{"resources":{"postgresdb":{"id":"postgresdb","name":"postgresdb","fields":{"database":{"name":"database","type":"\u001bpostgresdb.database","title":"PostgreSQL database","desc":"A database on the server, selected by `name`. Exposes ownership, encoding and locale, connection controls (`allowConnections`, `connectionLimit`), the access-control list through `privileges`, and the database's `schemas`, `functions`, and `extensions`. Enumerating schemas and functions opens a connection to this database, since PostgreSQL catalogs are per-database.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"extension":{"name":"extension","type":"\u001bpostgresdb.extension","title":"PostgreSQL extension","desc":"An installed extension (pg_extension), for example pgaudit, pgcrypto, or set_user. Auditing installed extensions confirms required security tooling is present and flags unexpected additions.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"foreignServer":{"name":"foreignServer","type":"\u001bpostgresdb.foreignServer","title":"PostgreSQL foreign server","desc":"A foreign server (pg_foreign_server) reachable through a foreign-data wrapper. `userMappings` lists the role-to-remote-credential mappings used when the server is accessed, so credential exposure can be reviewed.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"function":{"name":"function","type":"\u001bpostgresdb.function","title":"PostgreSQL function","desc":"A function or procedure (pg_proc). `isSecurityDefiner` reports whether the function runs with the privileges of its owner rather than the caller, which is a privilege-escalation path when the owner is highly privileged. `privileges` lists the EXECUTE grants, so over-broad function access can be audited.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"hbaRule":{"name":"hbaRule","type":"\u001bpostgresdb.hbaRule","title":"PostgreSQL host-based authentication rule","desc":"A single rule from the host-based authentication configuration (pg_hba_file_rules), which controls who may connect and how they authenticate. `authMethod` is the security-relevant field: a value of `trust` allows connections with no authentication.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"instance":{"name":"instance","type":"\u001bpostgresdb.instance","title":"PostgreSQL server","desc":"A single PostgreSQL server (database cluster). Exposes the server version and, through `settings`, every runtime parameter (the source for most logging, connection, and TLS hardening checks). The most security-relevant settings are surfaced directly: `ssl`, `passwordEncryption`, and `listenAddresses`. Cluster-wide principals and objects are reachable through `roles`, `databases`, `tablespaces`, `extensions`, `hbaRules`, `foreignServers`, and the replication collections.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"privilege":{"name":"privilege","type":"\u001bpostgresdb.privilege","title":"PostgreSQL access privilege","desc":"A single privilege grant expanded from an object's access-control list. The `grantee` is a role name, or PUBLIC for a grant to every role. `isGrantable` reports whether the grantee may in turn grant the privilege to others (WITH GRANT OPTION).","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"publication":{"name":"publication","type":"\u001bpostgresdb.publication","title":"PostgreSQL publication","desc":"A logical-replication publication (pg_publication) that defines the set of changes offered to subscribers.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"replicationSlot":{"name":"replicationSlot","type":"\u001bpostgresdb.replicationSlot","title":"PostgreSQL replication slot","desc":"A replication slot (pg_replication_slots) that a standby or logical consumer uses to receive changes. `active` reports whether a consumer is currently attached.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"rlsPolicy":{"name":"rlsPolicy","type":"\u001bpostgresdb.rlsPolicy","title":"PostgreSQL row-level security policy","desc":"A row-level security policy (pg_policy) attached to a relation. `command` is the statement type the policy applies to (SELECT, INSERT, UPDATE, DELETE, or ALL), `roles` lists the roles it targets (PUBLIC for all roles), and `usingExpression` / `checkExpression` are the row filters it enforces.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"role":{"name":"role","type":"\u001bpostgresdb.role","title":"PostgreSQL role","desc":"A cluster role, which is either a login role or a group role (PostgreSQL unifies users and groups). Exposes the privilege attributes that drive access control and escalation analysis (`isSuperuser`, `createRole`, `createDb`, `bypassRLS`, `isReplication`), login state (`canLogin`, `connectionLimit`, `validUntil`), and role membership through `memberOf` and `members`. `passwordType` reports how the role's password is stored (scram-sha-256, md5, or none) and is null when the session role cannot read pg_authid.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"schema":{"name":"schema","type":"\u001bpostgresdb.schema","title":"PostgreSQL schema","desc":"A namespace within a database (pg_namespace). Exposes the owning role and the access privileges granted on the schema. The `public` schema's privileges are a common hardening focus, since a permissive PUBLIC grant lets any role create objects.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"setting":{"name":"setting","type":"\u001bpostgresdb.setting","title":"PostgreSQL configuration setting","desc":"A runtime configuration parameter (pg_settings), selected by `name`, for example `postgresdb.instance.settings.where(name == \"log_connections\")`. `context` reports when a change takes effect (postmaster, sighup, superuser, or user), and `source` reports where the current value came from.