{"resources":{"ai":{"id":"ai","name":"ai","fields":{"model":{"name":"model","type":"\u001bai.model","title":"AI Model","desc":"Examine a single locally cached AI model. The `name` field identifies the model and `source` indicates which tool cached it — for example `\"ollama\"`, `\"huggingface\"`, `\"lmstudio\"`, `\"gpt4all\"`, `\"pytorch\"`, `\"keras\"`, `\"tfhub\"`, or `\"jan\"`. Use `ai.models.where(source == \"ollama\")` to filter by source, or inspect `size` and `modifiedAt` to find the largest or most recently used models on the system.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"models":{"name":"models","type":"\u0019\u001bai.model","title":"All locally cached AI models across all supported sources","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"AI Model Cache","desc":"Examine locally cached AI models from tools such as Ollama, Hugging Face Hub, LM Studio, GPT4All, PyTorch Hub, Keras, TensorFlow Hub, and Jan. Iterate over all discovered models to audit what AI models are present on the system, their sizes, formats, and sources.","min_provider_version":"13.16.9","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"ai.model":{"id":"ai.model","name":"ai.model","fields":{"architecture":{"name":"architecture","type":"\u0007","is_mandatory":true,"title":"Model architecture","desc":"For example LlamaForCausalLM, MistralForCausalLM, or llama.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Short description of the model","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Base architecture family (e.g., \"llama\", \"qwen2\", \"bert\", \"mixtral\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"Model file format (gguf, safetensors, pytorch, h5, savedmodel, mlx, onnx, keras)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"License identifier if available (e.g., \"apache-2.0\", \"llama3\", \"MIT\")","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modifiedAt":{"name":"modifiedAt","type":"\t","is_mandatory":true,"title":"Last modification time","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Model name (e.g., \"llama3:latest\", \"meta-llama/Llama-2-7b-hf\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameterSize":{"name":"parameterSize","type":"\u0007","is_mandatory":true,"title":"Human-readable parameter count","desc":"For example 7B, 13B, or 70B.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Filesystem path to the model","provider":"go.mondoo.com/cnquery/v9/providers/os"},"quantization":{"name":"quantization","type":"\u0007","is_mandatory":true,"title":"Quantization method or level","desc":"For example Q4_K_M, Q8_0, F16, gptq, or awq.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Total size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source tool that cached this model (ollama, huggingface, lmstudio, gpt4all, pytorch, keras, tfhub, jan)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags associated with the model","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vendor":{"name":"vendor","type":"\u0007","is_mandatory":true,"title":"Publisher or organization that released the model (e.g., \"meta-llama\", \"google\", \"mistralai\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Model version identifier (e.g., Ollama tag name, HuggingFace revision hash)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"AI Model","desc":"Examine a single locally cached AI model. The `name` field identifies the model and `source` indicates which tool cached it — for example `\"ollama\"`, `\"huggingface\"`, `\"lmstudio\"`, `\"gpt4all\"`, `\"pytorch\"`, `\"keras\"`, `\"tfhub\"`, or `\"jan\"`. Use `ai.models.where(source == \"ollama\")` to filter by source, or inspect `size` and `modifiedAt` to find the largest or most recently used models on the system.","private":true,"min_provider_version":"13.16.9","defaults":"name source","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"antigravity":{"id":"antigravity","name":"antigravity","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Antigravity configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bantigravity.skill","title":"Antigravity skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bantigravity.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Antigravity (Google) instance","desc":"Examine installed skills URL: https://antigravity.google/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"antigravity.skill":{"id":"antigravity.skill","name":"antigravity.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Antigravity skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"apache2":{"id":"apache2","name":"apache2","fields":{"conf":{"name":"conf","type":"\u001bapache2.conf","title":"Apache2 HTTP Server configuration","desc":"Examine directives, loaded modules, virtual hosts, and directory blocks","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"version":{"name":"version","type":"\u0007","title":"Apache2 version (e.g., \"2.4.62\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Apache2 HTTP Server","desc":"Examine server configuration and daemon version","min_provider_version":"11.8.14","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apache2.conf":{"id":"apache2.conf","name":"apache2.conf","fields":{"directories":{"name":"directories","type":"\u0019\u001bapache2.conf.directory","refs":["\"file\""],"title":"Directory blocks","provider":"go.mondoo.com/cnquery/v9/providers/os"},"directory":{"name":"directory","type":"\u001bapache2.conf.directory","title":"Apache2 Directory block","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"envvars":{"name":"envvars","type":"\u001bapache2.conf.envvars","title":"Environment variables sourced by Apache at startup (e.g. Debian's /etc/apache2/envvars)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"Primary configuration file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","refs":["\"file\""],"title":"All configuration files (main + included fragments)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listenAddresses":{"name":"listenAddresses","type":"\u0019\u0007","refs":["\"params\""],"title":"Listen addresses/ports","provider":"go.mondoo.com/cnquery/v9/providers/os"},"location":{"name":"location","type":"\u001bapache2.conf.location","title":"Apache2 \u003cLocation\u003e block — URL-space access rules","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"locations":{"name":"locations","type":"\u0019\u001bapache2.conf.location","refs":["\"file\""],"title":"\u003cLocation\u003e blocks (URL-space access rules)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u001bapache2.conf.module","title":"Apache2 loaded module","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bapache2.conf.module","refs":["\"file\""],"title":"Loaded modules (LoadModule directives)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Flat key-value directives from the configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"securityHeaders":{"name":"securityHeaders","type":"\u001a\u0007\u0019\u0007","refs":["\"file\""],"title":"Response headers added via `Header always set NAME VALUE` (header name -\u003e values)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverSignature":{"name":"serverSignature","type":"\u0007","refs":["\"params\""],"title":"ServerSignature footer mode (On, Off, EMail)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverTokens":{"name":"serverTokens","type":"\u0007","refs":["\"params\""],"title":"ServerTokens disclosure level (Full, OS, Minimal, Minor, Major, Prod)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"traceEnable":{"name":"traceEnable","type":"\u0007","refs":["\"params\""],"title":"TraceEnable directive value (on, off, extended)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"virtualHost":{"name":"virtualHost","type":"\u001bapache2.conf.virtualHost","title":"Apache2 VirtualHost block","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"virtualHosts":{"name":"virtualHosts","type":"\u0019\u001bapache2.conf.virtualHost","refs":["\"file\""],"title":"VirtualHost blocks","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Apache2 HTTP Server configuration","desc":"Examine directives, loaded modules, virtual hosts, and directory blocks","min_provider_version":"11.8.14","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apache2.conf.directory":{"id":"apache2.conf.directory","name":"apache2.conf.directory","fields":{"allowOverride":{"name":"allowOverride","type":"\u0007","is_mandatory":true,"title":"AllowOverride directive value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0007","is_mandatory":true,"title":"Options directive value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this Directory block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Directory path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"require":{"name":"require","type":"\u0019\u0007","is_mandatory":true,"title":"Require directive values (one entry per Require line)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Apache2 Directory block","private":true,"min_provider_version":"11.8.14","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apache2.conf.envvars":{"id":"apache2.conf.envvars","name":"apache2.conf.envvars","fields":{"file":{"name":"file","type":"\u001bfile","title":"File defining the environment variables","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Parsed variable assignments (after shell expansion)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Apache2 environment variables (e.g. Debian's /etc/apache2/envvars)","private":true,"min_provider_version":"13.12.1","defaults":"file.path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apache2.conf.location":{"id":"apache2.conf.location","name":"apache2.conf.location","fields":{"authName":{"name":"authName","type":"\u0007","is_mandatory":true,"title":"AuthName directive value (realm)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"authType":{"name":"authType","type":"\u0007","is_mandatory":true,"title":"AuthType directive value (None, Basic, Digest, ...)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isMatch":{"name":"isMatch","type":"\u0004","is_mandatory":true,"title":"Whether this block was defined with \u003cLocationMatch\u003e (regex form) instead of \u003cLocation\u003e","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this Location block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Location path or regex","provider":"go.mondoo.com/cnquery/v9/providers/os"},"proxyPass":{"name":"proxyPass","type":"\u0007","is_mandatory":true,"title":"ProxyPass target, if set","provider":"go.mondoo.com/cnquery/v9/providers/os"},"require":{"name":"require","type":"\u0019\u0007","is_mandatory":true,"title":"Require directive values (one entry per Require line)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Apache2 \u003cLocation\u003e block — URL-space access rules","private":true,"min_provider_version":"13.16.10","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apache2.conf.module":{"id":"apache2.conf.module","name":"apache2.conf.module","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Module name (e.g., \"ssl_module\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Shared object path (e.g., \"modules/mod_ssl.so\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Apache2 loaded module","private":true,"min_provider_version":"11.8.14","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apache2.conf.virtualHost":{"id":"apache2.conf.virtualHost","name":"apache2.conf.virtualHost","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"VirtualHost address (e.g., \"*:443\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"certificate":{"name":"certificate","type":"\u0019\u001bcertificate","title":"X.509 certificates parsed from sslCertificateFile (empty if the file is unreadable)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"documentRoot":{"name":"documentRoot","type":"\u0007","is_mandatory":true,"title":"DocumentRoot directive","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this VirtualHost","provider":"go.mondoo.com/cnquery/v9/providers/os"},"redirects":{"name":"redirects","type":"\u0019\n","is_mandatory":true,"title":"Redirect / RedirectMatch directives within this VirtualHost (target, status, match)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverAliases":{"name":"serverAliases","type":"\u0019\u0007","is_mandatory":true,"title":"ServerAlias names (one entry per name across one or more ServerAlias lines)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverName":{"name":"serverName","type":"\u0007","is_mandatory":true,"title":"ServerName directive","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ssl":{"name":"ssl","type":"\u0004","is_mandatory":true,"title":"Whether SSL is enabled (SSLEngine on)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCertificateChainFile":{"name":"sslCertificateChainFile","type":"\u0007","is_mandatory":true,"title":"Path to the certificate chain (SSLCertificateChainFile, deprecated in favor of full chain in SSLCertificateFile)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCertificateFile":{"name":"sslCertificateFile","type":"\u0007","is_mandatory":true,"title":"Path to the server certificate (SSLCertificateFile)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCertificateKeyFile":{"name":"sslCertificateKeyFile","type":"\u0007","is_mandatory":true,"title":"Path to the server private key (SSLCertificateKeyFile)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCipherSuite":{"name":"sslCipherSuite","type":"\u0007","is_mandatory":true,"title":"SSLCipherSuite directive value","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslHonorCipherOrder":{"name":"sslHonorCipherOrder","type":"\u0004","is_mandatory":true,"title":"SSLHonorCipherOrder directive value (true when \"on\")","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslProtocol":{"name":"sslProtocol","type":"\u0007","is_mandatory":true,"title":"SSLProtocol directive value (e.g., \"all -SSLv3 -TLSv1 -TLSv1.1\")","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Apache2 VirtualHost block","private":true,"min_provider_version":"11.8.14","defaults":"address serverName ssl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apparmor":{"id":"apparmor","name":"apparmor","fields":{"process":{"name":"process","type":"\u001bapparmor.process","title":"AppArmor confined process","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"processes":{"name":"processes","type":"\u0019\u001bapparmor.process","title":"Processes with AppArmor confinement","provider":"go.mondoo.com/cnquery/v9/providers/os"},"profile":{"name":"profile","type":"\u001bapparmor.profile","title":"AppArmor profile","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"profiles":{"name":"profiles","type":"\u0019\u001bapparmor.profile","title":"Loaded AppArmor profiles","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"AppArmor status output version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"AppArmor mandatory access control","desc":"Examine status, loaded profiles, and processes under confinement","min_provider_version":"13.2.4","defaults":"profiles","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apparmor.process":{"id":"apparmor.process","name":"apparmor.process","fields":{"executable":{"name":"executable","type":"\u0007","is_mandatory":true,"title":"Process executable path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pid":{"name":"pid","type":"\u0005","is_mandatory":true,"title":"Process ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"profile":{"name":"profile","type":"\u0007","is_mandatory":true,"title":"Profile applied to this process","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Confinement status (e.g., enforce)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"AppArmor confined process","private":true,"min_provider_version":"13.2.4","defaults":"pid profile status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apparmor.profile":{"id":"apparmor.profile","name":"apparmor.profile","fields":{"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Profile mode: enforce, complain, or unconfined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"AppArmor profile","private":true,"min_provider_version":"13.2.4","defaults":"name mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apt":{"id":"apt","name":"apt","fields":{"repo":{"name":"repo","type":"\u001bapt.repo","title":"APT software repository","desc":"Examine a single configured APT repository parsed from a sources list: its package `type` (`deb` for binary or `deb-src` for source), the `url` it fetches from, the `distribution` (suite) and `components` it pulls, and the `file` that declares it. The security-relevant fields are `trusted` — true when the entry carries `[trusted=yes]`, which disables signature verification — and `signedBy`, the keyring path pinning which key may sign the repository. `enabled` is false for entries commented out in a one-line sources file or marked `Enabled: no` in a deb822 file.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"repos":{"name":"repos","type":"\u0019\u001bapt.repo","title":"All configured APT repositories","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Advanced Package Tool (APT) configuration","desc":"Use this as the entry point to the Debian/Ubuntu package management configuration. `repos` enumerates every configured APT repository across `/etc/apt/sources.list` and the `/etc/apt/sources.list.d/` directory, parsing both the classic one-line format and the deb822 `.sources` format. Audit repository trust from there — each `apt.repo` reports whether it is marked `trusted` (signature checks bypassed) and the `signedBy` keyring that pins which key may sign it.","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"apt.repo":{"id":"apt.repo","name":"apt.repo","fields":{"components":{"name":"components","type":"\u0019\u0007","is_mandatory":true,"title":"Components enabled for this repository (e.g., `main`, `contrib`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"distribution":{"name":"distribution","type":"\u0007","is_mandatory":true,"title":"Distribution / suite (e.g., `bookworm`, `noble-security`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the repository entry is active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"Source list file that declares this repository","provider":"go.mondoo.com/cnquery/v9/providers/os"},"signedBy":{"name":"signedBy","type":"\u0007","is_mandatory":true,"title":"Keyring path pinning the signing key (`signed-by`), empty when unset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"trusted":{"name":"trusted","type":"\u0004","is_mandatory":true,"title":"Whether signature verification is bypassed (`[trusted=yes]`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Package type: `deb` (binary) or `deb-src` (source)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Repository URI packages are fetched from","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"APT software repository","desc":"Examine a single configured APT repository parsed from a sources list: its package `type` (`deb` for binary or `deb-src` for source), the `url` it fetches from, the `distribution` (suite) and `components` it pulls, and the `file` that declares it. The security-relevant fields are `trusted` — true when the entry carries `[trusted=yes]`, which disables signature verification — and `signedBy`, the keyring path pinning which key may sign the repository. `enabled` is false for entries commented out in a one-line sources file or marked `Enabled: no` in a deb822 file.","private":true,"min_provider_version":"13.22.2","defaults":"type url distribution","provider":"go.mondoo.com/cnquery/v9/providers/os"},"asset":{"id":"asset","name":"asset","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the asset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"eol":{"name":"eol","type":"\u001basset.eol","title":"Operating system end-of-life status","desc":"Examine the End-of-Life metadata Mondoo publishes for the asset's detected operating system or platform: the EoL date itself, a product-page URL, and a documentation URL. Used by audits to flag hosts whose vendor has stopped issuing security patches and to plan migrations before unsupported software accumulates risk.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"purl":{"name":"purl","type":"\u0007","title":"Platform URL in the package URL format (as opposed to the CPE format)","min_provider_version":"11.3.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vulnerabilityReport":{"name":"vulnerabilityReport","type":"\n","title":"Advisory and vulnerability report","desc":"Deprecated in favor of the `vulnmgmt` resource. Will be removed in version 13.0.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"}},"is_extension":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"asset.eol":{"id":"asset.eol","name":"asset.eol","fields":{"date":{"name":"date","type":"\t","is_mandatory":true,"title":"End-of-Life date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docsUrl":{"name":"docsUrl","type":"\u0007","is_mandatory":true,"title":"Documentation URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"productUrl":{"name":"productUrl","type":"\u0007","is_mandatory":true,"title":"Product URL","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Operating system end-of-life status","desc":"Examine the End-of-Life metadata Mondoo publishes for the asset's detected operating system or platform: the EoL date itself, a product-page URL, and a documentation URL. Used by audits to flag hosts whose vendor has stopped issuing security patches and to plan migrations before unsupported software accumulates risk.","min_provider_version":"9.0.1","defaults":"date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"audit":{"id":"audit","fields":{"advisory":{"name":"advisory","type":"\u001baudit.advisory","title":"Platform/package advisory","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cve":{"name":"cve","type":"\u001baudit.cve","title":"Common Vulnerabilities and Exposures (CVEs)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cvss":{"name":"cvss","type":"\u001baudit.cvss","title":"Common Vulnerability Scoring System (CVSS) score","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"audit.advisory":{"id":"audit.advisory","name":"audit.advisory","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Advisory description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Advisory ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modified":{"name":"modified","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mrn":{"name":"mrn","type":"\u0007","is_mandatory":true,"title":"Mondoo advisory identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"published":{"name":"published","type":"\t","is_mandatory":true,"title":"Advisory publication date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Advisory title","provider":"go.mondoo.com/cnquery/v9/providers/os"},"worstScore":{"name":"worstScore","type":"\u001baudit.cvss","is_mandatory":true,"title":"Worst CVSS score of all assigned CVEs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Platform/package advisory","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"audit.cve":{"id":"audit.cve","name":"audit.cve","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"CVE ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modified":{"name":"modified","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mrn":{"name":"mrn","type":"\u0007","is_mandatory":true,"title":"Mondoo CVE identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"published":{"name":"published","type":"\t","is_mandatory":true,"title":"Publication date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"CVE state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Summary description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"unscored":{"name":"unscored","type":"\u0004","is_mandatory":true,"title":"Whether the CVE has a CVSS score","provider":"go.mondoo.com/cnquery/v9/providers/os"},"worstScore":{"name":"worstScore","type":"\u001baudit.cvss","is_mandatory":true,"title":"Worst CVSS score of all assigned CVEs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Common Vulnerabilities and Exposures (CVEs)","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"audit.cvss":{"id":"audit.cvss","name":"audit.cvss","fields":{"score":{"name":"score","type":"\u0006","is_mandatory":true,"title":"CVSS score ranging from 0.0 to 10.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vector":{"name":"vector","type":"\u0007","is_mandatory":true,"title":"CVSS score represented as a vector string","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Common Vulnerability Scoring System (CVSS) score","private":true,"min_provider_version":"9.0.1","defaults":"score","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditd":{"id":"auditd","fields":{"config":{"name":"config","type":"\u001bauditd.config","title":"auditd (Linux Audit Daemon) global configuration","desc":"Examine /etc/audit/auditd.conf parameters","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"rule":{"name":"rule","type":"\u001bauditd.rule","title":"auditd (Linux Audit Daemon) rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"rules":{"name":"rules","type":"\u001bauditd.rules","title":"auditd (Linux Audit Daemon) ruleset on disk","desc":"Examine controls, file watches, and syscall rules from /etc/audit/audit.rules","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"auditd.config":{"id":"auditd.config","name":"auditd.config","fields":{"file":{"name":"file","type":"\u001bfile","title":"File of this auditd configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Configuration values of this config","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"auditd (Linux Audit Daemon) global configuration","desc":"Examine /etc/audit/auditd.conf parameters","min_provider_version":"11.4.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditd.rule":{"id":"auditd.rule","name":"auditd.rule","fields":{"control":{"name":"control","type":"\u001bauditd.rule.control","title":"auditd (Linux Audit Daemon) rule for a control","desc":"We translate these into simple key-value pairs consisting of a flag and a value eg: --backlog_wait_time 60000  =\u003e  {flag: \"--backlog_wait_time\", value: \"60000\"} eg: -b 8192                    =\u003e  {flag: \"-b\", value: \"8192\"} eg: -D                         =\u003e  {flag: \"-D\", value: nil}","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"file":{"name":"file","type":"\u001bauditd.rule.file","title":"auditd (Linux Audit Daemon) rule for a file","desc":"eg: -w /etc/shadow -p rw -k shadow_access =\u003e {path: \"/etc/shadow\", permissions: \"rw\", keyname: \"shadow_access\"}","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"syscall":{"name":"syscall","type":"\u001bauditd.rule.syscall","title":"auditd (Linux Audit Daemon) rule for a syscall","desc":"eg: -a always,exit -F arch=b32 -F auid\u003e=1000 -F auid!=unset =\u003e { action: \"always\", list: \"exit\", syscalls: [], field_entries: [ key=\"arch\" op=\"=\" value=\"b32\" key=\"auid\" op=\"\u003e=\" value=\"1000\" key=\"auid\" op=\"!=\" value=\"unset\" ], keyname: nil, }","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"auditd (Linux Audit Daemon) rule","private":true,"min_provider_version":"11.4.21","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditd.rule.control":{"id":"auditd.rule.control","name":"auditd.rule.control","fields":{"flag":{"name":"flag","type":"\u0007","is_mandatory":true,"title":"The flag used for this control, i.e. the first part of the control including any leading `-`","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"The value of the control, which may be specified","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"auditd (Linux Audit Daemon) rule for a control","desc":"We translate these into simple key-value pairs consisting of a flag and a value eg: --backlog_wait_time 60000  =\u003e  {flag: \"--backlog_wait_time\", value: \"60000\"} eg: -b 8192                    =\u003e  {flag: \"-b\", value: \"8192\"} eg: -D                         =\u003e  {flag: \"-D\", value: nil}","private":true,"min_provider_version":"11.4.21","defaults":"flag value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditd.rule.file":{"id":"auditd.rule.file","name":"auditd.rule.file","fields":{"keyname":{"name":"keyname","type":"\u0007","is_mandatory":true,"title":"The key name for related rules as specified by -k","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"The path this rule matches as specified by -w","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permissions":{"name":"permissions","type":"\u0007","is_mandatory":true,"title":"The permissions specified by this rule via -p","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"auditd (Linux Audit Daemon) rule for a file","desc":"eg: -w /etc/shadow -p rw -k shadow_access =\u003e {path: \"/etc/shadow\", permissions: \"rw\", keyname: \"shadow_access\"}","private":true,"min_provider_version":"11.4.21","defaults":"path permissions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditd.rule.syscall":{"id":"auditd.rule.syscall","name":"auditd.rule.syscall","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"The action specified by -a","provider":"go.mondoo.com/cnquery/v9/providers/os"},"comparisons":{"name":"comparisons","type":"\u0019\n","is_mandatory":true,"title":"All inter-field comparisons as specified by -C","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fields":{"name":"fields","type":"\u0019\n","is_mandatory":true,"title":"All field entries as raw values, as specified by -F","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keyname":{"name":"keyname","type":"\u0007","is_mandatory":true,"title":"The key name for related rules as specified by -k","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0007","is_mandatory":true,"title":"The list, the second value specified by -a","provider":"go.mondoo.com/cnquery/v9/providers/os"},"syscalls":{"name":"syscalls","type":"\u0019\u0007","is_mandatory":true,"title":"The list of syscalls that this rule matches, specified by -S","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"auditd (Linux Audit Daemon) rule for a syscall","desc":"eg: -a always,exit -F arch=b32 -F auid\u003e=1000 -F auid!=unset =\u003e { action: \"always\", list: \"exit\", syscalls: [], field_entries: [ key=\"arch\" op=\"=\" value=\"b32\" key=\"auid\" op=\"\u003e=\" value=\"1000\" key=\"auid\" op=\"!=\" value=\"unset\" ], keyname: nil, }","private":true,"min_provider_version":"11.4.21","defaults":"action list","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditd.rules":{"id":"auditd.rules","name":"auditd.rules","fields":{"controls":{"name":"controls","type":"\u0019\u001bauditd.rule.control","refs":["\"path\""],"title":"All controls for auditd","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bauditd.rule.file","refs":["\"path\""],"title":"All file rules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","title":"Path to folder to look up rules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"syscalls":{"name":"syscalls","type":"\u0019\u001bauditd.rule.syscall","refs":["\"path\""],"title":"All syscall rules","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"auditd (Linux Audit Daemon) ruleset on disk","desc":"Examine controls, file watches, and syscall rules from /etc/audit/audit.rules","min_provider_version":"11.4.21","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditpol":{"id":"auditpol","name":"auditpol","fields":{"entry":{"name":"entry","type":"\u001bauditpol.entry","title":"Windows audit policy entry","desc":"Examine a single Windows audit-policy entry: the machine name, policy target, subcategory name and GUID, inclusion setting, and exclusion setting, plus the `success` and `failure` booleans derived from the inclusion setting. Iterated from `auditpol` to assert that specific subcategories (e.g., Logon, Account Management) have the expected audit settings.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"list":{"name":"list","type":"\u0019\u001bauditpol.entry","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bauditpol.entry","title":"Windows audit policies","desc":"Examine inclusion and exclusion settings for every audit subcategory","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditpol.entry":{"id":"auditpol.entry","name":"auditpol.entry","fields":{"exclusionsetting":{"name":"exclusionsetting","type":"\u0007","is_mandatory":true,"title":"Exclusive settings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"failure":{"name":"failure","type":"\u0004","title":"Whether the inclusion setting audits failure events","desc":"True for \"Failure\" and \"Success and Failure\".","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inclusionsetting":{"name":"inclusionsetting","type":"\u0007","is_mandatory":true,"title":"Inclusive setting","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machinename":{"name":"machinename","type":"\u0007","is_mandatory":true,"title":"Machine name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policytarget":{"name":"policytarget","type":"\u0007","is_mandatory":true,"title":"Policy target","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subcategory":{"name":"subcategory","type":"\u0007","is_mandatory":true,"title":"Subcategory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subcategoryguid":{"name":"subcategoryguid","type":"\u0007","is_mandatory":true,"title":"Subcategory GUID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"success":{"name":"success","type":"\u0004","title":"Whether the inclusion setting audits success events","desc":"True for \"Success\" and \"Success and Failure\".","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows audit policy entry","desc":"Examine a single Windows audit-policy entry: the machine name, policy target, subcategory name and GUID, inclusion setting, and exclusion setting, plus the `success` and `failure` booleans derived from the inclusion setting. Iterated from `auditpol` to assert that specific subcategories (e.g., Logon, Account Management) have the expected audit settings.","min_provider_version":"9.0.1","defaults":"subcategory inclusionsetting exclusionsetting","provider":"go.mondoo.com/cnquery/v9/providers/os"},"augment":{"id":"augment","name":"augment","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Augment configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001baugment.skill","title":"Augment skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001baugment.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Augment Code instance","desc":"Examine installed skills URL: https://www.augmentcode.com/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"augment.skill":{"id":"augment.skill","name":"augment.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Augment skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"authorizedkeys":{"id":"authorizedkeys","name":"authorizedkeys","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Key file content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bauthorizedkeys.entry","title":"SSH authorized key","desc":"Examine a single entry from an `authorized_keys` file: the source line number, key type, key material, label, and any SSH options such as `command=`, `from=`, or `no-port-forwarding`. Used to audit which keys grant SSH access to a user and to flag entries that lack source or command restrictions.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"Key file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bauthorizedkeys.entry","refs":["\"file\"","\"content\""],"provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the key file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"list_type":"\u001bauthorizedkeys.entry","title":"SSH authorized_keys file","desc":"Examine a single `authorized_keys` file: its path, the typed `file` reference, the raw `content` string, and the parsed `[]entry` list where each entry surfaces the line number, key type, key material, label, and any `command=` / `from=` / `no-port-forwarding` SSH options. Used to audit which keys actually grant SSH access to a given user and to detect entries with no source / command restrictions.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"authorizedkeys.entry":{"id":"authorizedkeys.entry","name":"authorizedkeys.entry","fields":{"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"Key file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Key","provider":"go.mondoo.com/cnquery/v9/providers/os"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Key label","provider":"go.mondoo.com/cnquery/v9/providers/os"},"line":{"name":"line","type":"\u0005","is_mandatory":true,"title":"Line of the key","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"SSH key options (e.g., command restrictions, source IP limits)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of key","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SSH authorized key","desc":"Examine a single entry from an `authorized_keys` file: the source line number, key type, key material, label, and any SSH options such as `command=`, `from=`, or `no-port-forwarding`. Used to audit which keys grant SSH access to a user and to flag entries that lack source or command restrictions.","min_provider_version":"9.0.0","defaults":"key","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cgroup":{"id":"cgroup","name":"cgroup","fields":{"children":{"name":"children","type":"\u0019\u001bcgroup","title":"Child cgroups directly under this one","provider":"go.mondoo.com/cnquery/v9/providers/os"},"controllers":{"name":"controllers","type":"\u0019\u0007","is_mandatory":true,"title":"Controllers enabled on this cgroup (from cgroup.controllers)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cpuMaxPeriodUSec":{"name":"cpuMaxPeriodUSec","type":"\u0005","is_mandatory":true,"title":"CPU accounting period in microseconds","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cpuMaxQuotaUSec":{"name":"cpuMaxQuotaUSec","type":"\u0005","is_mandatory":true,"title":"CPU quota in microseconds per period; `-1` means unlimited","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cpuWeight":{"name":"cpuWeight","type":"\u0005","is_mandatory":true,"title":"Relative CPU weight (1-10000, default 100)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memoryCurrent":{"name":"memoryCurrent","type":"\u0005","is_mandatory":true,"title":"Current memory usage in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memoryHigh":{"name":"memoryHigh","type":"\u0005","is_mandatory":true,"title":"Memory soft limit / throttling watermark in bytes; `-1` means unlimited","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memoryMax":{"name":"memoryMax","type":"\u0005","is_mandatory":true,"title":"Memory hard limit in bytes; `-1` means unlimited","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memorySwapMax":{"name":"memorySwapMax","type":"\u0005","is_mandatory":true,"title":"Swap hard limit in bytes; `-1` means unlimited","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path relative to the cgroup root (e.g., /system.slice/docker-\u003cid\u003e.scope)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pids":{"name":"pids","type":"\u0019\u0005","is_mandatory":true,"title":"Process IDs assigned to this cgroup","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pidsCurrent":{"name":"pidsCurrent","type":"\u0005","is_mandatory":true,"title":"Current number of processes in this cgroup","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pidsMax":{"name":"pidsMax","type":"\u0005","is_mandatory":true,"title":"PID hard limit; `-1` means unlimited","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Kernel cgroup type from `cgroup.type`","desc":"One of `domain`, `domain_threaded`, `domain_invalid`, or `threaded`. Empty when the file is unreadable (typically the root cgroup, where `cgroup.type` does not exist).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"unitType":{"name":"unitType","type":"\u0007","is_mandatory":true,"title":"systemd unit kind inferred from the leaf name","desc":"One of `slice`, `scope`, `service`, `root`, or `other`.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux control group","desc":"Examine a single cgroup v2 entry: its `path` relative to the cgroup root, the kernel `type` (domain, threaded, etc.), the systemd-inferred `unitType` (slice, scope, service, or other), the controllers enabled on it, memory/CPU/PIDs limits and current usage, and the process IDs assigned to the cgroup. Iterated from `cgroups.list` or traversed via `children`. Limit fields use `-1` to mean unlimited (the kernel's `max` literal).","private":true,"min_provider_version":"13.16.10","defaults":"path unitType memoryMax","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cgroups":{"id":"cgroups","name":"cgroups","fields":{"controllers":{"name":"controllers","type":"\u0019\u0007","title":"Controllers available on the host (e.g., memory, cpu, io, pids)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bcgroup","title":"Flat list of every cgroup on the host","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bcgroup","title":"The root cgroup","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0005","title":"cgroup version in use: 2 (unified), 1 (legacy v1 only), or 0 if cgroups are not available","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux control groups (cgroup v2)","desc":"Examine the cgroup hierarchy, available controllers, and the version of cgroups in use. Modern Linux uses cgroup v2 (a single unified hierarchy at /sys/fs/cgroup); v1 hosts and hybrid setups are detected and reported via `version`, but per-controller hierarchies are not modeled. Iterate `list` to query every cgroup on the host, or walk down from `root` to traverse the hierarchy.","min_provider_version":"13.16.10","defaults":"version controllers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chocolatey":{"id":"chocolatey","fields":{"package":{"name":"package","type":"\u001bchocolatey.package","title":"Chocolatey package","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bchocolatey.packages","title":"Chocolatey package inventory (Windows)","desc":"Examine installed packages with version, license, dependencies, and pin state","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"chocolatey.package":{"id":"chocolatey.package","name":"chocolatey.package","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"title":"Package author(s)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dependencies":{"name":"dependencies","type":"\u0019\u0007","is_mandatory":true,"title":"Package dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Full description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"License name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"licenseUrl":{"name":"licenseUrl","type":"\u0007","is_mandatory":true,"title":"License URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Package install path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pinned":{"name":"pinned","type":"\u0004","is_mandatory":true,"title":"Whether the package is pinned (won't auto-upgrade)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"projectUrl":{"name":"projectUrl","type":"\u0007","is_mandatory":true,"title":"Upstream project URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","is_mandatory":true,"title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Short description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Package tags","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Chocolatey package","private":true,"min_provider_version":"13.11.1","defaults":"name version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chocolatey.packages":{"id":"chocolatey.packages","name":"chocolatey.packages","fields":{"list":{"name":"list","type":"\u0019\u001bchocolatey.package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bchocolatey.package","title":"Chocolatey package inventory (Windows)","desc":"Examine installed packages with version, license, dependencies, and pin state","min_provider_version":"13.11.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chrome":{"id":"chrome","name":"chrome","fields":{"extension":{"name":"extension","type":"\u001bchrome.extension","title":"Chrome browser extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"extensionContentScript":{"name":"extensionContentScript","type":"\u001bchrome.extensionContentScript","title":"Chrome extension content script","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"extensionContentScripts":{"name":"extensionContentScripts","type":"\u0019\u001bchrome.extensionContentScript","title":"All content scripts from all Chrome extensions across all profiles and users","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"extensions":{"name":"extensions","type":"\u0019\u001bchrome.extension","title":"All installed Chrome extensions across all profiles and users","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Chromium-family browsers (Chrome, Brave, Edge variants)","desc":"Examine installed extensions and their content scripts across users and profiles","min_provider_version":"11.4.84","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chrome.extension":{"id":"chrome.extension","name":"chrome.extension","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"title":"Extension author from manifest","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"browser":{"name":"browser","type":"\u0007","is_mandatory":true,"title":"Browser name (e.g., \"Google Chrome\", \"Chromium\", \"Google Chrome Beta\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"contentScripts":{"name":"contentScripts","type":"\u0019\u001bchrome.extensionContentScript","is_mandatory":true,"title":"Content scripts declared by this extension","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultLocale":{"name":"defaultLocale","type":"\u0007","is_mandatory":true,"title":"Default locale for internationalization","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Extension description from manifest","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the extension is currently enabled","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fromWebstore":{"name":"fromWebstore","type":"\u0004","is_mandatory":true,"title":"Whether the extension was installed from the Chrome Web Store","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Unique extension identifier (32-character string)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installTime":{"name":"installTime","type":"\t","is_mandatory":true,"title":"Extension install time","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manifestHash":{"name":"manifestHash","type":"\u0007","is_mandatory":true,"title":"SHA-256 hash of the on-disk manifest.json file","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manifestVersion":{"name":"manifestVersion","type":"\u0005","is_mandatory":true,"title":"Chrome extension manifest version (2 or 3)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name from manifest","provider":"go.mondoo.com/cnquery/v9/providers/os"},"optionalPermissions":{"name":"optionalPermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Optional permissions that may be granted at runtime","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the extension directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permissions":{"name":"permissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permissions requested by the extension (includes host_permissions for Manifest V3)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"persistent":{"name":"persistent","type":"\u0004","is_mandatory":true,"title":"Whether the extension runs persistently in the background (Manifest V2 only; V3 is always false)","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"profile":{"name":"profile","type":"\u0007","is_mandatory":true,"title":"Chrome profile name where extension is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"profilePath":{"name":"profilePath","type":"\u0007","is_mandatory":true,"title":"Full path to the Chrome profile directory","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"referenced":{"name":"referenced","type":"\u0004","is_mandatory":true,"title":"Whether the extension directory exists on disk (referenced in Preferences)","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Extension state (e.g., \"enabled\", \"disabled\")","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"UID of the user who owns this extension","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"updateUrl":{"name":"updateUrl","type":"\u0007","is_mandatory":true,"title":"URL used to check for extension updates","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Extension version from manifest","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Chrome browser extension","private":true,"min_provider_version":"11.4.84","defaults":"name version identifier browser","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chrome.extensionContentScript":{"id":"chrome.extensionContentScript","name":"chrome.extensionContentScript","fields":{"browserType":{"name":"browserType","type":"\u0007","is_mandatory":true,"title":"Browser name (e.g., \"Google Chrome\", \"Brave\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Parent extension identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"match":{"name":"match","type":"\u0007","is_mandatory":true,"title":"URL match pattern where the script executes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the extension directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"profilePath":{"name":"profilePath","type":"\u0007","is_mandatory":true,"title":"Full path to the Chrome profile directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"script":{"name":"script","type":"\u0007","is_mandatory":true,"title":"JavaScript content script filename","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"UID of the owning user","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Parent extension version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Chrome extension content script","private":true,"min_provider_version":"13.9.3","defaults":"script match","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chrony":{"id":"chrony","fields":{"conf":{"name":"conf","type":"\u001bchrony.conf","title":"Chrony NTP daemon configuration","desc":"Examine the configuration of chrony, the default NTP implementation on modern RHEL, Fedora, SUSE, and Debian/Ubuntu systems. The typed accessors parse the configuration into structured form so audits can assert on individual directives without regex over the raw text: `servers`, `pools`, and `peers` enumerate the configured time sources; `allow` and `deny` expose the NTP-server access control lists that decide which clients this host serves time to (an empty `allow` means the daemon does not answer client requests); `bindCmdAddresses` reports where the control socket listens; and `keyFile`, `makeStep`, and `rtcSync` cover the authentication key file, clock-stepping policy, and real-time-clock synchronization. Select an alternate file with `chrony.conf(path: \"...\")`; the default resolves to `/etc/chrony.conf` (RHEL family) or `/etc/chrony/chrony.conf` (Debian family).","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"chrony.conf":{"id":"chrony.conf","name":"chrony.conf","fields":{"allow":{"name":"allow","type":"\u0019\u0007","refs":["\"settings\""],"title":"Hosts permitted to use this system as a time server (`allow` directives)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"bindCmdAddresses":{"name":"bindCmdAddresses","type":"\u0019\u0007","refs":["\"settings\""],"title":"Addresses the command/monitoring socket binds to (`bindcmdaddress`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw contents of the chrony configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"deny":{"name":"deny","type":"\u0019\u0007","refs":["\"settings\""],"title":"Hosts denied use of this system as a time server (`deny` directives)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"File backing the chrony configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keyFile":{"name":"keyFile","type":"\u0007","refs":["\"settings\""],"title":"Path to the NTP authentication key file (`keyfile`), empty when unset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"makeStep":{"name":"makeStep","type":"\u0007","refs":["\"settings\""],"title":"Clock-stepping policy from the `makestep` directive, empty when unset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"peers":{"name":"peers","type":"\u0019\u0007","refs":["\"settings\""],"title":"Symmetric peers from `peer` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pools":{"name":"pools","type":"\u0019\u0007","refs":["\"settings\""],"title":"Time-source pools from `pool` directives (host plus any options)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rtcSync":{"name":"rtcSync","type":"\u0004","refs":["\"settings\""],"title":"Whether the real-time clock is kept in sync (`rtcsync` directive present)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u0007","refs":["\"settings\""],"title":"Time sources from `server` directives (host plus any options)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\u0019\u0007","refs":["\"content\""],"title":"Effective settings with comments and blank lines removed","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Chrony NTP daemon configuration","desc":"Examine the configuration of chrony, the default NTP implementation on modern RHEL, Fedora, SUSE, and Debian/Ubuntu systems. The typed accessors parse the configuration into structured form so audits can assert on individual directives without regex over the raw text: `servers`, `pools`, and `peers` enumerate the configured time sources; `allow` and `deny` expose the NTP-server access control lists that decide which clients this host serves time to (an empty `allow` means the daemon does not answer client requests); `bindCmdAddresses` reports where the control socket listens; and `keyFile`, `makeStep`, and `rtcSync` cover the authentication key file, clock-stepping policy, and real-time-clock synchronization. Select an alternate file with `chrony.conf(path: \"...\")`; the default resolves to `/etc/chrony.conf` (RHEL family) or `/etc/chrony/chrony.conf` (Debian family).","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"claude":{"id":"claude","fields":{"code":{"name":"code","type":"\u001bclaude.code","title":"Claude Code (Anthropic CLI agent) instance","desc":"Examine account, plugins, skills, projects, and configured MCP servers URL: https://claude.ai/code","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"claude.code":{"id":"claude.code","name":"claude.code","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Claude Code configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"email":{"name":"email","type":"\u0007","title":"Account email","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabledPlugins":{"name":"enabledPlugins","type":"\u0019\u0007","title":"List of enabled plugin names","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mcpServer":{"name":"mcpServer","type":"\u001bclaude.code.mcpServer","title":"Claude Code MCP server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"mcpServers":{"name":"mcpServers","type":"\u0019\u001bclaude.code.mcpServer","title":"MCP servers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"organization":{"name":"organization","type":"\u0007","title":"Organization name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"organizationId":{"name":"organizationId","type":"\u0007","title":"Organization ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"plugin":{"name":"plugin","type":"\u001bclaude.code.plugin","title":"Claude Code installed plugin","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"plugins":{"name":"plugins","type":"\u0019\u001bclaude.code.plugin","title":"Installed plugins","provider":"go.mondoo.com/cnquery/v9/providers/os"},"project":{"name":"project","type":"\u001bclaude.code.project","title":"Claude Code project","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"projects":{"name":"projects","type":"\u0019\u001bclaude.code.project","title":"Projects Claude Code has access to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"role":{"name":"role","type":"\u0007","title":"Account role within the organization","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\n","title":"Settings dictionary","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bclaude.code.skill","title":"Claude Code skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bclaude.code.skill","title":"Configured skills","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subscription":{"name":"subscription","type":"\u0007","title":"Subscription type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"userId":{"name":"userId","type":"\u0007","title":"User ID","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Claude Code (Anthropic CLI agent) instance","desc":"Examine account, plugins, skills, projects, and configured MCP servers URL: https://claude.ai/code","min_provider_version":"13.8.2","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"claude.code.mcpServer":{"id":"claude.code.mcpServer","name":"claude.code.mcpServer","fields":{"lastChecked":{"name":"lastChecked","type":"\u0007","is_mandatory":true,"title":"Timestamp of last authentication check","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"needsAuth":{"name":"needsAuth","type":"\u0004","is_mandatory":true,"title":"Whether the server needs authentication","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Claude Code MCP server","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"claude.code.plugin":{"id":"claude.code.plugin","name":"claude.code.plugin","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the plugin is currently enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gitCommitSha":{"name":"gitCommitSha","type":"\u0007","is_mandatory":true,"title":"Git commit SHA of the installed version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installPath":{"name":"installPath","type":"\u0007","is_mandatory":true,"title":"Local install path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installedAt":{"name":"installedAt","type":"\u0007","is_mandatory":true,"title":"Installation timestamp","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastUpdated":{"name":"lastUpdated","type":"\u0007","is_mandatory":true,"title":"Last updated timestamp","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plugin name (e.g. \"gopls-lsp@claude-plugins-official\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Installation scope (user or project)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Plugin version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Claude Code installed plugin","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"claude.code.project":{"id":"claude.code.project","name":"claude.code.project","fields":{"hasMemory":{"name":"hasMemory","type":"\u0004","is_mandatory":true,"title":"Whether the project has persistent memory configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Original filesystem path the project maps to","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Claude Code project","private":true,"min_provider_version":"13.8.2","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"claude.code.skill":{"id":"claude.code.skill","name":"claude.code.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Claude Code skill","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"cline":{"id":"cline","name":"cline","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Cline configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bcline.skill","title":"Cline skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bcline.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Cline AI agent instance","desc":"Examine installed skills URL: https://cline.bot/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"cline.skill":{"id":"cline.skill","name":"cline.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Cline skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"cloud":{"id":"cloud","name":"cloud","fields":{"instance":{"name":"instance","type":"\u001bcloudInstance","title":"Cloud instance metadata","provider":"go.mondoo.com/cnquery/v9/providers/os"},"provider":{"name":"provider","type":"\u0007","title":"Cloud provider (e.g. aws, azure, gcp)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Cloud-asset metadata","desc":"Examine the cloud provider and exposed instance metadata","min_provider_version":"11.3.32","defaults":"provider","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cloudInstance":{"id":"cloudInstance","name":"cloudInstance","fields":{"metadata":{"name":"metadata","type":"\n","title":"Raw access to the cloud instance metadata","provider":"go.mondoo.com/cnquery/v9/providers/os"},"privateHostname":{"name":"privateHostname","type":"\u0007","title":"Cloud instance private hostname","provider":"go.mondoo.com/cnquery/v9/providers/os"},"privateIpv4":{"name":"privateIpv4","type":"\u0019\u001bipAddress","title":"List of private IPv4 addresses","provider":"go.mondoo.com/cnquery/v9/providers/os"},"publicHostname":{"name":"publicHostname","type":"\u0007","title":"Cloud instance public hostname","provider":"go.mondoo.com/cnquery/v9/providers/os"},"publicIpv4":{"name":"publicIpv4","type":"\u0019\u001bipAddress","title":"List of public IPv4 addresses","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Cloud instance metadata","private":true,"min_provider_version":"11.3.32","defaults":"publicHostname privateHostname","provider":"go.mondoo.com/cnquery/v9/providers/os"},"command":{"id":"command","name":"command","fields":{"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Raw contents of the command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exitcode":{"name":"exitcode","type":"\u0005","refs":["\"command\""],"title":"Exit code the command returned","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stderr":{"name":"stderr","type":"\u0007","refs":["\"command\""],"title":"Standard error output from running the command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stdout":{"name":"stdout","type":"\u0007","refs":["\"command\""],"title":"Standard output from running the command","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"command","type":"\u0007"}]},"title":"Result of running a shell command on the system","desc":"Provides ad-hoc command execution as an MQL resource. Initialize it with a shell command string; the resource lazily executes the command through the connection (local exec, SSH, container exec, etc.) and surfaces the captured `stdout`, `stderr`, and `exitcode`. Used as a fall-back when there isn't a more specific typed resource for a piece of system state, and for assertions on tool versions or command-line probes.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"conda":{"id":"conda","fields":{"package":{"name":"package","type":"\u001bconda.package","title":"Conda package dependency","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bconda.packages","title":"Conda package inventory","desc":"Examine installed packages from conda-meta or environment.yml","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"conda.package":{"id":"conda.package","name":"conda.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the conda.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Conda package dependency","private":true,"min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"conda.packages":{"id":"conda.packages","name":"conda.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bconda.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for conda-meta or environment.yml","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bconda.package","title":"Conda package inventory","desc":"Examine installed packages from conda-meta or environment.yml","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"container":{"id":"container","fields":{"image":{"name":"image","type":"\u001bcontainer.image","title":"OCI/Docker container image reference","desc":"Examine fully-qualified name, tag/digest identifier, and source repository","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"repository":{"name":"repository","type":"\u001bcontainer.repository","title":"Container registry repository","desc":"Examine registry, scheme, and full repository name for an image source","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"container.image":{"id":"container.image","name":"container.image","fields":{"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Identifier of type-specific portion of the image reference","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifierType":{"name":"identifierType","type":"\u0007","is_mandatory":true,"title":"Identifier type: tag or digest","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Fully-qualified reference name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"reference":{"name":"reference","type":"\u0007","is_mandatory":true,"title":"Image reference","provider":"go.mondoo.com/cnquery/v9/providers/os"},"repository":{"name":"repository","type":"\u001bcontainer.repository","title":"Repository used for the container image","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OCI/Docker container image reference","desc":"Examine fully-qualified name, tag/digest identifier, and source repository","min_provider_version":"9.0.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"container.repository":{"id":"container.repository","name":"container.repository","fields":{"fullName":{"name":"fullName","type":"\u0007","is_mandatory":true,"title":"Container registry repository URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Container registry repository name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"registry":{"name":"registry","type":"\u0007","is_mandatory":true,"title":"Container registry URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"scheme":{"name":"scheme","type":"\u0007","is_mandatory":true,"title":"URL scheme","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Container registry repository","desc":"Examine registry, scheme, and full repository name for an image source","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"containerd":{"id":"containerd","name":"containerd","fields":{"container":{"name":"container","type":"\u001bcontainerd.container","title":"Single containerd container","desc":"Examine ID, image, status, namespace, and runtime","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"containers":{"name":"containers","type":"\u0019\u001bcontainerd.container","title":"List all containerd containers","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"containerd host","desc":"Examine containers managed by the containerd runtime","min_provider_version":"11.4.84","provider":"go.mondoo.com/cnquery/v9/providers/os"},"containerd.container":{"id":"containerd.container","name":"containerd.container","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Container ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"image":{"name":"image","type":"\u0007","is_mandatory":true,"title":"Container image reference","provider":"go.mondoo.com/cnquery/v9/providers/os"},"labels":{"name":"labels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Container labels","provider":"go.mondoo.com/cnquery/v9/providers/os"},"namespace":{"name":"namespace","type":"\u0007","is_mandatory":true,"title":"containerd namespace","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pid":{"name":"pid","type":"\u0005","is_mandatory":true,"title":"Container PID (0 if not running)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"runtime":{"name":"runtime","type":"\u0007","is_mandatory":true,"title":"Container runtime (e.g., \"io.containerd.runc.v2\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"snapshotter":{"name":"snapshotter","type":"\u0007","is_mandatory":true,"title":"Container snapshotter","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Container status (created, running, paused, stopped, unknown)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Single containerd container","desc":"Examine ID, image, status, namespace, and runtime","min_provider_version":"11.4.84","defaults":"id status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"continuedev":{"id":"continuedev","name":"continuedev","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Continue configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bcontinuedev.skill","title":"Continue skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bcontinuedev.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Continue (open-source AI coding assistant) instance","desc":"Examine installed skills URL: https://continue.dev/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"continuedev.skill":{"id":"continuedev.skill","name":"continuedev.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Continue skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"crontab":{"id":"crontab","name":"crontab","fields":{"entries":{"name":"entries","type":"\u0019\u001bcrontab.entry","title":"All cron entries from system and user crontabs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bcrontab.entry","title":"Individual crontab entry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bfile","title":"Files that contain crontab entries","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Crontab schedule on the system","desc":"Examine cron entries from system, user, and /etc/cron.