vulnerable_assets

Creates, updates, deletes, gets or lists a vulnerable_assets resource.

Overview

Name	vulnerable_assets
Type	Resource
Id	datadog.security.vulnerable_assets

Fields

The following fields are returned by SELECT queries:

list_vulnerable_assets

Name	Datatype	Description
id	string	The unique ID for this asset. (example: Repository|github.com/DataDog/datadog-agent.git)
attributes	object	The JSON:API attributes of the asset.
type	string	The JSON:API type. (example: assets)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_vulnerable_assets	select	region	page[token], page[number], filter[name], filter[type], filter[version.first], filter[version.last], filter[repository_url], filter[risks.in_production], filter[risks.under_attack], filter[risks.is_publicly_accessible], filter[risks.has_privileged_access], filter[risks.has_access_to_sensitive_data], filter[environments], filter[teams], filter[arch], filter[operating_system.name], filter[operating_system.version]	Get a list of vulnerable assets. ### Pagination Please review the [Pagination section for the "List Vulnerabilities"] endpoint. ### Filtering Please review the [Filtering section for the "List Vulnerabilities"] endpoint. ### Metadata Please review the [Metadata section for the "List Vulnerabilities"] endpoint.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	(default: datadoghq.com)
filter[arch]	string	Filter by architecture. (example: arm64)
filter[environments]	string	Filter by environment. (example: staging)
filter[name]	string	Filter by name. (example: datadog-agent)
filter[operating_system.name]	string	Filter by operating system name. (example: ubuntu)
filter[operating_system.version]	string	Filter by operating system version. (example: 24.04)
filter[repository_url]	string	Filter by the repository url associated to the asset. (example: github.com/DataDog/datadog-agent.git)
filter[risks.has_access_to_sensitive_data]	boolean	Filter whether the asset (Host) has access to sensitive data or not. (example: false)
filter[risks.has_privileged_access]	boolean	Filter whether the asset (Host) has privileged access or not. (example: false)
filter[risks.in_production]	boolean	Filter whether the asset is in production or not. (example: false)
filter[risks.is_publicly_accessible]	boolean	Filter whether the asset (Host) is publicly accessible or not. (example: false)
filter[risks.under_attack]	boolean	Filter whether the asset (Service) is under attack or not. (example: false)
filter[teams]	string	Filter by teams. (example: compute)
filter[type]	string	Filter by type.
filter[version.first]	string	Filter by the first version of the asset since it has been vulnerable. (example: v1.15.1)
filter[version.last]	string	Filter by the last detected version of the asset. (example: v1.15.1)
page[number]	integer (int64)	The page number to be retrieved. It should be equal or greater than 1 (example: 1)
page[token]	string	Its value must come from the links section of the response of the first request. Do not manually edit it. (example: b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4)

SELECT examples

list_vulnerable_assets

Get a list of vulnerable assets.

### Pagination

Please review the [Pagination section for the "List Vulnerabilities"] endpoint.

### Filtering

Please review the [Filtering section for the "List Vulnerabilities"] endpoint.

### Metadata

Please review the [Metadata section for the "List Vulnerabilities"] endpoint.

SELECT
id,
attributes,
type
FROM datadog.security.vulnerable_assets
WHERE region = '{{ region }}' -- required
AND page[token] = '{{ page[token] }}'
AND page[number] = '{{ page[number] }}'
AND filter[name] = '{{ filter[name] }}'
AND filter[type] = '{{ filter[type] }}'
AND filter[version.first] = '{{ filter[version.first] }}'
AND filter[version.last] = '{{ filter[version.last] }}'
AND filter[repository_url] = '{{ filter[repository_url] }}'
AND filter[risks.in_production] = '{{ filter[risks.in_production] }}'
AND filter[risks.under_attack] = '{{ filter[risks.under_attack] }}'
AND filter[risks.is_publicly_accessible] = '{{ filter[risks.is_publicly_accessible] }}'
AND filter[risks.has_privileged_access] = '{{ filter[risks.has_privileged_access] }}'
AND filter[risks.has_access_to_sensitive_data] = '{{ filter[risks.has_access_to_sensitive_data] }}'
AND filter[environments] = '{{ filter[environments] }}'
AND filter[teams] = '{{ filter[teams] }}'
AND filter[arch] = '{{ filter[arch] }}'
AND filter[operating_system.name] = '{{ filter[operating_system.name] }}'
AND filter[operating_system.version] = '{{ filter[operating_system.version] }}'
;