oci logo
Oracle Cloud Infrastructure v0.12.0, Mar 17 23

oci.Adm.getVulnerabilityAudits

This data source provides the list of Vulnerability Audits in Oracle Cloud Infrastructure ADM service.

Returns a list of Vulnerability Audits based on the specified query parameters. At least one of id, compartmentId or knowledgeBaseId query parameter must be provided.

Example Usage

using System.Collections.Generic;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testVulnerabilityAudits = Oci.Adm.GetVulnerabilityAudits.Invoke(new()
    {
        CompartmentId = @var.Compartment_id,
        DisplayName = @var.Vulnerability_audit_display_name,
        Id = @var.Vulnerability_audit_id,
        IsSuccess = @var.Vulnerability_audit_is_success,
        KnowledgeBaseId = oci_adm_knowledge_base.Test_knowledge_base.Id,
        State = @var.Vulnerability_audit_state,
    });

});
package main

import (
	"github.com/pulumi/pulumi-oci/sdk/go/oci/Adm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := Adm.GetVulnerabilityAudits(ctx, &adm.GetVulnerabilityAuditsArgs{
			CompartmentId:   pulumi.StringRef(_var.Compartment_id),
			DisplayName:     pulumi.StringRef(_var.Vulnerability_audit_display_name),
			Id:              pulumi.StringRef(_var.Vulnerability_audit_id),
			IsSuccess:       pulumi.BoolRef(_var.Vulnerability_audit_is_success),
			KnowledgeBaseId: pulumi.StringRef(oci_adm_knowledge_base.Test_knowledge_base.Id),
			State:           pulumi.StringRef(_var.Vulnerability_audit_state),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Adm.AdmFunctions;
import com.pulumi.oci.Adm.inputs.GetVulnerabilityAuditsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testVulnerabilityAudits = AdmFunctions.getVulnerabilityAudits(GetVulnerabilityAuditsArgs.builder()
            .compartmentId(var_.compartment_id())
            .displayName(var_.vulnerability_audit_display_name())
            .id(var_.vulnerability_audit_id())
            .isSuccess(var_.vulnerability_audit_is_success())
            .knowledgeBaseId(oci_adm_knowledge_base.test_knowledge_base().id())
            .state(var_.vulnerability_audit_state())
            .build());

    }
}
import pulumi
import pulumi_oci as oci

test_vulnerability_audits = oci.Adm.get_vulnerability_audits(compartment_id=var["compartment_id"],
    display_name=var["vulnerability_audit_display_name"],
    id=var["vulnerability_audit_id"],
    is_success=var["vulnerability_audit_is_success"],
    knowledge_base_id=oci_adm_knowledge_base["test_knowledge_base"]["id"],
    state=var["vulnerability_audit_state"])
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testVulnerabilityAudits = oci.Adm.getVulnerabilityAudits({
    compartmentId: _var.compartment_id,
    displayName: _var.vulnerability_audit_display_name,
    id: _var.vulnerability_audit_id,
    isSuccess: _var.vulnerability_audit_is_success,
    knowledgeBaseId: oci_adm_knowledge_base.test_knowledge_base.id,
    state: _var.vulnerability_audit_state,
});
variables:
  testVulnerabilityAudits:
    fn::invoke:
      Function: oci:Adm:getVulnerabilityAudits
      Arguments:
        compartmentId: ${var.compartment_id}
        displayName: ${var.vulnerability_audit_display_name}
        id: ${var.vulnerability_audit_id}
        isSuccess: ${var.vulnerability_audit_is_success}
        knowledgeBaseId: ${oci_adm_knowledge_base.test_knowledge_base.id}
        state: ${var.vulnerability_audit_state}