* sources","min_provider_version":"11.4.84","provider":"go.mondoo.com/cnquery/v9/providers/os"},"crontab.entry":{"id":"crontab.entry","name":"crontab.entry","fields":{"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Command to execute","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dayOfMonth":{"name":"dayOfMonth","type":"\u0007","is_mandatory":true,"title":"Day of month field (1-31, *, or cron expression)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dayOfWeek":{"name":"dayOfWeek","type":"\u0007","is_mandatory":true,"title":"Day of week field (0-7, *, or cron expression)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File containing this entry","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hour":{"name":"hour","type":"\u0007","is_mandatory":true,"title":"Hour field (0-23, *, or cron expression)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the source file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"minute":{"name":"minute","type":"\u0007","is_mandatory":true,"title":"Minute field (0-59, *, or cron expression)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"month":{"name":"month","type":"\u0007","is_mandatory":true,"title":"Month field (1-12, *, or cron expression)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"User that runs the command","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Individual crontab entry","private":true,"min_provider_version":"11.4.84","defaults":"user command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cursor":{"id":"cursor","name":"cursor","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Cursor configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mcpServer":{"name":"mcpServer","type":"\u001bcursor.mcpServer","title":"Cursor MCP server configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"mcpServers":{"name":"mcpServers","type":"\u0019\u001bcursor.mcpServer","title":"MCP servers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rule":{"name":"rule","type":"\u001bcursor.rule","title":"Cursor rule file","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"rules":{"name":"rules","type":"\u0019\u001bcursor.rule","title":"Cursor rules (global and project-scoped)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bcursor.skill","title":"Cursor skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bcursor.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Cursor editor (AI-powered) instance","desc":"Examine MCP servers, global and project rules, and installed skills URL: https://www.cursor.com/","min_provider_version":"13.10.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"cursor.mcpServer":{"id":"cursor.mcpServer","name":"cursor.mcpServer","fields":{"args":{"name":"args","type":"\u0019\u0007","is_mandatory":true,"title":"Server arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Server command (for stdio type)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasEnv":{"name":"hasEnv","type":"\u0004","is_mandatory":true,"title":"Whether environment variables are configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Server URL (for sse/streamable-http type)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Cursor MCP server configuration","private":true,"min_provider_version":"13.10.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"cursor.rule":{"id":"cursor.rule","name":"cursor.rule","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the rule file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name (derived from filename)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the rule file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Cursor rule file","private":true,"min_provider_version":"13.10.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"cursor.skill":{"id":"cursor.skill","name":"cursor.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Cursor skill","private":true,"min_provider_version":"13.10.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"dart":{"id":"dart","fields":{"package":{"name":"package","type":"\u001bdart.package","title":"Dart/Flutter package dependency","desc":"Examine a single Dart/Flutter package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `dart.packages` or `dart.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bdart.packages","title":"Dart/Flutter package inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"dart.package":{"id":"dart.package","name":"dart.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the dart.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dart/Flutter package dependency","desc":"Examine a single Dart/Flutter package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `dart.packages` or `dart.packages.directDependencies()`.","min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dart.packages":{"id":"dart.packages","name":"dart.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bdart.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bdart.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for pubspec.lock","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bdart.package","title":"Root project (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bdart.package","title":"Dart/Flutter package inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker":{"id":"docker","name":"docker","fields":{"container":{"name":"container","type":"\u001bdocker.container","title":"Single Docker container on the host","desc":"Examine state, image, command, labels, and the container's embedded OS","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"containers":{"name":"containers","type":"\u0019\u001bdocker.container","title":"List all Docker containers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bdocker.file","title":"Dockerfile parser","desc":"Examine instructions and per-stage FROM/RUN/COPY/ENV/EXPOSE/USER/HEALTHCHECK","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"image":{"name":"image","type":"\u001bdocker.image","title":"Single Docker image on the host","desc":"Examine ID, tags, repo digests, size, and labels","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"images":{"name":"images","type":"\u0019\u001bdocker.image","title":"List all Docker images","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Docker host","desc":"Examine images and containers managed by the Docker daemon","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.container":{"id":"docker.container","name":"docker.container","fields":{"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Container command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostConfig":{"name":"hostConfig","type":"\n","title":"Container configuration that depends on the host running the container","min_provider_version":"11.3.42","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Container ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"image":{"name":"image","type":"\u0007","is_mandatory":true,"title":"Container image","provider":"go.mondoo.com/cnquery/v9/providers/os"},"imageid":{"name":"imageid","type":"\u0007","is_mandatory":true,"title":"Image ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"labels":{"name":"labels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Label key value pairs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"names":{"name":"names","type":"\u0019\u0007","is_mandatory":true,"title":"Container names","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os":{"name":"os","type":"\u001bos.linux","provider":"go.mondoo.com/cnquery/v9/providers/os","is_embedded":true},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Container state (e.g., created, running, paused, restarting, exited, dead)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status message","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Single Docker container on the host","desc":"Examine state, image, command, labels, and the container's embedded OS","min_provider_version":"9.0.0","defaults":"names.first status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file":{"id":"docker.file","name":"docker.file","fields":{"add":{"name":"add","type":"\u001bdocker.file.add","title":"Dockerfile ADD instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"arg":{"name":"arg","type":"\u001bdocker.file.arg","title":"Dockerfile ARG instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"copy":{"name":"copy","type":"\u001bdocker.file.copy","title":"Dockerfile COPY instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"directives":{"name":"directives","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Parser directives declared at the top of the Dockerfile","desc":"Keys include `syntax` (frontend image pin, e.g. `docker/dockerfile:1.7`), `escape` (line-continuation token, default `\\`), and `check` (Buildkit build-check toggles).","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"env":{"name":"env","type":"\u001bdocker.file.env","title":"Dockerfile ENV instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"expose":{"name":"expose","type":"\u001bdocker.file.expose","title":"Dockerfile EXPOSE instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"file":{"name":"file","type":"\u001bfile","title":"File information about this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os","is_embedded":true},"finalStage":{"name":"finalStage","type":"\u001bdocker.file.stage","refs":["\"file\""],"title":"Final stage in this Dockerfile","desc":"Shortcut to the last `docker.file.stage`, which is the one that produces the image when the build runs without `--target`. Null for an empty file.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"from":{"name":"from","type":"\u001bdocker.file.from","title":"Dockerfile FROM instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"hasSyntaxDirective":{"name":"hasSyntaxDirective","type":"\u0004","refs":["\"file\""],"title":"Whether the Dockerfile pins a frontend via the `syntax` parser directive","desc":"Set when the file begins with `# syntax=\u003cimage\u003e` (e.g. `# syntax=docker/dockerfile:1.7`). The directive selects a specific BuildKit frontend version. Note that BuildKit-only features such as `RUN --mount=type=secret` work without this directive too, so `false` does not mean BuildKit is unused.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"healthcheck":{"name":"healthcheck","type":"\u001bdocker.file.healthcheck","title":"Dockerfile HEALTHCHECK instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"instructions":{"name":"instructions","type":"\n","refs":["\"file\""],"title":"List of instructions in the order they appear","provider":"go.mondoo.com/cnquery/v9/providers/os"},"multiStage":{"name":"multiStage","type":"\u0004","refs":["\"file\""],"title":"Whether the Dockerfile defines more than one stage","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onbuild":{"name":"onbuild","type":"\u001bdocker.file.onbuild","title":"Dockerfile ONBUILD instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"run":{"name":"run","type":"\u001bdocker.file.run","title":"Dockerfile RUN instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"shell":{"name":"shell","type":"\u001bdocker.file.shell","title":"Dockerfile SHELL instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"stage":{"name":"stage","type":"\u001bdocker.file.stage","title":"Dockerfile stages","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"stages":{"name":"stages","type":"\u0019\u001bdocker.file.stage","refs":["\"file\""],"title":"All stages included in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stopsignal":{"name":"stopsignal","type":"\u001bdocker.file.stopsignal","title":"Dockerfile STOPSIGNAL instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"user":{"name":"user","type":"\u001bdocker.file.user","title":"Dockerfile USER instructions","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"volume":{"name":"volume","type":"\u001bdocker.file.volume","title":"Dockerfile VOLUME instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"workdir":{"name":"workdir","type":"\u001bdocker.file.workdir","title":"Dockerfile WORKDIR instruction","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Dockerfile parser","desc":"Examine instructions and per-stage FROM/RUN/COPY/ENV/EXPOSE/USER/HEALTHCHECK","min_provider_version":"11.0.2","defaults":"file.path instructions.length stages.length","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.add":{"id":"docker.file.add","name":"docker.file.add","fields":{"checksum":{"name":"checksum","type":"\u0007","is_mandatory":true,"title":"SHA256 digest the remote download must match (`--checksum=sha256:...`)","desc":"Empty when the flag is not set. Frequently required by audit policies to prevent unverified remote tarballs from entering the image.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chmod":{"name":"chmod","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"chown":{"name":"chown","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"dst":{"name":"dst","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"excludes":{"name":"excludes","type":"\u0019\u0007","is_mandatory":true,"title":"Patterns excluded from the copy (`--exclude=\u003cpattern\u003e`)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"link":{"name":"link","type":"\u0004","is_mandatory":true,"title":"Whether `--link` was set, enabling cache-friendly layered copies","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"src":{"name":"src","type":"\u0019\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile ADD instructions","private":true,"min_provider_version":"11.0.2","defaults":"src dst","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.arg":{"id":"docker.file.arg","name":"docker.file.arg","fields":{"default":{"name":"default","type":"\u0007","is_mandatory":true,"title":"(optional) Default value of the variable","desc":"Values are preserved as-is, without stripping quotes.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the variable","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile ARG instructions","private":true,"min_provider_version":"11.4.70","defaults":"name default","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.copy":{"id":"docker.file.copy","name":"docker.file.copy","fields":{"chmod":{"name":"chmod","type":"\u0007","is_mandatory":true,"title":"Octal permissions of the file(s)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chown":{"name":"chown","type":"\u0007","is_mandatory":true,"title":"Ownership of the file(s)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dst":{"name":"dst","type":"\u0007","is_mandatory":true,"title":"The destination in the image for the file(s)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"excludes":{"name":"excludes","type":"\u0019\u0007","is_mandatory":true,"title":"Patterns excluded from the copy (`--exclude=\u003cpattern\u003e`)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"from":{"name":"from","type":"\u0007","is_mandatory":true,"title":"Stage or image to copy from (`--from=\u003cname\u003e`)","desc":"Set when `COPY --from=\u003cstage\u003e` references the output of an earlier multi-stage build or an external image such as `nginx:1.27`.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"link":{"name":"link","type":"\u0004","is_mandatory":true,"title":"Whether `--link` was set, enabling cache-friendly layered copies","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parents":{"name":"parents","type":"\u0004","is_mandatory":true,"title":"Whether `--parents` was set to preserve source directory structure","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"src":{"name":"src","type":"\u0019\u0007","is_mandatory":true,"title":"Optional source to copy file(s) from when not using the default build context","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile COPY instructions","private":true,"min_provider_version":"11.0.2","defaults":"src dst","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.env":{"id":"docker.file.env","name":"docker.file.env","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the variable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Value of the variable","desc":"Values are preserved as-is, without stripping quotes.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile ENV instructions","private":true,"min_provider_version":"11.4.70","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.expose":{"id":"docker.file.expose","name":"docker.file.expose","fields":{"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Port that is exposed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol that is exposed (evaluates to `tcp` if not specified)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile EXPOSE instruction","private":true,"min_provider_version":"11.0.3","defaults":"port protocol","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.from":{"id":"docker.file.from","name":"docker.file.from","fields":{"digest":{"name":"digest","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"image":{"name":"image","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"platform":{"name":"platform","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"tag":{"name":"tag","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile FROM instructions","private":true,"min_provider_version":"11.0.2","defaults":"name image tag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.healthcheck":{"id":"docker.file.healthcheck","name":"docker.file.healthcheck","fields":{"interval":{"name":"interval","type":"\u0005","is_mandatory":true,"title":"Time between running the check in nanoseconds","provider":"go.mondoo.com/cnquery/v9/providers/os"},"none":{"name":"none","type":"\u0004","is_mandatory":true,"title":"Whether HEALTHCHECK is set to NONE (disables any inherited healthcheck)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"retries":{"name":"retries","type":"\u0005","is_mandatory":true,"title":"Number of consecutive failures needed to report unhealthy","provider":"go.mondoo.com/cnquery/v9/providers/os"},"startInterval":{"name":"startInterval","type":"\u0005","is_mandatory":true,"title":"Interval between checks during start period in nanoseconds","provider":"go.mondoo.com/cnquery/v9/providers/os"},"startPeriod":{"name":"startPeriod","type":"\u0005","is_mandatory":true,"title":"Start period for the container to initialize before counting retries in nanoseconds","provider":"go.mondoo.com/cnquery/v9/providers/os"},"test":{"name":"test","type":"\u0019\u0007","is_mandatory":true,"title":"The health check test command (e.g., [\"CMD-SHELL\", \"curl -f http://localhost/ || exit 1\"])","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeout":{"name":"timeout","type":"\u0005","is_mandatory":true,"title":"Time to wait before considering the check hung in nanoseconds","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile HEALTHCHECK instruction","private":true,"min_provider_version":"11.8.14","defaults":"test","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.onbuild":{"id":"docker.file.onbuild","name":"docker.file.onbuild","fields":{"expression":{"name":"expression","type":"\u0007","is_mandatory":true,"title":"The triggered instruction, exactly as written after `ONBUILD`","desc":"For example `ONBUILD COPY . /app/src` yields `COPY . /app/src`.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile ONBUILD instruction","private":true,"min_provider_version":"13.16.10","defaults":"expression","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.run":{"id":"docker.file.run","name":"docker.file.run","fields":{"isExecForm":{"name":"isExecForm","type":"\u0004","is_mandatory":true,"title":"Whether the instruction is written in exec form","desc":"Exec form (`RUN [\"echo\", \"hi\"]`) executes the program directly without a shell, so pipes, redirects, and `${VAR}` expansion are not interpreted.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isShellForm":{"name":"isShellForm","type":"\u0004","is_mandatory":true,"title":"Whether the instruction is written in shell form","desc":"Shell form (`RUN echo hi`) wraps the command in the stage `SHELL` (default `/bin/sh -c`), allowing shell expansion, pipes, and variable substitution.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mount":{"name":"mount","type":"\u001bdocker.file.run.mount","title":"Dockerfile RUN --mount flag","desc":"One entry per `--mount=...` flag on a `RUN` instruction.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"mounts":{"name":"mounts","type":"\u0019\u001bdocker.file.run.mount","is_mandatory":true,"title":"`--mount=...` flags applied to this RUN","desc":"Each mount exposes a build-time secret, ssh agent socket, cache directory, tmpfs, or bind-mounted source.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mountsSecret":{"name":"mountsSecret","type":"\u0004","is_mandatory":true,"title":"Whether the instruction declares a `--mount=type=secret`","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mountsSsh":{"name":"mountsSsh","type":"\u0004","is_mandatory":true,"title":"Whether the instruction declares a `--mount=type=ssh`","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"network":{"name":"network","type":"\u0007","is_mandatory":true,"title":"`--network=...` value","desc":"One of `default`, `none`, or `host`. Empty when the flag is not set (BuildKit treats that as `default`).","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"script":{"name":"script","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"security":{"name":"security","type":"\u0007","is_mandatory":true,"title":"`--security=...` value","desc":"One of `sandbox` or `insecure`. Empty when the flag is not set. `insecure` runs the step with elevated privileges and is commonly flagged by security policies.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile RUN instructions","private":true,"min_provider_version":"11.0.2","defaults":"script","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.run.mount":{"id":"docker.file.run.mount","name":"docker.file.run.mount","fields":{"env":{"name":"env","type":"\u0007","is_mandatory":true,"title":"Environment variable that exposes the secret to the RUN command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"from":{"name":"from","type":"\u0007","is_mandatory":true,"title":"Stage or image to bind-mount from (`--from=\u003cname\u003e`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"Owner GID for secret / ssh mounts","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Identifier","desc":"For `cache` mounts this is the cache id; for `secret` and `ssh` mounts this is the secret/ssh id supplied via `id=...`.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0005","is_mandatory":true,"title":"File mode for secret / ssh mounts (octal)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"readOnly":{"name":"readOnly","type":"\u0004","is_mandatory":true,"title":"Whether the mount is read-only","provider":"go.mondoo.com/cnquery/v9/providers/os"},"required":{"name":"required","type":"\u0004","is_mandatory":true,"title":"Whether the secret or ssh mount is required to exist at build time","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sharing":{"name":"sharing","type":"\u0007","is_mandatory":true,"title":"Cache sharing mode","desc":"For `cache` mounts: `shared`, `private`, or `locked`. Empty for other types.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sizeLimit":{"name":"sizeLimit","type":"\u0005","is_mandatory":true,"title":"Tmpfs size limit in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path or context for `bind` and `cache` mounts","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Mount destination inside the build container","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Mount type","desc":"One of `bind`, `cache`, `secret`, `ssh`, or `tmpfs`.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"Owner UID for secret / ssh mounts","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile RUN --mount flag","desc":"One entry per `--mount=...` flag on a `RUN` instruction.","private":true,"min_provider_version":"13.16.10","defaults":"type target","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.shell":{"id":"docker.file.shell","name":"docker.file.shell","fields":{"command":{"name":"command","type":"\u0019\u0007","is_mandatory":true,"title":"Shell executable and flags (e.g., [\"/bin/bash\", \"-o\", \"pipefail\", \"-c\"])","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile SHELL instruction","private":true,"min_provider_version":"11.8.15","defaults":"command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.stage":{"id":"docker.file.stage","name":"docker.file.stage","fields":{"add":{"name":"add","type":"\u0019\u001bdocker.file.add","is_mandatory":true,"title":"ADD instructions in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"arg":{"name":"arg","type":"\u0019\u001bdocker.file.arg","is_mandatory":true,"title":"ARG instructions in the Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cmd":{"name":"cmd","type":"\u001bdocker.file.run","is_mandatory":true,"title":"CMD instructions in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"copy":{"name":"copy","type":"\u0019\u001bdocker.file.copy","is_mandatory":true,"title":"COPY instructions in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entrypoint":{"name":"entrypoint","type":"\u001bdocker.file.run","is_mandatory":true,"title":"ENTRYPOINT instructions in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"env":{"name":"env","type":"\u0019\u001bdocker.file.env","is_mandatory":true,"title":"ENV instructions in this Dockerfile","min_provider_version":"11.4.86","provider":"go.mondoo.com/cnquery/v9/providers/os"},"expose":{"name":"expose","type":"\u0019\u001bdocker.file.expose","is_mandatory":true,"title":"EXPOSE instructions in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bdocker.file","is_mandatory":true,"title":"Contains the reference to the Dockerfile this stage belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"final":{"name":"final","type":"\u0004","is_mandatory":true,"title":"Whether this stage is the final stage in the Dockerfile","desc":"Only the final stage produces the image when the Dockerfile is built without `--target`.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"from":{"name":"from","type":"\u001bdocker.file.from","is_mandatory":true,"title":"The source of this stage, specified via `FROM` in Dockerfiles","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasHealthcheck":{"name":"hasHealthcheck","type":"\u0004","is_mandatory":true,"title":"Whether this stage declares a HEALTHCHECK","desc":"True for any `HEALTHCHECK` line, including `HEALTHCHECK NONE` (which explicitly disables an inherited check).","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"healthcheck":{"name":"healthcheck","type":"\u001bdocker.file.healthcheck","is_mandatory":true,"title":"HEALTHCHECK instruction in this Dockerfile","min_provider_version":"11.8.14","provider":"go.mondoo.com/cnquery/v9/providers/os"},"labels":{"name":"labels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"LABEL instructions in the Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onbuild":{"name":"onbuild","type":"\u0019\u001bdocker.file.onbuild","is_mandatory":true,"title":"ONBUILD instructions in this Dockerfile","desc":"ONBUILD instructions are deferred and run when an image built from this Dockerfile is itself used as the base image of a downstream build.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"run":{"name":"run","type":"\u0019\u001bdocker.file.run","is_mandatory":true,"title":"RUN instructions in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"runsAsRoot":{"name":"runsAsRoot","type":"\u0004","is_mandatory":true,"title":"Whether this stage runs as root","desc":"True when no `USER` instruction is present in the stage or when the declared user resolves to UID 0 (`0` or `root`). Inherited `USER` from the base image is not considered, because it is not visible from the Dockerfile alone.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"shell":{"name":"shell","type":"\u001bdocker.file.shell","is_mandatory":true,"title":"SHELL instruction in this Dockerfile","min_provider_version":"11.8.15","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stopsignal":{"name":"stopsignal","type":"\u001bdocker.file.stopsignal","is_mandatory":true,"title":"STOPSIGNAL instruction in this Dockerfile","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u001bdocker.file.user","is_mandatory":true,"title":"USER instruction in this Dockerfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"volumes":{"name":"volumes","type":"\u0019\u001bdocker.file.volume","is_mandatory":true,"title":"VOLUME instructions in this Dockerfile","min_provider_version":"11.8.14","provider":"go.mondoo.com/cnquery/v9/providers/os"},"workdir":{"name":"workdir","type":"\u0019\u001bdocker.file.workdir","is_mandatory":true,"title":"WORKDIR instructions in this Dockerfile","min_provider_version":"11.8.15","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile stages","private":true,"min_provider_version":"11.0.2","defaults":"from.name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.stopsignal":{"id":"docker.file.stopsignal","name":"docker.file.stopsignal","fields":{"signal":{"name":"signal","type":"\u0007","is_mandatory":true,"title":"Signal name or number sent to the container on stop (e.g., `SIGTERM`, `9`)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile STOPSIGNAL instruction","private":true,"min_provider_version":"13.16.10","defaults":"signal","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.user":{"id":"docker.file.user","name":"docker.file.user","fields":{"group":{"name":"group","type":"\u0007","is_mandatory":true,"title":"Set the user group or GID (optional)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isRoot":{"name":"isRoot","type":"\u0004","is_mandatory":true,"title":"Whether the declared user is root","desc":"True when `user` is `0` or `root`. The group is not considered.","min_provider_version":"13.21.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"Set the user name or UID","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile USER instructions","private":true,"min_provider_version":"11.1.3","defaults":"user","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.volume":{"id":"docker.file.volume","name":"docker.file.volume","fields":{"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Volume mount path","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile VOLUME instruction","private":true,"min_provider_version":"11.8.14","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.file.workdir":{"id":"docker.file.workdir","name":"docker.file.workdir","fields":{"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Working directory path","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Dockerfile WORKDIR instruction","private":true,"min_provider_version":"11.8.15","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"docker.image":{"id":"docker.image","name":"docker.image","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Image ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"labels":{"name":"labels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Labels key value pairs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"repoDigests":{"name":"repoDigests","type":"\u0019\u0007","is_mandatory":true,"title":"Repo digests","min_provider_version":"11.4.52","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Image size in kilobytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tag key value pairs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Single Docker image on the host","desc":"Examine ID, tags, repo digests, size, and labels","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dotnet":{"id":"dotnet","fields":{"package":{"name":"package","type":"\u001bdotnet.package","title":".NET / NuGet package dependency","desc":"Examine a single .NET package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `dotnet.packages` or `dotnet.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bdotnet.packages","title":".NET / NuGet package inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"dotnet.package":{"id":"dotnet.package","name":"dotnet.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the dotnet.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":".NET / NuGet package dependency","desc":"Examine a single .NET package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `dotnet.packages` or `dotnet.packages.directDependencies()`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dotnet.packages":{"id":"dotnet.packages","name":"dotnet.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bdotnet.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bdotnet.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for .NET package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bdotnet.package","title":"Root project (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bdotnet.package","title":".NET / NuGet package inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"elixir":{"id":"elixir","fields":{"package":{"name":"package","type":"\u001belixir.package","title":"Elixir Hex package dependency","desc":"Examine a single Elixir Hex package from a mix.lock file: its unique `id`, `name`, `version`, `purl`, and the files that contributed it. Iterated from `elixir.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001belixir.packages","title":"Elixir Hex package inventory (mix.lock)","desc":"Examine all locked Hex packages with their resolved versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"elixir.package":{"id":"elixir.package","name":"elixir.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the elixir.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Elixir Hex package dependency","desc":"Examine a single Elixir Hex package from a mix.lock file: its unique `id`, `name`, `version`, `purl`, and the files that contributed it. Iterated from `elixir.packages`.","min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"elixir.packages":{"id":"elixir.packages","name":"elixir.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001belixir.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for mix.lock","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001belixir.package","title":"Elixir Hex package inventory (mix.lock)","desc":"Examine all locked Hex packages with their resolved versions","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"erlang":{"id":"erlang","fields":{"package":{"name":"package","type":"\u001berlang.package","title":"Erlang Hex package dependency","desc":"Examine a single Erlang Hex package from a rebar.lock file: its unique `id`, `name`, `version`, `purl`, and the files that contributed it. Iterated from `erlang.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001berlang.packages","title":"Erlang Hex package inventory (rebar.lock)","desc":"Examine all locked Hex packages with their resolved versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"erlang.package":{"id":"erlang.package","name":"erlang.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the erlang.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Erlang Hex package dependency","desc":"Examine a single Erlang Hex package from a rebar.lock file: its unique `id`, `name`, `version`, `purl`, and the files that contributed it. Iterated from `erlang.packages`.","min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"erlang.packages":{"id":"erlang.packages","name":"erlang.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001berlang.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for rebar.lock","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001berlang.package","title":"Erlang Hex package inventory (rebar.lock)","desc":"Examine all locked Hex packages with their resolved versions","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"id":"file","name":"file","fields":{"basename":{"name":"basename","type":"\u0007","refs":["\"path\""],"title":"Filename without path prefix of this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","refs":["\"path\"","\"exists\""],"title":"Contents of this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"context":{"name":"context","type":"\u001bfile.context","title":"File context is a range of lines/columns in a file","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"dirname":{"name":"dirname","type":"\u0007","refs":["\"path\""],"title":"Path to the folder containing this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"empty":{"name":"empty","type":"\u0004","refs":["\"path\""],"title":"Whether the path is empty","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exists":{"name":"exists","type":"\u0004","refs":["\"path\""],"title":"Whether this file exists on the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group":{"name":"group","type":"\u001bgroup","title":"Ownership information about the group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Location of the file on the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permissions":{"name":"permissions","type":"\u001bfile.permissions","refs":["\"path\""],"title":"Permissions for this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","refs":["\"path\""],"title":"Size of this file on disk","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u001buser","title":"Ownership information about the user","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"File on the system","desc":"Examine a single file referenced by absolute path. Surfaces the path itself, the basename and dirname, an `exists` flag, the lazily-loaded `content` string, the file's size in bytes, an `empty` predicate, the owning `user` and `group` as typed references, and a structured `permissions` resource that explodes the POSIX mode into named user / group / other read / write / execute bits, the SUID / SGID / sticky bits, the `isFile` / `isDirectory` / `isSymlink` discriminators, and a printed mode string. The unit of file-level audits and the building block most config-file resources read through.","min_provider_version":"9.0.0","defaults":"path size permissions.string","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file.context":{"id":"file.context","name":"file.context","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\"","\"range\""],"title":"Content for this range in the file, shown as an excerpt","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File referenced by this file context","provider":"go.mondoo.com/cnquery/v9/providers/os"},"range":{"name":"range","type":"\u001e","is_mandatory":true,"title":"Range of content in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"File context is a range of lines/columns in a file","private":true,"min_provider_version":"11.3.26","defaults":"file.path range content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file.permissions":{"id":"file.permissions","name":"file.permissions","fields":{"group_executable":{"name":"group_executable","type":"\u0004","is_mandatory":true,"title":"Whether the file is executable by members of the group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group_readable":{"name":"group_readable","type":"\u0004","is_mandatory":true,"title":"Whether the file is readable by members of the group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group_writeable":{"name":"group_writeable","type":"\u0004","is_mandatory":true,"title":"Whether the file is writeable by members of the group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isDirectory":{"name":"isDirectory","type":"\u0004","is_mandatory":true,"title":"Whether the file describes a directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isFile":{"name":"isFile","type":"\u0004","is_mandatory":true,"title":"Whether the file describes a regular file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isSymlink":{"name":"isSymlink","type":"\u0004","is_mandatory":true,"title":"Whether the file is a symlink","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0005","is_mandatory":true,"title":"POSIX file mode as a decimal integer (e.g., 33188 = 0100644)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"other_executable":{"name":"other_executable","type":"\u0004","is_mandatory":true,"title":"Whether the file is executable by others","provider":"go.mondoo.com/cnquery/v9/providers/os"},"other_readable":{"name":"other_readable","type":"\u0004","is_mandatory":true,"title":"Whether the file is readable by others","provider":"go.mondoo.com/cnquery/v9/providers/os"},"other_writeable":{"name":"other_writeable","type":"\u0004","is_mandatory":true,"title":"Whether the file is writeable by others","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sgid":{"name":"sgid","type":"\u0004","is_mandatory":true,"title":"SGID bit indicator","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sticky":{"name":"sticky","type":"\u0004","is_mandatory":true,"title":"Sticky bit indicator","provider":"go.mondoo.com/cnquery/v9/providers/os"},"string":{"name":"string","type":"\u0007","title":"A simple printed string version of the permissions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"suid":{"name":"suid","type":"\u0004","is_mandatory":true,"title":"SUID bit indicator","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user_executable":{"name":"user_executable","type":"\u0004","is_mandatory":true,"title":"Whether the file is executable by its owner","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user_readable":{"name":"user_readable","type":"\u0004","is_mandatory":true,"title":"Whether the file is readable by its owner","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user_writeable":{"name":"user_writeable","type":"\u0004","is_mandatory":true,"title":"Whether the file is writeable by its owner","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Access permissions for a given file","private":true,"min_provider_version":"9.0.0","defaults":"string","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"id":"files","name":"files","fields":{"find":{"name":"find","type":"\u001bfiles.find","title":"File search results","desc":"Examine files discovered by a recursive filesystem walk starting at `from`. Narrow results with `type` (file, directory, device, etc.), `regex` (name pattern), `permissions` (octal mode), `name` (exact name), `depth` (traversal depth), and `xdev` (stay on one device). Returns the matching `[]file` list for content or permission audits.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"File search and discovery namespace","desc":"Empty top-level namespace whose only purpose is to host `files.find`. Used so audits can write `files.find(...) {...}` to locate files on the asset rather than enumerating known paths.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files.find":{"id":"files.find","name":"files.find","fields":{"depth":{"name":"depth","type":"\u0005","is_mandatory":true,"title":"The depth of the file search.","min_provider_version":"11.3.5","provider":"go.mondoo.com/cnquery/v9/providers/os"},"from":{"name":"from","type":"\u0007","is_mandatory":true,"title":"Sets the starting point for the search operation","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bfile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Search name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permissions":{"name":"permissions","type":"\u0005","is_mandatory":true,"title":"What permissions the file matches","provider":"go.mondoo.com/cnquery/v9/providers/os"},"regex":{"name":"regex","type":"\u0007","is_mandatory":true,"title":"A regular expression for the file search","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"What types of files to list (directories, files, devices, etc)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"xdev":{"name":"xdev","type":"\u0004","is_mandatory":true,"title":"Whether to search across other devices","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bfile","title":"File search results","desc":"Examine files discovered by a recursive filesystem walk starting at `from`. Narrow results with `type` (file, directory, device, etc.), `regex` (name pattern), `permissions` (octal mode), `name` (exact name), `depth` (traversal depth), and `xdev` (stay on one device). Returns the matching `[]file` list for content or permission audits.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firefox":{"id":"firefox","name":"firefox","fields":{"addon":{"name":"addon","type":"\u001bfirefox.addon","title":"Firefox browser addon","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"addons":{"name":"addons","type":"\u0019\u001bfirefox.addon","title":"All installed Firefox addons across all profiles and users","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Firefox-family browsers","desc":"Examine installed addons across all users and profiles","min_provider_version":"11.4.86","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firefox.addon":{"id":"firefox.addon","name":"firefox.addon","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the addon is currently active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoupdate":{"name":"autoupdate","type":"\u0004","is_mandatory":true,"title":"Whether auto-updates are enabled for this addon (true when set to \"on\" or \"use global default\")","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"browser":{"name":"browser","type":"\u0007","is_mandatory":true,"title":"Browser name (e.g., \"Firefox\", \"Firefox Developer Edition\", \"LibreWolf\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"creator":{"name":"creator","type":"\u0007","is_mandatory":true,"title":"Addon creator/author name","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Addon description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"title":"Whether the addon is disabled (user or app disabled)","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Unique addon identifier (e.g., \"{uuid}\" or \"addon@example.com\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installDate":{"name":"installDate","type":"\u0005","is_mandatory":true,"title":"Install date as Unix timestamp (milliseconds)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Install location (e.g., \"app-profile\", \"app-system-defaults\", \"app-builtin\")","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Addon name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"native":{"name":"native","type":"\u0004","is_mandatory":true,"title":"Whether this is a native WebExtension (no special loader)","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the addon (can be XPI file or directory)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permissions":{"name":"permissions","type":"\u0019\u0007","is_mandatory":true,"title":"Combined API permissions and host origins","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"profile":{"name":"profile","type":"\u0007","is_mandatory":true,"title":"Firefox profile where addon is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceUri":{"name":"sourceUri","type":"\u0007","is_mandatory":true,"title":"Source URI from where addon was installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Addon type (extension, theme, locale, dictionary, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"UID of the user who owns this addon","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"updateDate":{"name":"updateDate","type":"\u0005","is_mandatory":true,"title":"Last update date as Unix timestamp (milliseconds)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"userDisabled":{"name":"userDisabled","type":"\u0004","is_mandatory":true,"title":"Whether the addon is disabled by user","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Addon version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"visible":{"name":"visible","type":"\u0004","is_mandatory":true,"title":"Whether the addon is visible in the addon manager","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Firefox browser addon","private":true,"min_provider_version":"11.4.86","defaults":"name version active browser","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firewalld":{"id":"firewalld","name":"firewalld","fields":{"defaultZone":{"name":"defaultZone","type":"\u0007","title":"Default zone name (e.g., \"public\", \"home\", \"dmz\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"richrule":{"name":"richrule","type":"\u001bfirewalld.richrule","title":"firewalld rich rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"status":{"name":"status","type":"\u0007","title":"Whether firewalld is running (\"running\", \"not running\", \"not installed\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"zone":{"name":"zone","type":"\u001bfirewalld.zone","title":"firewalld zone configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"zones":{"name":"zones","type":"\u0019\u001bfirewalld.zone","title":"All configured zones","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"firewalld dynamic firewall manager (RHEL/CentOS/Fedora)","desc":"Examine state, default zone, and per-zone services, ports, and rich rules","min_provider_version":"13.2.9","defaults":"status defaultZone","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firewalld.richrule":{"id":"firewalld.richrule","name":"firewalld.richrule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action (accept, reject, drop, mark), empty if not specified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"destination":{"name":"destination","type":"\u0007","is_mandatory":true,"title":"Destination address/subnet, empty if not specified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"destinationInverted":{"name":"destinationInverted","type":"\u0004","is_mandatory":true,"title":"True when the destination address is negated (e.g., `destination NOT address=\"...\"`)","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Address family (\"ipv4\" or \"ipv6\"), empty if not specified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rule":{"name":"rule","type":"\u0007","is_mandatory":true,"title":"Full rich rule string","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source address/subnet, empty if not specified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceInverted":{"name":"sourceInverted","type":"\u0004","is_mandatory":true,"title":"True when the source address is negated (e.g., `source NOT address=\"...\"`)","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"firewalld rich rule","private":true,"min_provider_version":"13.2.9","defaults":"family rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firewalld.zone":{"id":"firewalld.zone","name":"firewalld.zone","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether this zone is currently active (has bound interfaces or sources)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"forwardPorts":{"name":"forwardPorts","type":"\u0019\u0007","is_mandatory":true,"title":"Port forwarding rules (e.g., \"port=80:proto=tcp:toport=8080\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"icmpBlockInversion":{"name":"icmpBlockInversion","type":"\u0004","is_mandatory":true,"title":"Whether ICMP block inversion is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"icmpBlocks":{"name":"icmpBlocks","type":"\u0019\u0007","is_mandatory":true,"title":"ICMP types that are blocked","provider":"go.mondoo.com/cnquery/v9/providers/os"},"interfaces":{"name":"interfaces","type":"\u0019\u0007","is_mandatory":true,"title":"Network interfaces bound to this zone","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masquerade":{"name":"masquerade","type":"\u0004","is_mandatory":true,"title":"Whether masquerading is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Zone name (e.g., \"public\", \"internal\", \"dmz\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ports":{"name":"ports","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed ports (e.g., \"80/tcp\", \"443/tcp\", \"8080-8090/udp\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocols":{"name":"protocols","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed protocols (e.g., \"icmp\", \"ipv6-icmp\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"richRules":{"name":"richRules","type":"\u0019\u001bfirewalld.richrule","is_mandatory":true,"title":"Rich rules (expressive firewall rules)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"services":{"name":"services","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed service names (e.g., \"ssh\", \"http\", \"https\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourcePorts":{"name":"sourcePorts","type":"\u0019\u0007","is_mandatory":true,"title":"Source ports","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sources":{"name":"sources","type":"\u0019\u0007","is_mandatory":true,"title":"Source addresses/subnets bound to this zone","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Default target (default, ACCEPT, REJECT, DROP)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007","optional":true}]},"title":"firewalld zone configuration","private":true,"min_provider_version":"13.2.9","defaults":"name target","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fstab":{"id":"fstab","name":"fstab","fields":{"entries":{"name":"entries","type":"\u0019\u001bfstab.entry","title":"fstab entries defined in this fstab file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bfstab.entry","title":"fstab entry for a device and its mount point","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"path":{"name":"path","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"fstab persistent mount table","desc":"Examine mount entries with device, mount point, fstype, and options","min_provider_version":"11.3.5","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fstab.entry":{"id":"fstab.entry","name":"fstab.entry","fields":{"device":{"name":"device","type":"\u0007","is_mandatory":true,"title":"Device referenced in the fstab, e.g., LABEL=rootfs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dump":{"name":"dump","type":"\u0005","is_mandatory":true,"title":"Dump frequency (0 for full backup or an integer above 0, incremental backup, copies all files new or modified since the last dump of a lower level)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fsck":{"name":"fsck","type":"\u0005","is_mandatory":true,"title":"File system check order, e.g., 1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fstype":{"name":"fstype","type":"\u0007","is_mandatory":true,"title":"File system type, e.g., ext4","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mountpoint":{"name":"mountpoint","type":"\u0007","is_mandatory":true,"title":"Mount point, e.g., '/'","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0007","is_mandatory":true,"title":"Mount options, e.g., defaults (`man fstab` for details)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"fstab entry for a device and its mount point","private":true,"min_provider_version":"11.3.5","defaults":"device mountpoint","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gemini":{"id":"gemini","name":"gemini","fields":{"authType":{"name":"authType","type":"\u0007","title":"Authentication type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Gemini configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mcpServer":{"name":"mcpServer","type":"\u001bgemini.mcpServer","title":"Gemini MCP server configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"mcpServers":{"name":"mcpServers","type":"\u0019\u001bgemini.mcpServer","title":"MCP servers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\n","title":"Settings dictionary","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bgemini.skill","title":"Gemini skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bgemini.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Gemini CLI (Google) instance","desc":"Examine auth type, settings, MCP servers, and installed skills URL: https://github.com/google-gemini/gemini-cli","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"gemini.mcpServer":{"id":"gemini.mcpServer","name":"gemini.mcpServer","fields":{"args":{"name":"args","type":"\u0019\u0007","is_mandatory":true,"title":"Server arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Server command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasEnv":{"name":"hasEnv","type":"\u0004","is_mandatory":true,"title":"Whether environment variables are configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Gemini MCP server configuration","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"gemini.skill":{"id":"gemini.skill","name":"gemini.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Gemini skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"github":{"id":"github","fields":{"copilot":{"name":"copilot","type":"\u001bgithub.copilot","title":"GitHub Copilot CLI instance","desc":"Examine authenticated accounts, MCP servers, and installed skills URL: https://github.com/features/copilot","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"github.copilot":{"id":"github.copilot","name":"github.copilot","fields":{"account":{"name":"account","type":"\u001bgithub.copilot.account","title":"GitHub Copilot authenticated account","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"accounts":{"name":"accounts","type":"\u0019\u001bgithub.copilot.account","title":"Authenticated GitHub accounts","provider":"go.mondoo.com/cnquery/v9/providers/os"},"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the GitHub Copilot configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mcpServer":{"name":"mcpServer","type":"\u001bgithub.copilot.mcpServer","title":"GitHub Copilot MCP server configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"mcpServers":{"name":"mcpServers","type":"\u0019\u001bgithub.copilot.mcpServer","title":"MCP servers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bgithub.copilot.skill","title":"GitHub Copilot skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bgithub.copilot.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"GitHub Copilot CLI instance","desc":"Examine authenticated accounts, MCP servers, and installed skills URL: https://github.com/features/copilot","min_provider_version":"13.12.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"github.copilot.account":{"id":"github.copilot.account","name":"github.copilot.account","fields":{"githubAppId":{"name":"githubAppId","type":"\u0007","is_mandatory":true,"title":"GitHub App ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"GitHub username","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"GitHub Copilot authenticated account","private":true,"min_provider_version":"13.12.1","defaults":"user","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"github.copilot.mcpServer":{"id":"github.copilot.mcpServer","name":"github.copilot.mcpServer","fields":{"args":{"name":"args","type":"\u0019\u0007","is_mandatory":true,"title":"Server arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Server command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Server type (e.g. \"stdio\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"GitHub Copilot MCP server configuration","private":true,"min_provider_version":"13.12.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"github.copilot.skill":{"id":"github.copilot.skill","name":"github.copilot.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"GitHub Copilot skill","private":true,"min_provider_version":"13.12.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"githubactions":{"id":"githubactions","fields":{"package":{"name":"package","type":"\u001bgithubactions.package","title":"GitHub Actions action reference","desc":"Examine a single GitHub Actions action used in workflow files: its unique `id`, `name` in `owner/repo` or `owner/repo/path` form, `version` (tag, branch, or commit SHA), `purl`, and the workflow files that reference it. Iterated from `githubactions.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bgithubactions.packages","title":"GitHub Actions workflow dependencies","desc":"Examine action references (owner/repo@version) used across workflow files","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"githubactions.package":{"id":"githubactions.package","name":"githubactions.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the githubactions.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the action (owner/repo or owner/repo/path)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version (tag, branch, or commit SHA)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"GitHub Actions action reference","desc":"Examine a single GitHub Actions action used in workflow files: its unique `id`, `name` in `owner/repo` or `owner/repo/path` form, `version` (tag, branch, or commit SHA), `purl`, and the workflow files that reference it. Iterated from `githubactions.packages`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"githubactions.packages":{"id":"githubactions.packages","name":"githubactions.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bgithubactions.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for workflow files (directory or specific .yml file)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bgithubactions.package","title":"GitHub Actions workflow dependencies","desc":"Examine action references (owner/repo@version) used across workflow files","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"go":{"id":"go","fields":{"package":{"name":"package","type":"\u001bgo.package","title":"Go module dependency","desc":"Examine a single Go module: its unique `id`, module path as `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `go.packages` or `go.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bgo.packages","title":"Go module inventory","desc":"Examine the root module, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"go.package":{"id":"go.package","name":"go.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the go.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the module (module path)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the module","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Go module dependency","desc":"Examine a single Go module: its unique `id`, module path as `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `go.packages` or `go.packages.directDependencies()`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"go.packages":{"id":"go.packages","name":"go.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bgo.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bgo.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Go module files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bgo.package","title":"Root module (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bgo.package","title":"Go module inventory","desc":"Examine the root module, direct dependencies, and full transitive tree","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"goose":{"id":"goose","name":"goose","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Goose configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"extension":{"name":"extension","type":"\u001bgoose.extension","title":"Goose extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"extensions":{"name":"extensions","type":"\u0019\u001bgoose.extension","title":"Configured extensions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"model":{"name":"model","type":"\u0007","title":"Active model name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"provider":{"name":"provider","type":"\u0007","title":"Active AI provider name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bgoose.skill","title":"Goose skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bgoose.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"},"telemetryEnabled":{"name":"telemetryEnabled","type":"\u0004","title":"Whether telemetry is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Goose AI agent (Block) instance","desc":"Examine the active provider/model, telemetry, extensions, and skills URL: https://block.github.io/goose/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"goose.extension":{"id":"goose.extension","name":"goose.extension","fields":{"bundled":{"name":"bundled","type":"\u0004","is_mandatory":true,"title":"Whether the extension is bundled with Goose","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Extension description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the extension is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeout":{"name":"timeout","type":"\u0005","is_mandatory":true,"title":"Extension timeout in seconds (0 = no timeout)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Extension type (platform or builtin)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Goose extension","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"goose.skill":{"id":"goose.skill","name":"goose.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Goose skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"group":{"id":"group","name":"group","fields":{"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"Group ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"members":{"name":"members","type":"\u0019\u001buser","title":"Users who are members of this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sid":{"name":"sid","type":"\u0007","is_mandatory":true,"title":"Group's security identifier (Windows)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"Group on the system","desc":"Examine a single local group: numeric GID (or SID on Windows), group name, and the typed `members()` list of users in the group. Used to audit privileged-group membership (`sudo`, `wheel`, `docker`, `adm`, etc.) and to confirm only expected accounts are present.","min_provider_version":"9.0.0","defaults":"name gid","provider":"go.mondoo.com/cnquery/v9/providers/os"},"groups":{"id":"groups","name":"groups","fields":{"list":{"name":"list","type":"\u0019\u001bgroup","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bgroup","title":"All groups configured on the system","desc":"Iterable collection of every local `group`. Use it as the entry point for fleet-wide group-membership audits (every member of a privileged group, no two groups sharing a GID, no human user in `wheel` outside an approved list, etc.).","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"grub":{"id":"grub","fields":{"config":{"name":"config","type":"\u001bgrub.config","title":"GRUB bootloader configuration","desc":"Examine /etc/default/grub parameters, menu entries, and password protection","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"grub.config":{"id":"grub.config","name":"grub.config","fields":{"defaultsPath":{"name":"defaultsPath","type":"\u0007","is_mandatory":true,"title":"Path to /etc/default/grub (key-value defaults)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entries":{"name":"entries","type":"\u0019\u001bgrub.config.entry","title":"Menu entries defined in grub.cfg","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bgrub.config.entry","title":"GRUB menu entry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"grubPath":{"name":"grubPath","type":"\u0007","is_mandatory":true,"title":"Path to grub.cfg (generated configuration)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","title":"Configuration parameters from /etc/default/grub (e.g., GRUB_TIMEOUT, GRUB_CMDLINE_LINUX)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"passwordProtected":{"name":"passwordProtected","type":"\u0004","title":"Whether GRUB password protection is enabled (superusers + password_pbkdf2)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"defaultsPath","type":"\u0007","optional":true},{"name":"grubPath","type":"\u0007","optional":true}]},"title":"GRUB bootloader configuration","desc":"Examine /etc/default/grub parameters, menu entries, and password protection","min_provider_version":"13.2.7","defaults":"defaultsPath grubPath","provider":"go.mondoo.com/cnquery/v9/providers/os"},"grub.config.entry":{"id":"grub.config.entry","name":"grub.config.entry","fields":{"cmdline":{"name":"cmdline","type":"\u0007","is_mandatory":true,"title":"Kernel command line (linux/linux16/linuxefi line)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"initrd":{"name":"initrd","type":"\u0007","is_mandatory":true,"title":"Initrd path (initrd/initrd16/initrdefi line)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isSubmenu":{"name":"isSubmenu","type":"\u0004","is_mandatory":true,"title":"Whether this is a submenu","provider":"go.mondoo.com/cnquery/v9/providers/os"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Menu entry title","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"GRUB menu entry","private":true,"min_provider_version":"13.2.7","defaults":"title","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy":{"id":"haproxy","name":"haproxy","fields":{"config":{"name":"config","type":"\u001bhaproxy.config","title":"HAProxy configuration","desc":"Examine the parsed haproxy.cfg, any `\u003cconfigdir\u003e/conf.d/*.cfg` fragments next to it, and every file pulled in by `!include` / `!includeglob` directives (HAProxy 2.4+). Pass `init(path: \"...\")` to point at a non-default config file.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"version":{"name":"version","type":"\u0007","title":"HAProxy version string extracted from the haproxy binary (e.g., \"2.8.4-1\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy load balancer","desc":"Examine HAProxy version and configuration. The configuration covers the global section, defaults blocks, frontends, backends, listens, the servers behind each backend, and supporting sections (resolvers, userlists, peers).","min_provider_version":"13.19.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config":{"id":"haproxy.config","name":"haproxy.config","fields":{"backend":{"name":"backend","type":"\u001bhaproxy.config.backend","title":"HAProxy backend section","desc":"Examine a backend pool: the load-balancing algorithm, the servers behind it, their TLS posture (ssl/verify/ca-file) and health-check configuration (`option httpchk`/`http-check`), `default-server` defaults, stick-table/cookie persistence, request mutators, and timeouts.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"backends":{"name":"backends","type":"\u0019\u001bhaproxy.config.backend","refs":["\"file\""],"title":"Backend sections","provider":"go.mondoo.com/cnquery/v9/providers/os"},"bind":{"name":"bind","type":"\u001bhaproxy.config.bind","title":"HAProxy bind listener","desc":"Examine one listener address produced by a `bind` directive. A `bind a:1,b:2 ssl crt foo` directive expands into one of these per address form; the shared parameters (ssl, crt, alpn, verify, etc.) are copied onto each entry.