vulnerable_assets
Creates, updates, deletes, gets or lists a vulnerable_assets resource.
Overview
| Name | vulnerable_assets |
| Type | Resource |
| Id | datadog.security.vulnerable_assets |
Fields
The following fields are returned by SELECT queries:
- list_vulnerable_assets
| Name | Datatype | Description |
|---|---|---|
id | string | The unique ID for this asset. (example: Repository|github.com/DataDog/datadog-agent.git) |
attributes | object | The JSON:API attributes of the asset. |
type | string | The JSON:API type. (assets) (example: assets) |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
list_vulnerable_assets | select | page[token], page[number], filter[name], filter[type], filter[version.first], filter[version.last], filter[repository_url], filter[risks.in_production], filter[risks.under_attack], filter[risks.is_publicly_accessible], filter[risks.has_privileged_access], filter[risks.has_access_to_sensitive_data], filter[environments], filter[teams], filter[arch], filter[operating_system.name], filter[operating_system.version] | Get a list of vulnerable assets.<br /><br />### Pagination<br /><br />Please review the [Pagination section for the "List Vulnerabilities"](#pagination) endpoint.<br /><br />### Filtering<br /><br />Please review the [Filtering section for the "List Vulnerabilities"](#filtering) endpoint.<br /><br />### Metadata<br /><br />Please review the [Metadata section for the "List Vulnerabilities"](#metadata) endpoint. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
site | string | The Datadog site (region) for your organization, for example datadoghq.com, us3.datadoghq.com, us5.datadoghq.com, ap1.datadoghq.com, ap2.datadoghq.com, datadoghq.eu, ddog-gov.com. Resolved from the DD_SITE environment variable when set. Optional: defaults to datadoghq.com, or the value of the DD_SITE environment variable when set; a WHERE value overrides both. |
filter[arch] | string | Filter by architecture. (example: arm64) |
filter[environments] | string | Filter by environment. (example: staging) |
filter[name] | string | Filter by name. This field supports the usage of wildcards (*). (example: datadog-agent) |
filter[operating_system.name] | string | Filter by operating system name. (example: ubuntu) |
filter[operating_system.version] | string | Filter by operating system version. (example: 24.04) |
filter[repository_url] | string | Filter by the repository url associated to the asset. (example: github.com/DataDog/datadog-agent.git) |
filter[risks.has_access_to_sensitive_data] | boolean | Filter whether the asset (Host) has access to sensitive data or not. (example: false) |
filter[risks.has_privileged_access] | boolean | Filter whether the asset (Host) has privileged access or not. (example: false) |
filter[risks.in_production] | boolean | Filter whether the asset is in production or not. (example: false) |
filter[risks.is_publicly_accessible] | boolean | Filter whether the asset (Host) is publicly accessible or not. (example: false) |
filter[risks.under_attack] | boolean | Filter whether the asset (Service) is under attack or not. (example: false) |
filter[teams] | string | Filter by teams. (example: compute) |
filter[type] | string | Filter by type. |
filter[version.first] | string | Filter by the first version of the asset since it has been vulnerable. (example: v1.15.1) |
filter[version.last] | string | Filter by the last detected version of the asset. (example: v1.15.1) |
page[number] | integer (int64) | The page number to be retrieved. It should be equal or greater than 1 (example: 1) |
page[token] | string | Its value must come from the links section of the response of the first request. Do not manually edit it. (example: b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4) |
SELECT examples
- list_vulnerable_assets
Get a list of vulnerable assets.<br /><br />### Pagination<br /><br />Please review the [Pagination section for the "List Vulnerabilities"](#pagination) endpoint.<br /><br />### Filtering<br /><br />Please review the [Filtering section for the "List Vulnerabilities"](#filtering) endpoint.<br /><br />### Metadata<br /><br />Please review the [Metadata section for the "List Vulnerabilities"](#metadata) endpoint.
SELECT
id,
attributes,
type
FROM datadog.security.vulnerable_assets
WHERE page[token] = '{{ page[token] }}'
AND page[number] = '{{ page[number] }}'
AND filter[name] = '{{ filter[name] }}'
AND filter[type] = '{{ filter[type] }}'
AND filter[version.first] = '{{ filter[version.first] }}'
AND filter[version.last] = '{{ filter[version.last] }}'
AND filter[repository_url] = '{{ filter[repository_url] }}'
AND filter[risks.in_production] = '{{ filter[risks.in_production] }}'
AND filter[risks.under_attack] = '{{ filter[risks.under_attack] }}'
AND filter[risks.is_publicly_accessible] = '{{ filter[risks.is_publicly_accessible] }}'
AND filter[risks.has_privileged_access] = '{{ filter[risks.has_privileged_access] }}'
AND filter[risks.has_access_to_sensitive_data] = '{{ filter[risks.has_access_to_sensitive_data] }}'
AND filter[environments] = '{{ filter[environments] }}'
AND filter[teams] = '{{ filter[teams] }}'
AND filter[arch] = '{{ filter[arch] }}'
AND filter[operating_system.name] = '{{ filter[operating_system.name] }}'
AND filter[operating_system.version] = '{{ filter[operating_system.version] }}'
;