Using getVulnerabilityAudits

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getVulnerabilityAudits(args: GetVulnerabilityAuditsArgs, opts?: InvokeOptions): Promise<GetVulnerabilityAuditsResult>
function getVulnerabilityAuditsOutput(args: GetVulnerabilityAuditsOutputArgs, opts?: InvokeOptions): Output<GetVulnerabilityAuditsResult>
def get_vulnerability_audits(compartment_id: Optional[str] = None,
                             display_name: Optional[str] = None,
                             filters: Optional[Sequence[_adm.GetVulnerabilityAuditsFilter]] = None,
                             id: Optional[str] = None,
                             is_success: Optional[bool] = None,
                             knowledge_base_id: Optional[str] = None,
                             state: Optional[str] = None,
                             opts: Optional[InvokeOptions] = None) -> GetVulnerabilityAuditsResult
def get_vulnerability_audits_output(compartment_id: Optional[pulumi.Input[str]] = None,
                             display_name: Optional[pulumi.Input[str]] = None,
                             filters: Optional[pulumi.Input[Sequence[pulumi.Input[_adm.GetVulnerabilityAuditsFilterArgs]]]] = None,
                             id: Optional[pulumi.Input[str]] = None,
                             is_success: Optional[pulumi.Input[bool]] = None,
                             knowledge_base_id: Optional[pulumi.Input[str]] = None,
                             state: Optional[pulumi.Input[str]] = None,
                             opts: Optional[InvokeOptions] = None) -> Output[GetVulnerabilityAuditsResult]
func GetVulnerabilityAudits(ctx *Context, args *GetVulnerabilityAuditsArgs, opts ...InvokeOption) (*GetVulnerabilityAuditsResult, error)
func GetVulnerabilityAuditsOutput(ctx *Context, args *GetVulnerabilityAuditsOutputArgs, opts ...InvokeOption) GetVulnerabilityAuditsResultOutput

> Note: This function is named GetVulnerabilityAudits in the Go SDK.

public static class GetVulnerabilityAudits 
{
    public static Task<GetVulnerabilityAuditsResult> InvokeAsync(GetVulnerabilityAuditsArgs args, InvokeOptions? opts = null)
    public static Output<GetVulnerabilityAuditsResult> Invoke(GetVulnerabilityAuditsInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetVulnerabilityAuditsResult> getVulnerabilityAudits(GetVulnerabilityAuditsArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
  function: oci:Adm/getVulnerabilityAudits:getVulnerabilityAudits
  arguments:
    # arguments dictionary

The following arguments are supported:

CompartmentId string

A filter to return only resources that belong to the specified compartment identifier.

DisplayName string

A filter to return only resources that match the entire display name given.

Filters List<GetVulnerabilityAuditsFilter>
Id string

A filter to return only resources that match the specified identifier.

IsSuccess bool

A filter to return only successful or failed Vulnerability Audits.

KnowledgeBaseId string

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

State string

A filter to return only Vulnerability Audits that match the specified lifecycleState.

CompartmentId string

A filter to return only resources that belong to the specified compartment identifier.

DisplayName string

A filter to return only resources that match the entire display name given.

Filters []GetVulnerabilityAuditsFilter
Id string

A filter to return only resources that match the specified identifier.

IsSuccess bool

A filter to return only successful or failed Vulnerability Audits.

KnowledgeBaseId string

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

State string

A filter to return only Vulnerability Audits that match the specified lifecycleState.

compartmentId String

A filter to return only resources that belong to the specified compartment identifier.

displayName String

A filter to return only resources that match the entire display name given.

filters List<GetVulnerabilityAuditsFilter>
id String

A filter to return only resources that match the specified identifier.

isSuccess Boolean

A filter to return only successful or failed Vulnerability Audits.

knowledgeBaseId String

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

state String

A filter to return only Vulnerability Audits that match the specified lifecycleState.

compartmentId string

A filter to return only resources that belong to the specified compartment identifier.

displayName string

A filter to return only resources that match the entire display name given.

filters GetVulnerabilityAuditsFilter[]
id string

A filter to return only resources that match the specified identifier.

isSuccess boolean

A filter to return only successful or failed Vulnerability Audits.

knowledgeBaseId string

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

state string

A filter to return only Vulnerability Audits that match the specified lifecycleState.

compartment_id str

A filter to return only resources that belong to the specified compartment identifier.

