cloud__list_security_findings

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 6 props · 0 required

{
  "type": "object",
  "required": [],
  "properties": {
    "page": {
      "type": "integer",
      "default": 1,
      "minimum": 1
    },
    "status": {
      "type": "array",
      "items": {
        "enum": [
          "open",
          "suppressed",
          "resolved",
          "in_progress"
        ],
        "type": "string"
      }
    },
    "severity": {
      "type": "array",
      "items": {
        "enum": [
          "critical",
          "high",
          "medium",
          "low"
        ],
        "type": "string"
      }
    },
    "page_size": {
      "type": "integer",
      "default": 50,
      "maximum": 100,
      "minimum": 1
    },
    "resource_type": {
      "type": "array",
      "items": {
        "enum": [
          "s3_bucket",
          "ec2_instance",
          "iam_role",
          "security_group",
          "lambda_function",
          "rds_instance",
          "cloudtrail"
        ],
        "type": "string"
      }
    },
    "compliance_framework": {
      "type": "array",
      "items": {
        "enum": [
          "cis",
          "nist",
          "pci-dss",
          "sox",
          "gdpr",
          "hipaa"
        ],
        "type": "string"
      }
    }
  },
  "additionalProperties": false
}

registry name changes propagate to the decoy surface on the next drain