@marinjursic/prc-linux-arm64 0.1.0

package/bin/schemas/adapter-manifest-v0.2.schema.json

@@ -0,0 +1,122 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/adapter-manifest-v0.2.schema.json",
+  "title": "Production Readiness Adapter Manifest v0.2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "id", "title", "description", "publisher", "owner", "maintenance", "protocol", "output_schema", "observation_kinds", "compatibility", "tool", "limitations", "runner", "image", "command", "capabilities", "resources"],
+  "properties": {
+    "schema_version": {"const": "prc.adapter-manifest/v0.2"},
+    "id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "title": {"type": "string", "minLength": 1},
+    "description": {"type": "string", "minLength": 1},
+    "publisher": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "name"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+        "name": {"type": "string", "minLength": 1}
+      }
+    },
+    "owner": {"type": "string", "minLength": 1},
+    "maintenance": {"enum": ["active", "deprecated"]},
+    "protocol": {"const": "prc-adapter-jsonl-v1"},
+    "output_schema": {"const": "prc.adapter-message/v0.1"},
+    "observation_kinds": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"}
+    },
+    "compatibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["engine_apis"],
+      "properties": {
+        "engine_apis": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^prc\\.engine/v[0-9]+\\.[0-9]+$"}
+        }
+      }
+    },
+    "tool": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version", "upstream", "formats"],
+      "properties": {
+        "name": {"type": "string", "minLength": 1},
+        "version": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$", "not": {"enum": ["latest", "LATEST", "Latest"]}},
+        "upstream": {"type": "string", "format": "uri", "pattern": "^https://"},
+        "formats": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "versions"],
+            "properties": {
+              "name": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+              "versions": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$"}
+              }
+            }
+          }
+        }
+      }
+    },
+    "limitations": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "minLength": 1}
+    },
+    "runner": {"const": "oci"},
+    "image": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*@sha256:[0-9a-f]{64}$"
+    },
+    "command": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 128,
+      "items": {"type": "string"}
+    },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["read_workspace", "write_scratch", "network", "network_hosts", "secret_handles", "child_processes"],
+      "properties": {
+        "read_workspace": {"const": true},
+        "write_scratch": {"type": "boolean"},
+        "network": {"const": "deny"},
+        "network_hosts": {"type": "array", "maxItems": 0},
+        "secret_handles": {"type": "array", "maxItems": 0},
+        "child_processes": {"const": false}
+      }
+    },
+    "resources": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["timeout_seconds", "memory_mb", "cpus", "pids", "tmpfs_mb", "max_line_bytes", "max_messages", "max_stdin_bytes", "max_stdout_bytes", "max_stderr_bytes"],
+      "properties": {
+        "timeout_seconds": {"type": "integer", "minimum": 1, "maximum": 3600},
+        "memory_mb": {"type": "integer", "minimum": 32, "maximum": 32768},
+        "cpus": {"type": "number", "exclusiveMinimum": 0, "maximum": 32},
+        "pids": {"type": "integer", "minimum": 1, "maximum": 4096},
+        "tmpfs_mb": {"type": "integer", "minimum": 1, "maximum": 4096},
+        "max_line_bytes": {"type": "integer", "minimum": 1, "maximum": 4194304},
+        "max_messages": {"type": "integer", "minimum": 1, "maximum": 1000000},
+        "max_stdin_bytes": {"type": "integer", "minimum": 1, "maximum": 16777216},
+        "max_stdout_bytes": {"type": "integer", "minimum": 1, "maximum": 268435456},
+        "max_stderr_bytes": {"type": "integer", "minimum": 1, "maximum": 16777216}
+      }
+    }
+  }
+}

package/bin/schemas/adapter-manifest-v0.3.schema.json

@@ -0,0 +1,172 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/adapter-manifest-v0.3.schema.json",
+  "title": "Production Readiness Adapter Manifest v0.3",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "id", "title", "description", "publisher", "owner", "maintenance", "protocol", "output_schema", "observation_kinds", "compatibility", "tool", "limitations", "runner", "image", "command", "capabilities", "resources"],
+  "properties": {
+    "schema_version": {"const": "prc.adapter-manifest/v0.3"},
+    "id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "title": {"type": "string", "minLength": 1},
+    "description": {"type": "string", "minLength": 1},
+    "publisher": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "name"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+        "name": {"type": "string", "minLength": 1}
+      }
+    },
+    "owner": {"type": "string", "minLength": 1},
+    "maintenance": {"enum": ["active", "deprecated"]},
+    "protocol": {"enum": ["prc-adapter-jsonl-v1", "prc-adapter-gitleaks-json-v1"]},
