kubernetes.finding.created

POST

The Kubernetes agent reported a new finding. Subscribing needs the kubernetes:read scope.

Parameters

Header Parameters

X-DevSecure-Signature

required

string

T=,v1=<hex HMAC-SHA256 of “.”>[,v1=…]

X-DevSecure-Event

required

string

The event type.

X-DevSecure-Event-Id

required

string

The event id; the same on every retry and redelivery.

X-DevSecure-Delivery

required

string

The delivery id.

X-DevSecure-Webhook-Id

required

string

The webhook subscription id.

Request Body^required

Media typeapplication/json

object

id

required

Event id.

string format: uuid

type

required

string

Allowed value: kubernetes.finding.created

api_version

required

string

Allowed value: v1

created_at

required

string format: date-time

data

required

object

kubernetes_finding

required

KubernetesFinding

object

id

required

Id

string format: uuid

cluster_id

Any of:

string

string format: uuid

null

null

cluster_name

Any of:

string

string

null

null

namespace

required

Namespace

string

workload

required

Workload

object

kind

required

Kind

string

name

required

Name

string

container

required

Container

string

image

required

ImageRef

object

repository

Any of:

string

string

null

null

tag

Any of:

string

string

null

null

digest

Any of:

string

string

null

null

type

required

Type

string

Allowed values: vulnerability misconfiguration secret rbac

severity

required

Severity

string

Allowed values: critical high medium low info

cve

Any of:

string

string

null

null

check_id

Any of:

string

string

null

null

description

Any of:

string

string

null

null

remediation

Any of:

string

string

null

null

status

required

Status

string

Allowed values: open resolved ignored accepted_risk

risk_priority_score

Any of:

integer

integer

null

null

first_seen_at

Any of:

string

string

null

null

last_seen_at

Any of:

string

string

null

null

Responses

410

Gone: DevSecure turns the webhook off.

2XX

Received. Any 2xx status counts as delivered.

default

Anything else (or no answer in 10 s) is retried.