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"defaults":{"name":"defaults","type":"\u0019\u001bhaproxy.config.defaultsSection","refs":["\"file\""],"title":"Defaults sections — one unnamed block in classic configs, possibly several named blocks in HAProxy 2.4+","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultsSection":{"name":"defaultsSection","type":"\u001bhaproxy.config.defaultsSection","title":"HAProxy defaults section","desc":"Examine the inherited defaults applied to every frontend, backend, and listen that doesn't override a setting locally. HAProxy 2.4+ supports multiple named defaults blocks; `name` selects which one.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"file":{"name":"file","type":"\u001bfile","title":"Primary configuration file (defaults to /etc/haproxy/haproxy.cfg)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","refs":["\"file\""],"title":"All configuration files visited (root + conf.d/*.cfg fragments + !included files)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"frontend":{"name":"frontend","type":"\u001bhaproxy.config.frontend","title":"HAProxy frontend section","desc":"Examine an inbound traffic acceptor: its `bind` listeners (with TLS settings), ACL definitions, request routing rules, the default backend, and the timeout/log/option set applied to client traffic.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"frontends":{"name":"frontends","type":"\u0019\u001bhaproxy.config.frontend","refs":["\"file\""],"title":"Frontend sections","provider":"go.mondoo.com/cnquery/v9/providers/os"},"global":{"name":"global","type":"\u001bhaproxy.config.global","refs":["\"file\""],"title":"Global section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listen":{"name":"listen","type":"\u001bhaproxy.config.listen","title":"HAProxy listen section","desc":"Examine a combined frontend+backend section. The same audit surface as a backend (servers, balance, health checks) plus the frontend's `bind` listeners and ACL/routing surface.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"listens":{"name":"listens","type":"\u0019\u001bhaproxy.config.listen","refs":["\"file\""],"title":"Listen sections (combined frontend + backend)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"peers":{"name":"peers","type":"\u0019\u001bhaproxy.config.peersSection","refs":["\"file\""],"title":"Peers sections (stick-table replication)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"peersSection":{"name":"peersSection","type":"\u001bhaproxy.config.peersSection","title":"HAProxy peers section","desc":"Examine a peers section used for stick-table replication between HAProxy instances.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"resolvers":{"name":"resolvers","type":"\u0019\u001bhaproxy.config.resolversSection","refs":["\"file\""],"title":"Resolvers sections (DNS resolver pools)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"resolversSection":{"name":"resolversSection","type":"\u001bhaproxy.config.resolversSection","title":"HAProxy resolvers section","desc":"Examine a DNS resolver pool used by `server` directives that resolve hostnames at runtime via `resolvers \u003cname\u003e`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"section":{"name":"section","type":"\u001bhaproxy.config.section","title":"HAProxy configuration section (raw view)","desc":"Examine an arbitrary section by type and name. Useful for sections we don't model as typed resources (mailers, cache, program, ring, http-errors, fcgi-app, crt-store) and for low-level audits that need every directive in source order.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"sections":{"name":"sections","type":"\u0019\u001bhaproxy.config.section","refs":["\"file\""],"title":"Every parsed section in source order, including types not exposed as typed resources","provider":"go.mondoo.com/cnquery/v9/providers/os"},"server":{"name":"server","type":"\u001bhaproxy.config.server","title":"HAProxy backend server","desc":"Examine one backend pool member. Captures the server identity (name/address/port), TLS posture toward the backend (ssl, verify, ca-file, sni, alpn), the health check tuning (inter/rise/fall/observe), connection limits, and persistence hooks.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"userlist":{"name":"userlist","type":"\u001bhaproxy.config.userlist","title":"HAProxy userlist section","desc":"Examine an HTTP-auth userlist consumed by `http-request auth` / `http-request deny unless { http_auth(\u003clist\u003e) }`. Captures users (with hashing flag) and groups.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"userlists":{"name":"userlists","type":"\u0019\u001bhaproxy.config.userlist","refs":["\"file\""],"title":"Userlist sections (HTTP auth groups/users)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"HAProxy configuration","desc":"Examine the parsed haproxy.cfg, any `\u003cconfigdir\u003e/conf.d/*.cfg` fragments next to it, and every file pulled in by `!include` / `!includeglob` directives (HAProxy 2.4+). Pass `init(path: \"...\")` to point at a non-default config file.","min_provider_version":"13.19.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.backend":{"id":"haproxy.config.backend","name":"haproxy.config.backend","fields":{"acls":{"name":"acls","type":"\u0019\n","is_mandatory":true,"title":"`acl` definitions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"balance":{"name":"balance","type":"\u0007","is_mandatory":true,"title":"`balance` algorithm (roundrobin, leastconn, source, uri, url_param, hdr, random, ...)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cookie":{"name":"cookie","type":"\u0007","is_mandatory":true,"title":"`cookie` directive arguments (name + flags)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultServer":{"name":"defaultServer","type":"\n","is_mandatory":true,"title":"`default-server` directive parsed as a flag bag (same shape as a server, minus name/address)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabledOptions":{"name":"disabledOptions","type":"\u0019\u0007","is_mandatory":true,"title":"`no option \u003cname\u003e` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hashType":{"name":"hashType","type":"\u0007","is_mandatory":true,"title":"`hash-type` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpCheck":{"name":"httpCheck","type":"\n","is_mandatory":true,"title":"Consolidated HTTP health check — keys: {method, uri, version, send[], expect[], disabled}","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpRequestRules":{"name":"httpRequestRules","type":"\u0019\u0007","is_mandatory":true,"title":"`http-request \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpResponseRules":{"name":"httpResponseRules","type":"\u0019\u0007","is_mandatory":true,"title":"`http-response \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inherits":{"name":"inherits","type":"\u0007","is_mandatory":true,"title":"`from \u003cdefaults\u003e` argument when present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"log":{"name":"log","type":"\u0019\u0007","is_mandatory":true,"title":"`log` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"`mode` value (tcp, http)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Backend name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"`option \u003cname\u003e [args]` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this backend","provider":"go.mondoo.com/cnquery/v9/providers/os"},"retries":{"name":"retries","type":"\u0005","is_mandatory":true,"title":"`retries` value (defaults inherited; 0 means unset locally)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u001bhaproxy.config.server","is_mandatory":true,"title":"Servers behind this backend","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"`source` directive arguments (e.g., \"0.0.0.0 usesrc clientip\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stickOn":{"name":"stickOn","type":"\u0007","is_mandatory":true,"title":"`stick on` value (raw expression)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stickTable":{"name":"stickTable","type":"\u0007","is_mandatory":true,"title":"`stick-table` arguments (raw string)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpRequestRules":{"name":"tcpRequestRules","type":"\u0019\u0007","is_mandatory":true,"title":"`tcp-request \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpResponseRules":{"name":"tcpResponseRules","type":"\u0019\u0007","is_mandatory":true,"title":"`tcp-response \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeouts":{"name":"timeouts","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"`timeout \u003ckind\u003e \u003cvalue\u003e` map keyed by kind","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy backend section","desc":"Examine a backend pool: the load-balancing algorithm, the servers behind it, their TLS posture (ssl/verify/ca-file) and health-check configuration (`option httpchk`/`http-check`), `default-server` defaults, stick-table/cookie persistence, request mutators, and timeouts.","private":true,"min_provider_version":"13.19.1","defaults":"name mode balance","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.bind":{"id":"haproxy.config.bind","name":"haproxy.config.bind","fields":{"acceptProxy":{"name":"acceptProxy","type":"\u0004","is_mandatory":true,"title":"`accept-proxy` flag (require PROXY protocol header from client)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Address part: \"*\" for the wildcard, an IP literal, \"[::]\" for IPv6, \"unix:/path\" / \"unix@...\" / \"abns@...\" for unix sockets, or a hostname","provider":"go.mondoo.com/cnquery/v9/providers/os"},"alpn":{"name":"alpn","type":"\u0007","is_mandatory":true,"title":"`alpn` argument (comma-separated protocols; e.g., \"h2,http/1.1\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"caFile":{"name":"caFile","type":"\u0007","is_mandatory":true,"title":"`ca-file` argument (CA bundle for client cert verification)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ciphers":{"name":"ciphers","type":"\u0007","is_mandatory":true,"title":"`ciphers` argument (TLS 1.0-1.2 cipher list)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ciphersuites":{"name":"ciphersuites","type":"\u0007","is_mandatory":true,"title":"`ciphersuites` argument (TLS 1.3 cipher suite list)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"crt":{"name":"crt","type":"\u0007","is_mandatory":true,"title":"`crt` argument (certificate path or directory)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"crtList":{"name":"crtList","type":"\u0007","is_mandatory":true,"title":"`crt-list` argument (path to a crt-list file)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"curves":{"name":"curves","type":"\u0007","is_mandatory":true,"title":"`curves` argument (named curve list)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"noSslv3":{"name":"noSslv3","type":"\u0004","is_mandatory":true,"title":"`no-sslv3` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"noTlsv10":{"name":"noTlsv10","type":"\u0004","is_mandatory":true,"title":"`no-tlsv10` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"noTlsv11":{"name":"noTlsv11","type":"\u0004","is_mandatory":true,"title":"`no-tlsv11` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"noTlsv12":{"name":"noTlsv12","type":"\u0004","is_mandatory":true,"title":"`no-tlsv12` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"noTlsv13":{"name":"noTlsv13","type":"\u0004","is_mandatory":true,"title":"`no-tlsv13` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All key=value attributes on this bind line (catch-all including ones not surfaced as typed fields)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"TCP port for a single-port bind; 0 for unix sockets or port ranges","provider":"go.mondoo.com/cnquery/v9/providers/os"},"portRangeEnd":{"name":"portRangeEnd","type":"\u0005","is_mandatory":true,"title":"End of a port range; 0 if not a range","provider":"go.mondoo.com/cnquery/v9/providers/os"},"portRangeStart":{"name":"portRangeStart","type":"\u0005","is_mandatory":true,"title":"Start of a port range (e.g., `bind *:80-89`); 0 if not a range","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Raw argument string after the `bind` keyword","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ssl":{"name":"ssl","type":"\u0004","is_mandatory":true,"title":"`ssl` flag present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslMaxVer":{"name":"sslMaxVer","type":"\u0007","is_mandatory":true,"title":"`ssl-max-ver` argument","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslMinVer":{"name":"sslMinVer","type":"\u0007","is_mandatory":true,"title":"`ssl-min-ver` argument (e.g., \"TLSv1.2\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"transparent":{"name":"transparent","type":"\u0004","is_mandatory":true,"title":"`transparent` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"v4v6":{"name":"v4v6","type":"\u0004","is_mandatory":true,"title":"`v4v6` flag (bind on both IPv4 and IPv6 when the socket supports it)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"v6only":{"name":"v6only","type":"\u0004","is_mandatory":true,"title":"`v6only` flag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"verify":{"name":"verify","type":"\u0007","is_mandatory":true,"title":"`verify` argument (none, optional, required)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy bind listener","desc":"Examine one listener address produced by a `bind` directive. A `bind a:1,b:2 ssl crt foo` directive expands into one of these per address form; the shared parameters (ssl, crt, alpn, verify, etc.) are copied onto each entry.","private":true,"min_provider_version":"13.19.1","defaults":"address port ssl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.defaultsSection":{"id":"haproxy.config.defaultsSection","name":"haproxy.config.defaultsSection","fields":{"balance":{"name":"balance","type":"\u0007","is_mandatory":true,"title":"`balance` algorithm value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabledOptions":{"name":"disabledOptions","type":"\u0019\u0007","is_mandatory":true,"title":"`no option \u003cname\u003e` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inherits":{"name":"inherits","type":"\u0007","is_mandatory":true,"title":"`from \u003cother-defaults\u003e` argument when present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"log":{"name":"log","type":"\u0019\u0007","is_mandatory":true,"title":"`log` directives, one entry per line","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxconn":{"name":"maxconn","type":"\u0005","is_mandatory":true,"title":"`maxconn` value (per-frontend limit when inherited)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"`mode` value (tcp, http)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Defaults section name (empty for the classic unnamed defaults block)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"`option \u003cname\u003e [args]` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this defaults section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"retries":{"name":"retries","type":"\u0005","is_mandatory":true,"title":"`retries` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeouts":{"name":"timeouts","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"`timeout \u003ckind\u003e \u003cvalue\u003e` map keyed by kind (connect, client, server, http-request, queue, tunnel, ...)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy defaults section","desc":"Examine the inherited defaults applied to every frontend, backend, and listen that doesn't override a setting locally. HAProxy 2.4+ supports multiple named defaults blocks; `name` selects which one.","private":true,"min_provider_version":"13.19.1","defaults":"name mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.frontend":{"id":"haproxy.config.frontend","name":"haproxy.config.frontend","fields":{"acls":{"name":"acls","type":"\u0019\n","is_mandatory":true,"title":"`acl` definitions — entries: {name, criterion, args, line, raw}","provider":"go.mondoo.com/cnquery/v9/providers/os"},"binds":{"name":"binds","type":"\u0019\u001bhaproxy.config.bind","is_mandatory":true,"title":"`bind` directives, broken out per address form (a comma-separated address list produces one entry per address)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"captures":{"name":"captures","type":"\u0019\u0007","is_mandatory":true,"title":"`capture` lines (raw arg strings)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultBackend":{"name":"defaultBackend","type":"\u0007","is_mandatory":true,"title":"`default_backend` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabledOptions":{"name":"disabledOptions","type":"\u0019\u0007","is_mandatory":true,"title":"`no option \u003cname\u003e` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpRequestRules":{"name":"httpRequestRules","type":"\u0019\u0007","is_mandatory":true,"title":"`http-request \u003crule\u003e` lines (raw arg strings, in source order)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpResponseRules":{"name":"httpResponseRules","type":"\u0019\u0007","is_mandatory":true,"title":"`http-response \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inherits":{"name":"inherits","type":"\u0007","is_mandatory":true,"title":"`from \u003cdefaults\u003e` argument when present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"log":{"name":"log","type":"\u0019\u0007","is_mandatory":true,"title":"`log` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxconn":{"name":"maxconn","type":"\u0005","is_mandatory":true,"title":"`maxconn` value (per-frontend limit)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"`mode` value (tcp, http)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"monitorFail":{"name":"monitorFail","type":"\u0007","is_mandatory":true,"title":"`monitor fail` condition (everything after `monitor fail`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"monitorUri":{"name":"monitorUri","type":"\u0007","is_mandatory":true,"title":"`monitor-uri` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Frontend name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"`option \u003cname\u003e [args]` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this frontend","provider":"go.mondoo.com/cnquery/v9/providers/os"},"redirects":{"name":"redirects","type":"\u0019\u0007","is_mandatory":true,"title":"`redirect` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpRequestRules":{"name":"tcpRequestRules","type":"\u0019\u0007","is_mandatory":true,"title":"`tcp-request \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpResponseRules":{"name":"tcpResponseRules","type":"\u0019\u0007","is_mandatory":true,"title":"`tcp-response \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeouts":{"name":"timeouts","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"`timeout \u003ckind\u003e \u003cvalue\u003e` map keyed by kind","provider":"go.mondoo.com/cnquery/v9/providers/os"},"useBackends":{"name":"useBackends","type":"\u0019\n","is_mandatory":true,"title":"`use_backend` rules — entries: {backend, condition, line, raw}","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy frontend section","desc":"Examine an inbound traffic acceptor: its `bind` listeners (with TLS settings), ACL definitions, request routing rules, the default backend, and the timeout/log/option set applied to client traffic.","private":true,"min_provider_version":"13.19.1","defaults":"name mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.global":{"id":"haproxy.config.global","name":"haproxy.config.global","fields":{"caBase":{"name":"caBase","type":"\u0007","is_mandatory":true,"title":"`ca-base` value (base directory for `ca-file` relative paths)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chroot":{"name":"chroot","type":"\u0007","is_mandatory":true,"title":"`chroot` directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"crtBase":{"name":"crtBase","type":"\u0007","is_mandatory":true,"title":"`crt-base` value (base directory for `crt` relative paths)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"daemon":{"name":"daemon","type":"\u0004","is_mandatory":true,"title":"`daemon` directive present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabledOptions":{"name":"disabledOptions","type":"\u0019\u0007","is_mandatory":true,"title":"Every `no option \u003cname\u003e` disabled in this section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group":{"name":"group","type":"\u0007","is_mandatory":true,"title":"`group` directive value (UNIX gid)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hardStopAfter":{"name":"hardStopAfter","type":"\u0007","is_mandatory":true,"title":"`hard-stop-after` value (time string, e.g. \"30s\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"log":{"name":"log","type":"\u0019\u0007","is_mandatory":true,"title":"`log` directives, one entry per line (e.g. \"/dev/log local0\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masterWorker":{"name":"masterWorker","type":"\u0004","is_mandatory":true,"title":"`master-worker` directive present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxconn":{"name":"maxconn","type":"\u0005","is_mandatory":true,"title":"`maxconn` value (global connection limit)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nbproc":{"name":"nbproc","type":"\u0005","is_mandatory":true,"title":"`nbproc` value (legacy; replaced by nbthread in HAProxy 2.5+)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nbthread":{"name":"nbthread","type":"\u0005","is_mandatory":true,"title":"`nbthread` value (worker threads per process)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Every `option \u003cname\u003e [args]` enabled in this section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this section (name -\u003e joined args, comma-concatenated when repeated)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pidfile":{"name":"pidfile","type":"\u0007","is_mandatory":true,"title":"`pidfile` path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultBindCiphers":{"name":"sslDefaultBindCiphers","type":"\u0007","is_mandatory":true,"title":"`ssl-default-bind-ciphers` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultBindCiphersuites":{"name":"sslDefaultBindCiphersuites","type":"\u0007","is_mandatory":true,"title":"`ssl-default-bind-ciphersuites` value (TLS 1.3 cipher list)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultBindCurves":{"name":"sslDefaultBindCurves","type":"\u0007","is_mandatory":true,"title":"`ssl-default-bind-curves` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultBindOptions":{"name":"sslDefaultBindOptions","type":"\u0007","is_mandatory":true,"title":"`ssl-default-bind-options` value (e.g., \"ssl-min-ver TLSv1.2 no-tls-tickets\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultServerCiphers":{"name":"sslDefaultServerCiphers","type":"\u0007","is_mandatory":true,"title":"`ssl-default-server-ciphers` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultServerCiphersuites":{"name":"sslDefaultServerCiphersuites","type":"\u0007","is_mandatory":true,"title":"`ssl-default-server-ciphersuites` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultServerCurves":{"name":"sslDefaultServerCurves","type":"\u0007","is_mandatory":true,"title":"`ssl-default-server-curves` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslDefaultServerOptions":{"name":"sslDefaultServerOptions","type":"\u0007","is_mandatory":true,"title":"`ssl-default-server-options` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"statsSocket":{"name":"statsSocket","type":"\u0007","is_mandatory":true,"title":"`stats socket` path (UNIX path or address)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"statsSocketLevel":{"name":"statsSocketLevel","type":"\u0007","is_mandatory":true,"title":"`level` arg on the stats socket line (user, operator, admin)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"statsSocketMode":{"name":"statsSocketMode","type":"\u0007","is_mandatory":true,"title":"`mode` arg on the stats socket line (octal as string)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"statsSocketUser":{"name":"statsSocketUser","type":"\u0007","is_mandatory":true,"title":"`user`/`group` arg on the stats socket line — UNIX uid/gid the socket is owned by","provider":"go.mondoo.com/cnquery/v9/providers/os"},"statsTimeout":{"name":"statsTimeout","type":"\u0007","is_mandatory":true,"title":"`stats timeout` value (string with time unit)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tuneSslDefaultDhParam":{"name":"tuneSslDefaultDhParam","type":"\u0005","is_mandatory":true,"title":"`tune.ssl.default-dh-param` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"`user` directive value (UNIX uid)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy global section","desc":"Examine the global section: process settings (daemon, user/group, chroot, pidfile), connection limits, threading, the runtime stats socket, default SSL options applied to every bind and server, and the log destinations.","private":true,"min_provider_version":"13.19.1","defaults":"daemon maxconn nbthread","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.listen":{"id":"haproxy.config.listen","name":"haproxy.config.listen","fields":{"acls":{"name":"acls","type":"\u0019\n","is_mandatory":true,"title":"`acl` definitions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"balance":{"name":"balance","type":"\u0007","is_mandatory":true,"title":"`balance` algorithm","provider":"go.mondoo.com/cnquery/v9/providers/os"},"binds":{"name":"binds","type":"\u0019\u001bhaproxy.config.bind","is_mandatory":true,"title":"`bind` directives, broken out per address form","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultServer":{"name":"defaultServer","type":"\n","is_mandatory":true,"title":"`default-server` directive parsed as a flag bag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabledOptions":{"name":"disabledOptions","type":"\u0019\u0007","is_mandatory":true,"title":"`no option \u003cname\u003e` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpCheck":{"name":"httpCheck","type":"\n","is_mandatory":true,"title":"Consolidated HTTP health check","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpRequestRules":{"name":"httpRequestRules","type":"\u0019\u0007","is_mandatory":true,"title":"`http-request \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpResponseRules":{"name":"httpResponseRules","type":"\u0019\u0007","is_mandatory":true,"title":"`http-response \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inherits":{"name":"inherits","type":"\u0007","is_mandatory":true,"title":"`from \u003cdefaults\u003e` argument when present","provider":"go.mondoo.com/cnquery/v9/providers/os"},"log":{"name":"log","type":"\u0019\u0007","is_mandatory":true,"title":"`log` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"`mode` value (tcp, http)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Listen section name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"`option \u003cname\u003e [args]` directives","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this listen","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u001bhaproxy.config.server","is_mandatory":true,"title":"Backend servers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpRequestRules":{"name":"tcpRequestRules","type":"\u0019\u0007","is_mandatory":true,"title":"`tcp-request \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpResponseRules":{"name":"tcpResponseRules","type":"\u0019\u0007","is_mandatory":true,"title":"`tcp-response \u003crule\u003e` lines","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeouts":{"name":"timeouts","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"`timeout \u003ckind\u003e \u003cvalue\u003e` map keyed by kind","provider":"go.mondoo.com/cnquery/v9/providers/os"},"useBackends":{"name":"useBackends","type":"\u0019\n","is_mandatory":true,"title":"`use_backend` rules","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy listen section","desc":"Examine a combined frontend+backend section. The same audit surface as a backend (servers, balance, health checks) plus the frontend's `bind` listeners and ACL/routing surface.","private":true,"min_provider_version":"13.19.1","defaults":"name mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.peersSection":{"id":"haproxy.config.peersSection","name":"haproxy.config.peersSection","fields":{"bind":{"name":"bind","type":"\u0007","is_mandatory":true,"title":"`bind` argument (raw — peers binds are simpler than frontend binds)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Peers section name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this peers section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u001bhaproxy.config.server","is_mandatory":true,"title":"`server \u003cname\u003e \u003caddr\u003e:\u003cport\u003e` entries (typed server resources, same shape as backend servers)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tables":{"name":"tables","type":"\u0019\n","is_mandatory":true,"title":"`table \u003cname\u003e ...` entries — entries: {name, type, size, expire, store, raw}","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy peers section","desc":"Examine a peers section used for stick-table replication between HAProxy instances.","private":true,"min_provider_version":"13.19.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.resolversSection":{"id":"haproxy.config.resolversSection","name":"haproxy.config.resolversSection","fields":{"acceptedPayloadSize":{"name":"acceptedPayloadSize","type":"\u0005","is_mandatory":true,"title":"`accepted_payload_size` value (UDP DNS payload cap)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"holds":{"name":"holds","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"`hold \u003cstate\u003e \u003cduration\u003e` map keyed by state (valid, nx, refused, timeout, obsolete, other)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resolvers section name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nameservers":{"name":"nameservers","type":"\u0019\n","is_mandatory":true,"title":"`nameserver \u003cname\u003e \u003caddr\u003e[:\u003cport\u003e]` entries — entries: {name, address, port}","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this resolvers section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"resolveRetries":{"name":"resolveRetries","type":"\u0005","is_mandatory":true,"title":"`resolve_retries` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeouts":{"name":"timeouts","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"`timeout \u003ckind\u003e \u003cvalue\u003e` map (resolve, retry)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy resolvers section","desc":"Examine a DNS resolver pool used by `server` directives that resolve hostnames at runtime via `resolvers \u003cname\u003e`.","private":true,"min_provider_version":"13.19.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.section":{"id":"haproxy.config.section","name":"haproxy.config.section","fields":{"directives":{"name":"directives","type":"\u0019\n","is_mandatory":true,"title":"Every directive in source order — entries: {name, args, line, file, raw}","provider":"go.mondoo.com/cnquery/v9/providers/os"},"endLine":{"name":"endLine","type":"\u0005","is_mandatory":true,"title":"1-based source line of the last directive in the section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inherits":{"name":"inherits","type":"\u0007","is_mandatory":true,"title":"`from \u003cother\u003e` argument when present on the section header (named-defaults inheritance)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Section name (empty for global; may be empty for the classic unnamed defaults block)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Flat directive map (name -\u003e joined args; values comma-concatenated when the directive repeats)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Raw text of the section including its header line","provider":"go.mondoo.com/cnquery/v9/providers/os"},"startLine":{"name":"startLine","type":"\u0005","is_mandatory":true,"title":"1-based source line where the section header appears","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Section keyword (global, defaults, frontend, backend, listen, resolvers, userlist, peers, mailers, cache, ...)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy configuration section (raw view)","desc":"Examine an arbitrary section by type and name. Useful for sections we don't model as typed resources (mailers, cache, program, ring, http-errors, fcgi-app, crt-store) and for low-level audits that need every directive in source order.","private":true,"min_provider_version":"13.19.1","defaults":"type name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.server":{"id":"haproxy.config.server","name":"haproxy.config.server","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Server address: hostname, IPv4, \"[IPv6]\", \"unix@/path\", or \"abns@...\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"agentAddr":{"name":"agentAddr","type":"\u0007","is_mandatory":true,"title":"`agent-addr` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"agentCheck":{"name":"agentCheck","type":"\u0004","is_mandatory":true,"title":"`agent-check` flag (enable external agent health check)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"agentInter":{"name":"agentInter","type":"\u0007","is_mandatory":true,"title":"`agent-inter` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"agentPort":{"name":"agentPort","type":"\u0005","is_mandatory":true,"title":"`agent-port` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"alpn":{"name":"alpn","type":"\u0007","is_mandatory":true,"title":"`alpn` argument","provider":"go.mondoo.com/cnquery/v9/providers/os"},"backup":{"name":"backup","type":"\u0004","is_mandatory":true,"title":"`backup` flag (only used when no non-backup server is up)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"caFile":{"name":"caFile","type":"\u0007","is_mandatory":true,"title":"`ca-file` argument (CA bundle for backend cert verification)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"check":{"name":"check","type":"\u0004","is_mandatory":true,"title":"`check` flag (active health checking enabled)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cookie":{"name":"cookie","type":"\u0007","is_mandatory":true,"title":"`cookie` value (cookie identifier for stickiness)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"crt":{"name":"crt","type":"\u0007","is_mandatory":true,"title":"`crt` argument (client cert presented to the backend)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"title":"`disabled` flag (admin-down)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"downInter":{"name":"downInter","type":"\u0007","is_mandatory":true,"title":"`downinter` value (interval while marked down)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fall":{"name":"fall","type":"\u0005","is_mandatory":true,"title":"`fall` value (consecutive failed checks required to mark DOWN)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fastInter":{"name":"fastInter","type":"\u0007","is_mandatory":true,"title":"`fastinter` value (interval immediately after a state change)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"initAddr":{"name":"initAddr","type":"\u0007","is_mandatory":true,"title":"`init-addr` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inter":{"name":"inter","type":"\u0007","is_mandatory":true,"title":"`inter` value (regular health-check interval, e.g. \"2s\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxconn":{"name":"maxconn","type":"\u0005","is_mandatory":true,"title":"`maxconn` value (per-server concurrent connection cap)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxqueue":{"name":"maxqueue","type":"\u0005","is_mandatory":true,"title":"`maxqueue` value (queue cap before failing over)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"observe":{"name":"observe","type":"\u0007","is_mandatory":true,"title":"`observe` value (passive observation: l4, l7)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onError":{"name":"onError","type":"\u0007","is_mandatory":true,"title":"`on-error` value (action on observed errors: fastinter, fail-check, sudden-death, mark-down)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onMarkedDown":{"name":"onMarkedDown","type":"\u0007","is_mandatory":true,"title":"`on-marked-down` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onMarkedUp":{"name":"onMarkedUp","type":"\u0007","is_mandatory":true,"title":"`on-marked-up` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All key=value flags on the server line (catch-all)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Server port (0 for unix sockets or address-only declarations)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"resolvers":{"name":"resolvers","type":"\u0007","is_mandatory":true,"title":"`resolvers` name (resolvers section used for hostname resolution)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rise":{"name":"rise","type":"\u0005","is_mandatory":true,"title":"`rise` value (consecutive UP checks required to mark UP)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sendProxy":{"name":"sendProxy","type":"\u0004","is_mandatory":true,"title":"`send-proxy` flag (send PROXY v1 header to backend)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sendProxyV2":{"name":"sendProxyV2","type":"\u0004","is_mandatory":true,"title":"`send-proxy-v2` flag (send PROXY v2 header to backend)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"slowStart":{"name":"slowStart","type":"\u0007","is_mandatory":true,"title":"`slowstart` value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sni":{"name":"sni","type":"\u0007","is_mandatory":true,"title":"`sni` argument (SNI value to send)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ssl":{"name":"ssl","type":"\u0004","is_mandatory":true,"title":"`ssl` flag (use TLS to reach this server)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"verify":{"name":"verify","type":"\u0007","is_mandatory":true,"title":"`verify` argument (none, required)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"weight":{"name":"weight","type":"\u0005","is_mandatory":true,"title":"`weight` value (load-balancing weight; 0 means draining)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy backend server","desc":"Examine one backend pool member. Captures the server identity (name/address/port), TLS posture toward the backend (ssl, verify, ca-file, sni, alpn), the health check tuning (inter/rise/fall/observe), connection limits, and persistence hooks.","private":true,"min_provider_version":"13.19.1","defaults":"name address port check ssl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haproxy.config.userlist":{"id":"haproxy.config.userlist","name":"haproxy.config.userlist","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"Source file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"groups":{"name":"groups","type":"\u0019\n","is_mandatory":true,"title":"`group \u003cname\u003e [users \u003cu1,u2\u003e]` entries — entries: {name, users}","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Userlist name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"users":{"name":"users","type":"\u0019\n","is_mandatory":true,"title":"`user \u003cname\u003e (password|insecure-password) \u003csecret\u003e [groups \u003cg1,g2\u003e]` entries — entries: {name, password, hashed, groups}","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"HAProxy userlist section","desc":"Examine an HTTP-auth userlist consumed by `http-request auth` / `http-request deny unless { http_auth(\u003clist\u003e) }`. Captures users (with hashing flag) and groups.","private":true,"min_provider_version":"13.19.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haskell":{"id":"haskell","fields":{"package":{"name":"package","type":"\u001bhaskell.package","title":"Haskell package dependency","desc":"Examine a single Haskell package from a Stack or Cabal lock file: its unique `id`, `name`, `version`, `purl`, and the files that contributed it. Iterated from `haskell.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bhaskell.packages","title":"Haskell package inventory (Stack and Cabal)","desc":"Examine all locked packages with their resolved versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"haskell.package":{"id":"haskell.package","name":"haskell.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the haskell.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Haskell package dependency","desc":"Examine a single Haskell package from a Stack or Cabal lock file: its unique `id`, `name`, `version`, `purl`, and the files that contributed it. Iterated from `haskell.packages`.","min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"haskell.packages":{"id":"haskell.packages","name":"haskell.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bhaskell.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for stack.yaml.lock or cabal.project.freeze","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bhaskell.package","title":"Haskell package inventory (Stack and Cabal)","desc":"Examine all locked packages with their resolved versions","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"homebrew":{"id":"homebrew","fields":{"package":{"name":"package","type":"\u001bhomebrew.package","title":"Homebrew package (formula or cask)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bhomebrew.packages","title":"Homebrew package inventory (macOS and Linux)","desc":"Examine installed formulae and casks with version, tap, and update status","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"homebrew.package":{"id":"homebrew.package","name":"homebrew.package","fields":{"appName":{"name":"appName","type":"\u0007","is_mandatory":true,"title":"Application name (casks only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoUpdates":{"name":"autoUpdates","type":"\u0004","is_mandatory":true,"title":"Whether the cask manages its own updates","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Package description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"homepage":{"name":"homepage","type":"\u0007","is_mandatory":true,"title":"Homepage URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installedAsDependency":{"name":"installedAsDependency","type":"\u0004","is_mandatory":true,"title":"Whether this package was installed as a dependency","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installedOnRequest":{"name":"installedOnRequest","type":"\u0004","is_mandatory":true,"title":"Whether this package was explicitly installed (not a dependency)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"latestVersion":{"name":"latestVersion","type":"\u0007","is_mandatory":true,"title":"Latest stable version available (equals version when up-to-date)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Package name (formula name or cask token)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"outdated":{"name":"outdated","type":"\u0004","is_mandatory":true,"title":"Whether a newer version is available","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Install path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pinned":{"name":"pinned","type":"\u0004","is_mandatory":true,"title":"Whether the version is pinned","provider":"go.mondoo.com/cnquery/v9/providers/os"},"prefix":{"name":"prefix","type":"\u0007","is_mandatory":true,"title":"Homebrew install prefix (e.g., \"/opt/homebrew\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","is_mandatory":true,"title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tap":{"name":"tap","type":"\u0007","is_mandatory":true,"title":"Homebrew tap (e.g., \"homebrew/core\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Package type: \"formula\" or \"cask\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Currently installed version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Homebrew package (formula or cask)","private":true,"min_provider_version":"13.10.1","defaults":"name version type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"homebrew.packages":{"id":"homebrew.packages","name":"homebrew.packages","fields":{"list":{"name":"list","type":"\u0019\u001bhomebrew.package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bhomebrew.package","title":"Homebrew package inventory (macOS and Linux)","desc":"Examine installed formulae and casks with version, tap, and update status","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ibm":{"id":"ibm","fields":{"bob":{"name":"bob","type":"\u001bibm.bob","title":"IBM Bob instance","desc":"Examine installed skills URL: https://www.ibm.com/products/bob","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"ibm.bob":{"id":"ibm.bob","name":"ibm.bob","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Bob configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bibm.bob.skill","title":"IBM Bob skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bibm.bob.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"IBM Bob instance","desc":"Examine installed skills URL: https://www.ibm.com/products/bob","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"ibm.bob.skill":{"id":"ibm.bob.skill","name":"ibm.bob.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"IBM Bob skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"ip6tables":{"id":"ip6tables","name":"ip6tables","fields":{"forward":{"name":"forward","type":"\u0019\u001biptables.entry","title":"IPv6 forward chain entries (filter table)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"forwardPolicy":{"name":"forwardPolicy","type":"\u0007","title":"Default policy for the FORWARD chain (e.g., ACCEPT, DROP)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"input":{"name":"input","type":"\u0019\u001biptables.entry","title":"IPv6 input chain entries (filter table)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inputPolicy":{"name":"inputPolicy","type":"\u0007","title":"Default policy for the INPUT chain (e.g., ACCEPT, DROP)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"output":{"name":"output","type":"\u0019\u001biptables.entry","title":"IPv6 output chain entries (filter table)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"outputPolicy":{"name":"outputPolicy","type":"\u0007","title":"Default policy for the OUTPUT chain (e.g., ACCEPT, DROP)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tables":{"name":"tables","type":"\u0019\u001biptables.table","title":"All tables (filter, nat, mangle, raw)","min_provider_version":"13.15.2","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"IPv6 packet filter (ip6tables)","desc":"Examine tables, chains, and default INPUT/OUTPUT/FORWARD policies","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ipAddress":{"id":"ipAddress","name":"ipAddress","fields":{"broadcast":{"name":"broadcast","type":"\u000f","is_mandatory":true,"title":"Network address used to transmit to all devices connected to a network","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cidr":{"name":"cidr","type":"\u000f","is_mandatory":true,"title":"Classless Inter-Domain Routing notation (e.g. 172.31.24.71/20 or 2001:0:2851:782c:869:1f7d:a331:f3e1/64)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gateway":{"name":"gateway","type":"\u000f","is_mandatory":true,"title":"IP address that acts as the entry point to another, or external, network","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ip":{"name":"ip","type":"\u000f","is_mandatory":true,"title":"Unique number that identifies a device on a network (e.g. 172.31.24.71 or 2001:0:2851:782c:869:1f7d:a331:f3e1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subnet":{"name":"subnet","type":"\u000f","is_mandatory":true,"title":"Logical subdivision of a network (e.g. 172.31.16.0/20 or 2001:db8::/64)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"IP address (v4 or v6) with networking details","desc":"Examine the address itself plus subnet, CIDR, broadcast, and gateway","min_provider_version":"11.3.42","defaults":"ip","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iptables":{"id":"iptables","name":"iptables","fields":{"chain":{"name":"chain","type":"\u001biptables.chain","title":"iptables chain within a table","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"entry":{"name":"entry","type":"\u001biptables.entry","title":"Individual iptables rule entry","desc":"Examine a single iptables rule: packet and byte counters, target action, protocol, input/output interfaces, source and destination addresses, IP options, and the chain/table identifier used as the resource ID. Iterated from `iptables.input()`, `iptables.output()`, or `iptables.forward()` to audit individual packet-filter rules.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"forward":{"name":"forward","type":"\u0019\u001biptables.entry","title":"IPv4 forward chain entries (filter table)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"forwardPolicy":{"name":"forwardPolicy","type":"\u0007","title":"Default policy for the FORWARD chain (e.g., ACCEPT, DROP)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"input":{"name":"input","type":"\u0019\u001biptables.entry","title":"IPv4 input chain entries (filter table)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inputPolicy":{"name":"inputPolicy","type":"\u0007","title":"Default policy for the INPUT chain (e.g., ACCEPT, DROP)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"output":{"name":"output","type":"\u0019\u001biptables.entry","title":"IPv4 output chain entries (filter table)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"outputPolicy":{"name":"outputPolicy","type":"\u0007","title":"Default policy for the OUTPUT chain (e.g., ACCEPT, DROP)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"table":{"name":"table","type":"\u001biptables.table","title":"iptables table (filter, nat, mangle, raw)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"tables":{"name":"tables","type":"\u0019\u001biptables.table","title":"All tables (filter, nat, mangle, raw)","min_provider_version":"13.15.2","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"IPv4 packet filter (iptables)","desc":"Examine tables, chains, and default INPUT/OUTPUT/FORWARD policies","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iptables.chain":{"id":"iptables.chain","name":"iptables.chain","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Chain name (INPUT, OUTPUT, FORWARD, PREROUTING, POSTROUTING, or user-defined)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policy":{"name":"policy","type":"\u0007","is_mandatory":true,"title":"Default policy (ACCEPT, DROP, REJECT) - empty for user-defined chains","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rules":{"name":"rules","type":"\u0019\u001biptables.entry","is_mandatory":true,"title":"Rules in this chain","provider":"go.mondoo.com/cnquery/v9/providers/os"},"table":{"name":"table","type":"\u0007","is_mandatory":true,"title":"Table this chain belongs to (filter, nat, mangle, raw)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"iptables chain within a table","private":true,"min_provider_version":"13.15.2","defaults":"table name policy","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iptables.entry":{"id":"iptables.entry","name":"iptables.entry","fields":{"bytes":{"name":"bytes","type":"\u0005","is_mandatory":true,"title":"How large the packet is in octets, including headers and everything.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chain":{"name":"chain","type":"\u0007","is_mandatory":true,"title":"Chain and table identifier used for the resource ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Rule comment from `-m comment --comment`","desc":"The unquoted comment text. Empty when no comment match is present.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ctstate":{"name":"ctstate","type":"\u0019\u0007","is_mandatory":true,"title":"Conntrack state list from `-m state --state` or `-m conntrack --ctstate`","desc":"Values such as NEW, ESTABLISHED, RELATED, INVALID, UNTRACKED. Empty when no state/ctstate match is present.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"destination":{"name":"destination","type":"\u0007","is_mandatory":true,"title":"The destination IP address of the traffic, subnet of the traffic, or anywhere","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dport":{"name":"dport","type":"\u0005","is_mandatory":true,"title":"Destination port","desc":"Single port from `--dport`. Null when the rule does not match by destination port, or when it matches a range or list — see `dportRange` for ranges and `dports` for multi-port matches.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dportRange":{"name":"dportRange","type":"\u0007","is_mandatory":true,"title":"Destination port range, e.g. \"1024:65535\"","desc":"Set when the rule uses `--dport low:high`. Empty otherwise.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dports":{"name":"dports","type":"\u0019\u0007","is_mandatory":true,"title":"Destination port list from `-m multiport --dports`","desc":"Empty when no `--dports` match is present. Single ports are integers; ranges (e.g. \"1000:2000\") remain as strings unchanged.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"in":{"name":"in","type":"\u0007","is_mandatory":true,"title":"Input network interface the rule matches on (empty for any)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number of statistic, which is used to create the ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"matchSet":{"name":"matchSet","type":"\u0007","is_mandatory":true,"title":"ipset name from `-m set --match-set`","desc":"The set name used in a `--match-set` match. Empty when no `-m set` match is present.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"opt":{"name":"opt","type":"\u0007","is_mandatory":true,"title":"IP options","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0007","is_mandatory":true,"title":"Optional settings within the header such as internet timestamps, SACK, or record route options","provider":"go.mondoo.com/cnquery/v9/providers/os"},"out":{"name":"out","type":"\u0007","is_mandatory":true,"title":"Output network interface the rule matches on (empty for any)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"packets":{"name":"packets","type":"\u0005","is_mandatory":true,"title":"Packets from iptable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol of the next level layer (e.g., TCP, UDP, ICMP, etc)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Canonical iptables-save line for this rule","desc":"The exact `-A CHAIN ...` line as emitted by `iptables-save -c`. Empty on systems where `iptables-save` is unavailable and the legacy `-L` parser is used as a fallback.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rejectWith":{"name":"rejectWith","type":"\u0007","is_mandatory":true,"title":"For `-j REJECT`, the `--reject-with` value (e.g., icmp-port-unreachable)","desc":"Empty when target is not REJECT, or when REJECT is used without `--reject-with`.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source address field that tells the receiver where the packet came from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sport":{"name":"sport","type":"\u0005","is_mandatory":true,"title":"Source port","desc":"Single port from `--sport`. Null when the rule does not match by source port, or when it matches a range or list.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sportRange":{"name":"sportRange","type":"\u0007","is_mandatory":true,"title":"Source port range, e.g. \"1024:65535\"","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sports":{"name":"sports","type":"\u0019\u0007","is_mandatory":true,"title":"Source port list from `-m multiport --sports`","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"What to do with the packet if it matches a rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tcpFlags":{"name":"tcpFlags","type":"\u0019\u0007","is_mandatory":true,"title":"TCP flag match from `-m tcp --tcp-flags`","desc":"Two-element list: [mask, comp] (e.g., [\"FIN,SYN,RST,ACK\", \"SYN\"] for `--tcp-flags FIN,SYN,RST,ACK SYN`). Empty when no `--tcp-flags` match is present.","min_provider_version":"13.18.1","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Individual iptables rule entry","desc":"Examine a single iptables rule: packet and byte counters, target action, protocol, input/output interfaces, source and destination addresses, IP options, and the chain/table identifier used as the resource ID. Iterated from `iptables.input()`, `iptables.output()`, or `iptables.forward()` to audit individual packet-filter rules.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iptables.table":{"id":"iptables.table","name":"iptables.table","fields":{"chains":{"name":"chains","type":"\u0019\u001biptables.chain","is_mandatory":true,"title":"Chains in this table","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Table name (filter, nat, mangle, raw)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"iptables table (filter, nat, mangle, raw)","private":true,"min_provider_version":"13.15.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"java":{"id":"java","fields":{"package":{"name":"package","type":"\u001bjava.package","title":"Java package (Maven, Gradle, or JAR archive)","desc":"Examine a single Java artifact: its unique `id`, `name` in `groupId:artifactId` form, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `java.packages` or `java.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bjava.packages","title":"Java package inventory (Maven, Gradle, JAR archives)","desc":"Examine the root project, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"java.package":{"id":"java.package","name":"java.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the java.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the package (groupId:artifactId)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Java package (Maven, Gradle, or JAR archive)","desc":"Examine a single Java artifact: its unique `id`, `name` in `groupId:artifactId` form, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `java.packages` or `java.packages.directDependencies()`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"java.packages":{"id":"java.packages","name":"java.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bjava.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bjava.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Java packages (directory, JAR, pom.xml, or gradle.lockfile)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bjava.package","title":"Root project (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bjava.package","title":"Java package inventory (Maven, Gradle, JAR archives)","desc":"Examine the root project, direct dependencies, and full transitive tree","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"jenkins":{"id":"jenkins","fields":{"package":{"name":"package","type":"\u001bjenkins.package","title":"Jenkins plugin","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bjenkins.packages","title":"Jenkins plugin inventory","desc":"Examine installed plugins with version and inter-plugin dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"jenkins.package":{"id":"jenkins.package","name":"jenkins.package","fields":{"dependencies":{"name":"dependencies","type":"\u0019\u0007","is_mandatory":true,"title":"Plugin dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","is_mandatory":true,"title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"longName":{"name":"longName","type":"\u0007","is_mandatory":true,"title":"Plugin long name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plugin short name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","is_mandatory":true,"title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Plugin URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Plugin version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Jenkins plugin","private":true,"min_provider_version":"13.12.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"jenkins.packages":{"id":"jenkins.packages","name":"jenkins.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bjenkins.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to Jenkins plugins directory","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bjenkins.package","title":"Jenkins plugin inventory","desc":"Examine installed plugins with version and inter-plugin dependencies","min_provider_version":"13.12.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"journald":{"id":"journald","fields":{"config":{"name":"config","type":"\u001bjournald.config","title":"systemd journald configuration","desc":"Examine the [Journal] and other sections of journald.conf","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"journald.config":{"id":"journald.config","name":"journald.config","fields":{"file":{"name":"file","type":"\u001bfile","title":"File of this journald configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Flattened journald configuration parameters","desc":"Deprecated in favor of `sections()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"},"section":{"name":"section","type":"\u001bjournald.config.section","title":"journald configuration section","desc":"Examine a single named section (e.g., \"Journal\", \"Upload\") from the journald configuration, including its `params` list of key-value pairs. Used together with `journald.config` to audit individual journald settings within a specific section.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"sections":{"name":"sections","type":"\u0019\u001bjournald.config.section","refs":["\"file\""],"title":"All sections in this journald configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"systemd journald configuration","desc":"Examine the [Journal] and other sections of journald.conf","min_provider_version":"11.4.51","provider":"go.mondoo.com/cnquery/v9/providers/os"},"journald.config.section":{"id":"journald.config.section","name":"journald.config.section","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the section (e.g., \"Journal\", \"Upload\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"param":{"name":"param","type":"\u001bjournald.config.section.param","title":"journald configuration parameter","desc":"Examine a single key-value directive within a journald configuration section: the parameter `name` (e.g., \"Storage\", \"Compress\") and its `value`. Iterated from `journald.config.section.params` to assert specific journald settings.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"params":{"name":"params","type":"\u0019\u001bjournald.config.section.param","is_mandatory":true,"title":"Key-value pairs in this section","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"journald configuration section","desc":"Examine a single named section (e.g., \"Journal\", \"Upload\") from the journald configuration, including its `params` list of key-value pairs. Used together with `journald.config` to audit individual journald settings within a specific section.","min_provider_version":"11.4.69","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"journald.config.section.param":{"id":"journald.config.section.param","name":"journald.config.section.param","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Configuration parameter name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Configuration parameter value","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"journald configuration parameter","desc":"Examine a single key-value directive within a journald configuration section: the parameter `name` (e.g., \"Storage\", \"Compress\") and its `value`. Iterated from `journald.config.section.params` to assert specific journald settings.","min_provider_version":"11.4.69","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"julia":{"id":"julia","fields":{"package":{"name":"package","type":"\u001bjulia.package","title":"Julia package dependency","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bjulia.packages","title":"Julia package inventory (Manifest.toml)","desc":"Examine all locked packages with their resolved versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"julia.package":{"id":"julia.package","name":"julia.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the julia.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Julia package dependency","private":true,"min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"julia.packages":{"id":"julia.packages","name":"julia.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bjulia.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Manifest.toml","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bjulia.package","title":"Julia package inventory (Manifest.toml)","desc":"Examine all locked packages with their resolved versions","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"junie":{"id":"junie","name":"junie","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Junie configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bjunie.skill","title":"Junie skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bjunie.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Junie (JetBrains AI agent) instance","desc":"Examine installed skills URL: https://www.jetbrains.com/junie/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"junie.skill":{"id":"junie.skill","name":"junie.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Junie skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"kernel":{"id":"kernel","name":"kernel","fields":{"aslr":{"name":"aslr","type":"\u001bkernel.aslr","title":"Address Space Layout Randomization (ASLR) state (Linux only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cmdline":{"name":"cmdline","type":"\u001bkernel.cmdline","title":"Kernel boot command line (Linux only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"info":{"name":"info","type":"\n","title":"Active kernel information","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0019\n","title":"Installed versions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lockdown":{"name":"lockdown","type":"\u001bkernel.lockdown","title":"Kernel lockdown LSM mode (Linux only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u001bkernel.module","title":"System kernel module information","desc":"Examine a single kernel module: its `name`, in-memory `size`, and whether it is currently `loaded`. Initialize by name (e.g., `kernel.module(name: \"nf_conntrack\")`) to check a specific module, or iterate from `kernel.modules()` to audit the full loaded-module list. Use `blacklisted`, `installBypass`, and `disabled` to express CIS-style \"module must not load\" controls without falling back to raw modprobe.d file parsing. Use `onDisk` to tell whether a loadable module file is available for the running kernel even when it isn't currently loaded, and `builtIn` to detect functionality compiled directly into the kernel (which is always active and cannot be blacklisted or unloaded).","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bkernel.module","title":"List of kernel modules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameters":{"name":"parameters","type":"\u001a\u0007\u0007","title":"Kernel parameters map","provider":"go.mondoo.com/cnquery/v9/providers/os"},"taint":{"name":"taint","type":"\u001bkernel.taint","title":"Kernel taint status (Linux only)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Running kernel and its modules","desc":"Examine kernel info, sysctl parameters, loaded modules, and installed versions","min_provider_version":"9.0.0","defaults":"info","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kernel.aslr":{"id":"kernel.aslr","name":"kernel.aslr","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether ASLR is enabled (`mode \u003e 0`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"level":{"name":"level","type":"\u0007","is_mandatory":true,"title":"Human-readable level","desc":"One of `disabled`, `conservative`, `full`, or `unknown`.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0005","is_mandatory":true,"title":"Raw ASLR mode value from /proc/sys/kernel/randomize_va_space","desc":"`0` disabled, `1` conservative (stack, libraries, vdso), `2` full (also heap/brk). `-1` when the file is unavailable.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux Address Space Layout Randomization (ASLR) state","desc":"Examine the kernel's userspace ASLR setting from /proc/sys/kernel/randomize_va_space. ASLR randomizes memory layout to make memory-corruption exploits harder; CIS benchmarks require `mode` 2 (full randomization).","private":true,"min_provider_version":"13.16.10","defaults":"level enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kernel.cmdline":{"id":"kernel.cmdline","name":"kernel.cmdline","fields":{"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Bare flags on the kernel command line (tokens without `=`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameters":{"name":"parameters","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Parameters parsed from `key=value` tokens","desc":"When a parameter appears multiple times on the command line (e.g. `console=tty0 console=ttyS0`), the last occurrence wins. Use `raw` for full-fidelity inspection.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Raw contents of /proc/cmdline","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux kernel boot command line","desc":"Examine the kernel command line passed by the bootloader at boot time (the contents of /proc/cmdline). Use `parameters` for `key=value` directives and `flags` for bare tokens such as `ro`, `quiet`, or `nosmt`. The `raw` string is preserved for direct inspection or for callers that need to recover duplicate tokens.","private":true,"min_provider_version":"13.16.10","defaults":"raw","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kernel.lockdown":{"id":"kernel.lockdown","name":"kernel.lockdown","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether lockdown is enforced (mode is `integrity` or `confidentiality`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Active lockdown mode","desc":"One of `none`, `integrity`, `confidentiality`, or `unavailable`.