apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ChartArtifactIndex"
metadata:
  name: "aqua-trivy-operator-0.32.1"
  chart: "aqua/trivy-operator"
  version: "0.32.1"
  generatedBy: "scripts/generate-chart-catalogs.mjs"
spec:
  doctrine: "1 Helm chart version -> 1 core recipe -> N variants -> M variant revisions -> package bases -> receipts"
  chart:
    ref: "aqua/trivy-operator"
    version: "0.32.1"
    appVersion: "0.30.1"
    sourceLock: "recipes/aqua/trivy-operator/0.32.1/source-lock.yaml"
    dependencyLock: "recipes/aqua/trivy-operator/0.32.1/dependency-lock.yaml"
    repository: "https://aquasecurity.github.io/helm-charts/"
    packageSHA256: "2dfb5c7f8a2b8cd338208c362b88e4eae607b24f199226c31a6f5bb76c7ace08"
  recipe:
    path: "recipes/aqua/trivy-operator/0.32.1/recipe.yaml"
    importMode: "render-and-vendor"
    helmPlan: "recipes/aqua/trivy-operator/0.32.1/helm-plan.yaml"
    chartDossier: "recipes/aqua/trivy-operator/0.32.1/chart-dossier.yaml"
    controlPoints: "recipes/aqua/trivy-operator/0.32.1/control-points.yaml"
    valueModel: "recipes/aqua/trivy-operator/0.32.1/value-model.yaml"
    weirdnessAndMitigations: ""
    helmPainReport: "recipes/aqua/trivy-operator/0.32.1/helm-pain-report.yaml"
    controlPointCategories:
      - "capability-profile"
      - "cluster-rbac"
      - "crds"
      - "dependency-lock"
      - "extension-slots"
      - "helm-equivalence"
      - "rendered-manifest-scan"
      - "secret-material"
      - "source-lock"
      - "target-facts"
      - "tpl-extension-slots"
      - "variant-revision"
  catalogStatus:
    path: "recipes/aqua/trivy-operator/0.32.1/catalog-status.yaml"
    status: "proof-grade"
    supportLevel: "machine-proof-only"
    supportedScopes:
      []
    productionReadiness: "not-reviewed-for-production"
    supportedVariants:
      []
    candidateVariants:
      - "default"
      - "no-crds"
    deferredVariants:
      []
  proofSummary:
    adoptionBucket: "promote-after-review"
    userStatus: "proof-grade-ready-for-promotion-review"
    strongestEvidence: "live-helm-vs-confighub-parity"
    proofLanes:
      renderParity: "2/2"
      inConfigHub: "2/2"
      localLive: "2/2"
      gitopsLive: "2/2"
      liveParity: "2/2"
    featureSummary: "crds;extension-slots"
    hardGap: "-"
    nextAction: "run catalog promotion review"
  installerPackage:
    path: "packages/aqua/trivy-operator/0.32.1"
    ociRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1"
    installer: "packages/aqua/trivy-operator/0.32.1/installer.yaml"
    receipt: "recipes/aqua/trivy-operator/0.32.1/publication/installer-package-receipt.yaml"
    deterministicBundleSHA256: "355fbd3de30de328d9910173e8c75ba864b91c265d63335d8020dd9ab41934a3"
    deterministicAcrossTwoLocalBundles: true
    bases:
      -
        name: "default"
        path: "packages/aqua/trivy-operator/0.32.1/bases/default"
        default: true
        description: "aqua/trivy-operator default variant rendered from aqua/trivy-operator@0.32.1"
      -
        name: "no-crds"
        path: "packages/aqua/trivy-operator/0.32.1/bases/no-crds"
        default: false
        description: "aqua/trivy-operator no-crds variant rendered from aqua/trivy-operator@0.32.1"
  variants:
    -
      name: "default"
      variant: "recipes/aqua/trivy-operator/0.32.1/variants/default/variant.yaml"
      namespace: "default"
      releaseName: "trivy-operator"
      valuesProfile: "recipes/aqua/trivy-operator/0.32.1/effective-values.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        {}
      targetFactSummary: "none"
      packageBase:
        name: "default"
        path: "packages/aqua/trivy-operator/0.32.1/bases/default"
        default: true
        description: "aqua/trivy-operator default variant rendered from aqua/trivy-operator@0.32.1"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1 --base default --work-dir <tmp> --non-interactive --namespace default"
        helmReleaseObjectCount: 33
        cubInstallObjectCountIncludingSupport: 34
        semanticObjectMatches: "33/33"
        separatedSecretCount: 2
        allowedCubOnlyObjects:
          - "v1|Namespace||default"
      revisions:
        -
          name: "default-r001"
          revision: "r001"
          variantRevision: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/variant-revision.yaml"
          digest: "081b6a7123204015bf5b972d7be7539f946ce988cfc670ff8a11926d5f005fe4"
          renderedObjectSetSHA256: "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25"
          renderedObjects: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/object-inventory.yaml"
          objectCount: 33
