Application_Security / tools / tool editor

application__scan_vulnerability

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 6 props · 2 required

{
  "type": "object",
  "required": [
    "target",
    "scan_type"
  ],
  "properties": {
    "target": {
      "type": "string",
      "description": "Application URL, IP address, or application identifier"
    },
    "policy_id": {
      "type": "string"
    },
    "scan_type": {
      "enum": [
        "sast",
        "dast",
        "iast",
        "sca",
        "secrets",
        "container"
      ],
      "type": "string"
    },
    "scan_profile": {
      "enum": [
        "quick",
        "standard",
        "comprehensive",
        "custom"
      ],
      "type": "string"
    },
    "exclude_paths": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "authentication": {
      "type": "object",
      "properties": {
        "type": {
          "enum": [
            "none",
            "basic",
            "bearer",
            "cookie",
            "custom"
          ],
          "type": "string"
        },
        "credentials": {
          "type": "object"
        }
      }
    }
  }
}

registry name changes propagate to the decoy surface on the next drain