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux kernel lockdown mode","desc":"Examine the kernel lockdown LSM state from /sys/kernel/security/lockdown. Lockdown restricts modifications to a running kernel even from root: `integrity` blocks features that could let userspace modify the kernel (kexec, /dev/mem, etc.) and `confidentiality` additionally blocks features that expose kernel memory contents. `mode` is `unavailable` when the kernel was built without lockdown support.","private":true,"min_provider_version":"13.16.10","defaults":"mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kernel.module":{"id":"kernel.module","name":"kernel.module","fields":{"blacklisted":{"name":"blacklisted","type":"\u0004","title":"Whether the module is blacklisted in modprobe configuration","desc":"True when any modprobe configuration file declares `blacklist \u003cname\u003e`. Blacklisted modules will not auto-load (e.g., from udev or hotplug events) but root can still force-load them with `modprobe --force` or by writing to `/sys/module/...`. CIS macOS/Linux benchmarks check for this to ensure unused filesystems/protocols stay off.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"builtIn":{"name":"builtIn","type":"\u0004","title":"Whether the module is compiled into the kernel image","desc":"True when the functionality is built directly into the kernel (configured `=y`) rather than shipped as a loadable file, as listed in the running kernel's `modules.builtin` index. Built-in modules are always active: they never appear in `loaded`, have no file on disk (`onDisk` is false), and cannot be blacklisted or unloaded.","min_provider_version":"13.20.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabled":{"name":"disabled","type":"\u0004","title":"Whether the module is effectively disabled","desc":"True when the module is either blacklisted or has an install short-circuit rule. Use this as the canonical \"module will not load without explicit override\" predicate.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installBypass":{"name":"installBypass","type":"\u0004","title":"Whether the module's load is short-circuited to /bin/true or /bin/false","desc":"True when any modprobe configuration file declares `install \u003cname\u003e /bin/false` (or `/bin/true`). This is stronger than blacklisting: even an explicit `modprobe \u003cname\u003e` is replaced with the no-op binary, so the module cannot be loaded without overriding the install rule.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loaded":{"name":"loaded","type":"\u0004","is_mandatory":true,"title":"Whether the module is loaded","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the kernel module","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onDisk":{"name":"onDisk","type":"\u0004","title":"Whether a loadable module file is installed on disk for the running kernel","desc":"True when a `.ko` (or compressed `.ko.xz` / `.ko.zst` / `.ko.gz`) file for this module exists under `/lib/modules/\u003cversion\u003e/`, as listed in that kernel's `modules.dep` index. This reports presence independently of `loaded`, so it answers \"the module is available to load but isn't loaded right now.\" Modules compiled into the kernel have no file on disk and report false here — see `builtIn`.","min_provider_version":"13.20.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"Size of the kernel module","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"System kernel module information","desc":"Examine a single kernel module: its `name`, in-memory `size`, and whether it is currently `loaded`. Initialize by name (e.g., `kernel.module(name: \"nf_conntrack\")`) to check a specific module, or iterate from `kernel.modules()` to audit the full loaded-module list. Use `blacklisted`, `installBypass`, and `disabled` to express CIS-style \"module must not load\" controls without falling back to raw modprobe.d file parsing. Use `onDisk` to tell whether a loadable module file is available for the running kernel even when it isn't currently loaded, and `builtIn` to detect functionality compiled directly into the kernel (which is always active and cannot be blacklisted or unloaded).","min_provider_version":"9.0.0","defaults":"name loaded","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kernel.taint":{"id":"kernel.taint","name":"kernel.taint","fields":{"bitmask":{"name":"bitmask","type":"\u0005","is_mandatory":true,"title":"Raw taint bitmask from /proc/sys/kernel/tainted","provider":"go.mondoo.com/cnquery/v9/providers/os"},"reasons":{"name":"reasons","type":"\u0019\u0007","is_mandatory":true,"title":"Human-readable taint reasons in bit order","desc":"See the kernel.org \"Tainted kernels\" documentation for the full list of bit meanings (proprietary module, out-of-tree module, unsigned module, oops, soft lockup, live-patched, etc.).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tainted":{"name":"tainted","type":"\u0004","is_mandatory":true,"title":"Whether any taint bit is set","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux kernel taint status","desc":"Examine kernel taint flags as reported by /proc/sys/kernel/tainted. A non-zero bitmask indicates that the kernel has loaded proprietary or out-of-tree modules, hit a hardware error, oopsed, or otherwise entered a state that diverges from a clean reference kernel. Use `tainted` for a boolean check and `reasons` for the human-readable list of contributing bits.","private":true,"min_provider_version":"13.16.10","defaults":"tainted reasons","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kilocode":{"id":"kilocode","name":"kilocode","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Kilo Code configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bkilocode.skill","title":"Kilo Code skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bkilocode.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Kilo Code AI agent instance","desc":"Examine installed skills URL: https://kilocode.ai/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"kilocode.skill":{"id":"kilocode.skill","name":"kilocode.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Kilo Code skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"kiro":{"id":"kiro","name":"kiro","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Kiro configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bkiro.skill","title":"Kiro skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bkiro.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Kiro CLI (AWS) instance","desc":"Examine installed skills URL: https://kiro.dev/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"kiro.skill":{"id":"kiro.skill","name":"kiro.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Kiro skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"kubelet":{"id":"kubelet","name":"kubelet","fields":{"configFile":{"name":"configFile","type":"\u001bfile","is_mandatory":true,"title":"Kubelet config file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"configuration":{"name":"configuration","type":"\n","title":"Combination of config file parameters and CLI parameters","provider":"go.mondoo.com/cnquery/v9/providers/os"},"process":{"name":"process","type":"\u001bprocess","is_mandatory":true,"title":"Kubelet process","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Kubernetes kubelet on this node","desc":"Examine config-file parameters merged with the live process's CLI flags","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"launchd":{"id":"launchd","name":"launchd","fields":{"job":{"name":"job","type":"\u001blaunchd.job","title":"Individual launchd job configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"jobs":{"name":"jobs","type":"\u0019\u001blaunchd.job","title":"All launchd jobs from system and user directories","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS launchd job configurations","desc":"Examine system, library, and user daemons / agents from their plist files","min_provider_version":"11.8.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"launchd.job":{"id":"launchd.job","name":"launchd.job","fields":{"content":{"name":"content","type":"\n","is_mandatory":true,"title":"Full parsed plist content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"title":"Whether the job is disabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"environmentVariables":{"name":"environmentVariables","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Environment variables","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"The plist file resource","provider":"go.mondoo.com/cnquery/v9/providers/os"},"groupName":{"name":"groupName","type":"\u0007","is_mandatory":true,"title":"Group the job runs as","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keepAlive":{"name":"keepAlive","type":"\n","is_mandatory":true,"title":"Keep alive configuration","desc":"Normalized to: {\"enabled\": bool} for simple values, {\"enabled\": true, \"conditions\": {...}} for conditional keep-alive, or null if not specified.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the job (from Label key)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machServices":{"name":"machServices","type":"\n","is_mandatory":true,"title":"Mach services","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the plist file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"processType":{"name":"processType","type":"\u0007","is_mandatory":true,"title":"macOS launchd process type (e.g., Adaptive, Interactive, Background, Standard)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"program":{"name":"program","type":"\u0007","is_mandatory":true,"title":"The program to execute","provider":"go.mondoo.com/cnquery/v9/providers/os"},"programArguments":{"name":"programArguments","type":"\u0019\u0007","is_mandatory":true,"title":"Command arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rootDirectory":{"name":"rootDirectory","type":"\u0007","is_mandatory":true,"title":"Directory to chroot to before launch","provider":"go.mondoo.com/cnquery/v9/providers/os"},"runAtLoad":{"name":"runAtLoad","type":"\u0004","is_mandatory":true,"title":"Whether this job runs at load","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sockets":{"name":"sockets","type":"\n","is_mandatory":true,"title":"Socket configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source: \"system\", \"library\", or \"user\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"startCalendarInterval":{"name":"startCalendarInterval","type":"\u0019\n","is_mandatory":true,"title":"Calendar-based schedule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"startInterval":{"name":"startInterval","type":"\u0005","is_mandatory":true,"title":"Interval between runs (seconds)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stderrPath":{"name":"stderrPath","type":"\u0007","is_mandatory":true,"title":"Path to redirect stderr","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stdoutPath":{"name":"stdoutPath","type":"\u0007","is_mandatory":true,"title":"Path to redirect stdout","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type: \"daemon\" or \"agent\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"userName":{"name":"userName","type":"\u0007","is_mandatory":true,"title":"User the job runs as","provider":"go.mondoo.com/cnquery/v9/providers/os"},"watchPaths":{"name":"watchPaths","type":"\u0019\u0007","is_mandatory":true,"title":"Watch paths that trigger the job","provider":"go.mondoo.com/cnquery/v9/providers/os"},"workingDirectory":{"name":"workingDirectory","type":"\u0007","is_mandatory":true,"title":"Working directory","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Individual launchd job configuration","private":true,"min_provider_version":"11.8.3","defaults":"label type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"limits":{"id":"limits","name":"limits","fields":{"entries":{"name":"entries","type":"\u0019\u001blimits.entry","refs":["\"files\""],"title":"Parsed limits entries","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001blimits.entry","title":"Resource limit entry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bfile","title":"List of files that make up the limits configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"PAM resource limits configuration (limits.conf)","desc":"Examine soft/hard caps on processes, files, memory, and other resources","min_provider_version":"11.6.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"limits.entry":{"id":"limits.entry","name":"limits.entry","fields":{"domain":{"name":"domain","type":"\u0007","is_mandatory":true,"title":"Domain (username, @groupname, *, %)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"item":{"name":"item","type":"\u0007","is_mandatory":true,"title":"Resource item (core, nofile, nproc, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Limit type (soft, hard, -)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Limit value","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Resource limit entry","private":true,"min_provider_version":"11.6.0","defaults":"domain item","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logindefs":{"id":"logindefs","name":"logindefs","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Content of the configuration file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"Current configuration file for resource","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"content\""],"title":"Parsed logindef parameter","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Shadow password suite (login.defs) configuration","desc":"Examine password aging, UID/GID ranges, and login policy parameters","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logrotate":{"id":"logrotate","name":"logrotate","fields":{"entries":{"name":"entries","type":"\u0019\u001blogrotate.entry","refs":["\"files\""],"title":"Per-file/glob rotation entries","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001blogrotate.entry","title":"Logrotate configuration entry for a specific log path","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bfile","title":"List of configuration files (main + logrotate.d fragments)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"globalConfig":{"name":"globalConfig","type":"\u001a\u0007\u0007","refs":["\"files\""],"title":"Global directives (outside any file block)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"logrotate configuration","desc":"Examine global directives and per-log rotation entries across logrotate.d","min_provider_version":"11.8.14","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logrotate.entry":{"id":"logrotate.entry","name":"logrotate.entry","fields":{"config":{"name":"config","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives in this block as key-value pairs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"Configuration file where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the configuration file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Log file path or glob pattern","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Logrotate configuration entry for a specific log path","private":true,"min_provider_version":"11.8.14","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lsblk":{"id":"lsblk","name":"lsblk","fields":{"entry":{"name":"entry","type":"\u001blsblk.entry","title":"Unix block device","desc":"Examine a single block device reported by `lsblk`: its device `name`, filesystem type (`fstype`), `label`, UUID, and `mountpoints` list. Iterated from `lsblk` to audit disk layout, filesystem labels, and mount configurations.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"list":{"name":"list","type":"\u0019\u001blsblk.entry","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001blsblk.entry","title":"Unix block devices (lsblk)","desc":"Examine device names, filesystem types, labels, UUIDs, and mount points","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lsblk.entry":{"id":"lsblk.entry","name":"lsblk.entry","fields":{"fstype":{"name":"fstype","type":"\u0007","is_mandatory":true,"title":"File system type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Label for the file system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mountpoints":{"name":"mountpoints","type":"\u0019\u0007","is_mandatory":true,"title":"Mount points for the device","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"UUID for the file system","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Unix block device","desc":"Examine a single block device reported by `lsblk`: its device `name`, filesystem type (`fstype`), `label`, UUID, and `mountpoints` list. Iterated from `lsblk` to audit disk layout, filesystem labels, and mount configurations.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lua":{"id":"lua","fields":{"package":{"name":"package","type":"\u001blua.package","title":"Lua package dependency","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001blua.packages","title":"Lua/LuaRocks package inventory","desc":"Examine all installed rocks with their versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"lua.package":{"id":"lua.package","name":"lua.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the lua.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Lua package dependency","private":true,"min_provider_version":"13.15.2","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lua.packages":{"id":"lua.packages","name":"lua.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001blua.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for LuaRocks packages","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001blua.package","title":"Lua/LuaRocks package inventory","desc":"Examine all installed rocks with their versions","min_provider_version":"13.15.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"luks":{"id":"luks","name":"luks","fields":{"keyslot":{"name":"keyslot","type":"\u001bluks.keyslot","title":"LUKS keyslot","desc":"Examine one keyslot in a LUKS header — its index, state, and the key-derivation parameters used to wrap the master key. Audit for weak KDFs, low iteration or memory costs, and unexpectedly large numbers of active slots.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"volume":{"name":"volume","type":"\u001bluks.volume","title":"LUKS-encrypted block device","desc":"Examine a single LUKS-formatted block device — its header version, label, master-key size and offset, cipher, and keyslots. Select a volume by its `uuid` (e.g., `luks.volumes.where(uuid == \"fd44f17a-...\")`) or by the underlying block device's `name`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"volumes":{"name":"volumes","type":"\u0019\u001bluks.volume","title":"LUKS-formatted block devices on the host","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LUKS-encrypted volumes on the host","desc":"Use this resource to enumerate block devices that carry a LUKS header, inspect each volume's on-disk format version, cipher, and key-derivation parameters, and audit every keyslot. Both LUKS1 and LUKS2 headers are reported through the same schema; the `version` field on each volume distinguishes them and version-specific fields (label, subsystem, and tokens for LUKS2; AF-splitter stripes for LUKS1) are populated only where they apply.","min_provider_version":"13.17.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"luks.keyslot":{"id":"luks.keyslot","name":"luks.keyslot","fields":{"hash":{"name":"hash","type":"\u0007","is_mandatory":true,"title":"Hash used by the KDF (pbkdf2 only; e.g., sha256, sha512)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"index":{"name":"index","type":"\u0005","is_mandatory":true,"title":"Slot index (0–7 on LUKS1, 0–31 on LUKS2)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iterations":{"name":"iterations","type":"\u0005","is_mandatory":true,"title":"PBKDF2 iteration count (pbkdf2 only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kdf":{"name":"kdf","type":"\u0007","is_mandatory":true,"title":"KDF used for this slot","desc":"One of pbkdf2, argon2i, or argon2id.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keyMaterialOffset":{"name":"keyMaterialOffset","type":"\u0005","is_mandatory":true,"title":"Key-material offset in 512-byte sectors","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memory":{"name":"memory","type":"\u0005","is_mandatory":true,"title":"argon2 memory cost in KiB (argon2* only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parallel":{"name":"parallel","type":"\u0005","is_mandatory":true,"title":"argon2 parallelism (argon2* only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Slot state","desc":"ENABLED or DISABLED on LUKS1; active or inactive on LUKS2.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stripes":{"name":"stripes","type":"\u0005","is_mandatory":true,"title":"AF-splitter stripe count (LUKS1 only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"time":{"name":"time","type":"\u0005","is_mandatory":true,"title":"argon2 time cost (argon2* only)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LUKS keyslot","desc":"Examine one keyslot in a LUKS header — its index, state, and the key-derivation parameters used to wrap the master key. Audit for weak KDFs, low iteration or memory costs, and unexpectedly large numbers of active slots.","min_provider_version":"13.17.1","defaults":"index state kdf","provider":"go.mondoo.com/cnquery/v9/providers/os"},"luks.volume":{"id":"luks.volume","name":"luks.volume","fields":{"blockDevice":{"name":"blockDevice","type":"\u001blsblk.entry","title":"Underlying lsblk block device","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cipher":{"name":"cipher","type":"\u001bluks.volume.cipher","title":"Cipher protecting the master key","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keyslots":{"name":"keyslots","type":"\u0019\u001bluks.keyslot","title":"Keyslots defined in the header","provider":"go.mondoo.com/cnquery/v9/providers/os"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Label assigned in the LUKS2 header (empty on LUKS1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masterKeyBits":{"name":"masterKeyBits","type":"\u0005","is_mandatory":true,"title":"Master-key size in bits","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Path of the underlying block device (e.g., /dev/sda3)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"payloadOffset":{"name":"payloadOffset","type":"\u0005","is_mandatory":true,"title":"Payload offset in 512-byte sectors","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subsystem":{"name":"subsystem","type":"\u0007","is_mandatory":true,"title":"Subsystem string from the LUKS2 header (empty on LUKS1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tokens":{"name":"tokens","type":"\u0019\n","is_mandatory":true,"title":"LUKS2 tokens attached to the header (empty on LUKS1)","desc":"Each entry carries the token id, type (e.g., luks2-keyring, systemd-tpm2, systemd-fido2, systemd-pkcs11), the keyslot indices the token unlocks, and any token-type-specific metadata.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"LUKS header UUID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"LUKS header version (1 or 2)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LUKS-encrypted block device","desc":"Examine a single LUKS-formatted block device — its header version, label, master-key size and offset, cipher, and keyslots. Select a volume by its `uuid` (e.g., `luks.volumes.where(uuid == \"fd44f17a-...\")`) or by the underlying block device's `name`.","min_provider_version":"13.17.1","defaults":"name uuid version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"luks.volume.cipher":{"id":"luks.volume.cipher","name":"luks.volume.cipher","fields":{"hash":{"name":"hash","type":"\u0007","is_mandatory":true,"title":"Hash used by the AF splitter (LUKS1) or sector integrity (LUKS2)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keySize":{"name":"keySize","type":"\u0005","is_mandatory":true,"title":"Master-key size in bits","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Cipher mode (e.g., xts-plain64, cbc-essiv:sha256)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cipher family (e.g., aes, serpent, twofish)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"spec":{"name":"spec","type":"\u0007","is_mandatory":true,"title":"Combined cipher spec as cryptsetup reports it","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LUKS cipher specification","desc":"Examine the symmetric cipher protecting a LUKS volume's master key. `name` is the cipher family, `mode` is the chaining mode, and `spec` is the combined cryptsetup string (e.g., `aes-xts-plain64`). On LUKS1, `hash` carries the AF-splitter hash; on LUKS2 it is the integrity hash when sector integrity is configured.","private":true,"min_provider_version":"13.17.1","defaults":"spec keySize","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lvm":{"id":"lvm","name":"lvm","fields":{"logicalVolume":{"name":"logicalVolume","type":"\u001blvm.logicalVolume","title":"LVM logical volume","desc":"Examine a single LVM logical volume: `name`, full device `path`, `uuid`, parent volume group (`volumeGroupName`), attribute flags, size in bytes, snapshot `origin`, and thin-pool data usage. For thin volumes, `poolName` is set; for snapshots, `origin` is the source LV name. Iterated from `lvm.logicalVolumes`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"logicalVolumes":{"name":"logicalVolumes","type":"\u0019\u001blvm.logicalVolume","title":"Logical volumes across all volume groups","provider":"go.mondoo.com/cnquery/v9/providers/os"},"physicalVolume":{"name":"physicalVolume","type":"\u001blvm.physicalVolume","title":"LVM physical volume","desc":"Examine a single block device initialized as an LVM physical volume: device path (`name`), `uuid`, the volume group it belongs to (`volumeGroupName`, empty if unassigned), on-disk `format`, attribute flags, and total/free byte counts. Iterated from `lvm.physicalVolumes`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"physicalVolumes":{"name":"physicalVolumes","type":"\u0019\u001blvm.physicalVolume","title":"Physical volumes initialized for LVM","provider":"go.mondoo.com/cnquery/v9/providers/os"},"volumeGroup":{"name":"volumeGroup","type":"\u001blvm.volumeGroup","title":"LVM volume group","desc":"Examine a single LVM volume group: `name`, `uuid`, attribute flags, total and free byte counts, and the counts of physical volumes, logical volumes, and snapshots it contains. Iterated from `lvm.volumeGroups` to audit capacity and group-level policy.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"volumeGroups":{"name":"volumeGroups","type":"\u0019\u001blvm.volumeGroup","title":"Volume groups","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux Logical Volume Manager","desc":"Examine LVM block-device storage on Linux: physical volumes initialized for LVM, volume groups that aggregate them, and the logical volumes carved out of those groups. Iterate `physicalVolumes`, `volumeGroups`, and `logicalVolumes` to audit LVM layout, free capacity, thin-pool usage, and snapshot relationships.","min_provider_version":"13.16.10","defaults":"volumeGroups","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lvm.logicalVolume":{"id":"lvm.logicalVolume","name":"lvm.logicalVolume","fields":{"attributes":{"name":"attributes","type":"\u0007","is_mandatory":true,"title":"LV attribute flags","desc":"Ten-character status string covering volume type, permissions, allocation policy, fixed minor, state, open device, target type, zeroing, and skipped activation. See lvm(8) `lv_attr` for the full set.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dataPercent":{"name":"dataPercent","type":"\u0006","title":"Data percentage used (for thin pools, thin volumes, snapshots, mirrors); null if not applicable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Logical volume name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"origin":{"name":"origin","type":"\u0007","is_mandatory":true,"title":"Origin LV name for snapshots, empty if not a snapshot","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Full device path (e.g., /dev/vg0/data)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"poolName":{"name":"poolName","type":"\u0007","is_mandatory":true,"title":"Pool name for thin volumes, empty if not a thin volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sizeBytes":{"name":"sizeBytes","type":"\u0005","is_mandatory":true,"title":"Size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"UUID of the logical volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"volumeGroupName":{"name":"volumeGroupName","type":"\u0007","is_mandatory":true,"title":"Name of the volume group this LV belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LVM logical volume","desc":"Examine a single LVM logical volume: `name`, full device `path`, `uuid`, parent volume group (`volumeGroupName`), attribute flags, size in bytes, snapshot `origin`, and thin-pool data usage. For thin volumes, `poolName` is set; for snapshots, `origin` is the source LV name. Iterated from `lvm.logicalVolumes`.","private":true,"min_provider_version":"13.16.10","defaults":"name volumeGroupName sizeBytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lvm.physicalVolume":{"id":"lvm.physicalVolume","name":"lvm.physicalVolume","fields":{"attributes":{"name":"attributes","type":"\u0007","is_mandatory":true,"title":"PV attribute flags","desc":"Three-character status string. Common values include `a` (allocatable), `x` (exported), and `m` (missing). See lvm(8) `pv_attr` for the full set.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"PV on-disk format (typically \"lvm2\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"freeBytes":{"name":"freeBytes","type":"\u0005","is_mandatory":true,"title":"Free space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Physical volume device path (e.g., /dev/sda1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sizeBytes":{"name":"sizeBytes","type":"\u0005","is_mandatory":true,"title":"Total size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"UUID of the physical volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"volumeGroupName":{"name":"volumeGroupName","type":"\u0007","is_mandatory":true,"title":"Name of the volume group this PV belongs to (empty if unassigned)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LVM physical volume","desc":"Examine a single block device initialized as an LVM physical volume: device path (`name`), `uuid`, the volume group it belongs to (`volumeGroupName`, empty if unassigned), on-disk `format`, attribute flags, and total/free byte counts. Iterated from `lvm.physicalVolumes`.","private":true,"min_provider_version":"13.16.10","defaults":"name volumeGroupName sizeBytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lvm.volumeGroup":{"id":"lvm.volumeGroup","name":"lvm.volumeGroup","fields":{"attributes":{"name":"attributes","type":"\u0007","is_mandatory":true,"title":"VG attribute flags","desc":"Six-character status string covering permissions, resizability, export state, partial state, allocation policy, and clustering. See lvm(8) `vg_attr` for the full set.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"freeBytes":{"name":"freeBytes","type":"\u0005","is_mandatory":true,"title":"Free space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logicalVolumeCount":{"name":"logicalVolumeCount","type":"\u0005","is_mandatory":true,"title":"Number of logical volumes in this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Volume group name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"physicalVolumeCount":{"name":"physicalVolumeCount","type":"\u0005","is_mandatory":true,"title":"Number of physical volumes in this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sizeBytes":{"name":"sizeBytes","type":"\u0005","is_mandatory":true,"title":"Total size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"snapshotCount":{"name":"snapshotCount","type":"\u0005","is_mandatory":true,"title":"Number of snapshots in this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"UUID of the volume group","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"LVM volume group","desc":"Examine a single LVM volume group: `name`, `uuid`, attribute flags, total and free byte counts, and the counts of physical volumes, logical volumes, and snapshots it contains. Iterated from `lvm.volumeGroups` to audit capacity and group-level policy.","private":true,"min_provider_version":"13.16.10","defaults":"name sizeBytes freeBytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine":{"id":"machine","name":"machine","fields":{"baseboard":{"name":"baseboard","type":"\u001bmachine.baseboard","title":"SMBIOS baseboard (or module) information","desc":"Examine the baseboard manufacturer, product name, version, serial number, and asset tag as reported in SMBIOS Type 2 tables. Used for hardware inventory and to correlate physical boards with asset tracking systems.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"bios":{"name":"bios","type":"\u001bmachine.bios","title":"SMBIOS BIOS information","desc":"Examine the firmware vendor, version string, and release date as reported by SMBIOS Type 1 tables. Used to inventory BIOS versions across a fleet and to flag hosts that have not applied vendor firmware updates.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"chassis":{"name":"chassis","type":"\u001bmachine.chassis","title":"SMBIOS system enclosure or chassis","desc":"Examine the chassis manufacturer, version, serial number, and asset tag as reported in SMBIOS Type 3 tables. Useful for physical-hardware audits and correlating enclosures with asset-tracking records.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cpu":{"name":"cpu","type":"\u001bmachine.cpu","title":"CPU information","desc":"Examine the CPU manufacturer, model name, number of physical processor packages (sockets), and total physical core count as reported by the system. Used for capacity planning, licensing audits, and hardware-baseline policies.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"secureboot":{"name":"secureboot","type":"\u001bmachine.secureboot","title":"Secure Boot status","desc":"Examine whether the system booted in EFI/UEFI mode (`efi`), whether Secure Boot is currently enabled (`enabled`), and whether it is in setup mode (`setupMode`, meaning keys can be modified without authentication). Read from the EFI variables on Linux and from the UEFI firmware on Windows; legacy-BIOS systems resolve to `efi` and `enabled` false rather than erroring. Used to assert that Secure Boot is enforced and that setup mode is not active.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"system":{"name":"system","type":"\u001bmachine.system","title":"SMBIOS system information","desc":"Examine the manufacturer, product name, version, serial number, UUID, SKU number, and family string as reported in SMBIOS Type 1 tables. Useful for asset inventory, warranty lookups, and supply-chain reviews.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"Hardware identity from SMBIOS / DMI","desc":"Top-level namespace for low-level hardware identity exposed by the firmware. The sub-resources below — `machine.bios`, `machine.system`, `machine.baseboard`, `machine.chassis`, `machine.cpu`, and `machine.secureboot` — surface the SMBIOS / DMI tables (vendor / version / release date for the BIOS, manufacturer / product / SKU / UUID / serial for the system, baseboard and chassis identifiers, CPU socket and core counts) plus the EFI Secure Boot posture read from EFI variables on Linux. Used for inventory, warranty / supply-chain reviews, and platform-firmware compliance.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine.baseboard":{"id":"machine.baseboard","name":"machine.baseboard","fields":{"assetTag":{"name":"assetTag","type":"\u0007","is_mandatory":true,"title":"Asset tag","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Baseboard manufacturer name (SMBIOS Type 2)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"product":{"name":"product","type":"\u0007","is_mandatory":true,"title":"Baseboard product name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serial":{"name":"serial","type":"\u0007","is_mandatory":true,"title":"Baseboard serial number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Baseboard version string","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SMBIOS baseboard (or module) information","desc":"Examine the baseboard manufacturer, product name, version, serial number, and asset tag as reported in SMBIOS Type 2 tables. Used for hardware inventory and to correlate physical boards with asset tracking systems.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine.bios":{"id":"machine.bios","name":"machine.bios","fields":{"releaseDate":{"name":"releaseDate","type":"\u0007","is_mandatory":true,"title":"BIOS release date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vendor":{"name":"vendor","type":"\u0007","is_mandatory":true,"title":"BIOS vendor","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"BIOS version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SMBIOS BIOS information","desc":"Examine the firmware vendor, version string, and release date as reported by SMBIOS Type 1 tables. Used to inventory BIOS versions across a fleet and to flag hosts that have not applied vendor firmware updates.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine.chassis":{"id":"machine.chassis","name":"machine.chassis","fields":{"assetTag":{"name":"assetTag","type":"\u0007","is_mandatory":true,"title":"Asset tag number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Manufacturer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serial":{"name":"serial","type":"\u0007","is_mandatory":true,"title":"Serial number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SMBIOS system enclosure or chassis","desc":"Examine the chassis manufacturer, version, serial number, and asset tag as reported in SMBIOS Type 3 tables. Useful for physical-hardware audits and correlating enclosures with asset-tracking records.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine.cpu":{"id":"machine.cpu","name":"machine.cpu","fields":{"coreCount":{"name":"coreCount","type":"\u0005","is_mandatory":true,"title":"Total number of physical CPU cores","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"CPU manufacturer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"CPU model name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"processorCount":{"name":"processorCount","type":"\u0005","is_mandatory":true,"title":"Number of physical CPU packages (sockets)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"CPU information","desc":"Examine the CPU manufacturer, model name, number of physical processor packages (sockets), and total physical core count as reported by the system. Used for capacity planning, licensing audits, and hardware-baseline policies.","min_provider_version":"13.2.3","defaults":"manufacturer model processorCount coreCount","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine.secureboot":{"id":"machine.secureboot","name":"machine.secureboot","fields":{"efi":{"name":"efi","type":"\u0004","title":"Whether the system is booted in EFI/UEFI mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether Secure Boot is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"setupMode":{"name":"setupMode","type":"\u0004","title":"Whether Secure Boot is in setup mode (keys can be modified without authentication)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Secure Boot status","desc":"Examine whether the system booted in EFI/UEFI mode (`efi`), whether Secure Boot is currently enabled (`enabled`), and whether it is in setup mode (`setupMode`, meaning keys can be modified without authentication). Read from the EFI variables on Linux and from the UEFI firmware on Windows; legacy-BIOS systems resolve to `efi` and `enabled` false rather than erroring. Used to assert that Secure Boot is enforced and that setup mode is not active.","min_provider_version":"13.6.2","defaults":"enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine.system":{"id":"machine.system","name":"machine.system","fields":{"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"System family/series","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"System manufacturer name (SMBIOS Type 1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"product":{"name":"product","type":"\u0007","is_mandatory":true,"title":"System product name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serial":{"name":"serial","type":"\u0007","is_mandatory":true,"title":"System serial number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sku":{"name":"sku","type":"\u0007","is_mandatory":true,"title":"SKU number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"System UUID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"System version string","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SMBIOS system information","desc":"Examine the manufacturer, product name, version, serial number, UUID, SKU number, and family string as reported in SMBIOS Type 1 tables. Useful for asset inventory, warranty lookups, and supply-chain reviews.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos":{"id":"macos","name":"macos","fields":{"alf":{"name":"alf","type":"\u001bmacos.alf","title":"macOS application layer firewall — raw ALF preference values","desc":"Prefer macos.firewall; this resource exposes the raw integer flags from ALF plist","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"computerName":{"name":"computerName","type":"\u0007","title":"macOS computer name","min_provider_version":"11.4.68","provider":"go.mondoo.com/cnquery/v9/providers/os"},"filevault":{"name":"filevault","type":"\u001bmacos.filevault","title":"macOS FileVault full-disk encryption","desc":"Examine enable state, encryption status, and configured recovery keys","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"firewall":{"name":"firewall","type":"\u001bmacos.firewall","title":"macOS application layer firewall","desc":"Examine enable state, stealth mode, signed-app policy, and per-app rules","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"gatekeeper":{"name":"gatekeeper","type":"\u001bmacos.gatekeeper","title":"macOS Gatekeeper application execution policy","desc":"Examine whether assessments are enabled and the Gatekeeper status message","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"globalAccountPolicies":{"name":"globalAccountPolicies","type":"\n","title":"macOS global account policies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hardware":{"name":"hardware","type":"\u001bmacos.hardware","title":"macOS hardware overview","desc":"Examine chip type, model, memory, serial, and Activation Lock status","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"mdm":{"name":"mdm","type":"\u001bmacos.mdm","title":"macOS MDM (Mobile Device Management) enrollment state","desc":"Examine whether this Mac is enrolled in an MDM solution, the enrollment server, and whether the enrollment was performed via Automated Device Enrollment (formerly DEP) or user-approved. Use `macos.profiles` to enumerate the configuration profiles delivered to the device. Backed by `profiles status -type enrollment`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"profile":{"name":"profile","type":"\u001bmacos.profile","title":"macOS Configuration Profile","desc":"Examine a single Configuration Profile: its `identifier`, `uuid`, human-readable `displayName`, `description`, `organization`, `type`, whether it is install-locked (`removalDisallowed`), the scope it applies to (`scope`: `system` or `user`), and the individual `payloads` that carry the actual policy directives.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"profiles":{"name":"profiles","type":"\u001bmacos.profiles","title":"macOS configuration profiles installed on the system","desc":"Iterate every Configuration Profile delivered to the device — both MDM-delivered and manually installed `.mobileconfig` payloads — to audit what policies are actually in force. Backed by `profiles list -all -output stdout-xml`; requires root to see system-level (`_computerlevel`) profiles, otherwise only the current user's profiles are returned.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"sharing":{"name":"sharing","type":"\u001bmacos.sharing","title":"macOS Sharing service state","desc":"Examine the unified Sharing panel (System Settings \u003e Sharing on macOS Ventura+, System Preferences \u003e Sharing on older versions). Each field corresponds to one toggle in that panel. CIS macOS benchmarks require most of these to be off unless the device explicitly needs the service. Backed by `system_profiler SPSharingDataType`, so the values match exactly what the System Settings UI displays.  `system_profiler SPSharingDataType` also reports `Remote Login` and `Remote Apple Events`; those are intentionally not exposed here because `macos.systemsetup.remoteLogin` and `macos.systemsetup.remoteAppleEvents` already cover them via the `systemsetup` CLI. This resource covers the rest of the panel.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"sip":{"name":"sip","type":"\u001bmacos.sip","title":"macOS System Integrity Protection (SIP)","desc":"Examine whether SIP is enabled and the system status message","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"softwareupdate":{"name":"softwareupdate","type":"\u001bmacos.softwareupdate","title":"macOS Software Update configuration and pending updates","desc":"Examine automatic-update policy and the list of updates currently available to install. Policy fields read from `/Library/Preferences/com.apple.SoftwareUpdate.plist` (with `/Library/Managed Preferences/` taking precedence when an MDM configuration profile has been delivered). The `updates` list is produced from `softwareupdate -l --no-scan` so it does not initiate a network check.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"systemExtension":{"name":"systemExtension","type":"\u001bmacos.systemExtension","title":"macOS system extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"systemExtensions":{"name":"systemExtensions","type":"\u0019\u001bmacos.systemExtension","title":"System extensions","min_provider_version":"11.2.20","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemsetup":{"name":"systemsetup","type":"\u001bmacos.systemsetup","title":"macOS machine settings via the systemsetup CLI","desc":"Examine date/time, sleep, remote login, power, and network-time configuration Note: this resource requires at least admin privileges to run.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"timemachine":{"name":"timemachine","type":"\u001bmacos.timemachine","title":"macOS Time Machine backup configuration","desc":"Examine destinations, schedule, and exclusion preferences","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"userHostPreferences":{"name":"userHostPreferences","type":"\u001a\u0007\n","title":"macOS user defaults for current host","provider":"go.mondoo.com/cnquery/v9/providers/os"},"userPreferences":{"name":"userPreferences","type":"\u001a\u0007\n","title":"macOS user defaults","provider":"go.mondoo.com/cnquery/v9/providers/os"},"xprotect":{"name":"xprotect","type":"\u001bmacos.xprotect","title":"macOS XProtect anti-malware bundle","desc":"Examine the version and last-modified timestamp of the XProtect signature bundle (and, when present, the legacy Malware Removal Tool). CIS macOS benchmarks expect XProtect signatures to be current; checking `modified` against the auditor's freshness threshold catches devices that have stopped receiving updates.  XProtect.bundle lives at `/Library/Apple/System/Library/CoreServices/XProtect.bundle` on modern macOS (with `/System/Library/CoreServices/XProtect.bundle` as the legacy fallback). `mrtVersion` and `mrtModified` are empty or null on macOS 13+ where MRT has been retired in favor of XProtectRemediator.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"macOS-specific operating system surfaces","desc":"Examine computer name, user defaults, account policies, and system extensions","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.alf":{"id":"macos.alf","name":"macos.alf","fields":{"allowDownloadSignedEnabled":{"name":"allowDownloadSignedEnabled","type":"\u0005","is_mandatory":true,"title":"Whether the firewall service allows downloaded software to receive incoming connections","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowSignedEnabled":{"name":"allowSignedEnabled","type":"\u0005","is_mandatory":true,"title":"Whether the firewall service allows built-in software to receive incoming connections for signed software","provider":"go.mondoo.com/cnquery/v9/providers/os"},"applications":{"name":"applications","type":"\u0019\n","is_mandatory":true,"title":"Applications with exceptions for network blocking","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exceptions":{"name":"exceptions","type":"\u0019\n","is_mandatory":true,"title":"Service exceptions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"explicitAuths":{"name":"explicitAuths","type":"\u0019\u0007","is_mandatory":true,"title":"Services explicitly allowed to perform networking","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firewallUnload":{"name":"firewallUnload","type":"\u0005","is_mandatory":true,"title":"Whether the firewall is unloaded","provider":"go.mondoo.com/cnquery/v9/providers/os"},"globalState":{"name":"globalState","type":"\u0005","is_mandatory":true,"title":"Whether the firewall is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loggingEnabled":{"name":"loggingEnabled","type":"\u0005","is_mandatory":true,"title":"Whether alf.log is used","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loggingOption":{"name":"loggingOption","type":"\u0005","is_mandatory":true,"title":"Logging option flags (0=disabled, 1=detail, 2=brief, 3=throttled)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stealthEnabled":{"name":"stealthEnabled","type":"\u0005","is_mandatory":true,"title":"Whether the firewall service is in stealth mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"ALF version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS application layer firewall — raw ALF preference values","desc":"Prefer macos.firewall; this resource exposes the raw integer flags from ALF plist","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.filevault":{"id":"macos.filevault","name":"macos.filevault","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether FileVault is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasInstitutionalRecoveryKey":{"name":"hasInstitutionalRecoveryKey","type":"\u0004","title":"Whether an institutional recovery key exists","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasPersonalRecoveryKey":{"name":"hasPersonalRecoveryKey","type":"\u0004","title":"Whether a personal recovery key exists","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","title":"FileVault status (On, Off, Encryption in progress, Decryption in progress)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"users":{"name":"users","type":"\u0019\u0007","title":"Users that can unlock the FileVault encrypted drive","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS FileVault full-disk encryption","desc":"Examine enable state, encryption status, and configured recovery keys","min_provider_version":"13.5.1","defaults":"enabled status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.firewall":{"id":"macos.firewall","name":"macos.firewall","fields":{"allowDownloadSignedApps":{"name":"allowDownloadSignedApps","type":"\u0004","title":"Whether downloaded signed applications are automatically allowed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowSignedApps":{"name":"allowSignedApps","type":"\u0004","title":"Whether signed applications are automatically allowed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"app":{"name":"app","type":"\u001bmacos.firewall.app","title":"macOS firewall per-application rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"applications":{"name":"applications","type":"\u0019\u001bmacos.firewall.app","title":"Applications with explicit firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"blockAllIncoming":{"name":"blockAllIncoming","type":"\u0004","title":"Whether block-all-incoming mode is active (globalState == 2)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether the firewall is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exceptions":{"name":"exceptions","type":"\u0019\n","title":"Service exceptions","provider":"go.mondoo.com/cnquery/v9/providers/os"},"explicitAuths":{"name":"explicitAuths","type":"\u0019\u0007","title":"Services explicitly allowed to perform networking","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loggingDetail":{"name":"loggingDetail","type":"\u0007","title":"Logging detail level: disabled (0), detail (1), brief (2), throttled (3)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loggingEnabled":{"name":"loggingEnabled","type":"\u0004","title":"Whether logging is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"managedByMDM":{"name":"managedByMDM","type":"\u0004","title":"Whether an installed Configuration Profile manages the firewall","desc":"True when any installed profile carries a payload of type `com.apple.security.firewall`. Enumerating Configuration Profiles requires root, so on an unprivileged session the field surfaces the underlying `profiles list` error rather than silently returning `false`.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stealthEnabled":{"name":"stealthEnabled","type":"\u0004","title":"Whether stealth mode is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"ALF version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS application layer firewall","desc":"Examine enable state, stealth mode, signed-app policy, and per-app rules","min_provider_version":"13.3.1","defaults":"enabled stealthEnabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.firewall.app":{"id":"macos.firewall.app","name":"macos.firewall.app","fields":{"bundleId":{"name":"bundleId","type":"\u0007","is_mandatory":true,"title":"Bundle ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0005","is_mandatory":true,"title":"Whether incoming connections are allowed (0=block, 1=allow)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS firewall per-application rule","private":true,"min_provider_version":"13.3.1","defaults":"name state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.gatekeeper":{"id":"macos.gatekeeper","name":"macos.gatekeeper","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether Gatekeeper assessments are enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","title":"Gatekeeper assessment status (assessments enabled, assessments disabled)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Gatekeeper application execution policy","desc":"Examine whether assessments are enabled and the Gatekeeper status message","min_provider_version":"13.5.1","defaults":"enabled status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.hardware":{"id":"macos.hardware","name":"macos.hardware","fields":{"activationLockStatus":{"name":"activationLockStatus","type":"\u0007","is_mandatory":true,"title":"Activation Lock security feature","provider":"go.mondoo.com/cnquery/v9/providers/os"},"bootRomVersion":{"name":"bootRomVersion","type":"\u0007","is_mandatory":true,"title":"Boot ROM (firmware) version identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chipType":{"name":"chipType","type":"\u0007","is_mandatory":true,"title":"Processor chip type (e.g., \"Apple M1\", \"Apple M2\", \"Intel\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machineModel":{"name":"machineModel","type":"\u0007","is_mandatory":true,"title":"Specific model identifier (e.g., \"MacBookPro18,3\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machineName":{"name":"machineName","type":"\u0007","is_mandatory":true,"title":"User-friendly hardware name (e.g., \"MacBook Pro\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modelNumber":{"name":"modelNumber","type":"\u0007","is_mandatory":true,"title":"Apple's model number for the device (e.g., \"A2442\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"numberProcessors":{"name":"numberProcessors","type":"\u0007","is_mandatory":true,"title":"Total number of processor cores","provider":"go.mondoo.com/cnquery/v9/providers/os"},"osLoaderVersion":{"name":"osLoaderVersion","type":"\u0007","is_mandatory":true,"title":"Version of the OS bootloader","provider":"go.mondoo.com/cnquery/v9/providers/os"},"physicalMemory":{"name":"physicalMemory","type":"\u0007","is_mandatory":true,"title":"Total RAM installed (e.g., \"16 GB\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"platformUUID":{"name":"platformUUID","type":"\u0007","is_mandatory":true,"title":"Universally unique identifier for the hardware platform","provider":"go.mondoo.com/cnquery/v9/providers/os"},"provisioningUDID":{"name":"provisioningUDID","type":"\u0007","is_mandatory":true,"title":"Unique Device Identifier for MDM provisioning","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Apple's unique serial number for the device","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS hardware overview","desc":"Examine chip type, model, memory, serial, and Activation Lock status","min_provider_version":"11.4.68","defaults":"machineName chipType physicalMemory serialNumber","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.mdm":{"id":"macos.mdm","name":"macos.mdm","fields":{"dep":{"name":"dep","type":"\u0004","title":"Whether the device is enrolled via Automated Device Enrollment (DEP/ADE)","desc":"DEP-enrolled devices are pre-assigned to the organization through Apple Business Manager / Apple School Manager and cannot be removed from MDM by the user.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enrolled":{"name":"enrolled","type":"\u0004","title":"Whether the device is enrolled in an MDM solution","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverUrl":{"name":"serverUrl","type":"\u0007","title":"URL of the MDM server (empty when not enrolled)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"userApproved":{"name":"userApproved","type":"\u0004","title":"Whether the MDM enrollment is user-approved","desc":"User-approved MDM (UAMDM) is required for managing kernel extensions, full disk access, and other privileged settings.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS MDM (Mobile Device Management) enrollment state","desc":"Examine whether this Mac is enrolled in an MDM solution, the enrollment server, and whether the enrollment was performed via Automated Device Enrollment (formerly DEP) or user-approved. Use `macos.profiles` to enumerate the configuration profiles delivered to the device. Backed by `profiles status -type enrollment`.","min_provider_version":"13.16.10","defaults":"enrolled serverUrl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.profile":{"id":"macos.profile","name":"macos.profile","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Profile description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Human-readable profile name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Reverse-DNS profile identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"organization":{"name":"organization","type":"\u0007","is_mandatory":true,"title":"Distributing organization","provider":"go.mondoo.com/cnquery/v9/providers/os"},"payload":{"name":"payload","type":"\u001bmacos.profile.payload","title":"macOS Configuration Profile payload","desc":"Examine a single payload within a Configuration Profile: the `type` (e.g. `com.apple.security.firewall`, `com.apple.MCXFileVault2`), the payload's reverse-DNS `identifier`, its `uuid`, and the raw policy `content` as a dict. Iterated from `macos.profile.payloads` to audit specific policy directives (e.g. firewall payload settings, FileVault policy).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"payloads":{"name":"payloads","type":"\u0019\u001bmacos.profile.payload","is_mandatory":true,"title":"Payloads (policy directives) carried by this profile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"removalDisallowed":{"name":"removalDisallowed","type":"\u0004","is_mandatory":true,"title":"Whether removal of this profile is disallowed by its install settings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope this profile applies to","desc":"`system` for `_computerlevel` profiles or `user` for per-user profiles.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Profile type (e.g. \"Configuration\", \"Enrollment Profile\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Profile UUID","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Configuration Profile","desc":"Examine a single Configuration Profile: its `identifier`, `uuid`, human-readable `displayName`, `description`, `organization`, `type`, whether it is install-locked (`removalDisallowed`), the scope it applies to (`scope`: `system` or `user`), and the individual `payloads` that carry the actual policy directives.","private":true,"min_provider_version":"13.16.10","defaults":"identifier displayName type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.profile.payload":{"id":"macos.profile.payload","name":"macos.profile.payload","fields":{"content":{"name":"content","type":"\n","is_mandatory":true,"title":"Raw payload content as parsed from the profile plist","desc":"The schema of `content` is payload-type specific — a firewall payload differs from a Wi-Fi payload differs from a FileVault payload. Inspect `type` to know what fields to expect.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Human-readable payload name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Reverse-DNS payload identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Payload type (reverse-DNS, e.g. `com.apple.security.firewall`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Payload UUID","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Configuration Profile payload","desc":"Examine a single payload within a Configuration Profile: the `type` (e.g. `com.apple.security.firewall`, `com.apple.MCXFileVault2`), the payload's reverse-DNS `identifier`, its `uuid`, and the raw policy `content` as a dict. Iterated from `macos.profile.payloads` to audit specific policy directives (e.g. firewall payload settings, FileVault policy).","private":true,"min_provider_version":"13.16.10","defaults":"type displayName","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.profiles":{"id":"macos.profiles","name":"macos.profiles","fields":{"list":{"name":"list","type":"\u0019\u001bmacos.profile","title":"All installed Configuration Profiles","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS configuration profiles installed on the system","desc":"Iterate every Configuration Profile delivered to the device — both MDM-delivered and manually installed `.mobileconfig` payloads — to audit what policies are actually in force. Backed by `profiles list -all -output stdout-xml`; requires root to see system-level (`_computerlevel`) profiles, otherwise only the current user's profiles are returned.","min_provider_version":"13.16.10","defaults":"list.length","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.sharing":{"id":"macos.sharing","name":"macos.sharing","fields":{"airplayReceiver":{"name":"airplayReceiver","type":"\u0004","title":"Whether AirPlay Receiver is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"bluetoothSharing":{"name":"bluetoothSharing","type":"\u0004","title":"Whether Bluetooth Sharing is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"contentCaching":{"name":"contentCaching","type":"\u0004","title":"Whether Content Caching is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dvdSharing":{"name":"dvdSharing","type":"\u0004","title":"Whether DVD or CD Sharing is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fileSharing":{"name":"fileSharing","type":"\u0004","title":"Whether File Sharing (SMB/AFP) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"internetSharing":{"name":"internetSharing","type":"\u0004","title":"Whether Internet Sharing is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mediaSharing":{"name":"mediaSharing","type":"\u0004","title":"Whether Media Sharing is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"printerSharing":{"name":"printerSharing","type":"\u0004","title":"Whether Printer Sharing is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remoteManagement":{"name":"remoteManagement","type":"\u0004","title":"Whether Apple Remote Desktop (Remote Management) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"screenSharing":{"name":"screenSharing","type":"\u0004","title":"Whether Screen Sharing (VNC) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Sharing service state","desc":"Examine the unified Sharing panel (System Settings \u003e Sharing on macOS Ventura+, System Preferences \u003e Sharing on older versions). Each field corresponds to one toggle in that panel. CIS macOS benchmarks require most of these to be off unless the device explicitly needs the service. Backed by `system_profiler SPSharingDataType`, so the values match exactly what the System Settings UI displays.  `system_profiler SPSharingDataType` also reports `Remote Login` and `Remote Apple Events`; those are intentionally not exposed here because `macos.systemsetup.remoteLogin` and `macos.systemsetup.remoteAppleEvents` already cover them via the `systemsetup` CLI. This resource covers the rest of the panel.","min_provider_version":"13.16.10","defaults":"screenSharing remoteManagement airplayReceiver","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.sip":{"id":"macos.sip","name":"macos.sip","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether System Integrity Protection is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","title":"SIP status message","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS System Integrity Protection (SIP)","desc":"Examine whether SIP is enabled and the system status message","min_provider_version":"13.5.1","defaults":"enabled status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.softwareupdate":{"id":"macos.softwareupdate","name":"macos.softwareupdate","fields":{"autoCheckEnabled":{"name":"autoCheckEnabled","type":"\u0004","title":"Whether `Software Update` is configured to automatically check for updates","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoDownloadEnabled":{"name":"autoDownloadEnabled","type":"\u0004","title":"Whether updates are downloaded automatically in the background","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoInstallMacOSUpdates":{"name":"autoInstallMacOSUpdates","type":"\u0004","title":"Whether macOS updates (point releases and security updates) install automatically","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bmacos.softwareupdate.entry","title":"macOS Software Update entry","desc":"Examine a single update offered by Software Update: its `label` (the identifier accepted by `softwareupdate --install`), the human-readable `title` and `version`, the estimated download `size`, whether it is `recommended`, and any post-install `action` such as `restart` or `shutdown`. Iterated from `macos.softwareupdate.updates`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"installSecurityResponses":{"name":"installSecurityResponses","type":"\u0004","title":"Whether Rapid Security Responses install automatically","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installSystemDataFiles":{"name":"installSystemDataFiles","type":"\u0004","title":"Whether system data files (XProtect, MRT definitions) install automatically","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastSuccessfulCheck":{"name":"lastSuccessfulCheck","type":"\t","title":"Last successful check timestamp as reported by Software Update","desc":"Null when no successful check has ever been recorded on this device or when the field is unset by the policy file.