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"subscription":{"name":"subscription","type":"\u001bpostgresdb.subscription","title":"PostgreSQL subscription","desc":"A logical-replication subscription (pg_subscription) that consumes changes from a publisher. The connection string is exposed only in a sanitized form with any password removed.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"table":{"name":"table","type":"\u001bpostgresdb.table","title":"PostgreSQL relation","desc":"A relation in a schema (pg_class): an ordinary table, view, materialized view, foreign table, or partitioned table, reported by `kind`. Exposes the owning role, the access privileges granted on the relation (`privileges`, the source for DML-privilege review), and its row-level security posture (`rowSecurityEnabled`, `rowSecurityForced`, and `policies`).","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"tablespace":{"name":"tablespace","type":"\u001bpostgresdb.tablespace","title":"PostgreSQL tablespace","desc":"A tablespace (pg_tablespace) that maps a storage location on disk. Exposes the owning role and the access privileges granted on it.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true},"userMapping":{"name":"userMapping","type":"\u001bpostgresdb.userMapping","title":"PostgreSQL user mapping","desc":"A mapping (pg_user_mappings) from a local role to the credentials used against a foreign server. `options` may contain a remote user name; secret values are not exposed.","provider":"go.mondoo.com/mql/v13/providers/postgresdb","is_implicit_resource":true}},"title":"PostgreSQL","desc":"Root namespace for all PostgreSQL server resources. Query `postgresdb.instance` for the connected server: its configuration settings, cluster roles, databases, schemas, tables, functions, privileges, host-based authentication rules, extensions, foreign servers, and replication state.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.database":{"id":"postgresdb.database","name":"postgresdb.database","fields":{"allowConnections":{"name":"allowConnections","type":"\u0004","is_mandatory":true,"title":"Whether the database accepts connections","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"collate":{"name":"collate","type":"\u0007","is_mandatory":true,"title":"LC_COLLATE locale of the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"connectionLimit":{"name":"connectionLimit","type":"\u0005","is_mandatory":true,"title":"Maximum number of concurrent connections, or -1 for no limit","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"ctype":{"name":"ctype","type":"\u0007","is_mandatory":true,"title":"LC_CTYPE locale of the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"encoding":{"name":"encoding","type":"\u0007","is_mandatory":true,"title":"Character-set encoding, for example UTF8","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"extensions":{"name":"extensions","type":"\u0019\u001bpostgresdb.extension","title":"Extensions installed in the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"foreignServers":{"name":"foreignServers","type":"\u0019\u001bpostgresdb.foreignServer","title":"Foreign servers defined in the database (for foreign-data wrappers)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"functions":{"name":"functions","type":"\u0019\u001bpostgresdb.function","title":"Functions across all schemas in the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"isTemplate":{"name":"isTemplate","type":"\u0004","is_mandatory":true,"title":"Whether the database is a template","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Database name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"oid":{"name":"oid","type":"\u0005","is_mandatory":true,"title":"Object identifier of the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"privileges":{"name":"privileges","type":"\u0019\u001bpostgresdb.privilege","title":"Access privileges granted on the database (from the datacl)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"publications":{"name":"publications","type":"\u0019\u001bpostgresdb.publication","title":"Logical-replication publications defined in the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"schemas":{"name":"schemas","type":"\u0019\u001bpostgresdb.schema","title":"Schemas in the database","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL database","desc":"A database on the server, selected by `name`. Exposes ownership, encoding and locale, connection controls (`allowConnections`, `connectionLimit`), the access-control list through `privileges`, and the database's `schemas`, `functions`, and `extensions`. Enumerating schemas and functions opens a connection to this database, since PostgreSQL catalogs are per-database.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.extension":{"id":"postgresdb.extension","name":"postgresdb.extension","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the extension","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the extension's objects are installed in","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Installed version","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL extension","desc":"An installed extension (pg_extension), for example pgaudit, pgcrypto, or set_user. Auditing installed extensions confirms required security tooling is present and flags unexpected additions.","min_provider_version":"13.0.0","defaults":"name version","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.foreignServer":{"id":"postgresdb.foreignServer","name":"postgresdb.foreignServer","fields":{"fdwName":{"name":"fdwName","type":"\u0007","is_mandatory":true,"title":"Name of the foreign-data wrapper the server uses","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Foreign server name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Options configured on the foreign server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the foreign server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Server type, when set by the wrapper","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"userMappings":{"name":"userMappings","type":"\u0019\u001bpostgresdb.userMapping","title":"Role-to-remote-credential mappings for this server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Server version, when set by the wrapper","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL foreign server","desc":"A foreign server (pg_foreign_server) reachable through a foreign-data wrapper. `userMappings` lists the role-to-remote-credential mappings used when the server is accessed, so credential exposure can be reviewed.