Skip to main content

Check Result Export Schema

This is the schema Mondoo uses when exporting check result data to JSONL.

Result type

object

Result properties

PropertyTypeRequired?Nullable?
space_mrnstringYesNo
space_idstringYesNo
space_namestringYesNo
asset_idstringYesNo
asset_mrnstringYesNo
scoreDeprecated
base_scoreintegerYesYes
risk_scoreintegerYesYes
statusstringYesNo
modified_atstringYesNo
failed_atstringYesNo

space_mrn property

Mondoo identifier for the space containing the asset

asset_mrn

TypeRequired?Nullable?
StringYesNo

space_id property

Unique identifier for the space containing the asset

asset_mrn

TypeRequired?Nullable?
StringYesNo

space_name property

Name of the space containing the asset

asset_mrn

TypeRequired?Nullable?
StringYesNo

asset_id property

Unique identifier for the asset

asset_mrn

TypeRequired?Nullable?
StringYesNo

asset_mrn property

Mondoo identifier for the asset

asset_mrn

TypeRequired?Nullable?
StringYesNo

score property

Deprecated: Use base_score instead.

base_score property

Asset's score for this check in the most recent policy-based scan

base_score

TypeRequired?Nullable?
IntegerYesYes

risk_score property

Check risk score

risk_score

TypeRequired?Nullable?
IntegerYesYes

status property

Translation of the check base score value:

  • If the check base score is 100, the status is pass.

  • If the check base score is lower than 100, the status is fail.

status

TypeRequired?Nullable?
StringYesNo

modified_at property

Timestamp from when this check result item was last modified. This is a date-time string matching RFC 3339, section 5.6.

modified_at

TypeRequired?Nullable?
StringYesNo

failed_at property

Optional timestamp from when this check result item failed This is a date-time string matching RFC 3339, section 5.6. If the check has never failed, the value is Unix epoch 0, which is shown in the export as 1970-01-01T01:00:00+01:00.

failed_at

TypeRequired?Nullable?
StringYesNo