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"updates":{"name":"updates","type":"\u0019\u001bmacos.softwareupdate.entry","title":"Available software updates as reported by `softwareupdate -l --no-scan`","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Software Update configuration and pending updates","desc":"Examine automatic-update policy and the list of updates currently available to install. Policy fields read from `/Library/Preferences/com.apple.SoftwareUpdate.plist` (with `/Library/Managed Preferences/` taking precedence when an MDM configuration profile has been delivered). The `updates` list is produced from `softwareupdate -l --no-scan` so it does not initiate a network check.","min_provider_version":"13.16.10","defaults":"autoCheckEnabled autoInstallMacOSUpdates","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.softwareupdate.entry":{"id":"macos.softwareupdate.entry","name":"macos.softwareupdate.entry","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Post-install action required (`restart`, `shutdown`, or empty for none)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Update label (the argument to `softwareupdate --install`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"recommended":{"name":"recommended","type":"\u0004","is_mandatory":true,"title":"Whether the update is marked recommended","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Estimated download size in KiB as reported by `softwareupdate`","provider":"go.mondoo.com/cnquery/v9/providers/os"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Human-readable update title","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Update version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Software Update entry","desc":"Examine a single update offered by Software Update: its `label` (the identifier accepted by `softwareupdate --install`), the human-readable `title` and `version`, the estimated download `size`, whether it is `recommended`, and any post-install `action` such as `restart` or `shutdown`. Iterated from `macos.softwareupdate.updates`.","private":true,"min_provider_version":"13.16.10","defaults":"label title recommended","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.systemExtension":{"id":"macos.systemExtension","name":"macos.systemExtension","fields":{"active":{"name":"active","type":"\u0004","title":"Whether the system extension is active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"bundlePath":{"name":"bundlePath","type":"\u0007","is_mandatory":true,"title":"Path to the system extension","provider":"go.mondoo.com/cnquery/v9/providers/os"},"categories":{"name":"categories","type":"\u0019\u0007","is_mandatory":true,"title":"Categories of the system extension","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether the system extension is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Identifier of the system extension","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mdmManaged":{"name":"mdmManaged","type":"\u0004","is_mandatory":true,"title":"Whether the system extension is MDM managed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"State of the system extension","provider":"go.mondoo.com/cnquery/v9/providers/os"},"teamID":{"name":"teamID","type":"\u0007","is_mandatory":true,"title":"Team identifier of the system extension","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"System extension unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version of the system extension","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS system extension","private":true,"min_provider_version":"11.2.20","defaults":"teamID identifier version state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.systemsetup":{"id":"macos.systemsetup","name":"macos.systemsetup","fields":{"allowPowerButtonToSleepComputer":{"name":"allowPowerButtonToSleepComputer","type":"\u0007","title":"Whether the power button can sleep the computer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"computerName":{"name":"computerName","type":"\u0007","title":"Computer name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"date":{"name":"date","type":"\u0007","title":"Current date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"disableKeyboardWhenEnclosureLockIsEngaged":{"name":"disableKeyboardWhenEnclosureLockIsEngaged","type":"\u0007","title":"Whether the keyboard is disabled when the X Serve enclosure lock is engaged","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displaySleep":{"name":"displaySleep","type":"\u0007","title":"Amount of idle time until the display sleeps","provider":"go.mondoo.com/cnquery/v9/providers/os"},"harddiskSleep":{"name":"harddiskSleep","type":"\u0007","title":"Amount of idle time until the hard disk sleeps","provider":"go.mondoo.com/cnquery/v9/providers/os"},"localSubnetName":{"name":"localSubnetName","type":"\u0007","title":"Local subnet name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"networkTimeServer":{"name":"networkTimeServer","type":"\u0007","title":"Configured network time server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remoteAppleEvents":{"name":"remoteAppleEvents","type":"\u0007","title":"Whether remote Apple events are on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remoteLogin":{"name":"remoteLogin","type":"\u0007","title":"Whether remote login (SSH) is on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"},"restartFreeze":{"name":"restartFreeze","type":"\u0007","title":"Whether restart on freeze is on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"},"restartPowerFailure":{"name":"restartPowerFailure","type":"\u0007","title":"Whether restart on power failure is on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sleep":{"name":"sleep","type":"\u0019\u0007","title":"Amount of idle time until the machine sleeps","provider":"go.mondoo.com/cnquery/v9/providers/os"},"startupDisk":{"name":"startupDisk","type":"\u0007","title":"Current startup disk","provider":"go.mondoo.com/cnquery/v9/providers/os"},"time":{"name":"time","type":"\u0007","title":"Current time in 24-hour format","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeZone":{"name":"timeZone","type":"\u0007","title":"Current time zone","provider":"go.mondoo.com/cnquery/v9/providers/os"},"usingNetworkTime":{"name":"usingNetworkTime","type":"\u0007","title":"Whether network time is on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"},"waitForStartupAfterPowerFailure":{"name":"waitForStartupAfterPowerFailure","type":"\u0007","title":"Number of seconds after which the computer will start up after a power failure","provider":"go.mondoo.com/cnquery/v9/providers/os"},"wakeOnModem":{"name":"wakeOnModem","type":"\u0007","title":"Whether wake on modem is on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"},"wakeOnNetworkAccess":{"name":"wakeOnNetworkAccess","type":"\u0007","title":"Whether wake on network access is on or off","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS machine settings via the systemsetup CLI","desc":"Examine date/time, sleep, remote login, power, and network-time configuration Note: this resource requires at least admin privileges to run.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.timemachine":{"id":"macos.timemachine","name":"macos.timemachine","fields":{"preferences":{"name":"preferences","type":"\n","title":"macOS Time Machine preferences","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS Time Machine backup configuration","desc":"Examine destinations, schedule, and exclusion preferences","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macos.xprotect":{"id":"macos.xprotect","name":"macos.xprotect","fields":{"modified":{"name":"modified","type":"\t","title":"Last modification time of the XProtect bundle","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mrtModified":{"name":"mrtModified","type":"\t","title":"Last modification time of MRT.app, null when MRT is not installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mrtVersion":{"name":"mrtVersion","type":"\u0007","title":"MRT (Malware Removal Tool) bundle version","desc":"Empty string when MRT.app is not installed (it was sunset in macOS 13; its work is now performed by XProtectRemediator).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"XProtect bundle version (CFBundleShortVersionString)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"macOS XProtect anti-malware bundle","desc":"Examine the version and last-modified timestamp of the XProtect signature bundle (and, when present, the legacy Malware Removal Tool). CIS macOS benchmarks expect XProtect signatures to be current; checking `modified` against the auditor's freshness threshold catches devices that have stopped receiving updates.  XProtect.bundle lives at `/Library/Apple/System/Library/CoreServices/XProtect.bundle` on modern macOS (with `/System/Library/CoreServices/XProtect.bundle` as the legacy fallback). `mrtVersion` and `mrtModified` are empty or null on macOS 13+ where MRT has been retired in favor of XProtectRemediator.","min_provider_version":"13.16.10","defaults":"version modified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mdadm":{"id":"mdadm","name":"mdadm","fields":{"array":{"name":"array","type":"\u001bmdadm.array","title":"Linux software RAID array","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"arrays":{"name":"arrays","type":"\u0019\u001bmdadm.array","title":"List of all discovered RAID arrays","provider":"go.mondoo.com/cnquery/v9/providers/os"},"device":{"name":"device","type":"\u001bmdadm.device","title":"Member device in a software RAID array","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"Linux software RAID arrays (mdadm)","desc":"Examine arrays with their RAID level, state, member devices, and resync progress","min_provider_version":"13.1.2","defaults":"arrays","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mdadm.array":{"id":"mdadm.array","name":"mdadm.array","fields":{"activeDevices":{"name":"activeDevices","type":"\u0005","is_mandatory":true,"title":"Number of active devices in the array","provider":"go.mondoo.com/cnquery/v9/providers/os"},"devices":{"name":"devices","type":"\u0019\u001bmdadm.device","title":"Member devices in the array","provider":"go.mondoo.com/cnquery/v9/providers/os"},"failedDevices":{"name":"failedDevices","type":"\u0005","is_mandatory":true,"title":"Number of failed devices in the array","provider":"go.mondoo.com/cnquery/v9/providers/os"},"level":{"name":"level","type":"\u0007","is_mandatory":true,"title":"RAID level (e.g., raid0, raid1, raid5, raid6, raid10, linear)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device name (e.g., /dev/md0)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"resyncProgress":{"name":"resyncProgress","type":"\u0006","is_mandatory":true,"title":"Rebuild/resync progress percentage (0-100, -1 if not rebuilding)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Total size of the array in KiB","provider":"go.mondoo.com/cnquery/v9/providers/os"},"spareDevices":{"name":"spareDevices","type":"\u0005","is_mandatory":true,"title":"Number of spare devices in the array","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Array state (e.g., clean, active, degraded, inactive)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"UUID of the array","provider":"go.mondoo.com/cnquery/v9/providers/os"},"workingDevices":{"name":"workingDevices","type":"\u0005","is_mandatory":true,"title":"Number of working devices in the array","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Linux software RAID array","private":true,"min_provider_version":"13.1.2","defaults":"name level state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mdadm.device":{"id":"mdadm.device","name":"mdadm.device","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device path (e.g., /dev/sda1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"role":{"name":"role","type":"\u0005","is_mandatory":true,"title":"Role number in the array","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Device state (e.g., active sync, spare, faulty)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Member device in a software RAID array","private":true,"min_provider_version":"13.1.2","defaults":"name state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mistral":{"id":"mistral","fields":{"vibe":{"name":"vibe","type":"\u001bmistral.vibe","title":"Mistral Vibe (Mistral AI) instance","desc":"Examine installed skills URL: https://docs.mistral.ai/tools/vibe/","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"mistral.vibe":{"id":"mistral.vibe","name":"mistral.vibe","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Mistral Vibe configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bmistral.vibe.skill","title":"Mistral Vibe skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bmistral.vibe.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Mistral Vibe (Mistral AI) instance","desc":"Examine installed skills URL: https://docs.mistral.ai/tools/vibe/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"mistral.vibe.skill":{"id":"mistral.vibe.skill","name":"mistral.vibe.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Mistral Vibe skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"modprobe":{"id":"modprobe","name":"modprobe","fields":{"alias":{"name":"alias","type":"\u001bmodprobe.alias","title":"Module alias","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"aliases":{"name":"aliases","type":"\u0019\u001bmodprobe.alias","refs":["\"files\""],"title":"Module aliases","provider":"go.mondoo.com/cnquery/v9/providers/os"},"blacklist":{"name":"blacklist","type":"\u001bmodprobe.blacklist","title":"Blacklist directive","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"blacklists":{"name":"blacklists","type":"\u0019\u001bmodprobe.blacklist","refs":["\"files\""],"title":"Blacklisted modules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","title":"List of files that make up the modprobe configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"install":{"name":"install","type":"\u001bmodprobe.install","title":"Install directive for module loading","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"installs":{"name":"installs","type":"\u0019\u001bmodprobe.install","refs":["\"files\""],"title":"Install directives (custom commands for loading modules)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"option":{"name":"option","type":"\u001bmodprobe.option","title":"Module options and parameters","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"options":{"name":"options","type":"\u0019\u001bmodprobe.option","refs":["\"files\""],"title":"Module options and parameters","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remove":{"name":"remove","type":"\u001bmodprobe.remove","title":"Remove directive for module unloading","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"removes":{"name":"removes","type":"\u0019\u001bmodprobe.remove","refs":["\"files\""],"title":"Remove directives (custom commands for unloading modules)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"softdep":{"name":"softdep","type":"\u001bmodprobe.softdep","title":"Soft dependency","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"softdeps":{"name":"softdeps","type":"\u0019\u001bmodprobe.softdep","refs":["\"files\""],"title":"Soft dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Kernel module configuration (modprobe.d)","desc":"Examine install, remove, blacklist, options, alias, and softdep directives","min_provider_version":"11.4.84","defaults":"blacklists installs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modprobe.alias":{"id":"modprobe.alias","name":"modprobe.alias","fields":{"alias":{"name":"alias","type":"\u0007","is_mandatory":true,"title":"Alias name (pattern or wildcard)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Target module name","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Module alias","private":true,"min_provider_version":"11.4.84","defaults":"alias module","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modprobe.blacklist":{"id":"modprobe.blacklist","name":"modprobe.blacklist","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Module name that is blacklisted","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Blacklist directive","private":true,"min_provider_version":"11.4.84","defaults":"module","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modprobe.install":{"id":"modprobe.install","name":"modprobe.install","fields":{"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Command to execute instead of default insmod","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Module name","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Install directive for module loading","private":true,"min_provider_version":"11.4.84","defaults":"module command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modprobe.option":{"id":"modprobe.option","name":"modprobe.option","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Module name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameters":{"name":"parameters","type":"\u0007","is_mandatory":true,"title":"Raw parameters string","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","title":"Parsed parameters as key-value pairs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Module options and parameters","private":true,"min_provider_version":"11.4.84","defaults":"module","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modprobe.remove":{"id":"modprobe.remove","name":"modprobe.remove","fields":{"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Command to execute instead of default rmmod","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Module name","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Remove directive for module unloading","private":true,"min_provider_version":"11.4.84","defaults":"module command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modprobe.softdep":{"id":"modprobe.softdep","name":"modprobe.softdep","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"Module name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"post":{"name":"post","type":"\u0019\u0007","is_mandatory":true,"title":"Modules to load after (post: dependencies)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pre":{"name":"pre","type":"\u0019\u0007","is_mandatory":true,"title":"Modules to load before (pre: dependencies)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Soft dependency","private":true,"min_provider_version":"11.4.84","defaults":"module","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mondoo":{"id":"mondoo","fields":{"eol":{"name":"eol","type":"\u001bmondoo.eol","title":"Platform end-of-life information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"mondoo.eol":{"id":"mondoo.eol","name":"mondoo.eol","fields":{"date":{"name":"date","type":"\t","title":"End-of-life date for the product","provider":"go.mondoo.com/cnquery/v9/providers/os"},"product":{"name":"product","type":"\u0007","is_mandatory":true,"title":"Product name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Product version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Platform end-of-life information","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mount":{"id":"mount","name":"mount","fields":{"list":{"name":"list","type":"\u0019\u001bmount.point","provider":"go.mondoo.com/cnquery/v9/providers/os"},"point":{"name":"point","type":"\u001bmount.point","title":"Unix mount point","desc":"Examine a single mounted filesystem: the backing `device`, the `path` where it is attached, the `fstype`, mount `options`, whether it is currently `mounted`, and the total, used, and available bytes. Initialize by path (e.g., `mount.point(path: \"/var\")`) or iterate from `mount`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"list_type":"\u001bmount.point","title":"Unix mount table","desc":"Iterate every mount point with device, fstype, options, and capacity","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mount.point":{"id":"mount.point","name":"mount.point","fields":{"available":{"name":"available","type":"\u0005","title":"Available space in bytes","min_provider_version":"13.2.8","provider":"go.mondoo.com/cnquery/v9/providers/os"},"device":{"name":"device","type":"\u0007","is_mandatory":true,"title":"Block device or filesystem source backing the mount (e.g., /dev/sda1)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fstype":{"name":"fstype","type":"\u0007","is_mandatory":true,"title":"File system type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mounted":{"name":"mounted","type":"\u0004","is_mandatory":true,"title":"Whether the mount point is mounted","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Mount options","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Mount point path where the filesystem is attached (e.g., /var)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","title":"Total size in bytes","min_provider_version":"13.2.8","provider":"go.mondoo.com/cnquery/v9/providers/os"},"used":{"name":"used","type":"\u0005","title":"Used space in bytes","min_provider_version":"13.2.8","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Unix mount point","desc":"Examine a single mounted filesystem: the backing `device`, the `path` where it is attached, the `fstype`, mount `options`, whether it is currently `mounted`, and the total, used, and available bytes. Initialize by path (e.g., `mount.point(path: \"/var\")`) or iterate from `mount`.","min_provider_version":"9.0.1","defaults":"device path fstype","provider":"go.mondoo.com/cnquery/v9/providers/os"},"network":{"id":"network","name":"network","fields":{"interfaces":{"name":"interfaces","type":"\u0019\u001bnetworkInterface","title":"Network interfaces","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ipv4":{"name":"ipv4","type":"\u0019\u000f","title":"All IPv4 addresses detected on host interfaces","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ipv6":{"name":"ipv6","type":"\u0019\u000f","title":"All IPv6 addresses detected on host interfaces","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"primaryIPv4":{"name":"primaryIPv4","type":"\u000f","title":"Primary IPv4 address determined by the default route","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"primaryIPv6":{"name":"primaryIPv6","type":"\u000f","title":"Primary IPv6 address determined by the default route","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"routes":{"name":"routes","type":"\u001bnetworkRoutes","title":"Routes","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Network configuration of this system","desc":"Examine interfaces, routes, and detected IPv4 / IPv6 addresses","min_provider_version":"11.3.42","provider":"go.mondoo.com/cnquery/v9/providers/os"},"networkInterface":{"id":"networkInterface","name":"networkInterface","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Status of the network interface","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Information about an interface's status and capabilities","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ips":{"name":"ips","type":"\u0019\u001bipAddress","is_mandatory":true,"title":"List of IP addresses assigned to the network interface (v4 and v6)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mac":{"name":"mac","type":"\u0007","is_mandatory":true,"title":"Unique 12-digit hexadecimal identifier assigned by the manufacturer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mtu":{"name":"mtu","type":"\u0005","is_mandatory":true,"title":"Maximum transmission unit","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the network interface","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vendor":{"name":"vendor","type":"\u0007","is_mandatory":true,"title":"Company that manufactures the network interface","provider":"go.mondoo.com/cnquery/v9/providers/os"},"virtual":{"name":"virtual","type":"\u0004","is_mandatory":true,"title":"Whether a network interface is virtual of not","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Detailed information of a network interface","private":true,"min_provider_version":"11.3.42","defaults":"name mac active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"networkRoute":{"id":"networkRoute","name":"networkRoute","fields":{"destination":{"name":"destination","type":"\u0007","is_mandatory":true,"title":"Destination network or destination subnet for this route","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Flags that describe route properties (e.g., 'UG' for up/gateway)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gateway":{"name":"gateway","type":"\u0007","is_mandatory":true,"title":"Gateway IP address for this route","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iface":{"name":"iface","type":"\u001bnetworkInterface","title":"Network interface this route applies to","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Network route information","private":true,"min_provider_version":"11.4.69","defaults":"destination flags","provider":"go.mondoo.com/cnquery/v9/providers/os"},"networkRoutes":{"id":"networkRoutes","name":"networkRoutes","fields":{"defaults":{"name":"defaults","type":"\u0019\u001bnetworkRoute","title":"Default routes found on the machine","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bnetworkRoute","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bnetworkRoute","title":"Collection of routing table entries on the system.","private":true,"min_provider_version":"11.4.69","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nfs":{"id":"nfs","name":"nfs","fields":{"export":{"name":"export","type":"\u001bnfs.export","title":"NFS export entry for a single path and client","desc":"Examine one row of the local NFS export table: the directory being shared (`path`), the client specification it is shared with (`client` — a hostname, IP address, CIDR, wildcard, netgroup, or `*` meaning any client) and the effective export `options` as parsed from `/etc/exports`. `readOnly` is true when the share is exported read-only. `noRootSquash` is true when the share grants remote uid 0 on the share — a classic NFS audit finding. Iterate from `nfs.exports`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"exports":{"name":"exports","type":"\u0019\u001bnfs.export","title":"NFS exports declared on this host","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mount":{"name":"mount","type":"\u001bnfs.mount","title":"NFS client mount","desc":"Examine a single NFS mount currently active on this host. `device` is the NFS source as the kernel sees it (`server:/remote/path`), split into `server` and `remotePath` for convenience. `mountpoint` is where the share is attached locally. `version` is the negotiated NFS protocol version (for example `3`, `4`, `4.1`, `4.2`); empty when the kernel did not report one. `security` is the authentication flavor — one of `sys`, `krb5`, `krb5i`, `krb5p`, or `none`; empty when unspecified. `hardMount` is true when the mount uses hard semantics (the `soft` option is not set). `readOnly` is true when the mount is `ro`. `options` is the full mount option list as reported by the system. Iterate from `nfs.mounts`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"mounts":{"name":"mounts","type":"\u0019\u001bnfs.mount","title":"NFS mounts currently active on this host","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"NFS service local state","desc":"Examine the local NFS service from two angles: shares declared on this host (`exports`) and NFS volumes the host has mounted (`mounts`). `exports` is parsed from `/etc/exports` using the platform-specific syntax for Linux, FreeBSD, macOS, and AIX; each row is one `(path, client)` pair so audits like `nfs.exports.where(noRootSquash)` work directly. `mounts` filters the system mount table for NFS file systems and parses NFS-specific options into typed fields (protocol `version`, `security` flavor, `hardMount`, `readOnly`).","min_provider_version":"13.19.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nfs.export":{"id":"nfs.export","name":"nfs.export","fields":{"client":{"name":"client","type":"\u0007","is_mandatory":true,"title":"Client specification (hostname, IP, CIDR, wildcard, netgroup, or `*`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"noRootSquash":{"name":"noRootSquash","type":"\u0004","is_mandatory":true,"title":"Whether the share grants remote uid 0 (`no_root_squash`, `maproot=root`, or `root=`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Export options as parsed from /etc/exports","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Exported directory path on the local host","provider":"go.mondoo.com/cnquery/v9/providers/os"},"readOnly":{"name":"readOnly","type":"\u0004","is_mandatory":true,"title":"Whether the share is exported read-only","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"NFS export entry for a single path and client","desc":"Examine one row of the local NFS export table: the directory being shared (`path`), the client specification it is shared with (`client` — a hostname, IP address, CIDR, wildcard, netgroup, or `*` meaning any client) and the effective export `options` as parsed from `/etc/exports`. `readOnly` is true when the share is exported read-only. `noRootSquash` is true when the share grants remote uid 0 on the share — a classic NFS audit finding. Iterate from `nfs.exports`.","private":true,"min_provider_version":"13.19.1","defaults":"path client readOnly noRootSquash","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nfs.mount":{"id":"nfs.mount","name":"nfs.mount","fields":{"device":{"name":"device","type":"\u0007","is_mandatory":true,"title":"NFS source as the kernel sees it (server:/remote/path)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hardMount":{"name":"hardMount","type":"\u0004","is_mandatory":true,"title":"Whether the mount uses hard semantics (the `soft` option is not set)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mountpoint":{"name":"mountpoint","type":"\u0007","is_mandatory":true,"title":"Local mount point path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Full mount option list as reported by the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"readOnly":{"name":"readOnly","type":"\u0004","is_mandatory":true,"title":"Whether the mount is read-only","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remotePath":{"name":"remotePath","type":"\u0007","is_mandatory":true,"title":"Remote path exported by the server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"security":{"name":"security","type":"\u0007","is_mandatory":true,"title":"Security flavor: one of `sys`, `krb5`, `krb5i`, `krb5p`, or `none`; empty when unspecified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"server":{"name":"server","type":"\u0007","is_mandatory":true,"title":"NFS server hostname or IP","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"NFS protocol version (for example `3`, `4`, `4.1`, `4.2`); empty when unknown","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"NFS client mount","desc":"Examine a single NFS mount currently active on this host. `device` is the NFS source as the kernel sees it (`server:/remote/path`), split into `server` and `remotePath` for convenience. `mountpoint` is where the share is attached locally. `version` is the negotiated NFS protocol version (for example `3`, `4`, `4.1`, `4.2`); empty when the kernel did not report one. `security` is the authentication flavor — one of `sys`, `krb5`, `krb5i`, `krb5p`, or `none`; empty when unspecified. `hardMount` is true when the mount uses hard semantics (the `soft` option is not set). `readOnly` is true when the mount is `ro`. `options` is the full mount option list as reported by the system. Iterate from `nfs.mounts`.","private":true,"min_provider_version":"13.19.1","defaults":"server remotePath mountpoint version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nftables":{"id":"nftables","name":"nftables","fields":{"chain":{"name":"chain","type":"\u001bnftables.chain","title":"nftables chain","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"chains":{"name":"chains","type":"\u0019\u001bnftables.chain","title":"All chains across all tables","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rule":{"name":"rule","type":"\u001bnftables.rule","title":"nftables rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"rules":{"name":"rules","type":"\u0019\u001bnftables.rule","title":"All rules across all tables and chains","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"set":{"name":"set","type":"\u001bnftables.set","title":"nftables named set (or map)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"sets":{"name":"sets","type":"\u0019\u001bnftables.set","title":"All named sets across all tables","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"table":{"name":"table","type":"\u001bnftables.table","title":"nftables table","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"tables":{"name":"tables","type":"\u0019\u001bnftables.table","title":"All nftables tables","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"nft version string (e.g., \"1.0.2\")","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"nftables firewall","desc":"Examine tables, chains, rules, and named sets across all address families","min_provider_version":"11.8.14","defaults":"tables","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nftables.chain":{"id":"nftables.chain","name":"nftables.chain","fields":{"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Address family","provider":"go.mondoo.com/cnquery/v9/providers/os"},"handle":{"name":"handle","type":"\u0005","is_mandatory":true,"title":"Chain handle number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hook":{"name":"hook","type":"\u0007","is_mandatory":true,"title":"Hook point (input, output, forward, prerouting, postrouting, ingress, egress) - only for base chains","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isBaseChain":{"name":"isBaseChain","type":"\u0004","is_mandatory":true,"title":"Whether this is a base chain (has type, hook, and priority)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Chain name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policy":{"name":"policy","type":"\u0007","is_mandatory":true,"title":"Default policy (accept, drop) - only for base chains","provider":"go.mondoo.com/cnquery/v9/providers/os"},"prio":{"name":"prio","type":"\u0005","is_mandatory":true,"title":"Chain priority - only for base chains","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rules":{"name":"rules","type":"\u0019\u001bnftables.rule","is_mandatory":true,"title":"Rules in this chain","provider":"go.mondoo.com/cnquery/v9/providers/os"},"table":{"name":"table","type":"\u0007","is_mandatory":true,"title":"Name of the table this chain belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tableRef":{"name":"tableRef","type":"\u001bnftables.table","title":"Table this chain belongs to","min_provider_version":"13.17.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Chain type (filter, route, nat) - only for base chains","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"nftables chain","private":true,"min_provider_version":"11.8.14","defaults":"family table name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nftables.rule":{"id":"nftables.rule","name":"nftables.rule","fields":{"chain":{"name":"chain","type":"\u0007","is_mandatory":true,"title":"Name of the chain this rule belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"chainRef":{"name":"chainRef","type":"\u001bnftables.chain","title":"Chain this rule belongs to","min_provider_version":"13.17.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"comment":{"name":"comment","type":"\u0007","is_mandatory":true,"title":"Rule comment","provider":"go.mondoo.com/cnquery/v9/providers/os"},"expr":{"name":"expr","type":"\u0019\n","is_mandatory":true,"title":"Rule expressions as structured data","provider":"go.mondoo.com/cnquery/v9/providers/os"},"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Address family","provider":"go.mondoo.com/cnquery/v9/providers/os"},"handle":{"name":"handle","type":"\u0005","is_mandatory":true,"title":"Rule handle number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"table":{"name":"table","type":"\u0007","is_mandatory":true,"title":"Name of the table this rule belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tableRef":{"name":"tableRef","type":"\u001bnftables.table","title":"Table this rule belongs to","min_provider_version":"13.17.1","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"nftables rule","private":true,"min_provider_version":"11.8.14","defaults":"family table chain handle","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nftables.set":{"id":"nftables.set","name":"nftables.set","fields":{"elements":{"name":"elements","type":"\u0019\u0007","is_mandatory":true,"title":"Set elements (values as strings)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Address family","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Set flags (e.g., \"constant\", \"interval\", \"timeout\", \"dynamic\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"handle":{"name":"handle","type":"\u0005","is_mandatory":true,"title":"Set handle number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isMap":{"name":"isMap","type":"\u0004","is_mandatory":true,"title":"Whether this is a map (has both key and value types)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"keyType":{"name":"keyType","type":"\u0007","is_mandatory":true,"title":"Element data type (e.g., \"ipv4_addr\", \"inet_service\", \"ether_addr\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Set name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"table":{"name":"table","type":"\u0007","is_mandatory":true,"title":"Name of the table this set belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tableRef":{"name":"tableRef","type":"\u001bnftables.table","title":"Table this set belongs to","min_provider_version":"13.17.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timeout":{"name":"timeout","type":"\u0005","is_mandatory":true,"title":"Set timeout in seconds (0 if not set)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"valueType":{"name":"valueType","type":"\u0007","is_mandatory":true,"title":"Value data type for maps (empty for plain sets)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"nftables named set (or map)","private":true,"min_provider_version":"13.2.9","defaults":"family table name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nftables.table":{"id":"nftables.table","name":"nftables.table","fields":{"chains":{"name":"chains","type":"\u0019\u001bnftables.chain","is_mandatory":true,"title":"Chains in this table","provider":"go.mondoo.com/cnquery/v9/providers/os"},"family":{"name":"family","type":"\u0007","is_mandatory":true,"title":"Address family (ip, ip6, inet, arp, bridge, netdev)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Table flags (e.g., dormant, owner, persist)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"handle":{"name":"handle","type":"\u0005","is_mandatory":true,"title":"Table handle number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Table name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rules":{"name":"rules","type":"\u0019\u001bnftables.rule","is_mandatory":true,"title":"Rules in this table across all chains","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sets":{"name":"sets","type":"\u0019\u001bnftables.set","is_mandatory":true,"title":"Named sets in this table","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"nftables table","private":true,"min_provider_version":"11.8.14","defaults":"family name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nginx":{"id":"nginx","name":"nginx","fields":{"conf":{"name":"conf","type":"\u001bnginx.conf","title":"Nginx HTTP Server configuration","desc":"Examine directives, server blocks, upstream pools, and listen addresses","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u0007","title":"Compiled-in modules from configure arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Nginx version (e.g., \"1.25.3\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Nginx HTTP Server","desc":"Examine server configuration, daemon version, and compiled-in modules","min_provider_version":"13.14.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nginx.conf":{"id":"nginx.conf","name":"nginx.conf","fields":{"errorLog":{"name":"errorLog","type":"\u0007","refs":["\"params\""],"title":"Error log path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"Primary configuration file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","refs":["\"file\""],"title":"All configuration files (main + included fragments)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpParams":{"name":"httpParams","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"HTTP-level directives (inside http block, outside server blocks)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listenAddresses":{"name":"listenAddresses","type":"\u0019\u0007","refs":["\"file\""],"title":"Listen addresses/ports across all server blocks","provider":"go.mondoo.com/cnquery/v9/providers/os"},"location":{"name":"location","type":"\u001bnginx.conf.location","title":"Nginx location block","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Flat key-value directives from main + http context","provider":"go.mondoo.com/cnquery/v9/providers/os"},"server":{"name":"server","type":"\u001bnginx.conf.server","title":"Nginx server block","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"servers":{"name":"servers","type":"\u0019\u001bnginx.conf.server","refs":["\"file\""],"title":"Server blocks","provider":"go.mondoo.com/cnquery/v9/providers/os"},"upstream":{"name":"upstream","type":"\u001bnginx.conf.upstream","title":"Nginx upstream block","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"upstreams":{"name":"upstreams","type":"\u0019\u001bnginx.conf.upstream","refs":["\"file\""],"title":"Upstream blocks","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u0007","refs":["\"params\""],"title":"User directive","provider":"go.mondoo.com/cnquery/v9/providers/os"},"workerProcesses":{"name":"workerProcesses","type":"\u0007","refs":["\"params\""],"title":"Worker processes setting","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Nginx HTTP Server configuration","desc":"Examine directives, server blocks, upstream pools, and listen addresses","min_provider_version":"13.14.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nginx.conf.location":{"id":"nginx.conf.location","name":"nginx.conf.location","fields":{"fastcgiPass":{"name":"fastcgiPass","type":"\u0007","is_mandatory":true,"title":"fastcgi_pass directive value","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modifier":{"name":"modifier","type":"\u0007","is_mandatory":true,"title":"Location modifier (\"=\", \"~\", \"~*\", \"^~\", or \"\" for prefix-default)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this location block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Location path or pattern (excluding modifier)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"proxyPass":{"name":"proxyPass","type":"\u0007","is_mandatory":true,"title":"Proxy pass target","provider":"go.mondoo.com/cnquery/v9/providers/os"},"return":{"name":"return","type":"\u0007","is_mandatory":true,"title":"return directive value (status + URI/text)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u0007","is_mandatory":true,"title":"Document root override","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tryFiles":{"name":"tryFiles","type":"\u0007","is_mandatory":true,"title":"try_files directive value","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Nginx location block","private":true,"min_provider_version":"13.14.1","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nginx.conf.server":{"id":"nginx.conf.server","name":"nginx.conf.server","fields":{"addHeaders":{"name":"addHeaders","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Response headers from `add_header NAME VALUE` directives (header name -\u003e values)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"certificate":{"name":"certificate","type":"\u0019\u001bcertificate","title":"X.509 certificates parsed from sslCertificate (empty if the file is unreadable)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listen":{"name":"listen","type":"\u0007","is_mandatory":true,"title":"Listen directives (comma-separated if multiple)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listens":{"name":"listens","type":"\u0019\n","is_mandatory":true,"title":"Listen directives broken out per declaration (port, ssl, http2, defaultServer, proxyProtocol, address, raw)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"locations":{"name":"locations","type":"\u0019\u001bnginx.conf.location","is_mandatory":true,"title":"Location blocks","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this server block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u0007","is_mandatory":true,"title":"Document root","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverName":{"name":"serverName","type":"\u0007","is_mandatory":true,"title":"Server name(s)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverTokens":{"name":"serverTokens","type":"\u0007","is_mandatory":true,"title":"server_tokens directive value (on/off/build)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ssl":{"name":"ssl","type":"\u0004","is_mandatory":true,"title":"Whether SSL is configured (any listen line carries `ssl`, or ssl_certificate is set)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCertificate":{"name":"sslCertificate","type":"\u0007","is_mandatory":true,"title":"Path to the server certificate (ssl_certificate)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCertificateKey":{"name":"sslCertificateKey","type":"\u0007","is_mandatory":true,"title":"Path to the server private key (ssl_certificate_key)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslCiphers":{"name":"sslCiphers","type":"\u0007","is_mandatory":true,"title":"ssl_ciphers directive value","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslPreferServerCiphers":{"name":"sslPreferServerCiphers","type":"\u0004","is_mandatory":true,"title":"ssl_prefer_server_ciphers directive value (true when \"on\")","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslProtocols":{"name":"sslProtocols","type":"\u0007","is_mandatory":true,"title":"ssl_protocols directive value (e.g., \"TLSv1.2 TLSv1.3\")","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslSessionTickets":{"name":"sslSessionTickets","type":"\u0007","is_mandatory":true,"title":"ssl_session_tickets directive value (\"on\"/\"off\"; empty if unset)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sslSessionTimeout":{"name":"sslSessionTimeout","type":"\u0007","is_mandatory":true,"title":"ssl_session_timeout directive value (e.g., \"1d\")","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Nginx server block","private":true,"min_provider_version":"13.14.1","defaults":"serverName ssl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nginx.conf.upstream":{"id":"nginx.conf.upstream","name":"nginx.conf.upstream","fields":{"keepalive":{"name":"keepalive","type":"\u0005","is_mandatory":true,"title":"keepalive directive value (idle connections per worker; 0 if unset)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loadBalancingMethod":{"name":"loadBalancingMethod","type":"\u0007","is_mandatory":true,"title":"Load-balancing method (round_robin, least_conn, ip_hash, hash, random, least_time)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Upstream group name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All directives within this upstream block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverDetails":{"name":"serverDetails","type":"\u0019\n","is_mandatory":true,"title":"Parsed backend entries (address, weight, maxFails, failTimeout, backup, down, slowStart, route)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u0007","is_mandatory":true,"title":"Backend server addresses (raw `server` directive arguments)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Nginx upstream block","private":true,"min_provider_version":"13.14.1","defaults":"name loadBalancingMethod","provider":"go.mondoo.com/cnquery/v9/providers/os"},"npm":{"id":"npm","fields":{"package":{"name":"package","type":"\u001bnpm.package","title":"npm package dependency","desc":"Examine a single npm package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `npm.packages` to audit the full dependency tree or from `npm.packages.directDependencies()` for top-level deps only.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bnpm.packages","title":"npm package inventory","desc":"Examine the project root, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"npm.package":{"id":"npm.package","name":"npm.package","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"title":"Package author","desc":"From package.json `author`. Accepts the SPDX-style string form (\"Name \u003cemail\u003e\") and the object form ({\"name\":..., \"email\":..., \"url\":...}); only the name portion is surfaced.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Package description from package.json","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the npm.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"Package license","desc":"SPDX expression from package.json `license`. The deprecated `licenses` array is not yet supported — the field is empty in that case.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"npm package dependency","desc":"Examine a single npm package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `npm.packages` to audit the full dependency tree or from `npm.packages.directDependencies()` for top-level deps only.","min_provider_version":"10.2.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"npm.packages":{"id":"npm.packages","name":"npm.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bnpm.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bnpm.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for packages","desc":"Deprecated in favor of `paths`, which accepts a list of search paths.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"},"paths":{"name":"paths","type":"\u0019\u0007","title":"Optional: list of paths searched for packages","min_provider_version":"11.4.67","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bnpm.package","title":"Root Package (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"scripts":{"name":"scripts","type":"\u001a\u0007\u0007","title":"Scripts defined in package.json","min_provider_version":"11.4.63","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bnpm.package","title":"npm package inventory","desc":"Examine the project root, direct dependencies, and full transitive tree","min_provider_version":"10.2.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ntp":{"id":"ntp","fields":{"conf":{"name":"conf","type":"\u001bntp.conf","title":"NTP daemon configuration","desc":"Examine servers, restrict directives, fudge entries, and other settings","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"ntp.conf":{"id":"ntp.conf","name":"ntp.conf","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw contents of the NTP service configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"File of the NTP service configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fudge":{"name":"fudge","type":"\u0019\u0007","refs":["\"settings\""],"title":"Additional information for clock drivers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"restrict":{"name":"restrict","type":"\u0019\u0007","refs":["\"settings\""],"title":"List of access control restrictions for the NTP service","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u0007","refs":["\"settings\""],"title":"List of servers for the NTP service","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\u0019\u0007","refs":["\"content\""],"title":"List of settings for the NTP service","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"NTP daemon configuration","desc":"Examine servers, restrict directives, fudge entries, and other settings","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"openBSMAudit":{"id":"openBSMAudit","name":"openBSMAudit","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Content of the audit_control file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dir":{"name":"dir","type":"\u0007","refs":["\"params\""],"title":"Directory where audit log files are stored","provider":"go.mondoo.com/cnquery/v9/providers/os"},"expireAfter":{"name":"expireAfter","type":"\u0007","refs":["\"params\""],"title":"Expiration criteria for audit logs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"File resource for the audit_control file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"filesz":{"name":"filesz","type":"\u0007","refs":["\"params\""],"title":"Maximum size of individual audit log files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u0019\u0007","refs":["\"params\""],"title":"Audit event flags for attributable (user) events","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memberClearSflagsMask":{"name":"memberClearSflagsMask","type":"\u0019\u0007","refs":["\"params\""],"title":"Flags that non-superusers can clear on their processes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"memberSetSflagsMask":{"name":"memberSetSflagsMask","type":"\u0019\u0007","refs":["\"params\""],"title":"Flags that non-superusers can set on their processes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"minfree":{"name":"minfree","type":"\u0005","refs":["\"params\""],"title":"Minimum free space threshold (percentage) before audit warnings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"naflags":{"name":"naflags","type":"\u0019\u0007","refs":["\"params\""],"title":"Audit event flags for non-attributable events","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"content\""],"title":"Parsed parameters from the audit_control file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the audit_control file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policy":{"name":"policy","type":"\u0019\u0007","refs":["\"params\""],"title":"Audit policy settings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"superuserClearSflagsMask":{"name":"superuserClearSflagsMask","type":"\u0019\u0007","refs":["\"params\""],"title":"Flags that superusers can clear on their processes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"superuserSetSflagsMask":{"name":"superuserSetSflagsMask","type":"\u0019\u0007","refs":["\"params\""],"title":"Flags that superusers can set on their processes","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"OpenBSM audit_control configuration (macOS and BSD)","desc":"Examine audit flags, log retention, and policy parameters","min_provider_version":"11.4.84","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"openai":{"id":"openai","fields":{"codex":{"name":"codex","type":"\u001bopenai.codex","title":"OpenAI Codex CLI instance","desc":"Examine auth mode, plugins, skills, MCP servers, and OAuth connectors URL: https://openai.com/index/introducing-codex/","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"openai.codex":{"id":"openai.codex","name":"openai.codex","fields":{"accountId":{"name":"accountId","type":"\u0007","title":"Account ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"authMode":{"name":"authMode","type":"\u0007","title":"Authentication mode (e.g. \"chatgpt\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Codex configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"connector":{"name":"connector","type":"\u001bopenai.codex.connector","title":"OpenAI Codex OAuth app connector","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"connectors":{"name":"connectors","type":"\u0019\u001bopenai.codex.connector","title":"OAuth app connectors","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastRefresh":{"name":"lastRefresh","type":"\u0007","title":"Last refresh timestamp","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mcpServer":{"name":"mcpServer","type":"\u001bopenai.codex.mcpServer","title":"OpenAI Codex MCP server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"mcpServers":{"name":"mcpServers","type":"\u0019\u001bopenai.codex.mcpServer","title":"MCP servers configured across plugins","provider":"go.mondoo.com/cnquery/v9/providers/os"},"plugin":{"name":"plugin","type":"\u001bopenai.codex.plugin","title":"OpenAI Codex installed plugin","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"plugins":{"name":"plugins","type":"\u0019\u001bopenai.codex.plugin","title":"Installed plugins","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bopenai.codex.skill","title":"OpenAI Codex skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bopenai.codex.skill","title":"System and plugin skills","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Installed version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"OpenAI Codex CLI instance","desc":"Examine auth mode, plugins, skills, MCP servers, and OAuth connectors URL: https://openai.com/index/introducing-codex/","min_provider_version":"13.8.2","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openai.codex.connector":{"id":"openai.codex.connector","name":"openai.codex.connector","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Connector ID (e.g. \"connector_...\" or \"asdk_app_...\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Connector name (matches plugin name)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"plugin":{"name":"plugin","type":"\u0007","is_mandatory":true,"title":"Plugin that provides this connector","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenAI Codex OAuth app connector","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openai.codex.mcpServer":{"id":"openai.codex.mcpServer","name":"openai.codex.mcpServer","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"note":{"name":"note","type":"\u0007","is_mandatory":true,"title":"Optional note describing the server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"plugin":{"name":"plugin","type":"\u0007","is_mandatory":true,"title":"Plugin that provides this MCP server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Server type (e.g. \"http\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Server URL","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenAI Codex MCP server","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openai.codex.plugin":{"id":"openai.codex.plugin","name":"openai.codex.plugin","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"title":"Plugin author name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"capabilities":{"name":"capabilities","type":"\u0019\u0007","is_mandatory":true,"title":"Plugin capabilities (e.g. \"Read\", \"Write\", \"Interactive\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"category":{"name":"category","type":"\u0007","is_mandatory":true,"title":"Plugin category (e.g. \"Coding\", \"Productivity\", \"Design\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Plugin description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasHooks":{"name":"hasHooks","type":"\u0004","is_mandatory":true,"title":"Whether the plugin has hooks configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasMcp":{"name":"hasMcp","type":"\u0004","is_mandatory":true,"title":"Whether the plugin has MCP servers configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plugin name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skillNames":{"name":"skillNames","type":"\u0019\u0007","is_mandatory":true,"title":"Plugin skill names","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Plugin version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenAI Codex installed plugin","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openai.codex.skill":{"id":"openai.codex.skill","name":"openai.codex.skill","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"plugin":{"name":"plugin","type":"\u0007","is_mandatory":true,"title":"Plugin that provides this skill (empty for system skills)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenAI Codex skill","private":true,"min_provider_version":"13.8.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openclaw":{"id":"openclaw","name":"openclaw","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the OpenClaw configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bopenclaw.skill","title":"OpenClaw skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bopenclaw.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"OpenClaw AI agent instance","desc":"Examine installed skills URL: https://openclaw.ai/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openclaw.skill":{"id":"openclaw.skill","name":"openclaw.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenClaw skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"opencode":{"id":"opencode","name":"opencode","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the OpenCode configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bopencode.skill","title":"OpenCode skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bopencode.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"OpenCode AI coding assistant instance","desc":"Examine installed skills URL: https://opencode.ai/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"opencode.skill":{"id":"opencode.skill","name":"opencode.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenCode skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openhands":{"id":"openhands","name":"openhands","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the OpenHands configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bopenhands.skill","title":"OpenHands skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bopenhands.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"OpenHands AI agent instance (formerly OpenDevin)","desc":"Examine installed skills URL: https://www.all-hands.dev/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"openhands.skill":{"id":"openhands.skill","name":"openhands.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"OpenHands skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"os":{"id":"os","name":"os","fields":{"base":{"name":"base","type":"\u001bos.base","title":"Generic operating system information common to all platforms","desc":"Cross-platform OS view that embeds `machine` (firmware / SMBIOS hardware identity) and exposes the fields shared by every supported platform: the pretty hostname (or Windows device name), the FQDN-style hostname, environment variables and the resolved PATH list, uptime, the available-OS-update list, the reboot-pending flag, and the typed `users()` and `groups()` collections. `os.unix` and `os.linux` extend this with platform-specific surfaces.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"date":{"name":"date","type":"\u001bos.date","title":"Current date and timezone of the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"env":{"name":"env","type":"\u001a\u0007\u0007","title":"ENV variable contents","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostname":{"name":"hostname","type":"\u0007","title":"Hostname for this OS","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hypervisor":{"name":"hypervisor","type":"\u0007","title":"Hypervisor for this OS","min_provider_version":"11.3.35","provider":"go.mondoo.com/cnquery/v9/providers/os"},"linux":{"name":"linux","type":"\u001bos.linux","title":"Operating system information for Linux platforms","desc":"Extends `os.unix` (and through it, `os.base`) with Linux-only surfaces: the four supported packet-filter stacks (`iptables`, `ip6tables`, `nftables`, `ufw`, `firewalld`), the `/etc/fstab` mount table, and the AppArmor mandatory-access-control namespace. Use it to write Linux-specific audits without reaching out to global resource handles.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"machineid":{"name":"machineid","type":"\u0007","title":"Machine ID for this OS","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Pretty hostname on macOS/Linux or device name on Windows","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0019\u0007","refs":["\"env\""],"title":"PATH variable contents","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rebootpending":{"name":"rebootpending","type":"\u0004","title":"Whether a reboot is pending","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rootCertificates":{"name":"rootCertificates","type":"\u001bos.rootCertificates","title":"Operating system root certificate trust store","desc":"Examine the X.509 root certificates that the asset's operating system trusts for TLS validation, derived from the platform-appropriate trust-store files (e.g. `/etc/ssl/certs/ca-certificates.crt` on Debian, `/etc/pki/tls/certs/ca-bundle.crt` on RHEL, the macOS SecTrust store, the Windows Root certificate store). The resource lazily reads each trust-store file and exposes the parsed `network.certificate` list so audits can pin specific issuers, detect untrusted local additions, or count the trust-store size.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"unix":{"name":"unix","type":"\u001bos.unix","title":"Operating system information for Unix-like platforms","desc":"Extends `os.base` for Unix-family operating systems (macOS, Linux, FreeBSD, and similar). Aliases such as `os.base.user` / `os.base.group` / `os.base.file` / `os.base.command` / `os.base.packages` route to concrete Unix resources, and `os.unix.sshd` aliases to the system-wide `sshd` resource so audits can express \"examine sshd on the asset\" without knowing the exact platform.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"update":{"name":"update","type":"\u001bos.update","title":"Operating system update information","desc":"Examine a single pending OS update: its name, category, severity, whether it requires a restart, and the package format it belongs to. Iterated from `os.updates()` to audit patch state and prioritize outstanding updates by severity.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"updates":{"name":"updates","type":"\u0019\u001bos.update","title":"List of available OS updates","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uptime":{"name":"uptime","type":"\t","title":"Current uptime","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Operating system information","desc":"Top-level entry point for operating-system-level facts about the asset. Examine the pretty hostname (or Windows device name), the FQDN-style hostname, the system's machine ID, the hypervisor it's running under (when virtualized), the running environment variables and the resolved PATH list, the current uptime, the list of available OS updates with their categories and severities, whether a reboot is pending after recent installs, and the current system date / timezone. Used as the cross-platform anchor that audits start from when they need OS identity and patch state.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base":{"id":"os.base","name":"os.base","fields":{"command":{"name":"command","type":"\u001bos.base.command","title":"Result of running a shell command on the system","desc":"Provides ad-hoc command execution as an MQL resource. Initialize it with a shell command string; the resource lazily executes the command through the connection (local exec, SSH, container exec, etc.) and surfaces the captured `stdout`, `stderr`, and `exitcode`. Used as a fall-back when there isn't a more specific typed resource for a piece of system state, and for assertions on tool versions or command-line probes.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"env":{"name":"env","type":"\u001a\u0007\u0007","title":"ENV variable contents","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bos.base.file","title":"File on the system","desc":"Examine a single file referenced by absolute path. Surfaces the path itself, the basename and dirname, an `exists` flag, the lazily-loaded `content` string, the file's size in bytes, an `empty` predicate, the owning `user` and `group` as typed references, and a structured `permissions` resource that explodes the POSIX mode into named user / group / other read / write / execute bits, the SUID / SGID / sticky bits, the `isFile` / `isDirectory` / `isSymlink` discriminators, and a printed mode string. The unit of file-level audits and the building block most config-file resources read through.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"group":{"name":"group","type":"\u001bos.base.group","title":"Group on the system","desc":"Examine a single local group: numeric GID (or SID on Windows), group name, and the typed `members()` list of users in the group. Used to audit privileged-group membership (`sudo`, `wheel`, `docker`, `adm`, etc.) and to confirm only expected accounts are present.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"groups":{"name":"groups","type":"\u001bgroups","title":"User groups","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostname":{"name":"hostname","type":"\u0007","title":"Hostname for this OS","provider":"go.mondoo.com/cnquery/v9/providers/os"},"machine":{"name":"machine","type":"\u001bmachine","provider":"go.mondoo.com/cnquery/v9/providers/os","is_embedded":true},"name":{"name":"name","type":"\u0007","title":"Pretty Hostname on macOS/Linux or device name on Windows","provider":"go.mondoo.com/cnquery/v9/providers/os"},"packages":{"name":"packages","type":"\u001bos.base.packages","title":"All packages installed on the system","desc":"Iterable collection of every `package` known to the asset's native package manager(s). Used as the entry point for fleet-wide patch audits, banned-package checks, and inventory exports.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"path":{"name":"path","type":"\u0019\u0007","refs":["\"env\""],"title":"PATH variable contents","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rebootpending":{"name":"rebootpending","type":"\u0004","title":"Whether a reboot is pending","provider":"go.mondoo.com/cnquery/v9/providers/os"},"service":{"name":"service","type":"\u001bos.base.service","title":"Service on the system","desc":"Examine install, enable, run state, type, and unit metadata","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"services":{"name":"services","type":"\u001bos.base.services","title":"All services configured on the system","desc":"Iterate every service across the asset's init/service manager","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"updates":{"name":"updates","type":"\u0019\u001bos.update","title":"List of available OS updates","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uptime":{"name":"uptime","type":"\t","title":"Current uptime","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u001bos.base.user","title":"User account on the system","desc":"Examine a single local user account: numeric UID and primary GID (Windows SID where applicable), name, home directory, configured login shell, and an `enabled` flag. Surfaces the typed primary `group` reference, the `authorizedkeys` resource that parses the user's `~/.ssh/authorized_keys`, the SSH private keys discovered in the user's home, and a `loggedIn` predicate that reflects whether the user currently has an active session. Used for identity audits, dormant-account hygiene, and SSH-key inventories.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"users":{"name":"users","type":"\u001busers","title":"Users","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Generic operating system information common to all platforms","desc":"Cross-platform OS view that embeds `machine` (firmware / SMBIOS hardware identity) and exposes the fields shared by every supported platform: the pretty hostname (or Windows device name), the FQDN-style hostname, environment variables and the resolved PATH list, uptime, the available-OS-update list, the reboot-pending flag, and the typed `users()` and `groups()` collections. `os.unix` and `os.linux` extend this with platform-specific surfaces.