resolve_docker_target
Verify a container process's identity by re-resolving it against Docker, /proc, PID start time, namespaces, cgroup, and UID policy—without profiling the process.
Instructions
Re-resolve one container process against Docker, /proc, PID start time, namespaces, cgroup identity, and UID policy without profiling it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host_pid | No | ||
| container_pid | No | ||
| container_reference | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cgroup | Yes | ||
| host_pid | Yes | ||
| host_uid | Yes | ||
| namespace | Yes | ||
| target_id | Yes | ||
| created_at | Yes | ||
| target_kind | Yes | ||
| uid_mapping | Yes | ||
| container_pid | Yes | ||
| adapter_sha256 | Yes | ||
| content_sha256 | Yes | ||
| schema_version | No | 1.0 | |
| executable_name | Yes | ||
| perflens_version | Yes | ||
| adapter_recipe_id | Yes | ||
| validation_status | No | verified | |
| allowed_conclusions | No | ||
| identity_fingerprint | Yes | ||
| forbidden_conclusions | No | ||
| host_start_time_ticks | Yes | ||
| image_identity_sha256 | Yes | ||
| rootful_risk_authorized | No | ||
| container_identity_sha256 | Yes |