          helmObjectCount: 33
          cubInstallObjectCountIncludingSupport: 34
          semanticObjectMatches: "33/33"
          separatedSecretFiles: 2
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25"
            scan:
              kind: "ScanReceipt"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/receipts/scan-receipt.yaml"
              result: "warn"
              renderedObjectSetSHA256: "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25"
            installGate:
              kind: "InstallGate"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/receipts/install-gate.yaml"
              result: "warn"
              renderedObjectSetSHA256: "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25"
    -
      name: "no-crds"
      variant: "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml"
      namespace: "default"
      releaseName: "trivy-operator"
      valuesProfile: "recipes/aqua/trivy-operator/0.32.1/effective-values-no-crds.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        requiredCRDs:
          -
            name: "clustercompliancereports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "clusterconfigauditreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "clusterinfraassessmentreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "clusterrbacassessmentreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "clustersbomreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "clustervulnerabilityreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "configauditreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "exposedsecretreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "infraassessmentreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "rbacassessmentreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "sbomreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
          -
            name: "vulnerabilityreports.aquasecurity.github.io"
            purpose: "Trivy Operator CRD managed outside this no-crds base"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "Apply the default base CRDs or install Trivy Operator CRDs before applying this base"
      targetFactSummary: "required CRD clustercompliancereports.aquasecurity.github.io; required CRD clusterconfigauditreports.aquasecurity.github.io; required CRD clusterinfraassessmentreports.aquasecurity.github.io; required CRD clusterrbacassessmentreports.aquasecurity.github.io; required CRD clustersbomreports.aquasecurity.github.io; required CRD clustervulnerabilityreports.aquasecurity.github.io; required CRD configauditreports.aquasecurity.github.io; required CRD exposedsecretreports.aquasecurity.github.io; required CRD infraassessmentreports.aquasecurity.github.io; required CRD rbacassessmentreports.aquasecurity.github.io; required CRD sbomreports.aquasecurity.github.io; required CRD vulnerabilityreports.aquasecurity.github.io"
      packageBase:
        name: "no-crds"
        path: "packages/aqua/trivy-operator/0.32.1/bases/no-crds"
        default: false
        description: "aqua/trivy-operator no-crds variant rendered from aqua/trivy-operator@0.32.1"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1 --base no-crds --work-dir <tmp> --non-interactive --namespace default"
        helmReleaseObjectCount: 21
        cubInstallObjectCountIncludingSupport: 22
        semanticObjectMatches: "21/21"
        separatedSecretCount: 2
        allowedCubOnlyObjects:
          - "v1|Namespace||default"
      revisions:
        -
          name: "no-crds-r001"
          revision: "r001"
          variantRevision: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/variant-revision.yaml"
          digest: ""
          renderedObjectSetSHA256: "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492"
          renderedObjects: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/object-inventory.yaml"
          objectCount: 21
          helmObjectCount: 21
          cubInstallObjectCountIncludingSupport: ""
          semanticObjectMatches: "21/21"
          separatedSecretFiles: ""
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492"
            scan:
              kind: "ScanReceipt"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/receipts/scan-receipt.yaml"
              result: ""
              renderedObjectSetSHA256: "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492"
            installGate:
              kind: "InstallGate"
              path: "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/receipts/install-gate.yaml"
              result: "allow"
              renderedObjectSetSHA256: "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492"
