` suffix on the reference. Empty when the reference is pinned by digest or the version is a range constraint.","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"OCI registry reference for a Helm chart dependency","desc":"Examine the parsed parts of an `oci://` dependency reference (Helm 3.8+): the full reference, the registry host, the repository path, and the pinned tag or digest. Parsing is offline — it classifies and decomposes the reference string and the dependency's version constraint without ever pulling from the registry.","min_provider_version":"13.0.10","defaults":"reference","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.resource":{"id":"helm.resource","name":"helm.resource","fields":{"annotations":{"name":"annotations","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Annotations","provider":"go.mondoo.com/mql/v13/providers/helm"},"apiVersion":{"name":"apiVersion","type":"\u0007","is_mandatory":true,"title":"Kubernetes API version","provider":"go.mondoo.com/mql/v13/providers/helm"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Resource kind (Deployment, Service, etc.)","provider":"go.mondoo.com/mql/v13/providers/helm"},"labels":{"name":"labels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Labels","provider":"go.mondoo.com/mql/v13/providers/helm"},"manifest":{"name":"manifest","type":"\n","is_mandatory":true,"title":"Full resource manifest as dict","provider":"go.mondoo.com/mql/v13/providers/helm"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name (after rendering)","provider":"go.mondoo.com/mql/v13/providers/helm"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"Resource namespace","provider":"go.mondoo.com/mql/v13/providers/helm"},"template":{"name":"template","type":"\u001bhelm.template","title":"The template that produced this resource","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"Kubernetes resource rendered from a Helm template","desc":"Examine a Kubernetes manifest produced by rendering a chart with its values: apiVersion, kind, name, namespace, labels, annotations, the full manifest dict, and the typed reference back to the template that produced it.","min_provider_version":"13.0.0","defaults":"kind name","provider":"go.mondoo.com/mql/v13/providers/helm"},"helm.template":{"id":"helm.template","name":"helm.template","fields":{"directives":{"name":"directives","type":"\u0019\u001bhelm.directive","title":"Template directives found in raw content (include, tpl, range, if, etc.)","provider":"go.mondoo.com/mql/v13/providers/helm"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Template file name (e.g., templates/deployment.yaml)","provider":"go.mondoo.com/mql/v13/providers/helm"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Raw Go template content before rendering","provider":"go.mondoo.com/mql/v13/providers/helm"},"rendered":{"name":"rendered","type":"\u0007","title":"Rendered YAML content (using chart values)","provider":"go.mondoo.com/mql/v13/providers/helm"},"resources":{"name":"resources","type":"\u0019\u001bhelm.resource","title":"Kubernetes resources produced by rendering this template","provider":"go.mondoo.com/mql/v13/providers/helm"}},"title":"Helm template file","desc":"Examine a single file under templates/: its path, the raw Go-template source, the rendered YAML produced by applying the chart's values, the Kubernetes resources that render produces, and the directives (if / range / include / tpl / define / with / block) detected in the raw source.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/helm"}}}