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.command":{"id":"command","name":"command","fields":{"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Raw contents of the command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exitcode":{"name":"exitcode","type":"\u0005","refs":["\"command\""],"title":"Exit code the command returned","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stderr":{"name":"stderr","type":"\u0007","refs":["\"command\""],"title":"Standard error output from running the command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stdout":{"name":"stdout","type":"\u0007","refs":["\"command\""],"title":"Standard output from running the command","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"command","type":"\u0007"}]},"title":"Result of running a shell command on the system","desc":"Provides ad-hoc command execution as an MQL resource. Initialize it with a shell command string; the resource lazily executes the command through the connection (local exec, SSH, container exec, etc.) and surfaces the captured `stdout`, `stderr`, and `exitcode`. Used as a fall-back when there isn't a more specific typed resource for a piece of system state, and for assertions on tool versions or command-line probes.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.file":{"id":"file","name":"file","fields":{"basename":{"name":"basename","type":"\u0007","refs":["\"path\""],"title":"Filename without path prefix of this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","refs":["\"path\"","\"exists\""],"title":"Contents of this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"context":{"name":"context","type":"\u001bfile.context","title":"File context is a range of lines/columns in a file","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"dirname":{"name":"dirname","type":"\u0007","refs":["\"path\""],"title":"Path to the folder containing this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"empty":{"name":"empty","type":"\u0004","refs":["\"path\""],"title":"Whether the path is empty","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exists":{"name":"exists","type":"\u0004","refs":["\"path\""],"title":"Whether this file exists on the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group":{"name":"group","type":"\u001bgroup","title":"Ownership information about the group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Location of the file on the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permissions":{"name":"permissions","type":"\u001bfile.permissions","refs":["\"path\""],"title":"Permissions for this file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0005","refs":["\"path\""],"title":"Size of this file on disk","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u001buser","title":"Ownership information about the user","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"File on the system","desc":"Examine a single file referenced by absolute path. Surfaces the path itself, the basename and dirname, an `exists` flag, the lazily-loaded `content` string, the file's size in bytes, an `empty` predicate, the owning `user` and `group` as typed references, and a structured `permissions` resource that explodes the POSIX mode into named user / group / other read / write / execute bits, the SUID / SGID / sticky bits, the `isFile` / `isDirectory` / `isSymlink` discriminators, and a printed mode string. The unit of file-level audits and the building block most config-file resources read through.","min_provider_version":"9.0.0","defaults":"path size permissions.string","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.group":{"id":"group","name":"group","fields":{"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"Group ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"members":{"name":"members","type":"\u0019\u001buser","title":"Users who are members of this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of this group","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sid":{"name":"sid","type":"\u0007","is_mandatory":true,"title":"Group's security identifier (Windows)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"Group on the system","desc":"Examine a single local group: numeric GID (or SID on Windows), group name, and the typed `members()` list of users in the group. Used to audit privileged-group membership (`sudo`, `wheel`, `docker`, `adm`, etc.) and to confirm only expected accounts are present.","min_provider_version":"9.0.0","defaults":"name gid","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.packages":{"id":"packages","name":"packages","fields":{"list":{"name":"list","type":"\u0019\u001bpackage","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bpackage","title":"All packages installed on the system","desc":"Iterable collection of every `package` known to the asset's native package manager(s). Used as the entry point for fleet-wide patch audits, banned-package checks, and inventory exports.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.service":{"id":"service","name":"service","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Service description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the service is enabled (start at boot)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","is_mandatory":true,"title":"Whether the service is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masked":{"name":"masked","type":"\u0004","is_mandatory":true,"title":"Whether the service is masked","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the service","provider":"go.mondoo.com/cnquery/v9/providers/os"},"running":{"name":"running","type":"\u0004","is_mandatory":true,"title":"Whether the service is running","provider":"go.mondoo.com/cnquery/v9/providers/os"},"static":{"name":"static","type":"\u0004","is_mandatory":true,"title":"Whether the service is static (unit file has no [Install] section and cannot be enabled/disabled)","min_provider_version":"11.8.12","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Service type (e.g., simple, forking, oneshot, notify)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Service on the system","desc":"Examine install, enable, run state, type, and unit metadata","min_provider_version":"9.0.0","defaults":"name running enabled type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.services":{"id":"services","name":"services","fields":{"list":{"name":"list","type":"\u0019\u001bservice","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bservice","title":"All services configured on the system","desc":"Iterate every service across the asset's init/service manager","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.base.user":{"id":"user","name":"user","fields":{"authorizedkeys":{"name":"authorizedkeys","type":"\u001bauthorizedkeys","refs":["\"home\""],"title":"List of authorized keys","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the user is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"User's group ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group":{"name":"group","type":"\u001bgroup","refs":["\"gid\""],"title":"Group of which user is a member","provider":"go.mondoo.com/cnquery/v9/providers/os"},"home":{"name":"home","type":"\u0007","is_mandatory":true,"title":"Home folder","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loggedIn":{"name":"loggedIn","type":"\u0004","title":"Whether the user is currently logged in","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the user","provider":"go.mondoo.com/cnquery/v9/providers/os"},"shell":{"name":"shell","type":"\u0007","is_mandatory":true,"title":"Default shell configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sid":{"name":"sid","type":"\u0007","is_mandatory":true,"title":"User's security identifier (Windows)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sshkeys":{"name":"sshkeys","type":"\u0019\u001bprivatekey","title":"List of SSH keys","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"User ID","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"User account on the system","desc":"Examine a single local user account: numeric UID and primary GID (Windows SID where applicable), name, home directory, configured login shell, and an `enabled` flag. Surfaces the typed primary `group` reference, the `authorizedkeys` resource that parses the user's `~/.ssh/authorized_keys`, the SSH private keys discovered in the user's home, and a `loggedIn` predicate that reflects whether the user currently has an active session. Used for identity audits, dormant-account hygiene, and SSH-key inventories.","min_provider_version":"9.0.0","defaults":"name uid gid","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.date":{"id":"os.date","name":"os.date","fields":{"time":{"name":"time","type":"\t","title":"Current system time","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timezone":{"name":"timezone","type":"\u0007","title":"System timezone (e.g., \"America/New_York\", \"UTC\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Operating system date and timezone information","desc":"Examine the current system clock time and the configured timezone string (e.g., \"America/New_York\", \"UTC\"). Used to verify that clocks are synchronized and that the correct timezone is set.","min_provider_version":"13.2.6","defaults":"time timezone","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.linux":{"id":"os.linux","name":"os.linux","fields":{"apparmor":{"name":"apparmor","type":"\u001bapparmor","title":"AppArmor mandatory access control","min_provider_version":"13.2.4","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firewalld":{"name":"firewalld","type":"\u001bfirewalld","title":"firewalld dynamic firewall manager (RHEL/CentOS/Fedora)","min_provider_version":"13.2.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fstab":{"name":"fstab","type":"\u001bfstab","title":"/etc/fstab entries","min_provider_version":"11.3.5","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ip6tables":{"name":"ip6tables","type":"\u001bip6tables","title":"iptables firewall for IPv6","provider":"go.mondoo.com/cnquery/v9/providers/os"},"iptables":{"name":"iptables","type":"\u001biptables","title":"iptables firewall for IPv4","provider":"go.mondoo.com/cnquery/v9/providers/os"},"nftables":{"name":"nftables","type":"\u001bnftables","title":"nftables firewall","min_provider_version":"11.8.14","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ufw":{"name":"ufw","type":"\u001bufw","title":"UFW (Uncomplicated Firewall)","min_provider_version":"13.2.8","provider":"go.mondoo.com/cnquery/v9/providers/os"},"unix":{"name":"unix","type":"\u001bos.unix","provider":"go.mondoo.com/cnquery/v9/providers/os","is_embedded":true}},"title":"Operating system information for Linux platforms","desc":"Extends `os.unix` (and through it, `os.base`) with Linux-only surfaces: the four supported packet-filter stacks (`iptables`, `ip6tables`, `nftables`, `ufw`, `firewalld`), the `/etc/fstab` mount table, and the AppArmor mandatory-access-control namespace. Use it to write Linux-specific audits without reaching out to global resource handles.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.rootCertificates":{"id":"os.rootCertificates","name":"os.rootCertificates","fields":{"content":{"name":"content","type":"\u0019\u0007","refs":["\"files\""],"provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","is_mandatory":true,"title":"List of files that define these certificates","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bcertificate","refs":["\"content\""],"provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bcertificate","title":"Operating system root certificate trust store","desc":"Examine the X.509 root certificates that the asset's operating system trusts for TLS validation, derived from the platform-appropriate trust-store files (e.g. `/etc/ssl/certs/ca-certificates.crt` on Debian, `/etc/pki/tls/certs/ca-bundle.crt` on RHEL, the macOS SecTrust store, the Windows Root certificate store). The resource lazily reads each trust-store file and exposes the parsed `network.certificate` list so audits can pin specific issuers, detect untrusted local additions, or count the trust-store size.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.unix":{"id":"os.unix","name":"os.unix","fields":{"base":{"name":"base","type":"\u001bos.base","provider":"go.mondoo.com/cnquery/v9/providers/os","is_embedded":true},"sshd":{"name":"sshd","type":"\u001bos.unix.sshd","title":"OpenSSH server (sshd) namespace","desc":"Use sshd.config to examine the effective server settings and match blocks","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"Operating system information for Unix-like platforms","desc":"Extends `os.base` for Unix-family operating systems (macOS, Linux, FreeBSD, and similar). Aliases such as `os.base.user` / `os.base.group` / `os.base.file` / `os.base.command` / `os.base.packages` route to concrete Unix resources, and `os.unix.sshd` aliases to the system-wide `sshd` resource so audits can express \"examine sshd on the asset\" without knowing the exact platform.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.unix.sshd":{"id":"sshd","name":"sshd","fields":{"config":{"name":"config","type":"\u001bsshd.config","title":"OpenSSH server (sshd) configuration","desc":"Examine ciphers, MACs, KEX algorithms, host keys, and Match blocks","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"OpenSSH server (sshd) namespace","desc":"Use sshd.config to examine the effective server settings and match blocks","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"os.update":{"id":"os.update","name":"os.update","fields":{"category":{"name":"category","type":"\u0007","is_mandatory":true,"title":"Category of the update","provider":"go.mondoo.com/cnquery/v9/providers/os"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"Package format for this update","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the update","provider":"go.mondoo.com/cnquery/v9/providers/os"},"restart":{"name":"restart","type":"\u0004","is_mandatory":true,"title":"Whether a restart is required","provider":"go.mondoo.com/cnquery/v9/providers/os"},"severity":{"name":"severity","type":"\u0007","is_mandatory":true,"title":"Severity of the update","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Operating system update information","desc":"Examine a single pending OS update: its name, category, severity, whether it requires a restart, and the package format it belongs to. Iterated from `os.updates()` to audit patch state and prioritize outstanding updates by severity.","min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"package":{"id":"package","name":"package","fields":{"arch":{"name":"arch","type":"\u0007","is_mandatory":true,"title":"Architecture of this package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"available":{"name":"available","type":"\u0007","is_mandatory":true,"title":"Available version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cpes":{"name":"cpes","type":"\u0019\u001bcpe","is_mandatory":true,"title":"Common Platform Enumeration (CPE) for the package","min_provider_version":"9.1.8","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Package description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"epoch":{"name":"epoch","type":"\u0007","is_mandatory":true,"title":"Epoch of this package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","min_provider_version":"10.2.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"Format of this package (e.g., rpm, deb)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installDate":{"name":"installDate","type":"\t","is_mandatory":true,"title":"Package install date","desc":"Time the package was installed on this asset. Populated from %{INSTALLTIME} (rpm) and the InstallDate column of the Windows Uninstall registry. Returns the zero time on backends that have no install-time source (dpkg without log parsing, apk, pacman, macOS).","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","is_mandatory":true,"title":"Whether the package is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"license":{"name":"license","type":"\u0007","title":"Package license","desc":"SPDX license expression (or upstream-reported license string). Eagerly populated where the package manager has it inline (rpm %{LICENSE}, apk APKINDEX, pacman desc); fetched on demand for dpkg (parses /usr/share/doc/\u003cpkg\u003e/copyright). Empty when no source exists (e.g. Windows registry DisplayName).","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"origin":{"name":"origin","type":"\u0007","title":"Package origin, may include version if available (optional)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"outdated":{"name":"outdated","type":"\u0004","title":"Whether the package is outdated","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","is_mandatory":true,"title":"Package URL","min_provider_version":"9.1.6","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","title":"Status of this package (e.g., if it is needed)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vendor":{"name":"vendor","type":"\u0007","is_mandatory":true,"title":"Package vendor","min_provider_version":"11.2.18","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Current version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Installed package on the platform or OS","desc":"Examine a single package known to the asset's native package manager (rpm, deb, apk, pkg, msi, nuget, pacman, etc.). Surfaces the package name, description, currently-installed `version`, architecture, epoch, package format, install status, package URL, the CPE list mapping the package to NVD identifiers, the package origin, the latest `available` version known to the package manager, the `installed` and `outdated` flags, the file inventory the package contributed, and the package vendor. The unit of asset-level package audits and the join key for vulnerability correlation.","min_provider_version":"9.0.0","defaults":"name version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"packages":{"id":"packages","name":"packages","fields":{"list":{"name":"list","type":"\u0019\u001bpackage","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bpackage","title":"All packages installed on the system","desc":"Iterable collection of every `package` known to the asset's native package manager(s). Used as the entry point for fleet-wide patch audits, banned-package checks, and inventory exports.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pam":{"id":"pam","fields":{"conf":{"name":"conf","type":"\u001bpam.conf","title":"PAM (pluggable authentication module) configuration","desc":"Examine /etc/pam.d service entries with their type, control, and module","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"module":{"name":"module","type":"\u001bpam.module","title":"PAM module aggregated view","desc":"Examine a single PAM module across every service that loads it. The `params` dict merges `key=value` options from every line that uses this module (last-write-wins per key) so audits like `pam.module(\"pam_faillock\").params[\"deny\"]` work without iterating `pam.conf.entries`. `enabled` is true when any service entry loads the module with a non-skip control.  Initialize by module name (e.g. `pam.module(name: \"pam_faillock\")`) or iterate `pam.modules()` for every distinct module name seen across the parsed PAM configuration.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"pam.conf":{"id":"pam.conf","name":"pam.conf","fields":{"content":{"name":"content","type":"\u0007","refs":["\"files\""],"title":"The raw PAM configuration (across all files)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entries":{"name":"entries","type":"\u001a\u0007\u0019\u001bpam.conf.serviceEntry","refs":["\"files\""],"title":"List of services with parsed entries that are configured via PAM","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","title":"List of files that make up the PAM configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modules":{"name":"modules","type":"\u0019\u001bpam.module","refs":["\"entries\""],"title":"All PAM modules loaded across every service (deduplicated by name)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serviceEntry":{"name":"serviceEntry","type":"\u001bpam.conf.serviceEntry","title":"A single entry within a PAM service configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"services":{"name":"services","type":"\u001a\u0007\u0019\u0007","refs":["\"files\""],"title":"Services configured via PAM","desc":"Deprecated in favor of `entries`, which returns parsed, structured service entries.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"PAM (pluggable authentication module) configuration","desc":"Examine /etc/pam.d service entries with their type, control, and module","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pam.conf.serviceEntry":{"id":"pam.conf.serviceEntry","name":"pam.conf.serviceEntry","fields":{"control":{"name":"control","type":"\u0007","is_mandatory":true,"title":"Level of control, (i.e., required, requisite, sufficient)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in service file (used for ID)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u0007","is_mandatory":true,"title":"PAM module used","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Configuration options for pam service entry","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pamType":{"name":"pamType","type":"\u0007","is_mandatory":true,"title":"Type for PAM entry, (i.e., auth, password, etc)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"options\""],"title":"Options parsed into key/value pairs","desc":"`key=value` options become map entries (key lower-cased); bare flags such as `use_uid` map to an empty string, so `params[\"use_uid\"] != null` works as an existence check. When the same key appears more than once the last occurrence wins, matching how PAM evaluates duplicate options. The raw `options` list is retained unchanged.","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"service":{"name":"service","type":"\u0007","is_mandatory":true,"title":"Service file that the entry is from","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"A single entry within a PAM service configuration","private":true,"min_provider_version":"9.0.0","defaults":"service module","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pam.module":{"id":"pam.module","name":"pam.module","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the module is loaded by any service with a non-skip control","desc":"True when at least one service entry references this module with a control of `required`, `requisite`, `sufficient`, `optional`, or a typed control with `default=ok` / `success=ok`. Always false when every reference is part of a stub or commented-out line.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entries":{"name":"entries","type":"\u0019\u001bpam.conf.serviceEntry","is_mandatory":true,"title":"Every service entry that loads this module","desc":"The full list across all `/etc/pam.d/*` files, in source order. Each entry carries its originating `service`, `lineNumber`, `pamType`, `control`, and raw `options` so callers can drill back into the underlying line if `params` aggregation isn't enough.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Module name as it appears after `\u003ctype\u003e \u003ccontrol\u003e`","desc":"Examples: `pam_unix`, `pam_faillock`, `pam_pwquality`. The `.so` suffix and any leading path are stripped so lookups by short name work consistently.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All key=value options aggregated across every service entry that loads this module","desc":"The same option key appearing on multiple lines is last-write-wins in source order (matching how PAM itself evaluates duplicate flags — the later line wins). Bare options (no `=`) are present in the map with an empty string value so `params[\"use_authtok\"] != null` works as an existence check.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"PAM module aggregated view","desc":"Examine a single PAM module across every service that loads it. The `params` dict merges `key=value` options from every line that uses this module (last-write-wins per key) so audits like `pam.module(\"pam_faillock\").params[\"deny\"]` work without iterating `pam.conf.entries`. `enabled` is true when any service entry loads the module with a non-skip control.  Initialize by module name (e.g. `pam.module(name: \"pam_faillock\")`) or iterate `pam.modules()` for every distinct module name seen across the parsed PAM configuration.","private":true,"min_provider_version":"13.16.10","defaults":"name enabled entries.length","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse":{"id":"parse","fields":{"certificates":{"name":"certificates","type":"\u001bparse.certificates","title":"Parse X.509 certificates from files","desc":"Examine PEM-encoded certificate chains and bundles","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"ini":{"name":"ini","type":"\u001bparse.ini","title":"Parse INI configuration files","desc":"Examine sections and key-value pairs from any INI-formatted file","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"json":{"name":"json","type":"\u001bparse.json","title":"Parse JSON files","desc":"Examine the parsed structure of any JSON document on disk","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"openpgp":{"name":"openpgp","type":"\u001bparse.openpgp","title":"Parse OpenPGP keys from files","desc":"Examine OpenPGP entities (keys, identities, subkeys) from key files","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"plist":{"name":"plist","type":"\u001bparse.plist","title":"Parse Apple property list (plist) files","desc":"Examine the parsed structure of XML or binary plist files","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"xml":{"name":"xml","type":"\u001bparse.xml","title":"Parse XML files","desc":"Examine the parsed structure of any XML document on disk","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"yaml":{"name":"yaml","type":"\u001bparse.yaml","title":"Parse YAML files","desc":"Examine single- or multi-document YAML structures from disk","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"parse.certificates":{"id":"parse.certificates","name":"parse.certificates","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Certificate file content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"Certificate file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bcertificate","refs":["\"content\"","\"path\""],"provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Certificate file path","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"list_type":"\u001bcertificate","title":"Parse X.509 certificates from files","desc":"Examine PEM-encoded certificate chains and bundles","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse.ini":{"id":"parse.ini","name":"parse.ini","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw content of the file that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"delimiter":{"name":"delimiter","type":"\u0007","is_mandatory":true,"title":"Symbol that separates keys and values","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"sections\""],"title":"Map of parameters that don't belong to sections","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sections":{"name":"sections","type":"\u001a\u0007\u001a\u0007\u0007","refs":["\"content\"","\"delimiter\""],"title":"Map of sections and key-value pairs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"},{"name":"delimiter","type":"\u0007"}]},"title":"Parse INI configuration files","desc":"Examine sections and key-value pairs from any INI-formatted file","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse.json":{"id":"parse.json","name":"parse.json","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw content of the file that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\n","refs":["\"content\""],"title":"The parsed parameters defined in this file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Parse JSON files","desc":"Examine the parsed structure of any JSON document on disk","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse.openpgp":{"id":"parse.openpgp","name":"parse.openpgp","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"OpenPGP file content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"OpenPGP file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bopenpgp.entity","refs":["\"content\""],"provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"list_type":"\u001bopenpgp.entity","title":"Parse OpenPGP keys from files","desc":"Examine OpenPGP entities (keys, identities, subkeys) from key files","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse.plist":{"id":"parse.plist","name":"parse.plist","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw content of the file that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\n","refs":["\"content\""],"title":"The parsed parameters that are defined in this file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Parse Apple property list (plist) files","desc":"Examine the parsed structure of XML or binary plist files","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse.xml":{"id":"parse.xml","name":"parse.xml","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw content of the file that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\n","refs":["\"content\""],"title":"The parsed parameters defined in this file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Parse XML files","desc":"Examine the parsed structure of any XML document on disk","min_provider_version":"11.4.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parse.yaml":{"id":"parse.yaml","name":"parse.yaml","fields":{"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw content of the file that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"documents":{"name":"documents","type":"\u0019\n","refs":["\"content\""],"title":"Parsed yaml documents","min_provider_version":"11.4.20","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File that is parsed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\n","refs":["\"content\""],"title":"The parsed parameters that are defined in this file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Parse YAML files","desc":"Examine single- or multi-document YAML structures from disk","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"php":{"id":"php","fields":{"package":{"name":"package","type":"\u001bphp.package","title":"PHP / Composer package dependency","desc":"Examine a single PHP package: its unique `id`, `name` in `vendor/package` form, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `php.packages` or `php.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bphp.packages","title":"PHP / Composer package inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"php.package":{"id":"php.package","name":"php.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the php.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the package (vendor/package)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"PHP / Composer package dependency","desc":"Examine a single PHP package: its unique `id`, `name` in `vendor/package` form, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `php.packages` or `php.packages.directDependencies()`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"php.packages":{"id":"php.packages","name":"php.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bphp.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bphp.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Composer files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bphp.package","title":"Root project (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bphp.package","title":"PHP / Composer package inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pi":{"id":"pi","name":"pi","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Pi configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bpi.skill","title":"Pi skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bpi.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Pi AI agent instance","desc":"Examine installed skills URL: https://pi.dev/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"pi.skill":{"id":"pi.skill","name":"pi.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Pi skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"pkgFileInfo":{"id":"pkgFileInfo","name":"pkgFileInfo","fields":{"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"File installed by a package","private":true,"min_provider_version":"10.2.0","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"platform":{"id":"platform","fields":{"advisories":{"name":"advisories","type":"\u001bplatform.advisories","title":"Platform and package advisories","desc":"Examine the consolidated list of vendor advisories that affect the asset, plus a worst-case CVSS roll-up across all of them and a statistical breakdown by severity (total, critical, high, medium, low, none, unknown). Use it to drive policies that require zero outstanding critical-severity advisories or that compare an asset's advisory load against a baseline.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cves":{"name":"cves","type":"\u001bplatform.cves","title":"Platform and package CVEs","desc":"Examine the full list of CVEs that affect the asset's installed packages or platform, plus a worst-case CVSS roll-up across them and a per-severity statistical breakdown (total, critical, high, medium, low, none, unknown). Used to enforce ceilings on outstanding critical or high-severity CVEs and to surface the most urgent fixes.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"platform.advisories":{"id":"platform.advisories","name":"platform.advisories","fields":{"cvss":{"name":"cvss","type":"\u001baudit.cvss","title":"Worst CVSS score for all advisories","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001baudit.advisory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stats":{"name":"stats","type":"\n","title":"Statistical information: total, critical, high, medium, low, none, unknown","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001baudit.advisory","title":"Platform and package advisories","desc":"Examine the consolidated list of vendor advisories that affect the asset, plus a worst-case CVSS roll-up across all of them and a statistical breakdown by severity (total, critical, high, medium, low, none, unknown). Use it to drive policies that require zero outstanding critical-severity advisories or that compare an asset's advisory load against a baseline.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"platform.cves":{"id":"platform.cves","name":"platform.cves","fields":{"cvss":{"name":"cvss","type":"\u001baudit.cvss","title":"Worst CVSS score for all CVEs","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001baudit.cve","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stats":{"name":"stats","type":"\n","title":"Statistical information: total, critical, high, medium, low, none, unknown","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001baudit.cve","title":"Platform and package CVEs","desc":"Examine the full list of CVEs that affect the asset's installed packages or platform, plus a worst-case CVSS roll-up across them and a per-severity statistical breakdown (total, critical, high, medium, low, none, unknown). Used to enforce ceilings on outstanding critical or high-severity CVEs and to surface the most urgent fixes.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"id":"port","name":"port","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Local address of this port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Port number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"process":{"name":"process","type":"\u001bprocess","title":"Process that is connected to this port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol of this port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remoteAddress":{"name":"remoteAddress","type":"\u0007","is_mandatory":true,"title":"Remote address connected to this port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"remotePort":{"name":"remotePort","type":"\u0005","is_mandatory":true,"title":"Remote port connected to this port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"State of this open port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tls":{"name":"tls","type":"\u001btls","refs":["\"address\"","\"port\"","\"protocol\""],"title":"TLS on this port, if it is available","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u001buser","is_mandatory":true,"title":"User configured for this port","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Single TCP/UDP port on the system","desc":"Examine address, state, attached process, and remote peer","min_provider_version":"9.0.1","defaults":"port protocol address process.executable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ports":{"id":"ports","name":"ports","fields":{"list":{"name":"list","type":"\u0019\u001bport","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listening":{"name":"listening","type":"\u0019\u001bport","title":"All listening ports","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bport","title":"All TCP/UDP ports on the system","desc":"Iterate every port — including the listening() subset for exposure audits","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"powershell":{"id":"powershell","name":"powershell","fields":{"exitcode":{"name":"exitcode","type":"\u0005","title":"Exit code the script returned","provider":"go.mondoo.com/cnquery/v9/providers/os"},"script":{"name":"script","type":"\u0007","is_mandatory":true,"title":"Raw contents of the script","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stderr":{"name":"stderr","type":"\u0007","title":"Standard error output from running the script","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stdout":{"name":"stdout","type":"\u0007","title":"Standard output from running the script","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"script","type":"\u0007"}]},"title":"Result of running a PowerShell script on the system","desc":"Provides ad-hoc PowerShell execution as an MQL resource. Initialize it with a script string; the resource lazily executes the script via PowerShell on the asset and surfaces the captured `stdout`, `stderr`, and `exitcode`. Used as the Windows / cross-platform-PowerShell counterpart to `command` for assertions that need PowerShell-only surface area.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"privatekey":{"id":"privatekey","name":"privatekey","fields":{"encrypted":{"name":"encrypted","type":"\u0004","is_mandatory":true,"title":"Whether the file is encrypted","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File on disk for this private key","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the private key file","desc":"Deprecated in favor of the `file` field.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"},"pem":{"name":"pem","type":"\u0007","is_mandatory":true,"title":"PEM data","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Private key on disk","desc":"Examine a PEM-encoded private key file: the typed `file` reference, the raw PEM `pem` payload, and an `encrypted` flag indicating whether the key uses a passphrase. Used to inventory SSH or service-account keys discovered on the asset and to flag unencrypted private keys stored in user home directories.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"process":{"id":"process","name":"process","fields":{"command":{"name":"command","type":"\u0007","title":"Full command used to run this process","provider":"go.mondoo.com/cnquery/v9/providers/os"},"executable":{"name":"executable","type":"\u0007","title":"Executable that is running this process","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u001a\u0007\u0007","title":"Map of additional flags","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pid":{"name":"pid","type":"\u0005","is_mandatory":true,"title":"PID (process ID)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","title":"State of the process (i.e., sleeping, running, etc)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"pid","type":"\u0005"}]},"title":"Single process on the system","desc":"Examine PID, executable, command line, state, and runtime flags","min_provider_version":"9.0.1","defaults":"executable pid state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"processes":{"id":"processes","name":"processes","fields":{"list":{"name":"list","type":"\u0019\u001bprocess","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bprocess","title":"All processes running on the system","desc":"Iterate every process for filtering by executable, user, or state","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"prolog":{"id":"prolog","fields":{"package":{"name":"package","type":"\u001bprolog.package","title":"SWI-Prolog pack","desc":"Examine a single SWI-Prolog pack: its unique `id`, pack `name`, `version`, `purl`, and the files that contributed it. Iterated from `prolog.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bprolog.packages","title":"SWI-Prolog pack inventory","desc":"Examine installed packs with their versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"prolog.package":{"id":"prolog.package","name":"prolog.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the prolog.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Pack name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Pack version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SWI-Prolog pack","desc":"Examine a single SWI-Prolog pack: its unique `id`, pack `name`, `version`, `purl`, and the files that contributed it. Iterated from `prolog.packages`.","min_provider_version":"13.13.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"prolog.packages":{"id":"prolog.packages","name":"prolog.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bprolog.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for SWI-Prolog packs directory","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bprolog.package","title":"SWI-Prolog pack inventory","desc":"Examine installed packs with their versions","min_provider_version":"13.13.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"python":{"id":"python","name":"python","fields":{"package":{"name":"package","type":"\u001bpython.package","title":"Python package information","desc":"Examine a single installed Python package: name, version, license, author, summary, required Python version, project URLs, package URL (`purl`), CPEs, and the full transitive `dependencies()` list. Used to inventory Python dependencies and correlate them with vulnerability data.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u0019\u001bpython.package","title":"List of all discovered packages","min_provider_version":"11.4.86","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to a specific site-packages location to exclusively scan (empty means scan default locations)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"toplevel":{"name":"toplevel","type":"\u0019\u001bpython.package","title":"List of all packages that were specifically installed (i.e., not auto-installed as a dependency)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Python package inventory","desc":"Examine all installed packages plus the explicitly-installed top level","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"python.package":{"id":"python.package","name":"python.package","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"title":"Author of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"authorEmail":{"name":"authorEmail","type":"\u0007","is_mandatory":true,"title":"Author email of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cpes":{"name":"cpes","type":"\u0019\u001bcpe","is_mandatory":true,"title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dependencies":{"name":"dependencies","type":"\u0019\u001bpython.package","title":"List of packages depended on","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"File containing the package metadata","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the python.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"License of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"projectUrls":{"name":"projectUrls","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Project URLs by label (e.g., Homepage, Repository, Documentation)","min_provider_version":"11.8.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","is_mandatory":true,"title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"requiresPython":{"name":"requiresPython","type":"\u0007","is_mandatory":true,"title":"Required Python version (e.g., \"\u003e=3.6\")","min_provider_version":"11.8.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Short package description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Python package information","desc":"Examine a single installed Python package: name, version, license, author, summary, required Python version, project URLs, package URL (`purl`), CPEs, and the full transitive `dependencies()` list. Used to inventory Python dependencies and correlate them with vulnerability data.","min_provider_version":"9.0.1","defaults":"name version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"qwen":{"id":"qwen","fields":{"code":{"name":"code","type":"\u001bqwen.code","title":"Qwen Code (Alibaba) instance","desc":"Examine installed skills URL: https://qwen.ai/qwencode","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"qwen.code":{"id":"qwen.code","name":"qwen.code","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Qwen Code configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bqwen.code.skill","title":"Qwen Code skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bqwen.code.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Qwen Code (Alibaba) instance","desc":"Examine installed skills URL: https://qwen.ai/qwencode","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"qwen.code.skill":{"id":"qwen.code.skill","name":"qwen.code.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Qwen Code skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"r":{"id":"r","fields":{"package":{"name":"package","type":"\u001br.package","title":"R package dependency","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001br.packages","title":"R package inventory (renv.lock)","desc":"Examine all locked packages with their resolved versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"r.package":{"id":"r.package","name":"r.package","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the r.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"R package dependency","private":true,"min_provider_version":"13.15.2","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"r.packages":{"id":"r.packages","name":"r.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001br.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for renv.lock","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001br.package","title":"R package inventory (renv.lock)","desc":"Examine all locked packages with their resolved versions","min_provider_version":"13.15.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"registrykey":{"id":"registrykey","name":"registrykey","fields":{"children":{"name":"children","type":"\u0019\u0007","title":"Registry key children","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exists":{"name":"exists","type":"\u0004","title":"Whether the property exists","provider":"go.mondoo.com/cnquery/v9/providers/os"},"items":{"name":"items","type":"\u0019\u001bregistrykey.property","title":"Registry key items","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Registry key path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"properties":{"name":"properties","type":"\u001a\u0007\u0007","title":"Properties of the registry key as a name-to-value map","desc":"Deprecated in favor of `items`, which returns structured property entries.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"},"property":{"name":"property","type":"\u001bregistrykey.property","title":"Windows registry key property","desc":"Examine a single named value within a registry key: the key `path`, value `name`, whether it `exists`, the registry `type` (e.g., REG_SZ, REG_DWORD), and the parsed `data`. Initialize by path and name to look up a specific value, or iterate from `registrykey.items()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Windows registry key","desc":"Examine items, child keys, and existence at a given registry path","min_provider_version":"9.0.1","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"registrykey.property":{"id":"registrykey.property","name":"registrykey.property","fields":{"data":{"name":"data","type":"\n","title":"Registry key data","provider":"go.mondoo.com/cnquery/v9/providers/os"},"exists":{"name":"exists","type":"\u0004","title":"Whether the property exists","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Registry key name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Registry key path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","title":"Registry key type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","title":"Registry property value as a string","desc":"Deprecated in favor of `data`, the parsed typed value.","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"deprecated"}},"init":{"args":[{"name":"path","type":"\u0007"},{"name":"name","type":"\u0007"}]},"title":"Windows registry key property","desc":"Examine a single named value within a registry key: the key `path`, value `name`, whether it `exists`, the registry `type` (e.g., REG_SZ, REG_DWORD), and the parsed `data`. Initialize by path and name to look up a specific value, or iterate from `registrykey.items()`.","min_provider_version":"9.0.1","defaults":"path name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"roo":{"id":"roo","name":"roo","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Roo Code configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001broo.skill","title":"Roo Code skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001broo.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Roo Code editor instance","desc":"Examine installed skills URL: https://roocode.com/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"roo.skill":{"id":"roo.skill","name":"roo.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Roo Code skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"rsyslog":{"id":"rsyslog","fields":{"action":{"name":"action","type":"\u001brsyslog.action","title":"rsyslog output action","desc":"Examine where rsyslog ships matched log lines. Surfaces both modern `action(type=\"omfwd\" target=\"…\" …)` statements and the legacy selector-with-target form (e.g. `*.* @@host:514`). When this action came from a legacy selector, the `parameters` dict is empty and `target` / `protocol` / `tlsEnabled` are derived from the target token's syntax.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"conf":{"name":"conf","type":"\u001brsyslog.conf","title":"rsyslog daemon configuration","desc":"Examine effective settings across the main file and included fragments. The typed accessors `modules()`, `inputs()`, `actions()`, and `rules()` parse the configuration into structured form so audits can assert on individual statements without regex over raw text. Each typed entry carries `sourceFile` and `sourceLine` so findings can point back at the fragment that introduced the directive.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"input":{"name":"input","type":"\u001brsyslog.input","title":"rsyslog input source","desc":"Examine a configured input — the module instance that pulls log lines into rsyslog. Surfaces both legacy single-directive forms (e.g. `$InputTCPServerRun 514`) and modern RainerScript blocks (`input(type=\"imtcp\" port=\"514\" ruleset=\"…\")`).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"module":{"name":"module","type":"\u001brsyslog.module","title":"rsyslog loaded module","desc":"Examine a single module load: modern `module(load=\"imtcp\" KeepAlive=\"on\")` or legacy `$ModLoad imtcp`. Modern declarations carry their full parameter dict; legacy declarations carry only the module name (parameters is empty). The module name follows rsyslog conventions: `im*` for inputs, `om*` for outputs, `mm*` for message modifications, `pm*` for parsers.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"rule":{"name":"rule","type":"\u001brsyslog.rule","title":"rsyslog selector rule","desc":"Examine a legacy `\u003cfacility\u003e.\u003cseverity\u003e \u003ctarget\u003e` routing rule — the form that ships in every default rsyslog config. Modern `if … then … { action(…) }` conditionals are not surfaced here; their actions are available via `rsyslog.conf.actions()` only.  Selector grammar covered: - Simple: `auth.info /var/log/auth.log` - Facility list: `auth,authpriv.* /var/log/auth.log` - Multi-selector: `*.info;mail.none;authpriv.none /var/log/messages` (each selector becomes its own rule) - Negation: `auth,authpriv.none` → `negate = true` - Wildcards: `*.*` and `auth.*`","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"rsyslog.action":{"id":"rsyslog.action","name":"rsyslog.action","fields":{"parameters":{"name":"parameters","type":"\n","is_mandatory":true,"title":"All parameters as a dict","desc":"Modern actions carry every key/value pair other than `type` and `target` here. Legacy selector-derived actions carry an empty dict.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Transport protocol for network actions: `\"tcp\"`, `\"udp\"`, or empty","provider":"go.mondoo.com/cnquery/v9/providers/os"},"queue":{"name":"queue","type":"\n","is_mandatory":true,"title":"Action-level queue configuration, empty when no queue is configured","desc":"Carries the modern `queue.*` parameters as `{type, filename, size, saveOnShutdown, ...}` — the exact key set depends on the queue type.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceFile":{"name":"sourceFile","type":"\u0007","is_mandatory":true,"title":"Absolute path of the file this directive was read from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceLine":{"name":"sourceLine","type":"\u0005","is_mandatory":true,"title":"1-indexed line number within sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Destination of the action","desc":"For omfile a filesystem path; for omfwd a `host` or `host:port`; for omusrmsg a comma-separated user list (or `*` for wall); for omhttp / omkafka the relevant URL or broker list.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"template":{"name":"template","type":"\u0007","is_mandatory":true,"title":"Template name applied to messages, empty when the default is used","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tlsEnabled":{"name":"tlsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether TLS is configured for this action","desc":"True when the modern form sets `StreamDriverMode=\"1\"` (or equivalent per-driver settings). False for legacy selector forms — those rely on the `$DefaultNetstreamDriver` / `$ActionSendStreamDriverMode` globals.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Action module type (e.g. omfwd, omfile, omusrmsg, omhttp, omkafka)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"rsyslog output action","desc":"Examine where rsyslog ships matched log lines. Surfaces both modern `action(type=\"omfwd\" target=\"…\" …)` statements and the legacy selector-with-target form (e.g. `*.* @@host:514`). When this action came from a legacy selector, the `parameters` dict is empty and `target` / `protocol` / `tlsEnabled` are derived from the target token's syntax.","private":true,"min_provider_version":"13.16.10","defaults":"type target sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rsyslog.conf":{"id":"rsyslog.conf","name":"rsyslog.conf","fields":{"actions":{"name":"actions","type":"\u0019\u001brsyslog.action","refs":["\"files\""],"title":"Configured output actions (modern action() and legacy selector-with-target rules)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","refs":["\"files\""],"title":"Raw contents of this rsyslog service configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","refs":["\"path\""],"title":"Files that make up this rsyslog service configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inputs":{"name":"inputs","type":"\u0019\u001brsyslog.input","refs":["\"files\""],"title":"Configured inputs (modern input() and legacy $Input* directives)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modules":{"name":"modules","type":"\u0019\u001brsyslog.module","refs":["\"files\""],"title":"Loaded modules (modern module() and legacy $ModLoad)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"content\""],"title":"Legacy `$Directive value` settings parsed into key/value pairs","desc":"The leading `$` is stripped from each key and the value is trimmed of surrounding whitespace, so `params[\"FileCreateMode\"] == \"0640\"` works regardless of the spacing used in the file. When the same directive appears more than once the last occurrence wins. The raw `settings` list is retained unchanged.","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","title":"Path for the main rsyslog file and search","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rules":{"name":"rules","type":"\u0019\u001brsyslog.rule","refs":["\"files\""],"title":"Legacy selector-based routing rules (facility.severity → target)","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\u0019\u0007","refs":["\"content\""],"title":"List of settings for this rsyslog service","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"rsyslog daemon configuration","desc":"Examine effective settings across the main file and included fragments. The typed accessors `modules()`, `inputs()`, `actions()`, and `rules()` parse the configuration into structured form so audits can assert on individual statements without regex over raw text. Each typed entry carries `sourceFile` and `sourceLine` so findings can point back at the fragment that introduced the directive.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rsyslog.input":{"id":"rsyslog.input","name":"rsyslog.input","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Listen address for network inputs, empty when not applicable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameters":{"name":"parameters","type":"\n","is_mandatory":true,"title":"All parameters as a dict, in source representation","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Listen port for network inputs, 0 when not applicable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ruleset":{"name":"ruleset","type":"\u0007","is_mandatory":true,"title":"Ruleset this input feeds into, empty for the default ruleset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceFile":{"name":"sourceFile","type":"\u0007","is_mandatory":true,"title":"Absolute path of the file this directive was read from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceLine":{"name":"sourceLine","type":"\u0005","is_mandatory":true,"title":"1-indexed line number within sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"streamDriverMode":{"name":"streamDriverMode","type":"\u0007","is_mandatory":true,"title":"TLS stream-driver mode reported by the input","desc":"`\"1\"` indicates the input accepts TLS connections (paired with a `$DefaultNetstreamDriver gtls` global or per-input `StreamDriverMode=\"1\"`). `\"0\"` or empty indicates plaintext.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Input module type (e.g. imtcp, imudp, imuxsock, imfile)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"rsyslog input source","desc":"Examine a configured input — the module instance that pulls log lines into rsyslog. Surfaces both legacy single-directive forms (e.g. `$InputTCPServerRun 514`) and modern RainerScript blocks (`input(type=\"imtcp\" port=\"514\" ruleset=\"…\")`).","private":true,"min_provider_version":"13.16.10","defaults":"type port sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rsyslog.module":{"id":"rsyslog.module","name":"rsyslog.module","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Module name (e.g. imtcp, imuxsock, omfwd, mmnormalize)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameters":{"name":"parameters","type":"\n","is_mandatory":true,"title":"Module-load parameters as a dict (empty for legacy $ModLoad)","desc":"Modern `module(load=\"X\" key1=\"v1\" key2=\"v2\")` declarations carry every key/value pair other than `load` here. Boolean-like values are kept as strings to preserve the source representation (`\"on\"` vs `true`).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceFile":{"name":"sourceFile","type":"\u0007","is_mandatory":true,"title":"Absolute path of the file this directive was read from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceLine":{"name":"sourceLine","type":"\u0005","is_mandatory":true,"title":"1-indexed line number within sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"rsyslog loaded module","desc":"Examine a single module load: modern `module(load=\"imtcp\" KeepAlive=\"on\")` or legacy `$ModLoad imtcp`. Modern declarations carry their full parameter dict; legacy declarations carry only the module name (parameters is empty). The module name follows rsyslog conventions: `im*` for inputs, `om*` for outputs, `mm*` for message modifications, `pm*` for parsers.","private":true,"min_provider_version":"13.16.10","defaults":"name sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rsyslog.rule":{"id":"rsyslog.rule","name":"rsyslog.rule","fields":{"action":{"name":"action","type":"\u001brsyslog.action","title":"Resolved typed action for this rule","desc":"Constructed from `target`: file-path → omfile, `@host` → omfwd/udp, `@@host` → omfwd/tcp, `:omusrmsg:*` → omusrmsg, `~` → discard, `|name` → ompipe. Legacy rules have no TLS information — the action's `tlsEnabled` is always false.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"facilities":{"name":"facilities","type":"\u0019\u0007","is_mandatory":true,"title":"Facilities matched (e.g. `[\"auth\", \"authpriv\"]`, or `[\"*\"]`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"negate":{"name":"negate","type":"\u0004","is_mandatory":true,"title":"Whether the severity is the negation marker (`.none`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"severities":{"name":"severities","type":"\u0019\u0007","is_mandatory":true,"title":"Severities matched","desc":"For example `[\"info\"]`, `[\"*\"]`, or `[\"none\"]` (negation form).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceFile":{"name":"sourceFile","type":"\u0007","is_mandatory":true,"title":"Absolute path of the file this directive was read from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sourceLine":{"name":"sourceLine","type":"\u0005","is_mandatory":true,"title":"1-indexed line number within sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Raw target token from the rule","desc":"File path, `@host`, `@@host:port`, `:omusrmsg:user`, `~` (discard), `|fifo`, etc.","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"rsyslog selector rule","desc":"Examine a legacy `\u003cfacility\u003e.\u003cseverity\u003e \u003ctarget\u003e` routing rule — the form that ships in every default rsyslog config. Modern `if … then … { action(…) }` conditionals are not surfaced here; their actions are available via `rsyslog.conf.actions()` only.  Selector grammar covered: - Simple: `auth.info /var/log/auth.log` - Facility list: `auth,authpriv.* /var/log/auth.log` - Multi-selector: `*.info;mail.none;authpriv.none /var/log/messages` (each selector becomes its own rule) - Negation: `auth,authpriv.none` → `negate = true` - Wildcards: `*.*` and `auth.*`","private":true,"min_provider_version":"13.16.10","defaults":"facilities severities target sourceFile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ruby":{"id":"ruby","fields":{"package":{"name":"package","type":"\u001bruby.package","title":"Ruby gem package","desc":"Examine a single Ruby gem: its unique `id`, gem `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `ruby.packages` or `ruby.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bruby.packages","title":"Ruby gem inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"ruby.package":{"id":"ruby.package","name":"ruby.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the ruby.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Gem name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Gem version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Ruby gem package","desc":"Examine a single Ruby gem: its unique `id`, gem `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `ruby.packages` or `ruby.packages.directDependencies()`.","min_provider_version":"13.12.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ruby.packages":{"id":"ruby.packages","name":"ruby.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001bruby.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bruby.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Gemfile.lock","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001bruby.package","title":"Root project (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bruby.package","title":"Ruby gem inventory","desc":"Examine the root project, direct dependencies, and full transitive tree","min_provider_version":"13.12.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rust":{"id":"rust","fields":{"package":{"name":"package","type":"\u001brust.package","title":"Rust/Cargo crate dependency","desc":"Examine a single Rust crate: its unique `id`, crate `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `rust.packages` or `rust.packages.directDependencies()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001brust.packages","title":"Rust/Cargo crate inventory","desc":"Examine the root crate, direct dependencies, and full transitive tree","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"rust.package":{"id":"rust.package","name":"rust.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the rust.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the crate","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the crate","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Rust/Cargo crate dependency","desc":"Examine a single Rust crate: its unique `id`, crate `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `rust.packages` or `rust.packages.directDependencies()`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rust.packages":{"id":"rust.packages","name":"rust.packages","fields":{"directDependencies":{"name":"directDependencies","type":"\u0019\u001brust.package","title":"List of direct dependencies","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001brust.