OCI Vulnerability Scanning Service

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Oracle Cloud Vulnerability Scanning Service: a scan recipe says what to examine on hosts and images, and how often.
3# Defaults from "Vulnerability Scanning Overview" and "Creating a Compute Scan Recipe": port scanning defaults to
4# the Light level, which checks the 100 most common ports; hosts, open ports, CIS benchmarks and images are scanned.
5schemaVersion: "1"
6type: "component"
7id: "oci-vulnerability-scanning"
8kind: "monitoring"
9provider: "oci"
10docs: "https://docs.oracle.com/en-us/iaas/scanning/using/create-host-recipe.htm"
11aliases: ["VSS"]
12defaults:
13  managed: true
14  signal: "alerts"
15  collectorMode: "pull"
16  independentOfMonitored: false
17properties:
18  targetType:
19    type: "enum"
20    values: ["compute", "container-image"]
21    default: "compute"
22  portScanLevel:
23    type: "enum"
24    values: ["none", "light", "standard"]
25    default: "light"
26  agentBasedScanning:
27    type: "boolean"
28    default: true
29  cisBenchmarkScanning:
30    type: "boolean"
31    default: false