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.function":{"id":"postgresdb.function","name":"postgresdb.function","fields":{"isSecurityDefiner":{"name":"isSecurityDefiner","type":"\u0004","is_mandatory":true,"title":"Whether the function runs with the privileges of its owner","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"language":{"name":"language","type":"\u0007","is_mandatory":true,"title":"Implementation language, for example sql, plpgsql, or c","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Function name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"oid":{"name":"oid","type":"\u0005","is_mandatory":true,"title":"Object identifier of the function","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the function","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"privileges":{"name":"privileges","type":"\u0019\u001bpostgresdb.privilege","title":"Access privileges granted on the function (from the proacl)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the function belongs to","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL function","desc":"A function or procedure (pg_proc). `isSecurityDefiner` reports whether the function runs with the privileges of its owner rather than the caller, which is a privilege-escalation path when the owner is highly privileged. `privileges` lists the EXECUTE grants, so over-broad function access can be audited.","min_provider_version":"13.0.0","defaults":"name schema","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.hbaRule":{"id":"postgresdb.hbaRule","name":"postgresdb.hbaRule","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Client address the rule matches","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"authMethod":{"name":"authMethod","type":"\u0007","is_mandatory":true,"title":"Authentication method, for example scram-sha-256, md5, peer, ldap, or trust","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"databases":{"name":"databases","type":"\u0019\u0007","is_mandatory":true,"title":"Databases the rule applies to","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"error":{"name":"error","type":"\u0007","is_mandatory":true,"title":"Parse error for the rule, when the line is invalid","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number of the rule in the configuration file","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"netmask":{"name":"netmask","type":"\u0007","is_mandatory":true,"title":"Netmask for the client address","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Options passed to the authentication method","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Connection type: local, host, hostssl, or hostnossl","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"userNames":{"name":"userNames","type":"\u0019\u0007","is_mandatory":true,"title":"Roles the rule applies to","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL host-based authentication rule","desc":"A single rule from the host-based authentication configuration (pg_hba_file_rules), which controls who may connect and how they authenticate. `authMethod` is the security-relevant field: a value of `trust` allows connections with no authentication.","min_provider_version":"13.0.0","defaults":"type authMethod","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.instance":{"id":"postgresdb.instance","name":"postgresdb.instance","fields":{"databases":{"name":"databases","type":"\u0019\u001bpostgresdb.database","title":"Databases hosted on the server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"hbaRules":{"name":"hbaRules","type":"\u0019\u001bpostgresdb.hbaRule","title":"Host-based authentication rules (pg_hba_file_rules)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"inRecovery":{"name":"inRecovery","type":"\u0004","is_mandatory":true,"title":"Whether the server is in recovery (a standby)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"listenAddresses":{"name":"listenAddresses","type":"\u0007","is_mandatory":true,"title":"Value of the `listen_addresses` setting","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"passwordEncryption":{"name":"passwordEncryption","type":"\u0007","is_mandatory":true,"title":"Value of the `password_encryption` setting, for example scram-sha-256 or md5","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"replicationSlots":{"name":"replicationSlots","type":"\u0019\u001bpostgresdb.replicationSlot","title":"Replication slots on the server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"roles":{"name":"roles","type":"\u0019\u001bpostgresdb.role","title":"Cluster roles (login and group roles)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"settings":{"name":"settings","type":"\u0019\u001bpostgresdb.setting","title":"Runtime configuration parameters (pg_settings)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"ssl":{"name":"ssl","type":"\u0004","is_mandatory":true,"title":"Whether