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Cargo files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"root":{"name":"root","type":"\u001brust.package","title":"Root crate (may not exist)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001brust.package","title":"Rust/Cargo crate inventory","desc":"Examine the root crate, direct dependencies, and full transitive tree","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"safari":{"id":"safari","name":"safari","fields":{"extension":{"name":"extension","type":"\u001bsafari.extension","title":"Safari browser extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"extensions":{"name":"extensions","type":"\u0019\u001bsafari.extension","title":"All installed Safari extensions","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Safari browser (macOS only)","desc":"Examine all installed Safari extensions across users","min_provider_version":"11.4.86","provider":"go.mondoo.com/cnquery/v9/providers/os"},"safari.extension":{"id":"safari.extension","name":"safari.extension","fields":{"containerAppName":{"name":"containerAppName","type":"\u0007","is_mandatory":true,"title":"Containing application name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"containerAppPath":{"name":"containerAppPath","type":"\u0007","is_mandatory":true,"title":"Containing application path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Extension description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the extension is enabled in Safari preferences","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"extensionType":{"name":"extensionType","type":"\u0007","is_mandatory":true,"title":"Extension type (e.g., \"web-extension\", \"extension\", \"content-blocker\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Extension bundle identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name from Info.plist","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the extension bundle","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"UID of the user who owns this extension","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Extension version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Safari browser extension","private":true,"min_provider_version":"11.4.86","defaults":"name version identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"secpol":{"id":"secpol","name":"secpol","fields":{"eventaudit":{"name":"eventaudit","type":"\u001a\u0007\u0007","title":"Event audit","provider":"go.mondoo.com/cnquery/v9/providers/os"},"privilegerights":{"name":"privilegerights","type":"\u001a\u0007\u0019\u0007","title":"Privilege rights","provider":"go.mondoo.com/cnquery/v9/providers/os"},"registryvalues":{"name":"registryvalues","type":"\u001a\u0007\u0007","title":"Registry values","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemaccess":{"name":"systemaccess","type":"\u001a\u0007\u0007","title":"System access","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows local security policy","desc":"Examine system access, event audit, registry values, and privilege rights","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"selinux":{"id":"selinux","name":"selinux","fields":{"boolean":{"name":"boolean","type":"\u001bselinux.boolean","title":"SELinux boolean setting","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"booleans":{"name":"booleans","type":"\u0019\u001bselinux.boolean","title":"Loaded SELinux booleans","provider":"go.mondoo.com/cnquery/v9/providers/os"},"configMode":{"name":"configMode","type":"\u0007","title":"Configured mode from /etc/selinux/config (persists across reboot)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","title":"Whether SELinux is installed on the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mode":{"name":"mode","type":"\u0007","title":"Current enforcement mode: enforcing, permissive, or disabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"module":{"name":"module","type":"\u001bselinux.module","title":"SELinux policy module","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bselinux.module","title":"Installed SELinux policy modules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policyType":{"name":"policyType","type":"\u0007","title":"Active policy type (e.g., targeted, mls, minimum)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SELinux mandatory access control","desc":"Examine enforcement mode, policy type, booleans, and loaded modules","min_provider_version":"13.2.6","defaults":"mode","provider":"go.mondoo.com/cnquery/v9/providers/os"},"selinux.boolean":{"id":"selinux.boolean","name":"selinux.boolean","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Boolean name (e.g., httpd_can_network_connect)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0004","is_mandatory":true,"title":"Current runtime value","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SELinux boolean setting","private":true,"min_provider_version":"13.2.6","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"selinux.module":{"id":"selinux.module","name":"selinux.module","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Module name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Module priority","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Module status (e.g., enabled, disabled)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"SELinux policy module","private":true,"min_provider_version":"13.2.6","defaults":"name status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"service":{"id":"service","name":"service","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Service description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the service is enabled (start at boot)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","is_mandatory":true,"title":"Whether the service is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masked":{"name":"masked","type":"\u0004","is_mandatory":true,"title":"Whether the service is masked","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the service","provider":"go.mondoo.com/cnquery/v9/providers/os"},"running":{"name":"running","type":"\u0004","is_mandatory":true,"title":"Whether the service is running","provider":"go.mondoo.com/cnquery/v9/providers/os"},"static":{"name":"static","type":"\u0004","is_mandatory":true,"title":"Whether the service is static (unit file has no [Install] section and cannot be enabled/disabled)","min_provider_version":"11.8.12","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Service type (e.g., simple, forking, oneshot, notify)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Service on the system","desc":"Examine install, enable, run state, type, and unit metadata","min_provider_version":"9.0.0","defaults":"name running enabled type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"services":{"id":"services","name":"services","fields":{"list":{"name":"list","type":"\u0019\u001bservice","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bservice","title":"All services configured on the system","desc":"Iterate every service across the asset's init/service manager","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"shadow":{"id":"shadow","name":"shadow","fields":{"entry":{"name":"entry","type":"\u001bshadow.entry","title":"Shadowed password file entry","desc":"Examine a single line from `/etc/shadow`: the username, hashed password field, date of last change, minimum and maximum password age in days, warning period, inactivity period, and account expiry date. Used to audit password aging policy compliance and detect accounts with no expiry or with locked passwords.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"list":{"name":"list","type":"\u0019\u001bshadow.entry","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bshadow.entry","title":"Shadow password file (/etc/shadow)","desc":"Examine per-user password aging, expiration, and lock state","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"shadow.entry":{"id":"shadow.entry","name":"shadow.entry","fields":{"expirydates":{"name":"expirydates","type":"\u0007","is_mandatory":true,"title":"Account expiration date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"inactivedays":{"name":"inactivedays","type":"\u0005","is_mandatory":true,"title":"Password inactivity period in days","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastchanged":{"name":"lastchanged","type":"\t","is_mandatory":true,"title":"Date of last password change","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxdays":{"name":"maxdays","type":"\u0005","is_mandatory":true,"title":"Maximum password age in days","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mindays":{"name":"mindays","type":"\u0005","is_mandatory":true,"title":"Minimum password age in days","provider":"go.mondoo.com/cnquery/v9/providers/os"},"password":{"name":"password","type":"\u0007","is_mandatory":true,"title":"Password","provider":"go.mondoo.com/cnquery/v9/providers/os"},"reserved":{"name":"reserved","type":"\u0007","is_mandatory":true,"title":"Reserved field","provider":"go.mondoo.com/cnquery/v9/providers/os"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"Username from the /etc/shadow entry","provider":"go.mondoo.com/cnquery/v9/providers/os"},"warndays":{"name":"warndays","type":"\u0005","is_mandatory":true,"title":"Password warning period in days","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Shadowed password file entry","desc":"Examine a single line from `/etc/shadow`: the username, hashed password field, date of last change, minimum and maximum password age in days, warning period, inactivity period, and account expiry date. Used to audit password aging policy compliance and detect accounts with no expiry or with locked passwords.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"snowflake":{"id":"snowflake","fields":{"cortex":{"name":"cortex","type":"\u001bsnowflake.cortex","title":"Snowflake Cortex Code instance","desc":"Examine installed skills URL: https://www.snowflake.com/en/product/features/cortex-code/","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"}},"is_extension":true},"snowflake.cortex":{"id":"snowflake.cortex","name":"snowflake.cortex","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Cortex configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bsnowflake.cortex.skill","title":"Snowflake Cortex Code skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bsnowflake.cortex.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Snowflake Cortex Code instance","desc":"Examine installed skills URL: https://www.snowflake.com/en/product/features/cortex-code/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"snowflake.cortex.skill":{"id":"snowflake.cortex.skill","name":"snowflake.cortex.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Snowflake Cortex Code skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"squid":{"id":"squid","name":"squid","fields":{"conf":{"name":"conf","type":"\u001bsquid.conf","title":"Squid caching proxy configuration","desc":"Examine directives, access control lists, listen ports, cache peers, cache directories, refresh patterns, authentication parameters, and access logs from `squid.conf` together with every fragment pulled in by `include` directives. Files matched by glob patterns in include lines (e.g. `include /etc/squid/conf.d/*.conf`) are walked recursively and merged into a single logical configuration, so audits see the flattened directive set the daemon actually runs with.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"version":{"name":"version","type":"\u0007","title":"Squid version (e.g., \"5.7\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid caching proxy","desc":"Examine the Squid proxy server version reported by the daemon binary. Use `squid.conf` to inspect the full configuration including ACLs, access rules, listen ports, cache peers, refresh patterns, and any fragments pulled in by `include` directives (for example the contents of `/etc/squid/conf.d/*.conf`).","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf":{"id":"squid.conf","name":"squid.conf","fields":{"accessLog":{"name":"accessLog","type":"\u001bsquid.conf.accessLog","title":"Squid access_log entry","desc":"Examine a single `access_log` directive: where requests are written (file path, daemon module target, or \"none\"), which logformat is in use, and which ACLs gate the log line. Multiple `access_log` lines produce multiple entries in this list.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"accessLogs":{"name":"accessLogs","type":"\u0019\u001bsquid.conf.accessLog","refs":["\"file\""],"title":"access_log entries (each daemon target / format / acl pair)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"accessRule":{"name":"accessRule","type":"\u001bsquid.conf.accessRule","title":"Squid *_access rule","desc":"Examine a single allow/deny rule from any of the access directives (`http_access`, `http_reply_access`, `icp_access`, `miss_access`, `cache`, `always_direct`, `never_direct`, etc.). Rules are evaluated top-down by Squid, so the `index` field reflects source order across the merged configuration.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"accessRules":{"name":"accessRules","type":"\u0019\u001bsquid.conf.accessRule","refs":["\"file\""],"title":"Every *_access rule in source order","desc":"Includes http_access, http_reply_access, adapted_http_access, icp_access, htcp_access, miss_access, cache, always_direct, never_direct, and the other access directives. Filter by kind to target one family: `.where(kind == \"http_access\")`.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"acl":{"name":"acl","type":"\u001bsquid.conf.acl","title":"Squid Access Control List entry","desc":"Examine an `acl` definition. ACLs are referenced by name from `http_access`, `icp_access`, and the other *_access rules, so the `values` field together with the rule list tells you which clients, URLs, or methods Squid will allow or deny.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"acls":{"name":"acls","type":"\u0019\u001bsquid.conf.acl","refs":["\"file\""],"title":"Defined ACLs, one entry per unique acl name (values across repeated `acl NAME` lines are merged)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"authParams":{"name":"authParams","type":"\u001a\u0007\u001a\u0007\u0007","refs":["\"file\""],"title":"auth_param entries grouped by scheme -\u003e param -\u003e value (e.g., authParams[\"basic\"][\"program\"])","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cacheDir":{"name":"cacheDir","type":"\u001bsquid.conf.cacheDir","title":"Squid cache directory","desc":"Examine a `cache_dir` entry — the on-disk cache storage backing the proxy. Captures the storage `type` (ufs, aufs, diskd, rock), the filesystem `path`, the cache size, the L1/L2 fan-out for hashed stores, and any trailing `key=value` options (e.g., `max-size=`).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cacheDirs":{"name":"cacheDirs","type":"\u0019\u001bsquid.conf.cacheDir","refs":["\"file\""],"title":"cache_dir entries (on-disk cache storage)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cacheLog":{"name":"cacheLog","type":"\u0007","refs":["\"params\""],"title":"cache_log directive value (path to the cache.log file)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cacheMem":{"name":"cacheMem","type":"\u0007","refs":["\"params\""],"title":"cache_mem directive value (e.g., \"256 MB\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cachePeer":{"name":"cachePeer","type":"\u001bsquid.conf.cachePeer","title":"Squid cache peer","desc":"Examine a `cache_peer` entry — a parent or sibling cache Squid forwards to. The `host`, `type`, and `httpPort` together identify the peer; the `options` slice carries the remaining flags (`default`, `no-query`, `proxy-only`, `login=...`, `weight=...`, ...).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cachePeers":{"name":"cachePeers","type":"\u0019\u001bsquid.conf.cachePeer","refs":["\"file\""],"title":"cache_peer entries (parents and siblings)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cacheStoreLog":{"name":"cacheStoreLog","type":"\u0007","refs":["\"params\""],"title":"cache_store_log directive value (path or \"none\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"certificates":{"name":"certificates","type":"\u0019\u001bcertificate","title":"X.509 certificates parsed from cert= / tls-cert= paths declared on http_port and https_port entries","provider":"go.mondoo.com/cnquery/v9/providers/os"},"coredumpDir":{"name":"coredumpDir","type":"\u0007","refs":["\"params\""],"title":"coredump_dir directive value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dnsV4First":{"name":"dnsV4First","type":"\u0007","refs":["\"params\""],"title":"dns_v4_first directive value (\"on\" or \"off\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"Primary configuration file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","refs":["\"file\""],"title":"All configuration files (main + included fragments)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"forwardedFor":{"name":"forwardedFor","type":"\u0007","refs":["\"params\""],"title":"forwarded_for directive value (on, off, transparent, delete, truncate)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpPorts":{"name":"httpPorts","type":"\u0019\u001bsquid.conf.listen","refs":["\"file\""],"title":"http_port listen entries","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpdSuppressVersionString":{"name":"httpdSuppressVersionString","type":"\u0007","refs":["\"params\""],"title":"httpd_suppress_version_string directive value (\"on\" or \"off\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpsPorts":{"name":"httpsPorts","type":"\u0019\u001bsquid.conf.listen","refs":["\"file\""],"title":"https_port listen entries","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listen":{"name":"listen","type":"\u001bsquid.conf.listen","title":"Squid listen port (http_port or https_port)","desc":"Examine a single `http_port` or `https_port` directive: the bind address, port number, parsed mode flags (transparent, intercept, accel, ssl-bump, tproxy), and any `key=value` options including the TLS material (`cert=`, `key=`, `tls-cert=`, `tls-key=`).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"maximumObjectSize":{"name":"maximumObjectSize","type":"\u0007","refs":["\"params\""],"title":"maximum_object_size directive value (e.g., \"4 MB\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Flat key-value directives across the merged configuration","desc":"Directives that can repeat (acl, http_access, refresh_pattern, ...) have their values comma-joined in source order.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pidFilename":{"name":"pidFilename","type":"\u0007","refs":["\"params\""],"title":"pid_filename directive value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"refreshPattern":{"name":"refreshPattern","type":"\u001bsquid.conf.refreshPattern","title":"Squid refresh_pattern rule","desc":"Examine a single `refresh_pattern` directive: the regex Squid uses to match URLs, the freshness window (`min` / `percent` / `max`), and any trailing flags. Audit hot spots include `ignore-private`, `ignore-no-store`, `override-expire`, and `override-lastmod`, which weaken cache safety guarantees.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"refreshPatterns":{"name":"refreshPatterns","type":"\u0019\u001bsquid.conf.refreshPattern","refs":["\"file\""],"title":"refresh_pattern entries (cache freshness rules) in source order","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uniqueHostname":{"name":"uniqueHostname","type":"\u0007","refs":["\"params\""],"title":"unique_hostname directive value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"via":{"name":"via","type":"\u0007","refs":["\"params\""],"title":"via directive value (\"on\" or \"off\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"visibleHostname":{"name":"visibleHostname","type":"\u0007","refs":["\"params\""],"title":"visible_hostname directive value","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Squid caching proxy configuration","desc":"Examine directives, access control lists, listen ports, cache peers, cache directories, refresh patterns, authentication parameters, and access logs from `squid.conf` together with every fragment pulled in by `include` directives. Files matched by glob patterns in include lines (e.g. `include /etc/squid/conf.d/*.conf`) are walked recursively and merged into a single logical configuration, so audits see the flattened directive set the daemon actually runs with.","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.accessLog":{"id":"squid.conf.accessLog","name":"squid.conf.accessLog","fields":{"acls":{"name":"acls","type":"\u0019\u0007","is_mandatory":true,"title":"Trailing ACL names that gate this log line, in argument order (an entry starting with \"!\" is a negated ACL)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"logformat name selecting the output format (\"squid\" when unspecified, or the name from a `logformat NAME ...` line)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Original directive arguments, joined by spaces","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Log target (\"/var/log/squid/access.log\", \"daemon:/var/log/...\", \"stdio:/var/log/...\", \"syslog:...\", or \"none\" to disable)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid access_log entry","desc":"Examine a single `access_log` directive: where requests are written (file path, daemon module target, or \"none\"), which logformat is in use, and which ACLs gate the log line. Multiple `access_log` lines produce multiple entries in this list.","private":true,"min_provider_version":"13.16.10","defaults":"target format","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.accessRule":{"id":"squid.conf.accessRule","name":"squid.conf.accessRule","fields":{"acls":{"name":"acls","type":"\u0019\u0007","is_mandatory":true,"title":"ACL names referenced by this rule, in argument order. An entry starting with \"!\" is a negated ACL.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"\"allow\" or \"deny\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"index":{"name":"index","type":"\u0005","is_mandatory":true,"title":"0-based position of this rule within `kind`, in source order across all included files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Directive name (e.g., \"http_access\", \"icp_access\", \"miss_access\", \"cache\", \"always_direct\", \"never_direct\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Original directive arguments, joined by spaces","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid *_access rule","desc":"Examine a single allow/deny rule from any of the access directives (`http_access`, `http_reply_access`, `icp_access`, `miss_access`, `cache`, `always_direct`, `never_direct`, etc.). Rules are evaluated top-down by Squid, so the `index` field reflects source order across the merged configuration.","private":true,"min_provider_version":"13.16.10","defaults":"kind action acls","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.acl":{"id":"squid.conf.acl","name":"squid.conf.acl","fields":{"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Modifier flags present on any of the acl lines (e.g., \"-i\" for case-insensitive)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"ACL name (e.g., \"localnet\", \"Safe_ports\", \"CONNECT\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"ACL type (src, dst, port, srcdomain, url_regex, proto, method, proxy_auth, ...)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"values":{"name":"values","type":"\u0019\u0007","is_mandatory":true,"title":"All match values from every `acl NAME ...` line with this name, in source order","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid Access Control List entry","desc":"Examine an `acl` definition. ACLs are referenced by name from `http_access`, `icp_access`, and the other *_access rules, so the `values` field together with the rule list tells you which clients, URLs, or methods Squid will allow or deny.","private":true,"min_provider_version":"13.16.10","defaults":"name type","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.cacheDir":{"id":"squid.conf.cacheDir","name":"squid.conf.cacheDir","fields":{"l1":{"name":"l1","type":"\u0005","is_mandatory":true,"title":"L1 subdirectory count (0 for rock and other single-file stores)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"l2":{"name":"l2","type":"\u0005","is_mandatory":true,"title":"L2 subdirectory count (0 for rock and other single-file stores)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Trailing options on the directive (e.g., max-size=4194304, min-size=0)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Filesystem path of the cache","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Original directive arguments, joined by spaces","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sizeMb":{"name":"sizeMb","type":"\u0005","is_mandatory":true,"title":"Cache size in megabytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Storage scheme (ufs, aufs, diskd, rock, ...)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid cache directory","desc":"Examine a `cache_dir` entry — the on-disk cache storage backing the proxy. Captures the storage `type` (ufs, aufs, diskd, rock), the filesystem `path`, the cache size, the L1/L2 fan-out for hashed stores, and any trailing `key=value` options (e.g., `max-size=`).","private":true,"min_provider_version":"13.16.10","defaults":"type path sizeMb","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.cachePeer":{"id":"squid.conf.cachePeer","name":"squid.conf.cachePeer","fields":{"host":{"name":"host","type":"\u0007","is_mandatory":true,"title":"Peer hostname or IP","provider":"go.mondoo.com/cnquery/v9/providers/os"},"httpPort":{"name":"httpPort","type":"\u0005","is_mandatory":true,"title":"HTTP port on the peer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"icpPort":{"name":"icpPort","type":"\u0005","is_mandatory":true,"title":"ICP/HTCP query port on the peer (0 when disabled)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Trailing options on the directive (e.g., default, no-query, proxy-only, login=NAME)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Original directive arguments, joined by spaces","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Peer relationship (\"parent\", \"sibling\", or \"multicast\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid cache peer","desc":"Examine a `cache_peer` entry — a parent or sibling cache Squid forwards to. The `host`, `type`, and `httpPort` together identify the peer; the `options` slice carries the remaining flags (`default`, `no-query`, `proxy-only`, `login=...`, `weight=...`, ...).","private":true,"min_provider_version":"13.16.10","defaults":"host type httpPort","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.listen":{"id":"squid.conf.listen","name":"squid.conf.listen","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Bind address (\"\" when none was given, IPv4/IPv6 literal, or \"unix:/path\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cert":{"name":"cert","type":"\u0007","is_mandatory":true,"title":"Path to the server certificate when set (`cert=` or `tls-cert=`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"directive":{"name":"directive","type":"\u0007","is_mandatory":true,"title":"Directive name this entry came from (\"http_port\" or \"https_port\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"flags":{"name":"flags","type":"\u0019\u0007","is_mandatory":true,"title":"Mode flags present on the directive (e.g., transparent, intercept, accel, ssl-bump, tproxy, ssl)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Path to the server private key when set (`key=` or `tls-key=`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"All `key=value` options on the directive","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Numeric port (0 when the target is a unix socket)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Original directive arguments, joined by spaces","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tls":{"name":"tls","type":"\u0004","is_mandatory":true,"title":"Whether this entry serves TLS (https_port, or http_port with ssl-bump / tls-cert= / cert=)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid listen port (http_port or https_port)","desc":"Examine a single `http_port` or `https_port` directive: the bind address, port number, parsed mode flags (transparent, intercept, accel, ssl-bump, tproxy), and any `key=value` options including the TLS material (`cert=`, `key=`, `tls-cert=`, `tls-key=`).","private":true,"min_provider_version":"13.16.10","defaults":"port address tls","provider":"go.mondoo.com/cnquery/v9/providers/os"},"squid.conf.refreshPattern":{"id":"squid.conf.refreshPattern","name":"squid.conf.refreshPattern","fields":{"caseInsensitive":{"name":"caseInsensitive","type":"\u0004","is_mandatory":true,"title":"Whether the rule was declared case-insensitive (-i)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"max":{"name":"max","type":"\u0005","is_mandatory":true,"title":"Maximum freshness in minutes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"min":{"name":"min","type":"\u0005","is_mandatory":true,"title":"Minimum freshness in minutes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Trailing flag options","desc":"Common entries: override-expire, override-lastmod, ignore-no-store, ignore-private, ignore-reload, reload-into-ims, refresh-ims, store-stale, max-stale=N.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pattern":{"name":"pattern","type":"\u0007","is_mandatory":true,"title":"Regex pattern this rule applies to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"percent":{"name":"percent","type":"\u0005","is_mandatory":true,"title":"Percent of last-modified age used to compute freshness","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Original directive arguments, joined by spaces","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Squid refresh_pattern rule","desc":"Examine a single `refresh_pattern` directive: the regex Squid uses to match URLs, the freshness window (`min` / `percent` / `max`), and any trailing flags. Audit hot spots include `ignore-private`, `ignore-no-store`, `override-expire`, and `override-lastmod`, which weaken cache safety guarantees.","private":true,"min_provider_version":"13.16.10","defaults":"pattern min max","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sshd":{"id":"sshd","name":"sshd","fields":{"config":{"name":"config","type":"\u001bsshd.config","title":"OpenSSH server (sshd) configuration","desc":"Examine ciphers, MACs, KEX algorithms, host keys, and Match blocks","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"OpenSSH server (sshd) namespace","desc":"Use sshd.config to examine the effective server settings and match blocks","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sshd.config":{"id":"sshd.config","name":"sshd.config","fields":{"blocks":{"name":"blocks","type":"\u0019\u001bsshd.config.matchBlock","refs":["\"file\""],"title":"Blocks with match conditions in this SSH server config","min_provider_version":"10.0.5","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ciphers":{"name":"ciphers","type":"\u0019\u0007","refs":["\"params\""],"title":"Ciphers configured for this SSH server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"effectiveCiphers":{"name":"effectiveCiphers","type":"\u0019\u0007","title":"Effective ciphers reported by sshd -T","min_provider_version":"13.16.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"effectiveKexs":{"name":"effectiveKexs","type":"\u0019\u0007","title":"Effective key exchange algorithms reported by sshd -T","min_provider_version":"13.16.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"effectiveMacs":{"name":"effectiveMacs","type":"\u0019\u0007","title":"Effective MACs reported by sshd -T","min_provider_version":"13.16.9","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"File of this SSH server configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","refs":["\"file\""],"title":"A list of lexically sorted files making up the SSH server configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostkeyalgorithms":{"name":"hostkeyalgorithms","type":"\u0019\u0007","refs":["\"params\""],"title":"Host key algorithms configured for this SSH server","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostkeys":{"name":"hostkeys","type":"\u0019\u0007","refs":["\"params\""],"title":"Host keys configured for this SSH server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kexs":{"name":"kexs","type":"\u0019\u0007","refs":["\"params\""],"title":"Key exchange algorithms configured for this SSH server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macs":{"name":"macs","type":"\u0019\u0007","refs":["\"params\""],"title":"MACs configured for this SSH server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"matchBlock":{"name":"matchBlock","type":"\u001bsshd.config.matchBlock","title":"A block of SSH server configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"file\""],"title":"Configuration values of this SSH server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permitRootLogin":{"name":"permitRootLogin","type":"\u0019\u0007","refs":["\"params\""],"title":"PermitRootLogin setting in SSH server","min_provider_version":"10.0.5","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"OpenSSH server (sshd) configuration","desc":"Examine ciphers, MACs, KEX algorithms, host keys, and Match blocks","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sshd.config.matchBlock":{"id":"sshd.config.matchBlock","name":"sshd.config.matchBlock","fields":{"ciphers":{"name":"ciphers","type":"\u0019\u0007","refs":["\"params\""],"title":"Ciphers configured for this SSH server","min_provider_version":"11.4.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"context":{"name":"context","type":"\u001bfile.context","title":"Contextual info, where this resource is located and defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"criteria":{"name":"criteria","type":"\u0007","is_mandatory":true,"title":"The match criteria for this block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostkeyalgorithms":{"name":"hostkeyalgorithms","type":"\u0019\u0007","refs":["\"params\""],"title":"Host key algorithms configured for this SSH server","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hostkeys":{"name":"hostkeys","type":"\u0019\u0007","refs":["\"params\""],"title":"Host keys configured for this SSH server","min_provider_version":"11.4.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kexs":{"name":"kexs","type":"\u0019\u0007","refs":["\"params\""],"title":"Key exchange algorithms configured for this SSH server","min_provider_version":"11.4.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"macs":{"name":"macs","type":"\u0019\u0007","refs":["\"params\""],"title":"MACs configured for this SSH server","min_provider_version":"11.4.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Configuration values in this block","provider":"go.mondoo.com/cnquery/v9/providers/os"},"permitRootLogin":{"name":"permitRootLogin","type":"\u0019\u0007","refs":["\"params\""],"title":"PermitRootLogin setting in SSH server","min_provider_version":"11.4.10","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"A block of SSH server configuration","private":true,"min_provider_version":"10.0.5","defaults":"criteria","context":"file.context","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudo":{"id":"sudo","name":"sudo","fields":{"approvalPlugins":{"name":"approvalPlugins","type":"\u0019\u001bsudo.plugin","refs":["\"plugins\""],"title":"Approval plugins (sudo 1.9.1+)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"auditPlugins":{"name":"auditPlugins","type":"\u0019\u001bsudo.plugin","refs":["\"plugins\""],"title":"Audit plugins (sudo 1.9.3+)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","title":"Whether sudo is installed and executable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ioPlugins":{"name":"ioPlugins","type":"\u0019\u001bsudo.plugin","refs":["\"plugins\""],"title":"I/O plugins (e.g., sudoers_io for log_input / log_output)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","title":"Path to the sudo binary","desc":"Filesystem-resolved location of the `sudo` binary on the asset (e.g., `/usr/bin/sudo`). Empty when sudo is not installed; check `installed` rather than testing this field for emptiness.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"plugin":{"name":"plugin","type":"\u001bsudo.plugin","title":"A sudo plugin reported by `sudo -V`","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"plugins":{"name":"plugins","type":"\u0019\u001bsudo.plugin","title":"All sudo plugins reported by `sudo -V`","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policyPlugin":{"name":"policyPlugin","type":"\u001bsudo.plugin","refs":["\"plugins\""],"title":"Policy plugin (typically sudoers_policy). Null when none is loaded.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pythonSupport":{"name":"pythonSupport","type":"\u0004","title":"Whether the build supports Python-based plugins","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudoers":{"name":"sudoers","type":"\u001bsudoers","title":"Associated sudoers configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"validate":{"name":"validate","type":"\u001bsudo.validation","title":"Result of `visudo -c`. Null when sudoers files cannot be read (e.g., running unprivileged against a mode-0440 /etc/sudoers).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"validation":{"name":"validation","type":"\u001bsudo.validation","title":"Result of validating sudoers configuration with `visudo -c`","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"version":{"name":"version","type":"\u0007","title":"Version string reported by `sudo -V` (e.g., \"1.9.5p3\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"Sudo binary and runtime metadata","desc":"Examine the installed `sudo` binary: where it lives on disk, the version it reports under `sudo -V`, which plugins are loaded (policy, I/O, audit, approval), whether the build supports Python-based plugins, and the result of `visudo -c` against the sudoers configuration. For sudoers configuration parsing, use the `sudoers` resource directly, or access it via this resource's `sudoers` field.","min_provider_version":"13.19.1","defaults":"version path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudo.plugin":{"id":"sudo.plugin","name":"sudo.plugin","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plugin name (e.g., \"sudoers_policy\", \"sudoers_io\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Full path to the plugin .so file when reported","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Plugin type: \"policy\", \"io\", \"audit\", or \"approval\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Plugin version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"A sudo plugin reported by `sudo -V`","private":true,"min_provider_version":"13.19.1","defaults":"name type version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudo.validation":{"id":"sudo.validation","name":"sudo.validation","fields":{"error":{"name":"error","type":"\u001bsudo.validation.error","title":"A single sudoers parse error reported by `visudo -c`","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"errors":{"name":"errors","type":"\u0019\u001bsudo.validation.error","is_mandatory":true,"title":"Parse errors. Empty when valid is true.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"valid":{"name":"valid","type":"\u0004","is_mandatory":true,"title":"True if `visudo -c` exits 0 with no errors","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Result of validating sudoers configuration with `visudo -c`","private":true,"min_provider_version":"13.19.1","defaults":"valid","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudo.validation.error":{"id":"sudo.validation.error","name":"sudo.validation.error","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where the error was found","provider":"go.mondoo.com/cnquery/v9/providers/os"},"line":{"name":"line","type":"\u0005","is_mandatory":true,"title":"Line number of the error","provider":"go.mondoo.com/cnquery/v9/providers/os"},"message":{"name":"message","type":"\u0007","is_mandatory":true,"title":"Error message text","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"A single sudoers parse error reported by `visudo -c`","private":true,"min_provider_version":"13.19.1","defaults":"file line","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudoers":{"id":"sudoers","name":"sudoers","fields":{"alias":{"name":"alias","type":"\u001bsudoers.alias","title":"Sudoers alias definition","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"aliases":{"name":"aliases","type":"\u0019\u001bsudoers.alias","refs":["\"files\""],"title":"Alias definitions (User_Alias, Host_Alias, Cmnd_Alias, Runas_Alias)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","refs":["\"files\""],"title":"Raw contents of all sudoers files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"default":{"name":"default","type":"\u001bsudoers.default","title":"Sudoers default setting","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"defaults":{"name":"defaults","type":"\u0019\u001bsudoers.default","refs":["\"files\""],"title":"Default settings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bfile","title":"List of files that make up the sudoers configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"userSpec":{"name":"userSpec","type":"\u001bsudoers.userSpec","title":"Sudoers user specification (permission entry)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"userSpecs":{"name":"userSpecs","type":"\u0019\u001bsudoers.userSpec","refs":["\"files\""],"title":"User permission specifications","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"sudo authorization configuration","desc":"Examine user specifications, defaults, and aliases across sudoers files","min_provider_version":"11.7.0","defaults":"files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudoers.alias":{"id":"sudoers.alias","name":"sudoers.alias","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"members":{"name":"members","type":"\u0019\u0007","is_mandatory":true,"title":"Values assigned to this alias","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Alias name (e.g., \"ADMINS\", \"WEBSERVERS\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type: user, host, cmnd, or runas","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Sudoers alias definition","private":true,"min_provider_version":"11.7.0","defaults":"type name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudoers.default":{"id":"sudoers.default","name":"sudoers.default","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"negated":{"name":"negated","type":"\u0004","is_mandatory":true,"title":"Whether parameter is negated (starts with !)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"operation":{"name":"operation","type":"\u0007","is_mandatory":true,"title":"Operation: \"=\", \"+=\", or \"-=\"","provider":"go.mondoo.com/cnquery/v9/providers/os"},"parameter":{"name":"parameter","type":"\u0007","is_mandatory":true,"title":"Parameter name (e.g., \"env_reset\", \"secure_path\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Raw Defaults line","provider":"go.mondoo.com/cnquery/v9/providers/os"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope: global, user, host, command, or runas","provider":"go.mondoo.com/cnquery/v9/providers/os"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Target (user/host/command/runas this applies to, if not global)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Value (if parameter takes a value)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Sudoers default setting","private":true,"min_provider_version":"11.7.0","defaults":"parameter","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sudoers.userSpec":{"id":"sudoers.userSpec","name":"sudoers.userSpec","fields":{"commands":{"name":"commands","type":"\u0019\u0007","is_mandatory":true,"title":"Commands or command aliases","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hosts":{"name":"hosts","type":"\u0019\u0007","is_mandatory":true,"title":"Hosts or host aliases this rule applies to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number in the file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"runasGroups":{"name":"runasGroups","type":"\u0019\u0007","is_mandatory":true,"title":"RunAs groups (groups the command can be run as)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"runasUsers":{"name":"runasUsers","type":"\u0019\u0007","is_mandatory":true,"title":"RunAs users (users the command can be run as)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to the command (NOPASSWD, SETENV, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"users":{"name":"users","type":"\u0019\u0007","is_mandatory":true,"title":"Users or user aliases this rule applies to","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Sudoers user specification (permission entry)","private":true,"min_provider_version":"11.7.0","defaults":"users hosts commands","provider":"go.mondoo.com/cnquery/v9/providers/os"},"swift":{"id":"swift","fields":{"package":{"name":"package","type":"\u001bswift.package","title":"Swift package dependency","desc":"Examine a single Swift package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `swift.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bswift.packages","title":"Swift package inventory (SPM and CocoaPods)","desc":"Examine all referenced packages with their resolved versions","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"swift.package":{"id":"swift.package","name":"swift.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the swift.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the package","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Swift package dependency","desc":"Examine a single Swift package: its unique `id`, `name`, `version`, `purl`, CPEs, and the files that contributed it. Iterated from `swift.packages`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"swift.packages":{"id":"swift.packages","name":"swift.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bswift.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for Swift package files","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bswift.package","title":"Swift package inventory (SPM and CocoaPods)","desc":"Examine all referenced packages with their resolved versions","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sysrc":{"id":"sysrc","name":"sysrc","fields":{"content":{"name":"content","type":"\u0007","refs":["\"files\""],"title":"Raw contents of all rc.conf files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entries":{"name":"entries","type":"\u0019\u001bsysrc.entry","refs":["\"files\""],"title":"Parsed key-value entries from all rc.conf files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bsysrc.entry","title":"Single rc.conf variable entry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bfile","title":"List of rc.conf files that make up the configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"title":"FreeBSD rc.conf system configuration","desc":"Examine variable assignments across rc.conf and rc.conf.local","min_provider_version":"13.2.6","defaults":"files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sysrc.entry":{"id":"sysrc.entry","name":"sysrc.entry","fields":{"file":{"name":"file","type":"\u0007","is_mandatory":true,"title":"File where this entry is defined","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Variable value","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Single rc.conf variable entry","private":true,"min_provider_version":"13.2.6","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd":{"id":"systemd","fields":{"resolved":{"name":"resolved","type":"\u001bsystemd.resolved","title":"systemd-resolved DNS resolver state","desc":"Examine the global DNS resolution configuration provided by systemd-resolved: whether the daemon is `active`, the effective DNS servers (`dns`) and `fallbackDns`, search `domains`, DNSSEC and DNS-over-TLS modes, LLMNR and multicast-DNS settings, the resolv.conf mode, and whether caching is enabled. Backed by `resolvectl status` for the Global scope.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"socket":{"name":"socket","type":"\u001bsystemd.socket","title":"systemd socket unit","desc":"Examine listen addresses, activation target, and run state","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"sockets":{"name":"sockets","type":"\u001bsystemd.sockets","title":"All systemd socket units on the system","desc":"Iterate every socket-activated unit for listen-address and target audits","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"target":{"name":"target","type":"\u001bsystemd.target","title":"systemd target unit","desc":"Examine a single systemd target — load state, active state, the unit file's enabled/disabled state, fragment path on disk, and the dependency lists (`wants`, `requires`, `after`, `before`) that determine which other units the target pulls in or orders around. Iterated from `systemd.targets`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"targets":{"name":"targets","type":"\u001bsystemd.targets","title":"All systemd target units on the system","desc":"Iterate every target unit to audit boot ordering, default target, and dependency wiring","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"timer":{"name":"timer","type":"\u001bsystemd.timer","title":"systemd timer unit","desc":"Examine schedule, activation target, enable state, and run status","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"timers":{"name":"timers","type":"\u001bsystemd.timers","title":"All systemd timer units on the system","desc":"Iterate every timer for filtering by schedule, target, or status","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"timesyncd":{"name":"timesyncd","type":"\u001bsystemd.timesyncd","title":"systemd-timesyncd NTP client state","desc":"Examine the SNTP client provided by systemd-timesyncd: whether the daemon is `active`, whether the system clock is currently `synchronized`, the configured `servers` and `fallbackServers`, the currently selected NTP `serverName` and `serverAddress`, the current poll interval, and the leap-second status. Backed by `timedatectl show` and `timedatectl show-timesync`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"systemd.resolved":{"id":"systemd.resolved","name":"systemd.resolved","fields":{"active":{"name":"active","type":"\u0004","title":"Whether the systemd-resolved daemon is currently active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cache":{"name":"cache","type":"\u0004","title":"Whether the resolver cache is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"currentDnsServer":{"name":"currentDnsServer","type":"\u0007","title":"DNS server currently in use for the Global scope","desc":"resolvectl picks one server from the configured `dns` list at a time; this is that selection. Empty when no global DNS server is active or the line is not emitted (e.g., when only per-link DNS is configured).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dns":{"name":"dns","type":"\u0019\u0007","title":"Effective DNS server addresses for the Global scope","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dnsOverTls":{"name":"dnsOverTls","type":"\u0007","title":"DNS-over-TLS mode (e.g., `yes`, `no`, `opportunistic`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dnssec":{"name":"dnssec","type":"\u0007","title":"DNSSEC mode","desc":"One of `yes`, `no`, or `allow-downgrade`. May appear as `no/unsupported` when the upstream resolver does not support DNSSEC.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"domains":{"name":"domains","type":"\u0019\u0007","title":"DNS search domains","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fallbackDns":{"name":"fallbackDns","type":"\u0019\u0007","title":"Fallback DNS servers used when no Link or Global DNS is configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"llmnr":{"name":"llmnr","type":"\u0007","title":"LLMNR mode (e.g., `yes`, `no`, `resolve`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"multicastDns":{"name":"multicastDns","type":"\u0007","title":"Multicast DNS mode (e.g., `yes`, `no`, `resolve`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"resolvConfMode":{"name":"resolvConfMode","type":"\u0007","title":"/etc/resolv.conf management mode (e.g., `stub`, `static`, `uplink`, `foreign`)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"systemd-resolved DNS resolver state","desc":"Examine the global DNS resolution configuration provided by systemd-resolved: whether the daemon is `active`, the effective DNS servers (`dns`) and `fallbackDns`, search `domains`, DNSSEC and DNS-over-TLS modes, LLMNR and multicast-DNS settings, the resolv.conf mode, and whether caching is enabled. Backed by `resolvectl status` for the Global scope.","min_provider_version":"13.16.10","defaults":"active dns","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.socket":{"id":"systemd.socket","name":"systemd.socket","fields":{"accept":{"name":"accept","type":"\u0004","title":"Whether the socket accepts connections (inetd-style)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"activates":{"name":"activates","type":"\u0007","title":"The unit that this socket activates (e.g., \"dbus.service\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Socket unit description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the socket is enabled (starts at boot)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","is_mandatory":true,"title":"Whether the socket unit file is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"listenAddresses":{"name":"listenAddresses","type":"\u0019\u0007","title":"Addresses, paths, or ports this socket listens on","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masked":{"name":"masked","type":"\u0004","is_mandatory":true,"title":"Whether the socket is masked","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the socket unit (without .socket suffix)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"running":{"name":"running","type":"\u0004","is_mandatory":true,"title":"Whether the socket is currently active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"static":{"name":"static","type":"\u0004","is_mandatory":true,"title":"Whether the socket is static (unit file has no [Install] section)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"systemd socket unit","desc":"Examine listen addresses, activation target, and run state","min_provider_version":"13.7.1","defaults":"name enabled running","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.sockets":{"id":"systemd.sockets","name":"systemd.sockets","fields":{"list":{"name":"list","type":"\u0019\u001bsystemd.socket","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bsystemd.socket","title":"All systemd socket units on the system","desc":"Iterate every socket-activated unit for listen-address and target audits","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.target":{"id":"systemd.target","name":"systemd.target","fields":{"activeState":{"name":"activeState","type":"\u0007","is_mandatory":true,"title":"Active state (e.g., active, inactive, failed, activating, deactivating)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"after":{"name":"after","type":"\u0019\u0007","is_mandatory":true,"title":"Units listed in After= (this target starts after them)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"before":{"name":"before","type":"\u0019\u0007","is_mandatory":true,"title":"Units listed in Before= (this target starts before them)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Target unit description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fragmentPath":{"name":"fragmentPath","type":"\u0007","is_mandatory":true,"title":"Path to the unit file on disk","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loadState":{"name":"loadState","type":"\u0007","is_mandatory":true,"title":"Load state (e.g., loaded, not-found, masked, error)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the target unit (without .target suffix)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"requires":{"name":"requires","type":"\u0019\u0007","is_mandatory":true,"title":"Units listed in Requires= (hard dependencies)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subState":{"name":"subState","type":"\u0007","is_mandatory":true,"title":"Sub state for the target (e.g., active, dead)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"unitFileState":{"name":"unitFileState","type":"\u0007","is_mandatory":true,"title":"Unit file state (e.g., enabled, disabled, static, masked, alias)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"wants":{"name":"wants","type":"\u0019\u0007","is_mandatory":true,"title":"Units listed in Wants= (best-effort dependencies)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"systemd target unit","desc":"Examine a single systemd target — load state, active state, the unit file's enabled/disabled state, fragment path on disk, and the dependency lists (`wants`, `requires`, `after`, `before`) that determine which other units the target pulls in or orders around. Iterated from `systemd.targets`.","private":true,"min_provider_version":"13.16.10","defaults":"name loadState activeState","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.targets":{"id":"systemd.targets","name":"systemd.targets","fields":{"list":{"name":"list","type":"\u0019\u001bsystemd.target","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bsystemd.target","title":"All systemd target units on the system","desc":"Iterate every target unit to audit boot ordering, default target, and dependency wiring","min_provider_version":"13.16.10","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.timer":{"id":"systemd.timer","name":"systemd.timer","fields":{"activates":{"name":"activates","type":"\u0007","title":"The unit that this timer activates (e.g., \"apt-daily.service\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Timer unit description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the timer is enabled (starts at boot)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","is_mandatory":true,"title":"Whether the timer unit file is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"masked":{"name":"masked","type":"\u0004","is_mandatory":true,"title":"Whether the timer is masked","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the timer unit (without .timer suffix)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"onCalendar":{"name":"onCalendar","type":"\u0007","title":"Calendar expression for the timer schedule (empty for monotonic timers)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"persistent":{"name":"persistent","type":"\u0004","title":"Whether missed runs are triggered on next start","provider":"go.mondoo.com/cnquery/v9/providers/os"},"running":{"name":"running","type":"\u0004","is_mandatory":true,"title":"Whether the timer is currently active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"static":{"name":"static","type":"\u0004","is_mandatory":true,"title":"Whether the timer is static (unit file has no [Install] section)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"systemd timer unit","desc":"Examine schedule, activation target, enable state, and run status","min_provider_version":"13.7.1","defaults":"name enabled running","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.timers":{"id":"systemd.timers","name":"systemd.timers","fields":{"list":{"name":"list","type":"\u0019\u001bsystemd.timer","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001bsystemd.timer","title":"All systemd timer units on the system","desc":"Iterate every timer for filtering by schedule, target, or status","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"systemd.timesyncd":{"id":"systemd.timesyncd","name":"systemd.timesyncd","fields":{"active":{"name":"active","type":"\u0004","title":"Whether the systemd-timesyncd daemon is currently active","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fallbackServers":{"name":"fallbackServers","type":"\u0019\u0007","title":"Fallback NTP servers used when none of `servers` are reachable","provider":"go.mondoo.com/cnquery/v9/providers/os"},"leapStatus":{"name":"leapStatus","type":"\u0007","title":"Leap second status (e.g., `normal`, `insert-second`, `delete-second`, `unknown`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pollIntervalUSec":{"name":"pollIntervalUSec","type":"\u0005","title":"Current poll interval in microseconds","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverAddress":{"name":"serverAddress","type":"\u0007","title":"IP address of the currently selected NTP server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serverName":{"name":"serverName","type":"\u0007","title":"Hostname of the currently selected NTP server","provider":"go.mondoo.com/cnquery/v9/providers/os"},"servers":{"name":"servers","type":"\u0019\u0007","title":"NTP servers from configuration (NTP= and DHCP)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"synchronized":{"name":"synchronized","type":"\u0004","title":"Whether the system clock is synchronized to a time source","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"systemd-timesyncd NTP client state","desc":"Examine the SNTP client provided by systemd-timesyncd: whether the daemon is `active`, whether the system clock is currently `synchronized`, the configured `servers` and `fallbackServers`, the currently selected NTP `serverName` and `serverAddress`, the current poll interval, and the leap-second status. Backed by `timedatectl show` and `timedatectl show-timesync`.","min_provider_version":"13.16.10","defaults":"active synchronized serverName","provider":"go.mondoo.com/cnquery/v9/providers/os"},"terraform":{"id":"terraform","fields":{"package":{"name":"package","type":"\u001bterraform.package","title":"Terraform provider dependency","desc":"Examine a single Terraform provider pinned in `.terraform.lock.hcl`: its unique `id`, `name` in `namespace/type` form, `version`, `purl`, CPEs, and the lock files that reference it. Iterated from `terraform.packages`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bterraform.packages","title":"Terraform provider inventory (SBOM cataloger)","desc":"Examine provider versions pinned in .terraform.lock.hcl Note: the terraform.* namespace is also used by the dedicated Terraform provider for IaC resource scanning. These SBOM resources focus on provider version inventory from .terraform.lock.hcl, not Terraform configuration analysis.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"terraform.package":{"id":"terraform.package","name":"terraform.package","fields":{"cpes":{"name":"cpes","type":"\u0019\u001bcpe","title":"Common Platform Enumeration (CPE) for the provider","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID is the terraform.package unique identifier","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","title":"Name of the provider (namespace/type)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"Version of the provider","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Terraform provider dependency","desc":"Examine a single Terraform provider pinned in `.terraform.lock.hcl`: its unique `id`, `name` in `namespace/type` form, `version`, `purl`, CPEs, and the lock files that reference it. Iterated from `terraform.packages`.","min_provider_version":"13.10.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"terraform.packages":{"id":"terraform.packages","name":"terraform.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bterraform.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to search for .terraform.lock.hcl","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bterraform.package","title":"Terraform provider inventory (SBOM cataloger)","desc":"Examine provider versions pinned in .terraform.lock.hcl Note: the terraform.* namespace is also used by the dedicated Terraform provider for IaC resource scanning. These SBOM resources focus on provider version inventory from .terraform.lock.hcl, not Terraform configuration analysis.","min_provider_version":"13.10.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"trae":{"id":"trae","name":"trae","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Trae configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001btrae.skill","title":"Trae skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001btrae.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Trae AI assistant (ByteDance) instance","desc":"Examine installed skills URL: https://trae.ai/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"trae.skill":{"id":"trae.skill","name":"trae.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Trae skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"ufw":{"id":"ufw","name":"ufw","fields":{"application":{"name":"application","type":"\u001bufw.application","title":"UFW application profile from /etc/ufw/applications.d/","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"applications":{"name":"applications","type":"\u0019\u001bufw.application","title":"Application profiles from /etc/ufw/applications.d/","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultIncoming":{"name":"defaultIncoming","type":"\u0007","title":"Default policy for incoming traffic (e.g., \"deny\", \"allow\", \"reject\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultOutgoing":{"name":"defaultOutgoing","type":"\u0007","title":"Default policy for outgoing traffic (e.g., \"allow\", \"deny\", \"reject\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultRouted":{"name":"defaultRouted","type":"\u0007","title":"Default policy for routed traffic (e.g., \"deny\", \"allow\", \"reject\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logging":{"name":"logging","type":"\u0007","title":"Logging level (off, low, medium, high, full)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rule":{"name":"rule","type":"\u001bufw.rule","title":"Individual UFW rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"rules":{"name":"rules","type":"\u0019\u001bufw.rule","title":"All UFW rules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","title":"Whether UFW is active (\"active\", \"inactive\", \"not installed\")","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"UFW (Uncomplicated Firewall) state and rules","desc":"Examine status, default policies, configured rules, and application profiles","min_provider_version":"13.2.8","defaults":"status rules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ufw.application":{"id":"ufw.application","name":"ufw.application","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the application","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name (e.g., \"Nginx Full\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ports":{"name":"ports","type":"\u0007","is_mandatory":true,"title":"Port specification (e.g., \"80/tcp\", \"80,443/tcp\", \"80,443/tcp|443/udp\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Short title describing the application","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"UFW application profile from /etc/ufw/applications.d/","private":true,"min_provider_version":"13.2.8","defaults":"name ports","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ufw.rule":{"id":"ufw.rule","name":"ufw.rule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action (ALLOW, DENY, REJECT, LIMIT)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"direction":{"name":"direction","type":"\u0007","is_mandatory":true,"title":"Direction (IN, OUT, FWD)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"from":{"name":"from","type":"\u0007","is_mandatory":true,"title":"Source address or subnet (e.g., \"192.168.1.0/24\", \"Anywhere\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"interface":{"name":"interface","type":"\u0007","is_mandatory":true,"title":"Network interface (e.g., \"eth0\"), empty if not specified","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ipv6":{"name":"ipv6","type":"\u0004","is_mandatory":true,"title":"Whether this is an IPv6 rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Rule number (sequential across IPv4 and IPv6 rules; may differ from `ufw status numbered`)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"port":{"name":"port","type":"\u0007","is_mandatory":true,"title":"Port or port range (e.g., \"22\", \"6000:6007\", \"any\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol (tcp, udp, any)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"raw":{"name":"raw","type":"\u0007","is_mandatory":true,"title":"Raw rule text as reported by ufw","provider":"go.mondoo.com/cnquery/v9/providers/os"},"to":{"name":"to","type":"\u0007","is_mandatory":true,"title":"Destination address or subnet","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Individual UFW rule","private":true,"min_provider_version":"13.2.8","defaults":"action direction port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"usb":{"id":"usb","name":"usb","fields":{"device":{"name":"device","type":"\u001busb.device","title":"Experimental: USB device","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"experimental"},"devices":{"name":"devices","type":"\u0019\u001busb.device","title":"List of USB devices","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"USB device inventory (experimental)","desc":"Examine attached USB devices with vendor, product, class, and serial","min_provider_version":"11.3.43","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"experimental"},"usb.device":{"id":"usb.device","name":"usb.device","fields":{"class":{"name":"class","type":"\u0007","is_mandatory":true,"title":"USB device class","provider":"go.mondoo.com/cnquery/v9/providers/os"},"className":{"name":"className","type":"\u0007","is_mandatory":true,"title":"USB device class name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"isRemovable":{"name":"isRemovable","type":"\u0004","is_mandatory":true,"title":"Removable device","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"USB manufacturer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"USB device name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"productId":{"name":"productId","type":"\u0007","is_mandatory":true,"title":"USB device product id","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"USB protocol code within the device class","provider":"go.mondoo.com/cnquery/v9/providers/os"},"serial":{"name":"serial","type":"\u0007","is_mandatory":true,"title":"USB device serial number","provider":"go.mondoo.com/cnquery/v9/providers/os"},"speed":{"name":"speed","type":"\u0007","is_mandatory":true,"title":"USB speed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"subclass":{"name":"subclass","type":"\u0007","is_mandatory":true,"title":"USB device subclass","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vendorId":{"name":"vendorId","type":"\u0007","is_mandatory":true,"title":"USB device vendor id","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"USB device version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Experimental: USB device","private":true,"min_provider_version":"11.3.43","defaults":"manufacturer name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"experimental"},"user":{"id":"user","name":"user","fields":{"authorizedkeys":{"name":"authorizedkeys","type":"\u001bauthorizedkeys","refs":["\"home\""],"title":"List of authorized keys","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the user is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gid":{"name":"gid","type":"\u0005","is_mandatory":true,"title":"User's group ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"group":{"name":"group","type":"\u001bgroup","refs":["\"gid\""],"title":"Group of which user is a member","provider":"go.mondoo.com/cnquery/v9/providers/os"},"home":{"name":"home","type":"\u0007","is_mandatory":true,"title":"Home folder","provider":"go.mondoo.com/cnquery/v9/providers/os"},"loggedIn":{"name":"loggedIn","type":"\u0004","title":"Whether the user is currently logged in","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the user","provider":"go.mondoo.com/cnquery/v9/providers/os"},"shell":{"name":"shell","type":"\u0007","is_mandatory":true,"title":"Default shell configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sid":{"name":"sid","type":"\u0007","is_mandatory":true,"title":"User's security identifier (Windows)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sshkeys":{"name":"sshkeys","type":"\u0019\u001bprivatekey","title":"List of SSH keys","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uid":{"name":"uid","type":"\u0005","is_mandatory":true,"title":"User ID","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"User account on the system","desc":"Examine a single local user account: numeric UID and primary GID (Windows SID where applicable), name, home directory, configured login shell, and an `enabled` flag. Surfaces the typed primary `group` reference, the `authorizedkeys` resource that parses the user's `~/.ssh/authorized_keys`, the SSH private keys discovered in the user's home, and a `loggedIn` predicate that reflects whether the user currently has an active session. Used for identity audits, dormant-account hygiene, and SSH-key inventories.","min_provider_version":"9.0.0","defaults":"name uid gid","provider":"go.mondoo.com/cnquery/v9/providers/os"},"users":{"id":"users","name":"users","fields":{"list":{"name":"list","type":"\u0019\u001buser","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"list_type":"\u001buser","title":"All user accounts configured on the system","desc":"Iterable collection of every local `user` on the asset. Use it as the entry point for fleet-wide identity audits — e.g., asserting that every account with UID \u003c 1000 is enabled, that no account shares another's home directory, or that no human user has the shell set to `/bin/bash` outside an approved list.