display_name str

A filter to return only resources that match the entire display name given.

filters GetVulnerabilityAuditsFilter]
id str

A filter to return only resources that match the specified identifier.

is_success bool

A filter to return only successful or failed Vulnerability Audits.

knowledge_base_id str

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

state str

A filter to return only Vulnerability Audits that match the specified lifecycleState.

compartmentId String

A filter to return only resources that belong to the specified compartment identifier.

displayName String

A filter to return only resources that match the entire display name given.

filters List<Property Map>
id String

A filter to return only resources that match the specified identifier.

isSuccess Boolean

A filter to return only successful or failed Vulnerability Audits.

knowledgeBaseId String

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

state String

A filter to return only Vulnerability Audits that match the specified lifecycleState.

getVulnerabilityAudits Result

The following output properties are available:

VulnerabilityAuditCollections List<GetVulnerabilityAuditsVulnerabilityAuditCollection>

The list of vulnerability_audit_collection.

CompartmentId string

The Oracle Cloud identifier (OCID) of the compartment associated with the Vulnerability Audit.

DisplayName string

The name of the Vulnerability Audit.

Filters List<GetVulnerabilityAuditsFilter>
Id string

Unique vulnerability identifier, e.g. CVE-1999-0067.

IsSuccess bool

Indicates if an audit succeeded according to the configuration. The value is null if the audit is in the CREATING state.

KnowledgeBaseId string

The Oracle Cloud identifier (OCID) of the Knowledge Base.

State string

The current lifecycle state of the Vulnerability Audit.

VulnerabilityAuditCollections []GetVulnerabilityAuditsVulnerabilityAuditCollection

The list of vulnerability_audit_collection.

CompartmentId string

The Oracle Cloud identifier (OCID) of the compartment associated with the Vulnerability Audit.

DisplayName string

The name of the Vulnerability Audit.

Filters []GetVulnerabilityAuditsFilter
Id string

Unique vulnerability identifier, e.g. CVE-1999-0067.

IsSuccess bool

Indicates if an audit succeeded according to the configuration. The value is null if the audit is in the CREATING state.

KnowledgeBaseId string

The Oracle Cloud identifier (OCID) of the Knowledge Base.

State string

The current lifecycle state of the Vulnerability Audit.

vulnerabilityAuditCollections List<GetVulnerabilityAuditsVulnerabilityAuditCollection>

The list of vulnerability_audit_collection.

compartmentId String

The Oracle Cloud identifier (OCID) of the compartment associated with the Vulnerability Audit.

displayName String

The name of the Vulnerability Audit.

filters List<GetVulnerabilityAuditsFilter>
id String

Unique vulnerability identifier, e.g. CVE-1999-0067.

isSuccess Boolean

Indicates if an audit succeeded according to the configuration. The value is null if the audit is in the CREATING state.

knowledgeBaseId String

The Oracle Cloud identifier (OCID) of the Knowledge Base.

state String

The current lifecycle state of the Vulnerability Audit.

vulnerabilityAuditCollections GetVulnerabilityAuditsVulnerabilityAuditCollection[]

The list of vulnerability_audit_collection.

compartmentId string

The Oracle Cloud identifier (OCID) of the compartment associated with the Vulnerability Audit.

displayName string

The name of the Vulnerability Audit.

filters GetVulnerabilityAuditsFilter[]
id string

Unique vulnerability identifier, e.g. CVE-1999-0067.

isSuccess boolean

Indicates if an audit succeeded according to the configuration. The value is null if the audit is in the CREATING state.

knowledgeBaseId string

The Oracle Cloud identifier (OCID) of the Knowledge Base.

state string

The current lifecycle state of the Vulnerability Audit.

vulnerability_audit_collections GetVulnerabilityAuditsVulnerabilityAuditCollection]

The list of vulnerability_audit_collection.

compartment_id str

The Oracle Cloud identifier (OCID) of the compartment associated with the Vulnerability Audit.

display_name str

The name of the Vulnerability Audit.

