A discriminator to determine which fields can be safely ignored. If left blank, the API will attempt to determine the correct configuration based on data present.

Unique name of credential

Supported Credential Types.

If an external credential type, base64-encoded trusted root CA certificate for the credential provider service, if necessary.

If an external credential type, extra data to provide to the credential provider service.

If an external credential type, the URL of the credential provider service.

This is the password we can use to login if using username credentials or needed for sudo.

The ssh_key we can use to login that is base 64 encoded.

The ssh_key_certificate if using SSH CA signed credentials.

This is the password used to decrypt the ssh_key if we have one.

This is the username we can use to login.

Base64-encoded PKCS#1, PKCS#8, or encrypted PKCS#8 PEM-format RSA private key. If present on a credential, when the credential is used to connect to a host, Sandfly will add an IMA signature to the scanning binary on the target host using this private key.

If ima_signing_key_b64 contains an encrypted PKCS#8 private key, this password will be used to decrypt it. Do not set this property if ima_signing_key_b64 is empty.

Queue name to use for this host.

Directory to run scan from instead of the node configuration values. An empty string means no override. For the behavior of an empty string in the node config file (where an empty string means use the home directory), enter "~" here. Any other value must be an absolute path of at most 512 characters, using only letters, digits, space, and . _ - + , @ % : = ~ /