TLS is enabled (the `ssl` setting is on)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"startTime":{"name":"startTime","type":"\t","is_mandatory":true,"title":"Time the server was started","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"subscriptions":{"name":"subscriptions","type":"\u0019\u001bpostgresdb.subscription","title":"Logical-replication subscriptions on the server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"systemIdentifier":{"name":"systemIdentifier","type":"\u0007","is_mandatory":true,"title":"Cluster system identifier (stable unique id for the server)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"tablespaces":{"name":"tablespaces","type":"\u0019\u001bpostgresdb.tablespace","title":"Tablespaces defined on the server","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Full server version string","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL server","desc":"A single PostgreSQL server (database cluster). Exposes the server version and, through `settings`, every runtime parameter (the source for most logging, connection, and TLS hardening checks). The most security-relevant settings are surfaced directly: `ssl`, `passwordEncryption`, and `listenAddresses`. Cluster-wide principals and objects are reachable through `roles`, `databases`, `tablespaces`, `extensions`, `hbaRules`, `foreignServers`, and the replication collections.","min_provider_version":"13.0.0","defaults":"version","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.privilege":{"id":"postgresdb.privilege","name":"postgresdb.privilege","fields":{"grantee":{"name":"grantee","type":"\u0007","is_mandatory":true,"title":"Role the privilege is granted to, or PUBLIC","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"isGrantable":{"name":"isGrantable","type":"\u0004","is_mandatory":true,"title":"Whether the grantee may grant the privilege to other roles","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"privilegeType":{"name":"privilegeType","type":"\u0007","is_mandatory":true,"title":"Privilege type, for example CONNECT, USAGE, CREATE, SELECT, or EXECUTE","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL access privilege","desc":"A single privilege grant expanded from an object's access-control list. The `grantee` is a role name, or PUBLIC for a grant to every role. `isGrantable` reports whether the grantee may in turn grant the privilege to others (WITH GRANT OPTION).","min_provider_version":"13.0.0","defaults":"privilegeType grantee","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.publication":{"id":"postgresdb.publication","name":"postgresdb.publication","fields":{"allTables":{"name":"allTables","type":"\u0004","is_mandatory":true,"title":"Whether the publication includes all tables","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"delete":{"name":"delete","type":"\u0004","is_mandatory":true,"title":"Whether deletes are published","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"insert":{"name":"insert","type":"\u0004","is_mandatory":true,"title":"Whether inserts are published","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Publication name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the publication","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"truncate":{"name":"truncate","type":"\u0004","is_mandatory":true,"title":"Whether truncates are published","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"update":{"name":"update","type":"\u0004","is_mandatory":true,"title":"Whether updates are published","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL publication","desc":"A logical-replication publication (pg_publication) that defines the set of changes offered to subscribers.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.replicationSlot":{"id":"postgresdb.replicationSlot","name":"postgresdb.replicationSlot","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether a consumer is currently connected to the slot","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"database":{"name":"database","type":"\u0007","is_mandatory":true,"title":"Database the slot is associated with, for logical slots","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Slot name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"slotType":{"name":"slotType","type":"\u0007","is_mandatory":true,"title":"Slot type: physical or logical","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"temporary":{"name":"temporary","type":"\u0004","is_mandatory":true,"title":"Whether the slot is temporary","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL replication slot","desc":"A replication slot (pg_replication_slots) that a standby or logical consumer uses to receive changes. `active` reports whether a consumer is currently attached.","min_provider_version":"13.0.0","defaults":"name active","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.rlsPolicy":{"id":"postgresdb.rlsPolicy","name":"postgresdb.rlsPolicy","fields":{"checkExpression":{"name":"checkExpression","type":"\u0007","is_mandatory":true,"title":"Row filter applied to new or updated rows (the WITH CHECK expression)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"command":{"name":"command","type":"\u0007","is_mandatory":true,"title":"Statement type the policy applies to: SELECT, INSERT, UPDATE, DELETE, or ALL","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"permissive":{"name":"permissive","type":"\u0004","is_mandatory":true,"title":"Whether the policy is permissive (OR-combined) rather than restrictive","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"roles":{"name":"roles","type":"\u0019\u0007","is_mandatory":true,"title":"Roles the policy applies to, or PUBLIC for all