filters GetVulnerabilityAuditsFilter]
id str

Unique vulnerability identifier, e.g. CVE-1999-0067.

is_success bool

Indicates if an audit succeeded according to the configuration. The value is null if the audit is in the CREATING state.

knowledge_base_id str

The Oracle Cloud identifier (OCID) of the Knowledge Base.

state str

The current lifecycle state of the Vulnerability Audit.

vulnerabilityAuditCollections List<Property Map>

The list of vulnerability_audit_collection.

compartmentId String

The Oracle Cloud identifier (OCID) of the compartment associated with the Vulnerability Audit.

displayName String

The name of the Vulnerability Audit.

filters List<Property Map>
id String

Unique vulnerability identifier, e.g. CVE-1999-0067.

isSuccess Boolean

Indicates if an audit succeeded according to the configuration. The value is null if the audit is in the CREATING state.

knowledgeBaseId String

The Oracle Cloud identifier (OCID) of the Knowledge Base.

state String

The current lifecycle state of the Vulnerability Audit.

Supporting Types

GetVulnerabilityAuditsFilter

Name string
Values List<string>
Regex bool
Name string
Values []string
Regex bool
name String
values List<String>
regex Boolean
name string
values string[]
regex boolean
name str
values Sequence[str]
regex bool
name String
values List<String>
regex Boolean

GetVulnerabilityAuditsVulnerabilityAuditCollection

GetVulnerabilityAuditsVulnerabilityAuditCollectionItem

ApplicationDependencies List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemApplicationDependency>
BuildType string

The type of the build tool.

CompartmentId string

A filter to return only resources that belong to the specified compartment identifier.

Configurations List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemConfiguration>

Configuration for a Vulnerability Audit. A vulnerable Application Dependency is ignored if its name does match any of the items in exclusions, or all of the associated Vulnerabilies have a CVSS v2 score below maxPermissibleCvssV2Score and a CVSS v3 score below maxPermissibleCvssV3Score. type: object

DefinedTags Dictionary<string, object>

Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

DisplayName string

A filter to return only resources that match the entire display name given.

FreeformTags Dictionary<string, object>

Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

Id string

A filter to return only resources that match the specified identifier.

IsSuccess bool

A filter to return only successful or failed Vulnerability Audits.

KnowledgeBaseId string

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

MaxObservedCvssV2score double

Maximum Common Vulnerability Scoring System Version 2 score observed for non-ignored vulnerable Application Dependencies.

MaxObservedCvssV2scoreWithIgnored double

Maximum Common Vulnerability Scoring System Version 2 score observed for vulnerable Application Dependencies including ignored ones.

MaxObservedCvssV3score double

Maximum Common Vulnerability Scoring System Version 3 score observed for non-ignored vulnerable Application Dependencies.

MaxObservedCvssV3scoreWithIgnored double

Maximum Common Vulnerability Scoring System Version 3 score observed for vulnerable Application Dependencies including ignored ones.

Sources List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemSource>

Vulnerability Audit source.

State string

A filter to return only Vulnerability Audits that match the specified lifecycleState.

SystemTags Dictionary<string, object>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

TimeCreated string

The creation date and time of the Vulnerability Audit (formatted according to RFC3339).

TimeUpdated string

The update date and time of the Vulnerability Audit (formatted according to RFC3339).

Vulnerabilities List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemVulnerability>

List of vulnerabilities found in the Vulnerability Audit.

VulnerableArtifactsCount int

Count of non-ignored vulnerable Application Dependencies.

VulnerableArtifactsCountWithIgnored int

Count of all vulnerable Application Dependencies.

ApplicationDependencies []GetVulnerabilityAuditsVulnerabilityAuditCollectionItemApplicationDependency
BuildType string

The type of the build tool.

CompartmentId string

A filter to return only resources that belong to the specified compartment identifier.

