---
inputType: "CA10__CaAwsEcrRepository__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10A1__CaAwsEcrRegistry__c/object.extracts.yaml
conditions:
  - status: "UNDETERMINED"
    currentStateMessage: "The repository's registry is not present in the CMDB."
    check:
      IS_EMPTY_LOOKUP: "CA10A1__registry__r"
  - status: "INCOMPLIANT"
    currentStateMessage: "ECR registry scanning is configured for manual scans."
    remediationMessage: "Configure registry scanning to use Scan On Push or Continuous Scanning."
    check:
      IS_EQUAL:
        left:
          JSON_QUERY_NUMBER:
            arg:  
              EXTRACT: "CA10A1__registry__r.caJsonFrom__scanningConfigurationRulesJson__c"
            expression: "length(rules)"
            undeterminedIf:
              evaluationError: "Json query number has failed."
              resultTypeMismatch: "Json query number did not return a number type." 
        right:
          NUMBER: 0.0
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The registry is configured for automated vulnerability scanning."