vulnforge_full_scan
Runs an end-to-end multi-layer vulnerability audit across Web, API, Database, GraphQL, CI/CD, Container/Kubernetes, and eBPF/Runtime Security layers, generating unified findings and ready-to-apply patches.
Instructions
Runs an end-to-end multi-layer vulnerability audit across Web, API, Database, GraphQL, CI/CD, Container/Kubernetes, and eBPF/Runtime Security layers, generating unified findings and ready-to-apply patches.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| dbCode | No | ||
| apiCode | No | ||
| headers | No | ||
| tenantId | No | Tenant identifier for KMS envelope audit (optional) | |
| kmsFormat | No | KMS/HSM format (optional) | |
| pqcFormat | No | PQC format (optional) | |
| kmsContent | No | KMS key policy, envelope spec, or HSM remote attestation to audit (optional) | |
| pqcContent | No | PQC hybrid KEM config, migration policy, or SSH spec to audit (optional) | |
| zkpContent | No | Zero-Knowledge circuit, proof verifier, or gateway policy to audit (optional) | |
| ebpfContent | No | eBPF C source or runtime security policy YAML/JSON to audit (optional) | |
| graphqlCode | No | GraphQL schema, server, or resolver code (optional) | |
| iamFilePath | No | File path of IAM policy (optional) | |
| kmsFilePath | No | File path of KMS or HSM configuration (optional) | |
| pqcFilePath | No | File path of PQC artifact (optional) | |
| sbomContent | No | SBOM manifest or package.json content to audit (optional) | |
| wasmContent | No | WebAssembly runtime or EnvoyFilter configuration to audit (optional) | |
| zkpFilePath | No | File path of ZKP circuit or gateway policy (optional) | |
| cicdFilePath | No | File path of CI/CD workflow (optional) | |
| cicdWorkflow | No | CI/CD workflow YAML content to audit (optional) | |
| ebpfFilePath | No | File path of eBPF source or policy (optional) | |
| frontendCode | No | ||
| gossipFormat | No | P2P gossip format (optional) | |
| graphqlQuery | No | GraphQL query payload to analyze (optional) | |
| modelContent | No | AI model config or safetensors header to audit (optional) | |
| npmrcContent | No | Content of .npmrc file defining private scoped registries (optional) | |
| sbomFilePath | No | File path of SBOM or manifest (optional) | |
| cosignContent | No | Cosign payload, Sigstore bundle, or Kyverno admission policy to audit (optional) | |
| fuzzRouteCode | No | API route handler source code to fuzz test (optional) | |
| gossipContent | No | P2P gossip configuration or policy revocation manifest to audit (optional) | |
| iamPolicyType | No | IAM policy type (auto-detected if omitted) | |
| intotoContent | No | In-toto attestation or layout JSON to audit (optional) | |
| modelFilePath | No | File path of model artifact (optional) | |
| ebpfPolicyType | No | eBPF policy type (auto-detected if omitted) | |
| gossipFilePath | No | File path of P2P gossip artifact (optional) | |
| intotoFilePath | No | File path of in-toto attestation (optional) | |
| wasmFuzzFormat | No | Wasm format (optional) | |
| verifyInSandbox | No | Run automated canary sandbox verification on synthesized patches (default: true) | |
| wasmFuzzContent | No | Wasm config, WASI manifest, differential fuzz spec, or WAT text to audit (optional) | |
| iamPolicyContent | No | IAM policy document or cloud access rule content to audit (optional) | |
| wasmFuzzFilePath | No | File path of Wasm configuration or WAT module (optional) | |
| containerFilePath | No | File path of container/k8s manifest (optional) | |
| dockerfileContent | No | Dockerfile content to audit (optional) | |
| k8sManifestContent | No | Kubernetes manifest YAML to audit (optional) | |
| cosignPolicyContent | No | Kyverno or Gatekeeper policy YAML to audit (optional) | |
| hostTelemetryStream | No | Host telemetry event stream JSON Lines (optional) | |
| kernelFlowTelemetry | No | Kernel flow telemetry events JSON or JSONL stream (optional) | |
| cosignImageReference | No | Container image reference to audit (optional) | |
| networkPolicyContent | No | Cilium or K8s network policy content to audit (optional) | |
| telemetryConfigContent | No | Distributed eBPF telemetry pipeline manifest (optional) |