Configurations []GetVulnerabilityAuditsVulnerabilityAuditCollectionItemConfiguration

Configuration for a Vulnerability Audit. A vulnerable Application Dependency is ignored if its name does match any of the items in exclusions, or all of the associated Vulnerabilies have a CVSS v2 score below maxPermissibleCvssV2Score and a CVSS v3 score below maxPermissibleCvssV3Score. type: object

DefinedTags map[string]interface{}

Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

DisplayName string

A filter to return only resources that match the entire display name given.

FreeformTags map[string]interface{}

Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

Id string

A filter to return only resources that match the specified identifier.

IsSuccess bool

A filter to return only successful or failed Vulnerability Audits.

KnowledgeBaseId string

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

MaxObservedCvssV2score float64

Maximum Common Vulnerability Scoring System Version 2 score observed for non-ignored vulnerable Application Dependencies.

MaxObservedCvssV2scoreWithIgnored float64

Maximum Common Vulnerability Scoring System Version 2 score observed for vulnerable Application Dependencies including ignored ones.

MaxObservedCvssV3score float64

Maximum Common Vulnerability Scoring System Version 3 score observed for non-ignored vulnerable Application Dependencies.

MaxObservedCvssV3scoreWithIgnored float64

Maximum Common Vulnerability Scoring System Version 3 score observed for vulnerable Application Dependencies including ignored ones.

Sources []GetVulnerabilityAuditsVulnerabilityAuditCollectionItemSource

Vulnerability Audit source.

State string

A filter to return only Vulnerability Audits that match the specified lifecycleState.

SystemTags map[string]interface{}

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

TimeCreated string

The creation date and time of the Vulnerability Audit (formatted according to RFC3339).

TimeUpdated string

The update date and time of the Vulnerability Audit (formatted according to RFC3339).

Vulnerabilities []GetVulnerabilityAuditsVulnerabilityAuditCollectionItemVulnerability

List of vulnerabilities found in the Vulnerability Audit.

VulnerableArtifactsCount int

Count of non-ignored vulnerable Application Dependencies.

VulnerableArtifactsCountWithIgnored int

Count of all vulnerable Application Dependencies.

applicationDependencies List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemApplicationDependency>
buildType String

The type of the build tool.

compartmentId String

A filter to return only resources that belong to the specified compartment identifier.

configurations List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemConfiguration>

Configuration for a Vulnerability Audit. A vulnerable Application Dependency is ignored if its name does match any of the items in exclusions, or all of the associated Vulnerabilies have a CVSS v2 score below maxPermissibleCvssV2Score and a CVSS v3 score below maxPermissibleCvssV3Score. type: object

definedTags Map<String,Object>

Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

displayName String

A filter to return only resources that match the entire display name given.

freeformTags Map<String,Object>

Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

id String

A filter to return only resources that match the specified identifier.

isSuccess Boolean

A filter to return only successful or failed Vulnerability Audits.

knowledgeBaseId String

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

maxObservedCvssV2score Double

Maximum Common Vulnerability Scoring System Version 2 score observed for non-ignored vulnerable Application Dependencies.

maxObservedCvssV2scoreWithIgnored Double

Maximum Common Vulnerability Scoring System Version 2 score observed for vulnerable Application Dependencies including ignored ones.

maxObservedCvssV3score Double

Maximum Common Vulnerability Scoring System Version 3 score observed for non-ignored vulnerable Application Dependencies.

maxObservedCvssV3scoreWithIgnored Double

Maximum Common Vulnerability Scoring System Version 3 score observed for vulnerable Application Dependencies including ignored ones.

sources List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemSource>

Vulnerability Audit source.

state String

A filter to return only Vulnerability Audits that match the specified lifecycleState.

systemTags Map<String,Object>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated String

The creation date and time of the Vulnerability Audit (formatted according to RFC3339).

timeUpdated String

The update date and time of the Vulnerability Audit (formatted according to RFC3339).

vulnerabilities List<GetVulnerabilityAuditsVulnerabilityAuditCollectionItemVulnerability>

List of vulnerabilities found in the Vulnerability Audit.

vulnerableArtifactsCount Integer

Count of non-ignored vulnerable Application Dependencies.