+    "output_schema": {"enum": ["prc.adapter-message/v0.1", "gitleaks.report/v8.30.0"]},
+    "observation_kinds": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"}
+    },
+    "compatibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["engine_apis"],
+      "properties": {
+        "engine_apis": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^prc\\.engine/v[0-9]+\\.[0-9]+$"}
+        }
+      }
+    },
+    "tool": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version", "upstream", "formats"],
+      "properties": {
+        "name": {"type": "string", "minLength": 1},
+        "version": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$", "not": {"enum": ["latest", "LATEST", "Latest"]}},
+        "upstream": {"type": "string", "format": "uri", "pattern": "^https://"},
+        "formats": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "versions"],
+            "properties": {
+              "name": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+              "versions": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$"}
+              }
+            }
+          }
+        }
+      }
+    },
+    "limitations": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "minLength": 1}
+    },
+    "runner": {"const": "oci"},
+    "image": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*@sha256:[0-9a-f]{64}$"
+    },
+    "command": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 128,
+      "items": {"type": "string"}
+    },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["read_workspace", "write_scratch", "network", "network_hosts", "secret_handles", "child_processes"],
+      "properties": {
+        "read_workspace": {"const": true},
+        "write_scratch": {"type": "boolean"},
+        "network": {"const": "deny"},
+        "network_hosts": {"type": "array", "maxItems": 0},
+        "secret_handles": {"type": "array", "maxItems": 0},
+        "child_processes": {"type": "boolean"}
+      }
+    },
+    "resources": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["timeout_seconds", "memory_mb", "cpus", "pids", "tmpfs_mb", "max_line_bytes", "max_messages", "max_stdin_bytes", "max_stdout_bytes", "max_stderr_bytes"],
+      "properties": {
+        "timeout_seconds": {"type": "integer", "minimum": 1, "maximum": 3600},
+        "memory_mb": {"type": "integer", "minimum": 32, "maximum": 32768},
+        "cpus": {"type": "number", "exclusiveMinimum": 0, "maximum": 32},
+        "pids": {"type": "integer", "minimum": 1, "maximum": 4096},
+        "tmpfs_mb": {"type": "integer", "minimum": 1, "maximum": 4096},
+        "max_line_bytes": {"type": "integer", "minimum": 1, "maximum": 4194304},
+        "max_messages": {"type": "integer", "minimum": 1, "maximum": 1000000},
+        "max_stdin_bytes": {"type": "integer", "minimum": 1, "maximum": 16777216},
+        "max_stdout_bytes": {"type": "integer", "minimum": 1, "maximum": 268435456},
+        "max_stderr_bytes": {"type": "integer", "minimum": 1, "maximum": 16777216}
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-jsonl-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "properties": {
+          "output_schema": {"const": "prc.adapter-message/v0.1"},
+          "capabilities": {
+            "properties": {"child_processes": {"const": false}}
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-gitleaks-json-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "properties": {
+          "output_schema": {"const": "gitleaks.report/v8.30.0"},
+          "observation_kinds": {"const": ["secret-detection"]},
+          "image": {"const": "ghcr.io/gitleaks/gitleaks@sha256:691af3c7c5a48b16f187ce3446d5f194838f91238f27270ed36eef6359a574d9"},
+          "command": {"const": ["dir", "--no-banner", "--no-color", "--log-level=fatal", "--config=/dev/stdin", "--gitleaks-ignore-path=/dev/null", "--ignore-gitleaks-allow", "--max-archive-depth=0", "--max-decode-depth=0", "--max-target-megabytes=10", "--timeout=110", "--redact=100", "--report-format=json", "--report-path=-", "--exit-code=0", "/workspace"]},
+          "tool": {
+            "properties": {
+              "name": {"const": "gitleaks"},
+              "version": {"const": "8.30.0"},
+              "upstream": {"const": "https://github.com/gitleaks/gitleaks"},
+              "formats": {"const": [{"name": "gitleaks-json", "versions": ["8.30.0"]}]}
+            }
+          },
+          "capabilities": {
+            "properties": {
+              "write_scratch": {"const": false},
+              "child_processes": {"const": true}
+            }
+          },
+          "resources": {
+            "properties": {
+              "timeout_seconds": {"minimum": 111},
+              "pids": {"minimum": 16, "maximum": 256}
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/bin/schemas/adapter-manifest.schema.json

@@ -0,0 +1,299 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/adapter-manifest.schema.json",
+  "title": "Production Readiness Adapter Manifest v0.4",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "id", "title", "description", "publisher", "owner", "maintenance", "protocol", "output_schema", "observation_kinds", "compatibility", "tool", "limitations", "runner", "image", "command", "capabilities", "resources"],