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vscode":{"id":"vscode","name":"vscode","fields":{"extension":{"name":"extension","type":"\u001bvscode.extension","title":"Visual Studio Code extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"extensions":{"name":"extensions","type":"\u0019\u001bvscode.extension","title":"All installed VS Code extensions across all users","provider":"go.mondoo.com/cnquery/v9/providers/os"},"paths":{"name":"paths","type":"\u0019\u0007","title":"Paths searched for VS Code extensions","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Visual Studio Code (and forks)","desc":"Examine installed extensions across VS Code, Cursor, Windsurf, and similar editors","min_provider_version":"11.4.86","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vscode.extension":{"id":"vscode.extension","name":"vscode.extension","fields":{"categories":{"name":"categories","type":"\u0019\u0007","is_mandatory":true,"title":"Extension categories","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Extension description from package.json","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Extension display name from package.json","provider":"go.mondoo.com/cnquery/v9/providers/os"},"editor":{"name":"editor","type":"\u0007","is_mandatory":true,"title":"Editor application (e.g., Visual Studio Code, Cursor, Windsurf)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Unique extension identifier (publisher.name format)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name from package.json","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the extension directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"publisher":{"name":"publisher","type":"\u0007","is_mandatory":true,"title":"Extension publisher from package.json","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Extension version from package.json","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vscodeVersion":{"name":"vscodeVersion","type":"\u0007","is_mandatory":true,"title":"VS Code engine version compatibility","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Visual Studio Code extension","private":true,"min_provider_version":"11.4.86","defaults":"editor name version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vuln":{"id":"vuln","fields":{"advisory":{"name":"advisory","type":"\u001bvuln.advisory","title":"Advisory information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"cve":{"name":"cve","type":"\u001bvuln.cve","title":"CVE information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"package":{"name":"package","type":"\u001bvuln.package","title":"Package information relevant for vulnerability management","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"vuln.advisory":{"id":"vuln.advisory","name":"vuln.advisory","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the advisory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Advisory ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modified":{"name":"modified","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"published":{"name":"published","type":"\t","is_mandatory":true,"title":"Advisory publication date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Title of the advisory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"worstScore":{"name":"worstScore","type":"\u001baudit.cvss","is_mandatory":true,"title":"Worst CVSS score of all assigned CVEs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Advisory information","private":true,"min_provider_version":"9.1.15","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vuln.cve":{"id":"vuln.cve","name":"vuln.cve","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"CVE ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"modified":{"name":"modified","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"published":{"name":"published","type":"\t","is_mandatory":true,"title":"Publication date","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"CVE state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Summary description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"unscored":{"name":"unscored","type":"\u0004","is_mandatory":true,"title":"Whether the CVE has a CVSS score","provider":"go.mondoo.com/cnquery/v9/providers/os"},"worstScore":{"name":"worstScore","type":"\u001baudit.cvss","is_mandatory":true,"title":"Worst CVSS score of all assigned CVEs","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"CVE information","private":true,"min_provider_version":"9.1.15","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vuln.package":{"id":"vuln.package","name":"vuln.package","fields":{"arch":{"name":"arch","type":"\u0007","is_mandatory":true,"title":"Architecture of this package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"available":{"name":"available","type":"\u0007","is_mandatory":true,"title":"Available package version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Package version","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Package information relevant for vulnerability management","private":true,"min_provider_version":"9.1.15","defaults":"name version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vulnmgmt":{"id":"vulnmgmt","name":"vulnmgmt","fields":{"advisories":{"name":"advisories","type":"\u0019\u001bvuln.advisory","title":"List of all Advisories affecting the asset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cves":{"name":"cves","type":"\u0019\u001bvuln.cve","title":"List of all CVEs affecting the asset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastAssessment":{"name":"lastAssessment","type":"\t","title":"Last time the vulnerability information was updated","provider":"go.mondoo.com/cnquery/v9/providers/os"},"packages":{"name":"packages","type":"\u0019\u001bvuln.package","title":"List of all packages affected by vulnerabilities","provider":"go.mondoo.com/cnquery/v9/providers/os"},"stats":{"name":"stats","type":"\u001baudit.cvss","title":"Statistics about the vulnerabilities","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Asset vulnerability assessment","desc":"Top-level entry point for vulnerability data Mondoo derives for an asset by joining its installed-package inventory and platform identity against the curated CVE / advisory feed. Exposes every CVE affecting the asset, every vendor advisory that mentions one of those CVEs, the affected packages with their currently-installed and patched-available versions, the timestamp of the last assessment run, and the rolled-up CVSS statistics — the surface used to score asset risk and to drive patch-status policies.","min_provider_version":"9.1.15","provider":"go.mondoo.com/cnquery/v9/providers/os"},"warp":{"id":"warp","name":"warp","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Warp configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bwarp.skill","title":"Warp skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bwarp.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Warp AI terminal instance","desc":"Examine installed skills URL: https://www.warp.dev/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"warp.skill":{"id":"warp.skill","name":"warp.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Warp skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"windows":{"id":"windows","name":"windows","fields":{"bitlocker":{"name":"bitlocker","type":"\u001bwindows.bitlocker","title":"Windows BitLocker drive encryption","desc":"Examine encryption, lock, and protection status across BitLocker volumes","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"computerInfo":{"name":"computerInfo","type":"\n","title":"A consolidated object of system and operating system properties","desc":"See https://learn.microsoft.com/en-us/dotnet/api/microsoft.powershell.commands.computerinfo?view=powershellsdk-1.1.0 for more information.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"eventlog":{"name":"eventlog","type":"\u001bwindows.eventlog","title":"Windows Event Log channel configuration","desc":"Examine the size and retention policy of a single Windows Event Log channel. The `name` field selects the channel as it appears under the EventLog registry tree — for example `windows.eventlog(name: \"Security\")` or `windows.eventlog(name: \"Application\")`. `maxSizeKB` reports the maximum log file size in KB and `retention` decodes how the channel behaves when that size is reached. Each field resolves the Group Policy value first, then the effective channel configuration, and finally the documented Windows default when neither is set.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"firewall":{"name":"firewall","type":"\u001bwindows.firewall","title":"Windows Firewall (Advanced Security)","desc":"Examine global settings, per-profile defaults, and individual firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"hotfix":{"name":"hotfix","type":"\u001bwindows.hotfix","title":"Windows hotfix","desc":"Examine a single installed Windows hotfix: its `hotfixId` (e.g., \"KB5034441\"), hotfix `description` type, knowledge-base `caption` URL, installation date, and the user who installed it. Iterated from `windows.hotfixes()` to audit patch compliance.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"hotfixes":{"name":"hotfixes","type":"\u0019\u001bwindows.hotfix","title":"Hotfixes installed on the computer","provider":"go.mondoo.com/cnquery/v9/providers/os"},"optionalFeature":{"name":"optionalFeature","type":"\u001bwindows.optionalFeature","title":"Windows optional feature resource (desktop-only)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"optionalFeatures":{"name":"optionalFeatures","type":"\u0019\u001bwindows.optionalFeature","title":"Information about optional features in a Windows image.","min_provider_version":"11.2.6","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rdp":{"name":"rdp","type":"\u001bwindows.rdp","title":"Windows Remote Desktop / Terminal Services configuration","desc":"Examine the effective Remote Desktop (Terminal Services) policy posture: whether Network Level Authentication is required, the negotiated security layer and minimum client encryption level, device and resource redirection toggles, credential handling, and session idle / disconnection time limits. Each field resolves the Group Policy value (HKLM\\SOFTWARE\\Policies\\Microsoft \\Windows NT\\Terminal Services) first, then the per-listener configuration (HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp), and finally the documented Windows default when neither is set — so audits can assert the effective state without handling missing registry values.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"security":{"name":"security","type":"\u001bwindows.security","title":"Windows registered security products","desc":"Examine antivirus, anti-spyware, and firewall providers from Security Center","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"serverFeature":{"name":"serverFeature","type":"\u001bwindows.serverFeature","title":"Windows Server feature resource","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"serverFeatures":{"name":"serverFeatures","type":"\u0019\u001bwindows.serverFeature","title":"Information about Windows Server roles, role services, and features that are available for installation and installed on a specified server.","min_provider_version":"11.2.6","provider":"go.mondoo.com/cnquery/v9/providers/os"},"tpm":{"name":"tpm","type":"\u001bwindows.tpm","title":"Windows Trusted Platform Module (TPM)","desc":"Examine the Trusted Platform Module state: whether a TPM is present, ready for use, enabled, and activated, along with its major specification version and manufacturer version string. Presence and a 2.0 specification version are prerequisites for Windows 11 readiness and several BitLocker and device-health controls. On a system without a TPM the fields resolve cleanly — present is false — rather than erroring.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"update":{"name":"update","type":"\u001bwindows.update","title":"Windows Update Agent","desc":"Use to examine how a Windows host receives updates and what it has applied or has pending. The `config` field surfaces Windows Update Agent configuration and freshness — the effective catalog source, WSUS settings, the last successful detection / download / install times, and whether a reboot is pending. `installed` lists the updates the agent has applied (the installed-KB history), and `available` lists updates the agent has found but not yet installed. Configuration is read from the registry and works even on connections that cannot run commands; the installed and available collections fall back to the Windows Update Agent COM API when commands are available.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"title":"Windows-specific operating system surfaces","desc":"Examine computer info, hotfixes, and server / optional features","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.bitlocker":{"id":"windows.bitlocker","name":"windows.bitlocker","fields":{"volume":{"name":"volume","type":"\u001bwindows.bitlocker.volume","title":"Windows BitLocker volume","desc":"Examine a single BitLocker-managed volume: the `deviceID`, `driveLetter`, `conversionStatus` (encryption/decryption progress), `encryptionMethod` (algorithm and key size), `lockStatus` (0 = accessible, 1 = locked), `persistentVolumeID`, `protectionStatus` (0 = off, 1 = on, 2 = unknown), and BitLocker `version`. Iterated from `windows.bitlocker.volumes()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"volumes":{"name":"volumes","type":"\u0019\u001bwindows.bitlocker.volume","title":"Windows BitLocker volumes","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows BitLocker drive encryption","desc":"Examine encryption, lock, and protection status across BitLocker volumes","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.bitlocker.volume":{"id":"windows.bitlocker.volume","name":"windows.bitlocker.volume","fields":{"conversionStatus":{"name":"conversionStatus","type":"\n","is_mandatory":true,"title":"Status of the encryption or decryption on the volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"deviceID":{"name":"deviceID","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"driveLetter":{"name":"driveLetter","type":"\u0007","is_mandatory":true,"title":"Drive letter of the volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"encryptionMethod":{"name":"encryptionMethod","type":"\n","is_mandatory":true,"title":"Encryption algorithm and key size used on the volume","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lockStatus":{"name":"lockStatus","type":"\u0005","is_mandatory":true,"title":"Whether the contents of the volume are accessible from Windows","desc":"0 = Full contents of the volume are accessible 1 = All or a portion of the contents of the volume are not accessible","provider":"go.mondoo.com/cnquery/v9/providers/os"},"persistentVolumeID":{"name":"persistentVolumeID","type":"\u0007","is_mandatory":true,"title":"Persistent identifier for the volume on this system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"protectionStatus":{"name":"protectionStatus","type":"\n","is_mandatory":true,"title":"Status of the volume, whether or not BitLocker is protecting the volume","desc":"0 = Protection off 1 = Protection on 2 = Protection unknown","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\n","is_mandatory":true,"title":"BitLocker Full Volume Encryption metadata version of the volume","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows BitLocker volume","desc":"Examine a single BitLocker-managed volume: the `deviceID`, `driveLetter`, `conversionStatus` (encryption/decryption progress), `encryptionMethod` (algorithm and key size), `lockStatus` (0 = accessible, 1 = locked), `persistentVolumeID`, `protectionStatus` (0 = off, 1 = on, 2 = unknown), and BitLocker `version`. Iterated from `windows.bitlocker.volumes()`.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.eventlog":{"id":"windows.eventlog","name":"windows.eventlog","fields":{"maxSizeKB":{"name":"maxSizeKB","type":"\u0005","title":"Maximum log file size in KB (MaxSize)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Event Log channel name (for example Application, Security, Setup, or System)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"overwriteAsNeeded":{"name":"overwriteAsNeeded","type":"\u0004","title":"Whether the channel overwrites events as needed when full (Retention 0)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"retention":{"name":"retention","type":"\u0007","title":"Retention behavior when the log reaches its maximum size","desc":"One of \"overwrite_as_needed\" (Retention 0), \"overwrite_by_days\" (a positive retention period in seconds), or \"never_overwrite\" (Retention 4294967295 or -1).","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Windows Event Log channel configuration","desc":"Examine the size and retention policy of a single Windows Event Log channel. The `name` field selects the channel as it appears under the EventLog registry tree — for example `windows.eventlog(name: \"Security\")` or `windows.eventlog(name: \"Application\")`. `maxSizeKB` reports the maximum log file size in KB and `retention` decodes how the channel behaves when that size is reached. Each field resolves the Group Policy value first, then the effective channel configuration, and finally the documented Windows default when neither is set.","min_provider_version":"13.22.2","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.firewall":{"id":"windows.firewall","name":"windows.firewall","fields":{"profile":{"name":"profile","type":"\u001bwindows.firewall.profile","title":"Windows Firewall profile entry","desc":"Examine the per-profile firewall settings for one of the three Windows Firewall profiles (Domain, Private, Public): whether the firewall is enabled, default inbound and outbound actions, local rule merge policies, unicast response behavior, stealth mode for IPsec, and log settings including max log size, allowed/blocked packet logging, and log file name.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"profiles":{"name":"profiles","type":"\u0019\u001bwindows.firewall.profile","title":"Settings that apply to the per-profile configurations of the Windows Firewall with Advanced Security","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rule":{"name":"rule","type":"\u001bwindows.firewall.rule","title":"Windows Firewall rule entry","desc":"Examine a single Windows Firewall rule: its unique `instanceID`, display name, description, group, enabled state, traffic direction (inbound/ outbound), action (allow/block), edge traversal policy, and enforcement status. Iterated from `windows.firewall.rules()` to audit which rules are active and whether they match expected policy.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"rules":{"name":"rules","type":"\u0019\u001bwindows.firewall.rule","title":"Firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\n","title":"Global firewall settings","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Firewall (Advanced Security)","desc":"Examine global settings, per-profile defaults, and individual firewall rules","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.firewall.profile":{"id":"windows.firewall.profile","name":"windows.firewall.profile","fields":{"allowInboundRules":{"name":"allowInboundRules","type":"\u0005","is_mandatory":true,"title":"Whether administrators can create firewall rules that allow unsolicited inbound traffic (if 0, such rules are ignored)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowLocalFirewallRules":{"name":"allowLocalFirewallRules","type":"\u0005","is_mandatory":true,"title":"Whether local firewall rules should merge into the effective policy along with group policy settings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowLocalIPsecRules":{"name":"allowLocalIPsecRules","type":"\u0005","is_mandatory":true,"title":"Whether local IPsec rules should merge into the effective policy along with rules from group policy","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowUnicastResponseToMulticast":{"name":"allowUnicastResponseToMulticast","type":"\u0005","is_mandatory":true,"title":"Whether to allow unicast responses to multicast traffic","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowUserApps":{"name":"allowUserApps","type":"\u0005","is_mandatory":true,"title":"Whether to respect user allowed applications created in the legacy firewall","provider":"go.mondoo.com/cnquery/v9/providers/os"},"allowUserPorts":{"name":"allowUserPorts","type":"\u0005","is_mandatory":true,"title":"Whether to respect globally opened ports created in the legacy firewall","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultInboundAction":{"name":"defaultInboundAction","type":"\u0005","is_mandatory":true,"title":"Default action for inbound traffic","provider":"go.mondoo.com/cnquery/v9/providers/os"},"defaultOutboundAction":{"name":"defaultOutboundAction","type":"\u0005","is_mandatory":true,"title":"Default action for outbound traffic","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enableStealthModeForIPsec":{"name":"enableStealthModeForIPsec","type":"\u0005","is_mandatory":true,"title":"Whether to use stealth mode for IPsec-protected traffic","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0005","is_mandatory":true,"title":"Whether the firewall is enabled on this profile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"instanceID":{"name":"instanceID","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/os"},"logAllowed":{"name":"logAllowed","type":"\u0005","is_mandatory":true,"title":"Whether to log allowed packets","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logBlocked":{"name":"logBlocked","type":"\u0005","is_mandatory":true,"title":"Whether to log blocked traffic","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logFileName":{"name":"logFileName","type":"\u0007","is_mandatory":true,"title":"Filename in which to store the firewall log","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logIgnored":{"name":"logIgnored","type":"\u0005","is_mandatory":true,"title":"Whether to log an event when rules are ignored","provider":"go.mondoo.com/cnquery/v9/providers/os"},"logMaxSizeKilobytes":{"name":"logMaxSizeKilobytes","type":"\u0005","is_mandatory":true,"title":"Maximum size the log file can reach before being rotated","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the profile","provider":"go.mondoo.com/cnquery/v9/providers/os"},"notifyOnListen":{"name":"notifyOnListen","type":"\u0005","is_mandatory":true,"title":"Whether to notify users when an application listens on a port that is closed","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Firewall profile entry","desc":"Examine the per-profile firewall settings for one of the three Windows Firewall profiles (Domain, Private, Public): whether the firewall is enabled, default inbound and outbound actions, local rule merge policies, unicast response behavior, stealth mode for IPsec, and log settings including max log size, allowed/blocked packet logging, and log file name.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.firewall.rule":{"id":"windows.firewall.rule","name":"windows.firewall.rule","fields":{"action":{"name":"action","type":"\u0005","is_mandatory":true,"title":"Specifies the action to take on traffic that matches this rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Brief description of the rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"direction":{"name":"direction","type":"\u0005","is_mandatory":true,"title":"Specifies which direction of traffic to match with this rule","desc":"Values: inbound (1), outbound (2).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayGroup":{"name":"displayGroup","type":"\u0007","is_mandatory":true,"title":"The group that this rule belongs to","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Localized name of this rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"edgeTraversalPolicy":{"name":"edgeTraversalPolicy","type":"\u0005","is_mandatory":true,"title":"Specifies how this firewall rule will handle edge traversal cases","desc":"Values: block (0), allow (1), defer to user (2), defer to app (3).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0005","is_mandatory":true,"title":"Whether this rule is administratively enabled or disabled","desc":"Values: enabled (1), disabled (2).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enforcementStatus":{"name":"enforcementStatus","type":"\u0007","is_mandatory":true,"title":"Whether this object is retrieved from the ActiveStore","provider":"go.mondoo.com/cnquery/v9/providers/os"},"instanceID":{"name":"instanceID","type":"\u0007","is_mandatory":true,"title":"A string that uniquely identifies this instance within the policy store","provider":"go.mondoo.com/cnquery/v9/providers/os"},"localOnlyMapping":{"name":"localOnlyMapping","type":"\u0004","is_mandatory":true,"title":"Whether to group UDP packets into conversations based only on the local address and port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"looseSourceMapping":{"name":"looseSourceMapping","type":"\u0004","is_mandatory":true,"title":"Whether to group UDP packets into conversations based on the local address, local port, and remote port","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the rule","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policyStoreSource":{"name":"policyStoreSource","type":"\u0007","is_mandatory":true,"title":"Contains the path to the policy store where this rule originally came from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policyStoreSourceType":{"name":"policyStoreSourceType","type":"\u0005","is_mandatory":true,"title":"Describes the type of policy store where this rule originally came from","provider":"go.mondoo.com/cnquery/v9/providers/os"},"primaryStatus":{"name":"primaryStatus","type":"\u0005","is_mandatory":true,"title":"PrimaryStatus provides a high level status value","desc":"Values: unknown (0), OK (1), degraded (2), error (3).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Detailed status of the rule","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Firewall rule entry","desc":"Examine a single Windows Firewall rule: its unique `instanceID`, display name, description, group, enabled state, traffic direction (inbound/ outbound), action (allow/block), edge traversal policy, and enforcement status. Iterated from `windows.firewall.rules()` to audit which rules are active and whether they match expected policy.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.hotfix":{"id":"windows.hotfix","name":"windows.hotfix","fields":{"caption":{"name":"caption","type":"\u0007","is_mandatory":true,"title":"Reference to knowledge base","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Type of hotfix (e.g., Update or Security Update)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hotfixId":{"name":"hotfixId","type":"\u0007","is_mandatory":true,"title":"Hotfix ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installedBy":{"name":"installedBy","type":"\u0007","is_mandatory":true,"title":"User that installed the hotfix","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installedOn":{"name":"installedOn","type":"\t","is_mandatory":true,"title":"Date when the hotfix was installed","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"hotfixId","type":"\u0007"}]},"title":"Windows hotfix","desc":"Examine a single installed Windows hotfix: its `hotfixId` (e.g., \"KB5034441\"), hotfix `description` type, knowledge-base `caption` URL, installation date, and the user who installed it. Iterated from `windows.hotfixes()` to audit patch compliance.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.optionalFeature":{"id":"windows.optionalFeature","name":"windows.optionalFeature","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Feature description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Feature name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the feature is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Command ID of optional feature","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0005","is_mandatory":true,"title":"Feature installation state","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Windows optional feature resource (desktop-only)","private":true,"min_provider_version":"11.2.6","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.rdp":{"id":"windows.rdp","name":"windows.rdp","fields":{"alwaysPromptForPassword":{"name":"alwaysPromptForPassword","type":"\u0004","title":"Whether the user is always prompted for a password on connection (fPromptForPassword)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"comPortRedirectionDisabled":{"name":"comPortRedirectionDisabled","type":"\u0004","title":"Whether client COM port redirection is disabled (fDisableCcm)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"deleteTempDirsOnExit":{"name":"deleteTempDirsOnExit","type":"\u0004","title":"Whether temporary folders are deleted when the session exits (DeleteTempDirsOnExit)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"driveRedirectionDisabled":{"name":"driveRedirectionDisabled","type":"\u0004","title":"Whether client drive redirection is disabled (fDisableCdm)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lptPortRedirectionDisabled":{"name":"lptPortRedirectionDisabled","type":"\u0004","title":"Whether client LPT port redirection is disabled (fDisableLPT)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxDisconnectionTimeMs":{"name":"maxDisconnectionTimeMs","type":"\u0005","title":"Time limit in milliseconds for disconnected sessions, 0 to never end them (MaxDisconnectionTime)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"maxIdleTimeMs":{"name":"maxIdleTimeMs","type":"\u0005","title":"Time limit in milliseconds for active but idle sessions, 0 for no limit (MaxIdleTime)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"minEncryptionLevel":{"name":"minEncryptionLevel","type":"\u0005","title":"Minimum client connection encryption level (MinEncryptionLevel)","desc":"One of 1 (Low), 2 (Client Compatible), 3 (High), or 4 (FIPS Compliant).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"networkLevelAuthentication":{"name":"networkLevelAuthentication","type":"\u0004","title":"Whether Network Level Authentication is required (UserAuthentication)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"passwordSavingDisabled":{"name":"passwordSavingDisabled","type":"\u0004","title":"Whether saving of Remote Desktop passwords is disabled (DisablePasswordSaving)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pnpDeviceRedirectionDisabled":{"name":"pnpDeviceRedirectionDisabled","type":"\u0004","title":"Whether supported Plug and Play device redirection is disabled (fDisablePNPRedir)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"secureRpcRequired":{"name":"secureRpcRequired","type":"\u0004","title":"Whether secure RPC communication is required (fEncryptRPCTraffic)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"securityLayer":{"name":"securityLayer","type":"\u0005","title":"RDP security layer (SecurityLayer)","desc":"One of 0 (native RDP), 1 (Negotiate), or 2 (SSL/TLS).","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Remote Desktop / Terminal Services configuration","desc":"Examine the effective Remote Desktop (Terminal Services) policy posture: whether Network Level Authentication is required, the negotiated security layer and minimum client encryption level, device and resource redirection toggles, credential handling, and session idle / disconnection time limits. Each field resolves the Group Policy value (HKLM\\SOFTWARE\\Policies\\Microsoft \\Windows NT\\Terminal Services) first, then the per-listener configuration (HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp), and finally the documented Windows default when neither is set — so audits can assert the effective state without handling missing registry values.","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.security":{"id":"windows.security","name":"windows.security","fields":{"health":{"name":"health","type":"\u001bwindows.security.health","title":"Windows Security Center health","desc":"Examine firewall, antivirus, anti-spyware, Auto-Update, UAC, and IE settings","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"product":{"name":"product","type":"\u001bwindows.security.product","title":"Private Windows security product","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"products":{"name":"products","type":"\u0019\u001bwindows.security.product","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows registered security products","desc":"Examine antivirus, anti-spyware, and firewall providers from Security Center","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.security.health":{"id":"windows.security.health","name":"windows.security.health","fields":{"antiSpyware":{"name":"antiSpyware","type":"\n","is_mandatory":true,"title":"Anti-spyware protection status and details","provider":"go.mondoo.com/cnquery/v9/providers/os"},"antiVirus":{"name":"antiVirus","type":"\n","is_mandatory":true,"title":"Installed antivirus software status and details","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoUpdate":{"name":"autoUpdate","type":"\n","is_mandatory":true,"title":"Windows Update automatic update settings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"firewall":{"name":"firewall","type":"\n","is_mandatory":true,"title":"Windows Firewall status and configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"},"internetSettings":{"name":"internetSettings","type":"\n","is_mandatory":true,"title":"Internet settings information","provider":"go.mondoo.com/cnquery/v9/providers/os"},"securityCenterService":{"name":"securityCenterService","type":"\n","is_mandatory":true,"title":"Windows Security Center service status","provider":"go.mondoo.com/cnquery/v9/providers/os"},"uac":{"name":"uac","type":"\n","is_mandatory":true,"title":"User Account Control (UAC) configuration","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Security Center health","desc":"Examine firewall, antivirus, anti-spyware, Auto-Update, UAC, and IE settings","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.security.product":{"id":"windows.security.product","name":"windows.security.product","fields":{"guid":{"name":"guid","type":"\u0007","is_mandatory":true,"title":"Product GUID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Product name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"productState":{"name":"productState","type":"\u0007","is_mandatory":true,"title":"Product state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"signatureState":{"name":"signatureState","type":"\u0007","is_mandatory":true,"title":"Signature state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0005","is_mandatory":true,"title":"Product state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"timestamp":{"name":"timestamp","type":"\t","is_mandatory":true,"title":"Time stamp","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of product","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Private Windows security product","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.serverFeature":{"id":"windows.serverFeature","name":"windows.serverFeature","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Feature description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Feature name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installState":{"name":"installState","type":"\u0005","is_mandatory":true,"title":"Feature installation state","provider":"go.mondoo.com/cnquery/v9/providers/os"},"installed":{"name":"installed","type":"\u0004","is_mandatory":true,"title":"Whether the feature is installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Command IDs of role, role service, or feature","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Feature full path","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Windows Server feature resource","private":true,"min_provider_version":"11.2.6","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.tpm":{"id":"windows.tpm","name":"windows.tpm","fields":{"activated":{"name":"activated","type":"\u0004","title":"Whether the TPM is activated","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether the TPM is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"manufacturerVersion":{"name":"manufacturerVersion","type":"\u0007","title":"TPM manufacturer version string","provider":"go.mondoo.com/cnquery/v9/providers/os"},"present":{"name":"present","type":"\u0004","title":"Whether a TPM is present on the system","provider":"go.mondoo.com/cnquery/v9/providers/os"},"ready":{"name":"ready","type":"\u0004","title":"Whether the TPM is ready for use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"specVersion":{"name":"specVersion","type":"\u0007","title":"Major TPM specification version, for example \"2.0\"","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Trusted Platform Module (TPM)","desc":"Examine the Trusted Platform Module state: whether a TPM is present, ready for use, enabled, and activated, along with its major specification version and manufacturer version string. Presence and a 2.0 specification version are prerequisites for Windows 11 readiness and several BitLocker and device-health controls. On a system without a TPM the fields resolve cleanly — present is false — rather than erroring.","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.update":{"id":"windows.update","name":"windows.update","fields":{"available":{"name":"available","type":"\u0019\u001bwindows.update.entry","title":"Updates that are available but not yet installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"config":{"name":"config","type":"\u001bwindows.update.config","title":"Windows Update Agent configuration and freshness","provider":"go.mondoo.com/cnquery/v9/providers/os"},"entry":{"name":"entry","type":"\u001bwindows.update.entry","title":"Windows update record","desc":"Examine a single update reported by the Windows Update Agent — the `kbId` (e.g., \"KB5034441\"), human-readable `title`, `classification` (such as \"Security Updates\", \"Critical Updates\", or \"Definition Updates\"), the support URL, and the CVEs it addresses. Installed updates carry the install `date` and `operation`; available updates carry the `severity` and whether they require a reboot.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"installed":{"name":"installed","type":"\u0019\u001bwindows.update.entry","title":"Updates that have been installed (Windows Update Agent history)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Update Agent","desc":"Use to examine how a Windows host receives updates and what it has applied or has pending. The `config` field surfaces Windows Update Agent configuration and freshness — the effective catalog source, WSUS settings, the last successful detection / download / install times, and whether a reboot is pending. `installed` lists the updates the agent has applied (the installed-KB history), and `available` lists updates the agent has found but not yet installed. Configuration is read from the registry and works even on connections that cannot run commands; the installed and available collections fall back to the Windows Update Agent COM API when commands are available.","min_provider_version":"13.20.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.update.config":{"id":"windows.update.config","name":"windows.update.config","fields":{"auOptions":{"name":"auOptions","type":"\u0005","is_mandatory":true,"title":"Automatic update behavior","desc":"The HKLM\\...\\AU\\AUOptions value: 1=keep my computer up to date disabled, 2=notify before download, 3=auto-download and notify of install, 4=auto-download and schedule install, 5=allow local admin to choose. 0 when not configured.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"catalogSource":{"name":"catalogSource","type":"\u0007","is_mandatory":true,"title":"Effective update catalog source","desc":"One of \"windowsUpdate\" (direct Microsoft Update), \"wsus\" (a configured WSUS server), \"windowsUpdateForBusiness\", \"disabled\" (the agent or automatic updates are turned off), or \"unknown\" (the relevant registry keys could not be read).","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastDetectionError":{"name":"lastDetectionError","type":"\u0007","is_mandatory":true,"title":"Last detection error code (e.g., \"0x80244022\"); empty when the last detection succeeded","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastDetectionSuccess":{"name":"lastDetectionSuccess","type":"\t","is_mandatory":true,"title":"Time of the last successful update detection","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastDownloadSuccess":{"name":"lastDownloadSuccess","type":"\t","is_mandatory":true,"title":"Time of the last successful update download","provider":"go.mondoo.com/cnquery/v9/providers/os"},"lastInstallSuccess":{"name":"lastInstallSuccess","type":"\t","is_mandatory":true,"title":"Time of the last successful update install","provider":"go.mondoo.com/cnquery/v9/providers/os"},"policyState":{"name":"policyState","type":"\u0005","is_mandatory":true,"title":"Windows Update for Business policy state (HKLM\\SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\PolicyState)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rebootPending":{"name":"rebootPending","type":"\u0004","is_mandatory":true,"title":"Whether a reboot is pending from a previous update","provider":"go.mondoo.com/cnquery/v9/providers/os"},"service":{"name":"service","type":"\u001bservice","title":"The Windows Update service (wuauserv)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"useWUServer":{"name":"useWUServer","type":"\u0004","is_mandatory":true,"title":"Whether the host is directed to use the WSUS server (HKLM\\...\\AU\\UseWUServer)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"wsusServerUrl":{"name":"wsusServerUrl","type":"\u0007","is_mandatory":true,"title":"Configured WSUS server URL (HKLM\\...\\WindowsUpdate\\WUServer)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"wsusStatusServerUrl":{"name":"wsusStatusServerUrl","type":"\u0007","is_mandatory":true,"title":"Configured WSUS status reporting server URL (HKLM\\...\\WindowsUpdate\\WUStatusServer)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows Update Agent configuration and freshness","desc":"Examine where a Windows host gets its updates and whether the Windows Update Agent is healthy. `catalogSource` summarizes the effective source (\"windowsUpdate\", \"wsus\", \"windowsUpdateForBusiness\", \"disabled\", or \"unknown\"); `wsusServerUrl` / `useWUServer` reveal WSUS configuration; the `lastDetectionSuccess` / `lastDownloadSuccess` / `lastInstallSuccess` times expose how recently the agent refreshed its view; and `rebootPending` flags hosts waiting on a restart before update state can be trusted. Read from the Windows registry, so it is available even on connections that cannot run commands.","private":true,"min_provider_version":"13.20.1","defaults":"catalogSource rebootPending","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windows.update.entry":{"id":"windows.update.entry","name":"windows.update.entry","fields":{"categories":{"name":"categories","type":"\u0019\u0007","is_mandatory":true,"title":"Update categories reported by the Windows Update Agent","provider":"go.mondoo.com/cnquery/v9/providers/os"},"classification":{"name":"classification","type":"\u0007","is_mandatory":true,"title":"Update classification","desc":"Microsoft's update category, such as \"Security Updates\", \"Critical Updates\", \"Update Rollups\", \"Definition Updates\", \"Drivers\", or \"Feature Packs\". Empty when the agent does not report a category.","provider":"go.mondoo.com/cnquery/v9/providers/os"},"cveIds":{"name":"cveIds","type":"\u0019\u0007","is_mandatory":true,"title":"CVE identifiers addressed by this update","provider":"go.mondoo.com/cnquery/v9/providers/os"},"date":{"name":"date","type":"\t","is_mandatory":true,"title":"Date the update was installed (installed updates only)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"kbId":{"name":"kbId","type":"\u0007","is_mandatory":true,"title":"Knowledge base article ID (e.g., \"KB5034441\"); empty for updates without a KB","provider":"go.mondoo.com/cnquery/v9/providers/os"},"operation":{"name":"operation","type":"\u0007","is_mandatory":true,"title":"Operation that produced this history entry (e.g., \"Installation\", \"Uninstallation\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rebootRequired":{"name":"rebootRequired","type":"\u0004","is_mandatory":true,"title":"Whether installing the update requires a reboot","provider":"go.mondoo.com/cnquery/v9/providers/os"},"severity":{"name":"severity","type":"\u0007","is_mandatory":true,"title":"Microsoft severity rating for security updates (e.g., \"Critical\", \"Important\", \"Moderate\", \"Low\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"supportUrl":{"name":"supportUrl","type":"\u0007","is_mandatory":true,"title":"Vendor support or knowledge base URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Human-readable update title","provider":"go.mondoo.com/cnquery/v9/providers/os"},"updateId":{"name":"updateId","type":"\u0007","is_mandatory":true,"title":"Update identity (Windows Update Agent UpdateID GUID, or package name when read from the registry)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windows update record","desc":"Examine a single update reported by the Windows Update Agent — the `kbId` (e.g., \"KB5034441\"), human-readable `title`, `classification` (such as \"Security Updates\", \"Critical Updates\", or \"Definition Updates\"), the support URL, and the CVEs it addresses. Installed updates carry the install `date` and `operation`; available updates carry the `severity` and whether they require a reboot.","private":true,"min_provider_version":"13.20.1","defaults":"kbId title classification","provider":"go.mondoo.com/cnquery/v9/providers/os"},"windsurf":{"id":"windsurf","name":"windsurf","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Windsurf configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mcpServer":{"name":"mcpServer","type":"\u001bwindsurf.mcpServer","title":"Windsurf MCP server configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"mcpServers":{"name":"mcpServers","type":"\u0019\u001bwindsurf.mcpServer","title":"MCP servers","provider":"go.mondoo.com/cnquery/v9/providers/os"},"rule":{"name":"rule","type":"\u001bwindsurf.rule","title":"Windsurf rule / memory file","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"rules":{"name":"rules","type":"\u0019\u001bwindsurf.rule","title":"Global rules / memories","provider":"go.mondoo.com/cnquery/v9/providers/os"},"skill":{"name":"skill","type":"\u001bwindsurf.skill","title":"Windsurf skill","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true,"maturity":"preview"},"skills":{"name":"skills","type":"\u0019\u001bwindsurf.skill","title":"Installed skills","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Windsurf editor (Codeium) instance","desc":"Examine global rules / memories, MCP servers, and installed skills URL: https://windsurf.com/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"windsurf.mcpServer":{"id":"windsurf.mcpServer","name":"windsurf.mcpServer","fields":{"args":{"name":"args","type":"\u0019\u0007","is_mandatory":true,"title":"Server arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Server command","provider":"go.mondoo.com/cnquery/v9/providers/os"},"hasEnv":{"name":"hasEnv","type":"\u0004","is_mandatory":true,"title":"Whether environment variables are configured","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Server name","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windsurf MCP server configuration","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"windsurf.rule":{"id":"windsurf.rule","name":"windsurf.rule","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the rule file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name (derived from filename)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the rule file","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windsurf rule / memory file","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"windsurf.skill":{"id":"windsurf.skill","name":"windsurf.skill","fields":{"allowedTools":{"name":"allowedTools","type":"\u0019\u0007","is_mandatory":true,"title":"Tools the skill is allowed to use","provider":"go.mondoo.com/cnquery/v9/providers/os"},"argumentHint":{"name":"argumentHint","type":"\u0007","is_mandatory":true,"title":"Hint for expected arguments","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Full content of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Skill description","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Skill name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sha256":{"name":"sha256","type":"\u0007","title":"SHA-256 hash of the skill content","provider":"go.mondoo.com/cnquery/v9/providers/os"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source path of the skill definition","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Windsurf skill","private":true,"min_provider_version":"13.13.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"wordpress":{"id":"wordpress","fields":{"package":{"name":"package","type":"\u001bwordpress.package","title":"WordPress plugin","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bwordpress.packages","title":"WordPress plugin inventory","desc":"Examine installed plugins with version and WordPress compatibility ranges","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true}},"is_extension":true},"wordpress.package":{"id":"wordpress.package","name":"wordpress.package","fields":{"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Plugin display name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","is_mandatory":true,"title":"Package files","provider":"go.mondoo.com/cnquery/v9/providers/os"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"License","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plugin slug (directory name)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"purl":{"name":"purl","type":"\u0007","is_mandatory":true,"title":"Package URL","provider":"go.mondoo.com/cnquery/v9/providers/os"},"requiresWp":{"name":"requiresWp","type":"\u0007","is_mandatory":true,"title":"Minimum required WordPress version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"testedUpTo":{"name":"testedUpTo","type":"\u0007","is_mandatory":true,"title":"Maximum tested WordPress version","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Plugin version (from Stable tag)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"WordPress plugin","private":true,"min_provider_version":"13.12.1","defaults":"name version purl","provider":"go.mondoo.com/cnquery/v9/providers/os"},"wordpress.packages":{"id":"wordpress.packages","name":"wordpress.packages","fields":{"files":{"name":"files","type":"\u0019\u001bpkgFileInfo","title":"Files used to determine the packages","provider":"go.mondoo.com/cnquery/v9/providers/os"},"list":{"name":"list","type":"\u0019\u001bwordpress.package","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to WordPress plugins directory (wp-content/plugins/)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007","optional":true}]},"list_type":"\u001bwordpress.package","title":"WordPress plugin inventory","desc":"Examine installed plugins with version and WordPress compatibility ranges","min_provider_version":"13.12.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"yum":{"id":"yum","name":"yum","fields":{"config":{"name":"config","type":"\u001byum.config","title":"Yum/DNF global configuration","desc":"Examine the system-wide package manager configuration — the `[main]` section of `/etc/yum.conf`, or `/etc/dnf/dnf.conf` on dnf-based systems. Use `gpgcheck` and `localPkgGpgcheck` to assert that package signature verification is enforced for every repository and for locally installed packages, a core CIS supply-chain control; `repoGpgcheck` extends that to repository metadata. The bool accessors reflect the explicit directive and are `false` when the directive is absent. `params` exposes every `[main]` directive as a raw string map for settings without a typed accessor. Select an alternate file with `yum.config(path: \"...\")`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"repo":{"name":"repo","type":"\u001byum.repo","title":"Yum repository resource","desc":"Examine a single configured Yum/DNF repository: its `id`, human-readable `name`, `status`, `baseurl` list, expiry indicator, configuration `file`, revision, package count, size, mirrors, and whether it is currently `enabled`. Initialize by ID (e.g., `yum.repo(id: \"baseos\")`) or iterate from `yum.repos()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"repos":{"name":"repos","type":"\u0019\u001byum.repo","title":"List of all configured Yum repositories","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vars":{"name":"vars","type":"\u001a\u0007\u0007","title":"Variables defined in Yum configuration files (/etc/yum.conf and all .repo files in the /etc/yum.repos.d/)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"Yum/DNF package manager","desc":"Examine yum variables and configured repositories","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"yum.config":{"id":"yum.config","name":"yum.config","fields":{"cleanRequirementsOnRemove":{"name":"cleanRequirementsOnRemove","type":"\u0004","refs":["\"params\""],"title":"Whether dependencies are removed along with packages (clean_requirements_on_remove)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"content":{"name":"content","type":"\u0007","refs":["\"file\""],"title":"Raw contents of the configuration file","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","title":"File backing the [main] configuration section","provider":"go.mondoo.com/cnquery/v9/providers/os"},"gpgcheck":{"name":"gpgcheck","type":"\u0004","refs":["\"params\""],"title":"Whether package signature checking is enforced globally (gpgcheck)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"localPkgGpgcheck":{"name":"localPkgGpgcheck","type":"\u0004","refs":["\"params\""],"title":"Whether signature checking is enforced for local packages (localpkg_gpgcheck)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"params":{"name":"params","type":"\u001a\u0007\u0007","refs":["\"content\""],"title":"Every [main] section directive as key/value strings","provider":"go.mondoo.com/cnquery/v9/providers/os"},"repoGpgcheck":{"name":"repoGpgcheck","type":"\u0004","refs":["\"params\""],"title":"Whether repository metadata signature checking is enforced (repo_gpgcheck)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"path","type":"\u0007"}]},"title":"Yum/DNF global configuration","desc":"Examine the system-wide package manager configuration — the `[main]` section of `/etc/yum.conf`, or `/etc/dnf/dnf.conf` on dnf-based systems. Use `gpgcheck` and `localPkgGpgcheck` to assert that package signature verification is enforced for every repository and for locally installed packages, a core CIS supply-chain control; `repoGpgcheck` extends that to repository metadata. The bool accessors reflect the explicit directive and are `false` when the directive is absent. `params` exposes every `[main]` directive as a raw string map for settings without a typed accessor. Select an alternate file with `yum.config(path: \"...\")`.","min_provider_version":"13.22.2","provider":"go.mondoo.com/cnquery/v9/providers/os"},"yum.repo":{"id":"yum.repo","name":"yum.repo","fields":{"baseurl":{"name":"baseurl","type":"\u0019\u0007","is_mandatory":true,"title":"URL where the repodata directory of a repository is located","provider":"go.mondoo.com/cnquery/v9/providers/os"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether the repository is used as package source","provider":"go.mondoo.com/cnquery/v9/providers/os"},"expire":{"name":"expire","type":"\u0007","is_mandatory":true,"title":"Indicator when the repository will expire","provider":"go.mondoo.com/cnquery/v9/providers/os"},"file":{"name":"file","type":"\u001bfile","is_mandatory":true,"title":"Repository configuration file path","provider":"go.mondoo.com/cnquery/v9/providers/os"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Repository ID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mirrors":{"name":"mirrors","type":"\u0007","is_mandatory":true,"title":"Mirrors for this repository","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Human-readable repository name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pkgs":{"name":"pkgs","type":"\u0007","is_mandatory":true,"title":"Packages in repository","provider":"go.mondoo.com/cnquery/v9/providers/os"},"revision":{"name":"revision","type":"\u0007","is_mandatory":true,"title":"Repository revision","provider":"go.mondoo.com/cnquery/v9/providers/os"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"File size of this repository","provider":"go.mondoo.com/cnquery/v9/providers/os"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Repository status","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"Yum repository resource","desc":"Examine a single configured Yum/DNF repository: its `id`, human-readable `name`, `status`, `baseurl` list, expiry indicator, configuration `file`, revision, package count, size, mirrors, and whether it is currently `enabled`. Initialize by ID (e.g., `yum.repo(id: \"baseos\")`) or iterate from `yum.repos()`.","min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/os"},"zed":{"id":"zed","name":"zed","fields":{"configPath":{"name":"configPath","type":"\u0007","is_mandatory":true,"title":"Path to the Zed configuration directory","provider":"go.mondoo.com/cnquery/v9/providers/os"},"extensions":{"name":"extensions","type":"\u0019\u0007","title":"Extension names installed","provider":"go.mondoo.com/cnquery/v9/providers/os"},"settings":{"name":"settings","type":"\n","title":"Settings dictionary","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"configPath","type":"\u0007","optional":true}]},"title":"Zed editor instance","desc":"Examine workspace settings and installed extensions URL: https://zed.dev/","min_provider_version":"13.13.1","defaults":"configPath","provider":"go.mondoo.com/cnquery/v9/providers/os","maturity":"preview"},"zfs":{"id":"zfs","name":"zfs","fields":{"dataset":{"name":"dataset","type":"\u001bzfs.dataset","title":"ZFS dataset (filesystem, volume, snapshot, or bookmark)","desc":"Examine a single ZFS dataset: full `name`, `type` (filesystem, volume, snapshot, bookmark), used/available/referenced bytes, `mountpoint`, compression algorithm and ratio, `mounted` flag, record size, quota, reservation, `origin` snapshot for clones, creation time, encryption algorithm, full `properties()` map, and `snapshots()` list. Initialize by name or iterate from `zfs.datasets()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"datasets":{"name":"datasets","type":"\u0019\u001bzfs.dataset","title":"All ZFS datasets (filesystems, volumes, snapshots, bookmarks)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"pool":{"name":"pool","type":"\u001bzfs.pool","title":"ZFS storage pool","desc":"Examine a single ZFS storage pool: `name`, `guid`, health status, total/allocated/free bytes, fragmentation percentage, space utilization, deduplication ratio, read-only flag, auto-expand/replace/trim settings, the top-level `vdevs()` topology, and the full `properties()` map. Initialize by name (e.g., `zfs.pool(name: \"tank\")`) or iterate from `zfs.pools()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"pools":{"name":"pools","type":"\u0019\u001bzfs.pool","title":"ZFS storage pools","provider":"go.mondoo.com/cnquery/v9/providers/os"},"version":{"name":"version","type":"\u0007","title":"ZFS version string","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"ZFS storage pools and datasets","desc":"Examine pool health and capacity, vdev topology, and dataset properties","min_provider_version":"13.1.2","defaults":"pools","provider":"go.mondoo.com/cnquery/v9/providers/os"},"zfs.dataset":{"id":"zfs.dataset","name":"zfs.dataset","fields":{"availableBytes":{"name":"availableBytes","type":"\u0005","is_mandatory":true,"title":"Available space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"compression":{"name":"compression","type":"\u0007","is_mandatory":true,"title":"Compression algorithm (off, lz4, gzip, zstd, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"compressratio":{"name":"compressratio","type":"\u0006","is_mandatory":true,"title":"Compression ratio","provider":"go.mondoo.com/cnquery/v9/providers/os"},"creation":{"name":"creation","type":"\t","is_mandatory":true,"title":"Creation time","provider":"go.mondoo.com/cnquery/v9/providers/os"},"encryption":{"name":"encryption","type":"\u0007","is_mandatory":true,"title":"Encryption algorithm (off, aes-256-gcm, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mounted":{"name":"mounted","type":"\u0004","is_mandatory":true,"title":"Whether the dataset is currently mounted","provider":"go.mondoo.com/cnquery/v9/providers/os"},"mountpoint":{"name":"mountpoint","type":"\u0007","is_mandatory":true,"title":"Mount point (empty for volumes/snapshots)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Full dataset name (pool/path or pool/path@snap)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"origin":{"name":"origin","type":"\u0007","is_mandatory":true,"title":"Origin snapshot (for clones, empty otherwise)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"properties":{"name":"properties","type":"\u001a\u0007\u0007","title":"All dataset properties (lazy-loaded via zfs get all)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"quotaBytes":{"name":"quotaBytes","type":"\u0005","is_mandatory":true,"title":"Quota in bytes (0 = none)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"recordsizeBytes":{"name":"recordsizeBytes","type":"\u0005","is_mandatory":true,"title":"Record size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"referencedBytes":{"name":"referencedBytes","type":"\u0005","is_mandatory":true,"title":"Referenced space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"reservationBytes":{"name":"reservationBytes","type":"\u0005","is_mandatory":true,"title":"Reservation in bytes (0 = none)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"snapshots":{"name":"snapshots","type":"\u0019\u001bzfs.dataset","title":"Snapshots of this dataset","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Dataset type (filesystem, volume, snapshot, bookmark)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"usedBytes":{"name":"usedBytes","type":"\u0005","is_mandatory":true,"title":"Used space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"ZFS dataset (filesystem, volume, snapshot, or bookmark)","desc":"Examine a single ZFS dataset: full `name`, `type` (filesystem, volume, snapshot, bookmark), used/available/referenced bytes, `mountpoint`, compression algorithm and ratio, `mounted` flag, record size, quota, reservation, `origin` snapshot for clones, creation time, encryption algorithm, full `properties()` map, and `snapshots()` list. Initialize by name or iterate from `zfs.datasets()`.","min_provider_version":"13.1.2","defaults":"name type usedBytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"zfs.pool":{"id":"zfs.pool","name":"zfs.pool","fields":{"allocatedBytes":{"name":"allocatedBytes","type":"\u0005","is_mandatory":true,"title":"Allocated space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoexpand":{"name":"autoexpand","type":"\u0004","is_mandatory":true,"title":"Whether auto-expand is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autoreplace":{"name":"autoreplace","type":"\u0004","is_mandatory":true,"title":"Whether auto-replace is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"autotrim":{"name":"autotrim","type":"\u0004","is_mandatory":true,"title":"Whether auto-trim is enabled","provider":"go.mondoo.com/cnquery/v9/providers/os"},"dedupratio":{"name":"dedupratio","type":"\u0006","is_mandatory":true,"title":"Deduplication ratio","provider":"go.mondoo.com/cnquery/v9/providers/os"},"fragmentation":{"name":"fragmentation","type":"\u0005","is_mandatory":true,"title":"Fragmentation percentage","provider":"go.mondoo.com/cnquery/v9/providers/os"},"freeBytes":{"name":"freeBytes","type":"\u0005","is_mandatory":true,"title":"Free space in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"guid":{"name":"guid","type":"\u0007","is_mandatory":true,"title":"Pool GUID","provider":"go.mondoo.com/cnquery/v9/providers/os"},"health":{"name":"health","type":"\u0007","is_mandatory":true,"title":"Health status (ONLINE, DEGRADED, FAULTED, OFFLINE, REMOVED, UNAVAIL)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Pool name","provider":"go.mondoo.com/cnquery/v9/providers/os"},"percentUsed":{"name":"percentUsed","type":"\u0005","is_mandatory":true,"title":"Percentage of pool space used (0-100)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"properties":{"name":"properties","type":"\u001a\u0007\u0007","title":"All pool properties (lazy-loaded via zpool get all)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"readonly":{"name":"readonly","type":"\u0004","is_mandatory":true,"title":"Whether the pool is read-only","provider":"go.mondoo.com/cnquery/v9/providers/os"},"sizeBytes":{"name":"sizeBytes","type":"\u0005","is_mandatory":true,"title":"Total size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"vdev":{"name":"vdev","type":"\u001bzfs.pool.vdev","title":"ZFS virtual device (vdev) in a pool's topology","desc":"Examine a single vdev within a pool: its `name` (e.g., \"raidz2-0\", \"mirror-0\"), `type`, `state`, device `path` (for leaf vdevs), read/write/checksum error counts, slow I/O count, number of child devices, and the nested `devices` list. Iterated from `zfs.pool.vdevs()`.","provider":"go.mondoo.com/cnquery/v9/providers/os","is_implicit_resource":true},"vdevs":{"name":"vdevs","type":"\u0019\u001bzfs.pool.vdev","title":"Top-level virtual device groups (mirrors, raidz, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"ZFS storage pool","desc":"Examine a single ZFS storage pool: `name`, `guid`, health status, total/allocated/free bytes, fragmentation percentage, space utilization, deduplication ratio, read-only flag, auto-expand/replace/trim settings, the top-level `vdevs()` topology, and the full `properties()` map. Initialize by name (e.g., `zfs.pool(name: \"tank\")`) or iterate from `zfs.pools()`.","min_provider_version":"13.1.2","defaults":"name health sizeBytes","provider":"go.mondoo.com/cnquery/v9/providers/os"},"zfs.pool.vdev":{"id":"zfs.pool.vdev","name":"zfs.pool.vdev","fields":{"checksumErrors":{"name":"checksumErrors","type":"\u0005","is_mandatory":true,"title":"Checksum error count","provider":"go.mondoo.com/cnquery/v9/providers/os"},"devices":{"name":"devices","type":"\u0019\u001bzfs.pool.vdev","is_mandatory":true,"title":"Child vdevs/devices","provider":"go.mondoo.com/cnquery/v9/providers/os"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Vdev name (e.g., \"raidz2-0\", \"mirror-0\", \"sda\")","provider":"go.mondoo.com/cnquery/v9/providers/os"},"numDevices":{"name":"numDevices","type":"\u0005","is_mandatory":true,"title":"Number of child devices","provider":"go.mondoo.com/cnquery/v9/providers/os"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Device path (for leaf vdevs, empty for groups)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"readErrors":{"name":"readErrors","type":"\u0005","is_mandatory":true,"title":"Read error count","provider":"go.mondoo.com/cnquery/v9/providers/os"},"slowIos":{"name":"slowIos","type":"\u0005","is_mandatory":true,"title":"Slow I/O count","provider":"go.mondoo.com/cnquery/v9/providers/os"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Vdev state (ONLINE, DEGRADED, FAULTED, OFFLINE, REMOVED, UNAVAIL)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Vdev type (mirror, raidz, raidz2, raidz3, disk, file, draid, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/os"},"writeErrors":{"name":"writeErrors","type":"\u0005","is_mandatory":true,"title":"Write error count","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"title":"ZFS virtual device (vdev) in a pool's topology","desc":"Examine a single vdev within a pool: its `name` (e.g., \"raidz2-0\", \"mirror-0\"), `type`, `state`, device `path` (for leaf vdevs), read/write/checksum error counts, slow I/O count, number of child devices, and the nested `devices` list. Iterated from `zfs.pool.vdevs()`.","min_provider_version":"13.1.2","defaults":"name type state numDevices","provider":"go.mondoo.com/cnquery/v9/providers/os"}},"dependencies":{"network":{"id":"go.mondoo.com/mql/v13/providers/network","name":"network"}}}