vulnerableArtifactsCountWithIgnored Integer

Count of all vulnerable Application Dependencies.

applicationDependencies GetVulnerabilityAuditsVulnerabilityAuditCollectionItemApplicationDependency[]
buildType string

The type of the build tool.

compartmentId string

A filter to return only resources that belong to the specified compartment identifier.

configurations GetVulnerabilityAuditsVulnerabilityAuditCollectionItemConfiguration[]

Configuration for a Vulnerability Audit. A vulnerable Application Dependency is ignored if its name does match any of the items in exclusions, or all of the associated Vulnerabilies have a CVSS v2 score below maxPermissibleCvssV2Score and a CVSS v3 score below maxPermissibleCvssV3Score. type: object

definedTags {[key: string]: any}

Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

displayName string

A filter to return only resources that match the entire display name given.

freeformTags {[key: string]: any}

Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

id string

A filter to return only resources that match the specified identifier.

isSuccess boolean

A filter to return only successful or failed Vulnerability Audits.

knowledgeBaseId string

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

maxObservedCvssV2score number

Maximum Common Vulnerability Scoring System Version 2 score observed for non-ignored vulnerable Application Dependencies.

maxObservedCvssV2scoreWithIgnored number

Maximum Common Vulnerability Scoring System Version 2 score observed for vulnerable Application Dependencies including ignored ones.

maxObservedCvssV3score number

Maximum Common Vulnerability Scoring System Version 3 score observed for non-ignored vulnerable Application Dependencies.

maxObservedCvssV3scoreWithIgnored number

Maximum Common Vulnerability Scoring System Version 3 score observed for vulnerable Application Dependencies including ignored ones.

sources GetVulnerabilityAuditsVulnerabilityAuditCollectionItemSource[]

Vulnerability Audit source.

state string

A filter to return only Vulnerability Audits that match the specified lifecycleState.

systemTags {[key: string]: any}

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated string

The creation date and time of the Vulnerability Audit (formatted according to RFC3339).

timeUpdated string

The update date and time of the Vulnerability Audit (formatted according to RFC3339).

vulnerabilities GetVulnerabilityAuditsVulnerabilityAuditCollectionItemVulnerability[]

List of vulnerabilities found in the Vulnerability Audit.

vulnerableArtifactsCount number

Count of non-ignored vulnerable Application Dependencies.

vulnerableArtifactsCountWithIgnored number

Count of all vulnerable Application Dependencies.

application_dependencies GetVulnerabilityAuditsVulnerabilityAuditCollectionItemApplicationDependency]
build_type str

The type of the build tool.

compartment_id str

A filter to return only resources that belong to the specified compartment identifier.

configurations GetVulnerabilityAuditsVulnerabilityAuditCollectionItemConfiguration]

Configuration for a Vulnerability Audit. A vulnerable Application Dependency is ignored if its name does match any of the items in exclusions, or all of the associated Vulnerabilies have a CVSS v2 score below maxPermissibleCvssV2Score and a CVSS v3 score below maxPermissibleCvssV3Score. type: object

defined_tags Mapping[str, Any]

Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

display_name str

A filter to return only resources that match the entire display name given.

freeform_tags Mapping[str, Any]

Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

id str

A filter to return only resources that match the specified identifier.

is_success bool

A filter to return only successful or failed Vulnerability Audits.

knowledge_base_id str

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

max_observed_cvss_v2score float

Maximum Common Vulnerability Scoring System Version 2 score observed for non-ignored vulnerable Application Dependencies.

max_observed_cvss_v2score_with_ignored float

Maximum Common Vulnerability Scoring System Version 2 score observed for vulnerable Application Dependencies including ignored ones.

max_observed_cvss_v3score float

Maximum Common Vulnerability Scoring System Version 3 score observed for non-ignored vulnerable Application Dependencies.

max_observed_cvss_v3score_with_ignored float

Maximum Common Vulnerability Scoring System Version 3 score observed for vulnerable Application Dependencies including ignored ones.