+  "properties": {
+    "schema_version": {"const": "prc.adapter-manifest/v0.4"},
+    "id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "title": {"type": "string", "minLength": 1},
+    "description": {"type": "string", "minLength": 1},
+    "publisher": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "name"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+        "name": {"type": "string", "minLength": 1}
+      }
+    },
+    "owner": {"type": "string", "minLength": 1},
+    "maintenance": {"enum": ["active", "deprecated"]},
+    "protocol": {"enum": ["prc-adapter-jsonl-v1", "prc-adapter-gitleaks-json-v1", "prc-adapter-syft-cyclonedx-json-v1", "prc-adapter-grype-json-v1", "prc-adapter-checkov-json-v1"]},
+    "output_schema": {"enum": ["prc.adapter-message/v0.1", "gitleaks.report/v8.30.0", "cyclonedx.bom/v1.7+syft-1.51.0", "grype.report/v0.116.1+prc-v1", "checkov.report/v3.3.8+prc-v1"]},
+    "observation_kinds": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"}
+    },
+    "compatibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["engine_apis"],
+      "properties": {
+        "engine_apis": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^prc\\.engine/v[0-9]+\\.[0-9]+$"}
+        }
+      }
+    },
+    "tool": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version", "upstream", "formats"],
+      "properties": {
+        "name": {"type": "string", "minLength": 1},
+        "version": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$", "not": {"enum": ["latest", "LATEST", "Latest"]}},
+        "upstream": {"type": "string", "format": "uri", "pattern": "^https://"},
+        "formats": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "versions"],
+            "properties": {
+              "name": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+              "versions": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$"}
+              }
+            }
+          }
+        }
+      }
+    },
+    "limitations": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "minLength": 1}
+    },
+    "runner": {"const": "oci"},
+    "image": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*@sha256:[0-9a-f]{64}$"
+    },
+    "command": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 128,
+      "items": {"type": "string"}
+    },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["read_workspace", "write_scratch", "network", "network_hosts", "secret_handles", "child_processes"],
+      "properties": {
+        "read_workspace": {"const": true},
+        "write_scratch": {"type": "boolean"},
+        "network": {"const": "deny"},
+        "network_hosts": {"type": "array", "maxItems": 0},
+        "secret_handles": {"type": "array", "maxItems": 0},
+        "child_processes": {"type": "boolean"}
+      }
+    },
+    "resources": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["timeout_seconds", "memory_mb", "cpus", "pids", "tmpfs_mb", "max_line_bytes", "max_messages", "max_stdin_bytes", "max_stdout_bytes", "max_stderr_bytes"],
+      "properties": {
+        "timeout_seconds": {"type": "integer", "minimum": 1, "maximum": 3600},
+        "memory_mb": {"type": "integer", "minimum": 32, "maximum": 32768},
+        "cpus": {"type": "number", "exclusiveMinimum": 0, "maximum": 32},
+        "pids": {"type": "integer", "minimum": 1, "maximum": 4096},
+        "tmpfs_mb": {"type": "integer", "minimum": 1, "maximum": 4096},
+        "max_line_bytes": {"type": "integer", "minimum": 1, "maximum": 4194304},
+        "max_messages": {"type": "integer", "minimum": 1, "maximum": 1000000},
+        "max_stdin_bytes": {"type": "integer", "minimum": 1, "maximum": 16777216},
+        "max_stdout_bytes": {"type": "integer", "minimum": 1, "maximum": 268435456},
+        "max_stderr_bytes": {"type": "integer", "minimum": 1, "maximum": 16777216}
+      }
+    },
+    "data_mounts": {
+      "type": "array",
+      "maxItems": 16,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "destination", "max_files", "max_bytes"],
+        "properties": {
+          "name": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+          "destination": {"type": "string", "pattern": "^/prc-inputs/[a-z0-9][a-z0-9.-]{0,127}$"},
+          "max_files": {"type": "integer", "minimum": 1, "maximum": 100000},
+          "max_bytes": {"type": "integer", "minimum": 1, "maximum": 4294967296}
+        }
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-jsonl-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "properties": {
+          "output_schema": {"const": "prc.adapter-message/v0.1"},
+          "capabilities": {
+            "properties": {"child_processes": {"const": false}}
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-gitleaks-json-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "properties": {
+          "output_schema": {"const": "gitleaks.report/v8.30.0"},
+          "observation_kinds": {"const": ["secret-detection"]},
+          "image": {"const": "ghcr.io/gitleaks/gitleaks@sha256:691af3c7c5a48b16f187ce3446d5f194838f91238f27270ed36eef6359a574d9"},