roles","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"usingExpression":{"name":"usingExpression","type":"\u0007","is_mandatory":true,"title":"Row filter applied to existing rows (the USING expression)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL row-level security policy","desc":"A row-level security policy (pg_policy) attached to a relation. `command` is the statement type the policy applies to (SELECT, INSERT, UPDATE, DELETE, or ALL), `roles` lists the roles it targets (PUBLIC for all roles), and `usingExpression` / `checkExpression` are the row filters it enforces.","min_provider_version":"13.0.0","defaults":"name command","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.role":{"id":"postgresdb.role","name":"postgresdb.role","fields":{"bypassRLS":{"name":"bypassRLS","type":"\u0004","is_mandatory":true,"title":"Whether the role bypasses row-level security","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"canLogin":{"name":"canLogin","type":"\u0004","is_mandatory":true,"title":"Whether the role may log in","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"config":{"name":"config","type":"\u0019\u0007","is_mandatory":true,"title":"Per-role configuration parameter overrides (SET ... for the role)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"connectionLimit":{"name":"connectionLimit","type":"\u0005","is_mandatory":true,"title":"Maximum number of concurrent connections, or -1 for no limit","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"createDb":{"name":"createDb","type":"\u0004","is_mandatory":true,"title":"Whether the role may create databases","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"createRole":{"name":"createRole","type":"\u0004","is_mandatory":true,"title":"Whether the role may create other roles","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"inheritsPrivileges":{"name":"inheritsPrivileges","type":"\u0004","is_mandatory":true,"title":"Whether the role inherits the privileges of roles it is a member of","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"isReplication":{"name":"isReplication","type":"\u0004","is_mandatory":true,"title":"Whether the role is a replication role","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"isSuperuser":{"name":"isSuperuser","type":"\u0004","is_mandatory":true,"title":"Whether the role is a superuser","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"memberOf":{"name":"memberOf","type":"\u0019\u001bpostgresdb.role","title":"Roles this role is a direct member of","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"members":{"name":"members","type":"\u0019\u001bpostgresdb.role","title":"Roles that are direct members of this role","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"oid":{"name":"oid","type":"\u0005","is_mandatory":true,"title":"Object identifier of the role","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"passwordType":{"name":"passwordType","type":"\u0007","is_mandatory":true,"title":"How the role's password is stored","desc":"One of scram-sha-256, md5, or none (no password set). Null when the session role lacks the privilege to read pg_authid.","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"validUntil":{"name":"validUntil","type":"\t","is_mandatory":true,"title":"Time after which the role's password is no longer valid","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL role","desc":"A cluster role, which is either a login role or a group role (PostgreSQL unifies users and groups). Exposes the privilege attributes that drive access control and escalation analysis (`isSuperuser`, `createRole`, `createDb`, `bypassRLS`, `isReplication`), login state (`canLogin`, `connectionLimit`, `validUntil`), and role membership through `memberOf` and `members`. `passwordType` reports how the role's password is stored (scram-sha-256, md5, or none) and is null when the session role cannot read pg_authid.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.schema":{"id":"postgresdb.schema","name":"postgresdb.schema","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Schema name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"oid":{"name":"oid","type":"\u0005","is_mandatory":true,"title":"Object identifier of the schema","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the schema","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"privileges":{"name":"privileges","type":"\u0019\u001bpostgresdb.privilege","title":"Access privileges granted on the schema (from the nspacl)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"tables":{"name":"tables","type":"\u0019\u001bpostgresdb.table","title":"Tables, views, and other relations in the schema","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL schema","desc":"A namespace within a database (pg_namespace). Exposes the owning role and the access privileges granted on the schema. The `public` schema's privileges are a common hardening focus, since a permissive PUBLIC grant lets any role create objects.