sources GetVulnerabilityAuditsVulnerabilityAuditCollectionItemSource]

Vulnerability Audit source.

state str

A filter to return only Vulnerability Audits that match the specified lifecycleState.

system_tags Mapping[str, Any]

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

time_created str

The creation date and time of the Vulnerability Audit (formatted according to RFC3339).

time_updated str

The update date and time of the Vulnerability Audit (formatted according to RFC3339).

vulnerabilities GetVulnerabilityAuditsVulnerabilityAuditCollectionItemVulnerability]

List of vulnerabilities found in the Vulnerability Audit.

vulnerable_artifacts_count int

Count of non-ignored vulnerable Application Dependencies.

vulnerable_artifacts_count_with_ignored int

Count of all vulnerable Application Dependencies.

applicationDependencies List<Property Map>
buildType String

The type of the build tool.

compartmentId String

A filter to return only resources that belong to the specified compartment identifier.

configurations List<Property Map>

Configuration for a Vulnerability Audit. A vulnerable Application Dependency is ignored if its name does match any of the items in exclusions, or all of the associated Vulnerabilies have a CVSS v2 score below maxPermissibleCvssV2Score and a CVSS v3 score below maxPermissibleCvssV3Score. type: object

definedTags Map<Any>

Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

displayName String

A filter to return only resources that match the entire display name given.

freeformTags Map<Any>

Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

id String

A filter to return only resources that match the specified identifier.

isSuccess Boolean

A filter to return only successful or failed Vulnerability Audits.

knowledgeBaseId String

A filter to return only Vulnerability Audits that were created against the specified knowledge base.

maxObservedCvssV2score Number

Maximum Common Vulnerability Scoring System Version 2 score observed for non-ignored vulnerable Application Dependencies.

maxObservedCvssV2scoreWithIgnored Number

Maximum Common Vulnerability Scoring System Version 2 score observed for vulnerable Application Dependencies including ignored ones.

maxObservedCvssV3score Number

Maximum Common Vulnerability Scoring System Version 3 score observed for non-ignored vulnerable Application Dependencies.

maxObservedCvssV3scoreWithIgnored Number

Maximum Common Vulnerability Scoring System Version 3 score observed for vulnerable Application Dependencies including ignored ones.

sources List<Property Map>

Vulnerability Audit source.

state String

A filter to return only Vulnerability Audits that match the specified lifecycleState.

systemTags Map<Any>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated String

The creation date and time of the Vulnerability Audit (formatted according to RFC3339).

timeUpdated String

The update date and time of the Vulnerability Audit (formatted according to RFC3339).

vulnerabilities List<Property Map>

List of vulnerabilities found in the Vulnerability Audit.

vulnerableArtifactsCount Number

Count of non-ignored vulnerable Application Dependencies.

vulnerableArtifactsCountWithIgnored Number

Count of all vulnerable Application Dependencies.

GetVulnerabilityAuditsVulnerabilityAuditCollectionItemApplicationDependency

ApplicationDependencyNodeIds List<string>
Gav string
NodeId string
applicationDependencyNodeIds List<String>
gav String
nodeId String
applicationDependencyNodeIds List<String>
gav String
nodeId String

GetVulnerabilityAuditsVulnerabilityAuditCollectionItemConfiguration

Exclusions List<string>

A vulnerable Application Dependency is ignored if its name matches any of the items in exclusions.

MaxPermissibleCvssV2score double

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

MaxPermissibleCvssV3score double

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

Exclusions []string

A vulnerable Application Dependency is ignored if its name matches any of the items in exclusions.