+          "command": {"const": ["dir", "--no-banner", "--no-color", "--log-level=fatal", "--config=/dev/stdin", "--gitleaks-ignore-path=/dev/null", "--ignore-gitleaks-allow", "--max-archive-depth=0", "--max-decode-depth=0", "--max-target-megabytes=10", "--timeout=110", "--redact=100", "--report-format=json", "--report-path=-", "--exit-code=0", "/workspace"]},
+          "tool": {
+            "properties": {
+              "name": {"const": "gitleaks"},
+              "version": {"const": "8.30.0"},
+              "upstream": {"const": "https://github.com/gitleaks/gitleaks"},
+              "formats": {"const": [{"name": "gitleaks-json", "versions": ["8.30.0"]}]}
+            }
+          },
+          "capabilities": {
+            "properties": {
+              "write_scratch": {"const": false},
+              "child_processes": {"const": true}
+            }
+          },
+          "resources": {
+            "properties": {
+              "timeout_seconds": {"minimum": 111},
+              "pids": {"minimum": 16, "maximum": 256}
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-syft-cyclonedx-json-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "properties": {
+          "output_schema": {"const": "cyclonedx.bom/v1.7+syft-1.51.0"},
+          "observation_kinds": {"const": ["sbom-generation"]},
+          "image": {"const": "ghcr.io/anchore/syft@sha256:d2dc3ec86cb2b4e7ddb226ba0305c4523b7c0694c45d9f576b42b4c2f5ce7aa8"},
+          "command": {"const": ["scan", "--quiet", "--config=/workspace/.prc/syft-config.yaml", "--parallelism=1", "--output=cyclonedx-json", "dir:/workspace"]},
+          "tool": {
+            "properties": {
+              "name": {"const": "syft"},
+              "version": {"const": "1.51.0"},
+              "upstream": {"const": "https://github.com/anchore/syft"},
+              "formats": {"const": [{"name": "cyclonedx-json", "versions": ["1.7"]}]}
+            }
+          },
+          "capabilities": {
+            "properties": {
+              "write_scratch": {"const": false},
+              "child_processes": {"const": true}
+            }
+          },
+          "resources": {
+            "properties": {
+              "timeout_seconds": {"minimum": 30},
+              "pids": {"minimum": 16, "maximum": 256},
+              "max_stdout_bytes": {"minimum": 1048576}
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-grype-json-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "required": ["data_mounts"],
+        "properties": {
+          "output_schema": {"const": "grype.report/v0.116.1+prc-v1"},
+          "observation_kinds": {"const": ["dependency-vulnerability"]},
+          "image": {"const": "ghcr.io/anchore/grype@sha256:1e71065c0a4cff3e6bd3b8add525ffac4343eb4971694eb90a31cf6d4d3e85db"},
+          "command": {"const": ["dir:/workspace", "--quiet", "--config=/workspace/.prc/grype-config.yaml", "--output=json"]},
+          "tool": {
+            "properties": {
+              "name": {"const": "grype"},
+              "version": {"const": "0.116.1"},
+              "upstream": {"const": "https://github.com/anchore/grype"},
+              "formats": {"const": [{"name": "grype-json", "versions": ["0.116.1"]}]}
+            }
+          },
+          "capabilities": {
+            "properties": {
+              "write_scratch": {"const": true},
+              "child_processes": {"const": true}
+            }
+          },
+          "resources": {
+            "properties": {
+              "timeout_seconds": {"minimum": 60},
+              "memory_mb": {"minimum": 1024},
+              "pids": {"minimum": 32, "maximum": 256},
+              "tmpfs_mb": {"minimum": 128},
+              "max_stdout_bytes": {"minimum": 16777216}
+            }
+          },
+          "data_mounts": {"const": [{"name": "grype-db", "destination": "/prc-inputs/grype-db", "max_files": 16, "max_bytes": 3221225472}]}
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {"protocol": {"const": "prc-adapter-checkov-json-v1"}},
+        "required": ["protocol"]
+      },
+      "then": {
+        "properties": {
+          "output_schema": {"const": "checkov.report/v3.3.8+prc-v1"},
+          "observation_kinds": {"const": ["iac-policy"]},
+          "image": {"const": "docker.io/bridgecrew/checkov@sha256:c64ffb6d6fc8087c896341a2c697770a04a1cf558db04fa7b8129d8ca6bce336"},
+          "command": {"const": ["--config-file", "/workspace/.prc/checkov-config.json"]},
+          "tool": {
+            "properties": {
+              "name": {"const": "checkov"},
+              "version": {"const": "3.3.8"},
+              "upstream": {"const": "https://github.com/bridgecrewio/checkov"},
+              "formats": {"const": [{"name": "checkov-json", "versions": ["3.3.8"]}]}
+            }
+          },
+          "capabilities": {
+            "properties": {
+              "write_scratch": {"const": true},
+              "child_processes": {"const": true}
+            }
+          },
+          "resources": {
+            "properties": {
+              "timeout_seconds": {"minimum": 60},
+              "memory_mb": {"minimum": 1024},
+              "pids": {"minimum": 32, "maximum": 256},
+              "tmpfs_mb": {"minimum": 128},
+              "max_stdout_bytes": {"minimum": 16777216}
+            }
+          },
+          "data_mounts": {"maxItems": 0}
+        }
+      }
+    }
+  ]
+}