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.setting":{"id":"postgresdb.setting","name":"postgresdb.setting","fields":{"bootValue":{"name":"bootValue","type":"\u0007","is_mandatory":true,"title":"Default value the parameter is compiled with","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"category":{"name":"category","type":"\u0007","is_mandatory":true,"title":"Category the parameter belongs to","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"context":{"name":"context","type":"\u0007","is_mandatory":true,"title":"When a change to the parameter takes effect","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Parameter name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"pendingRestart":{"name":"pendingRestart","type":"\u0004","is_mandatory":true,"title":"Whether a pending change requires a restart to take effect","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"resetValue":{"name":"resetValue","type":"\u0007","is_mandatory":true,"title":"Value the parameter resets to","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"setting":{"name":"setting","type":"\u0007","is_mandatory":true,"title":"Current value","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Where the current value was set from, for example default, configuration file, or override","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"unit":{"name":"unit","type":"\u0007","is_mandatory":true,"title":"Unit the value is measured in, when applicable","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL configuration setting","desc":"A runtime configuration parameter (pg_settings), selected by `name`, for example `postgresdb.instance.settings.where(name == \"log_connections\")`. `context` reports when a change takes effect (postmaster, sighup, superuser, or user), and `source` reports where the current value came from.","min_provider_version":"13.0.0","defaults":"name setting","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.subscription":{"id":"postgresdb.subscription","name":"postgresdb.subscription","fields":{"connectionSanitized":{"name":"connectionSanitized","type":"\u0007","is_mandatory":true,"title":"Publisher connection string with any password removed","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the subscription is enabled","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Subscription name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the subscription","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL subscription","desc":"A logical-replication subscription (pg_subscription) that consumes changes from a publisher. The connection string is exposed only in a sanitized form with any password removed.","min_provider_version":"13.0.0","defaults":"name enabled","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.table":{"id":"postgresdb.table","name":"postgresdb.table","fields":{"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Relation kind: table, view, materializedView, foreignTable, or partitionedTable","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Relation name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"oid":{"name":"oid","type":"\u0005","is_mandatory":true,"title":"Object identifier of the relation","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the relation","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"policies":{"name":"policies","type":"\u0019\u001bpostgresdb.rlsPolicy","title":"Row-level security policies attached to the relation","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"privileges":{"name":"privileges","type":"\u0019\u001bpostgresdb.privilege","title":"Access privileges granted on the relation (from the relacl)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"rowSecurityEnabled":{"name":"rowSecurityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether row-level security is enabled on the relation","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"rowSecurityForced":{"name":"rowSecurityForced","type":"\u0004","is_mandatory":true,"title":"Whether row-level security is forced for the relation's owner","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the relation belongs to","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL relation","desc":"A relation in a schema (pg_class): an ordinary table, view, materialized view, foreign table, or partitioned table, reported by `kind`. Exposes the owning role, the access privileges granted on the relation (`privileges`, the source for DML-privilege review), and its row-level security posture (`rowSecurityEnabled`, `rowSecurityForced`, and `policies`).","min_provider_version":"13.0.0","defaults":"schema name kind","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.tablespace":{"id":"postgresdb.tablespace","name":"postgresdb.tablespace","fields":{"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Filesystem location of the tablespace","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Tablespace name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"oid":{"name":"oid","type":"\u0005","is_mandatory":true,"title":"Object identifier of the tablespace","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"owner":{"name":"owner","type":"\u001bpostgresdb.role","title":"Role that owns the tablespace","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"privileges":{"name":"privileges","type":"\u0019\u001bpostgresdb.privilege","title":"Access privileges granted on the tablespace (from the spcacl)","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL tablespace","desc":"A tablespace (pg_tablespace) that maps a storage location on disk. Exposes the owning role and the access privileges granted on it.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"postgresdb.userMapping":{"id":"postgresdb.userMapping","name":"postgresdb.userMapping","fields":{"options":{"name":"options","type":"\u0019\u0007","is_mandatory":true,"title":"Non-secret options of the mapping","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Local role the mapping applies to, or PUBLIC","provider":"go.mondoo.com/mql/v13/providers/postgresdb"},"server":{"name":"server","type":"\u0007","is_mandatory":true,"title":"Foreign server the mapping targets","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}},"title":"PostgreSQL user mapping","desc":"A mapping (pg_user_mappings) from a local role to the credentials used against a foreign server. `options` may contain a remote user name; secret values are not exposed.","min_provider_version":"13.0.0","defaults":"role","provider":"go.mondoo.com/mql/v13/providers/postgresdb"}}}