MaxPermissibleCvssV2score float64

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

MaxPermissibleCvssV3score float64

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

exclusions List<String>

A vulnerable Application Dependency is ignored if its name matches any of the items in exclusions.

maxPermissibleCvssV2score Double

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

maxPermissibleCvssV3score Double

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

exclusions string[]

A vulnerable Application Dependency is ignored if its name matches any of the items in exclusions.

maxPermissibleCvssV2score number

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

maxPermissibleCvssV3score number

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

exclusions Sequence[str]

A vulnerable Application Dependency is ignored if its name matches any of the items in exclusions.

max_permissible_cvss_v2score float

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

max_permissible_cvss_v3score float

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

exclusions List<String>

A vulnerable Application Dependency is ignored if its name matches any of the items in exclusions.

maxPermissibleCvssV2score Number

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

maxPermissibleCvssV3score Number

A vulnerable Application Dependency is ignored if the score of its associated Vulnerability is below maxPermissibleCvssV2Score and below maxPermissibleCvssV3Score.

GetVulnerabilityAuditsVulnerabilityAuditCollectionItemSource

Description string

Description of the external resource source.

OciResourceId string

The Oracle Cloud identifier (OCID) of the Oracle Cloud Infrastructure resource that triggered the Vulnerability Audit.

Type string

Source type of the Vulnerability Audit.

Description string

Description of the external resource source.

OciResourceId string

The Oracle Cloud identifier (OCID) of the Oracle Cloud Infrastructure resource that triggered the Vulnerability Audit.

Type string

Source type of the Vulnerability Audit.

description String

Description of the external resource source.

ociResourceId String

The Oracle Cloud identifier (OCID) of the Oracle Cloud Infrastructure resource that triggered the Vulnerability Audit.

type String

Source type of the Vulnerability Audit.

description string

Description of the external resource source.

ociResourceId string

The Oracle Cloud identifier (OCID) of the Oracle Cloud Infrastructure resource that triggered the Vulnerability Audit.

type string

Source type of the Vulnerability Audit.

description str

Description of the external resource source.

oci_resource_id str

The Oracle Cloud identifier (OCID) of the Oracle Cloud Infrastructure resource that triggered the Vulnerability Audit.

type str

Source type of the Vulnerability Audit.

description String

Description of the external resource source.

ociResourceId String

The Oracle Cloud identifier (OCID) of the Oracle Cloud Infrastructure resource that triggered the Vulnerability Audit.

type String

Source type of the Vulnerability Audit.

GetVulnerabilityAuditsVulnerabilityAuditCollectionItemVulnerability

CvssV2score double

Common Vulnerability Scoring System (CVSS) Version 2.

CvssV3score double

Common Vulnerability Scoring System (CVSS) Version 3.

Id string

A filter to return only resources that match the specified identifier.

IsIgnored bool

Indicates if the vulnerability was ignored according to the audit configuration.

CvssV2score float64

Common Vulnerability Scoring System (CVSS) Version 2.

CvssV3score float64

Common Vulnerability Scoring System (CVSS) Version 3.

Id string

A filter to return only resources that match the specified identifier.

IsIgnored bool

Indicates if the vulnerability was ignored according to the audit configuration.

cvssV2score Double

Common Vulnerability Scoring System (CVSS) Version 2.

cvssV3score Double

Common Vulnerability Scoring System (CVSS) Version 3.

id String

A filter to return only resources that match the specified identifier.

isIgnored Boolean

Indicates if the vulnerability was ignored according to the audit configuration.

cvssV2score number

Common Vulnerability Scoring System (CVSS) Version 2.

cvssV3score number

Common Vulnerability Scoring System (CVSS) Version 3.

id string

A filter to return only resources that match the specified identifier.

isIgnored boolean

Indicates if the vulnerability was ignored according to the audit configuration.

cvss_v2score float

Common Vulnerability Scoring System (CVSS) Version 2.

cvss_v3score float

Common Vulnerability Scoring System (CVSS) Version 3.

id str

A filter to return only resources that match the specified identifier.

is_ignored bool

Indicates if the vulnerability was ignored according to the audit configuration.

cvssV2score Number

Common Vulnerability Scoring System (CVSS) Version 2.

cvssV3score Number

Common Vulnerability Scoring System (CVSS) Version 3.

id String

A filter to return only resources that match the specified identifier.

isIgnored Boolean

Indicates if the vulnerability was ignored according to the audit configuration.

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes

This Pulumi package is based on the oci Terraform Provider.