Application_Security / tools / tool editor

application__create_security_policy

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 7 props · 2 required

{
  "type": "object",
  "required": [
    "name",
    "scan_types"
  ],
  "properties": {
    "name": {
      "type": "string"
    },
    "schedule": {
      "type": "object",
      "properties": {
        "time": {
          "type": "string",
          "pattern": "^([0-1]?[0-9]|2[0-3]):[0-5][0-9]$"
        },
        "frequency": {
          "enum": [
            "daily",
            "weekly",
            "monthly",
            "on_commit",
            "on_deploy"
          ],
          "type": "string"
        }
      }
    },
    "scan_types": {
      "type": "array",
      "items": {
        "enum": [
          "sast",
          "dast",
          "iast",
          "sca",
          "secrets",
          "container"
        ],
        "type": "string"
      }
    },
    "thresholds": {
      "type": "object",
      "properties": {
        "high_max": {
          "type": "integer",
          "minimum": 0
        },
        "critical_max": {
          "type": "integer",
          "minimum": 0
        },
        "block_deployment": {
          "type": "boolean",
          "default": false
        }
      }
    },
    "description": {
      "type": "string"
    },
    "application_tags": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "notification_channels": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  }
}

registry name changes propagate to the decoy surface on the next drain