mql/features.yaml at main · mondoohq/mql · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
# Copyright Mondoo, Inc. 2024, 2026
# SPDX-License-Identifier: BUSL-1.1

Features:
- desc: "Resolve similar queries the same way. If 100 assets have the same dependent
    queries and overrides, \nthey create the same resolved plan. Cannot be used with
    old resolver at the same time for asset.\n"
  end: v6.0 => default now, no need to set it anymore
  id: MassQueries
  idx: 1
  start: v3.x, available at v4.x, default at v5.x
  status: builtin
- desc: Allows MQL to use variable references across blocks. Fully changes the compiled
    code.
  end: v7.0
  id: PiperCode
  idx: 2
  start: v5.x
  status: builtin
- desc: Only boolean results are checked when evaluating a query for success
  end: v8.0
  id: BoolAssertions
  idx: 3
  start: v6.x
  status: builtin
- desc: Enables discovery of Kubernetes cluster nodes as individual assets
  end: unknown
  id: K8sNodeDiscovery
  idx: 4
  start: v6.12
  status: sunset, should be done via discovery code instead
- desc: Add context to assets for e.g. Terraform
  end: v12.0
  id: MQLAssetContext
  idx: 5
  start: v7.0
  status: new
- desc: Errors are treated as failures, see https://www.notion.so/mondoo/Errors-and-Scoring-5dc554348aad4118a1dbf35123368329
  end: v9.0
  id: ErrorsAsFailures
  idx: 6
  start: v8.x
  status: sunset, we never really used this
- desc: Stores recording-like data with upstream, can still be controlled by the server
  end: v11.0
  id: StoreResourcesData
  idx: 7
  start: v10.x
  status: default
- desc: Enables fine-grained assets discovery
  end: v12.0
  id: FineGrainedAssets
  idx: 8
  start: v11.x
  status: sunset, this is now managed via --discover
- desc: Use serial number as the asset ID
  end: v12.0
  id: SerialNumberAsID
  idx: 9
  start: v11.x
  status: default
- desc: Forces shell completion to be enabled (for windows)
  id: ForceShellCompletion
  idx: 10
  start: v11.x
  status: default
- desc: Automatically add resource context to results and prints it
  id: ResourceContext
  idx: 11
  start: v11.x
  status: default
- desc: Fail if no entrypoints or datapoints are found in the query.
  id: FailIfNoEntryPoints
  idx: 12
  start: v11.x
  status: new, we still need to fix a few more tests
- id: UploadResultsV2
  idx: 13
  start: v12.x
  status: new
- id: AutoUpdateEngine
  desc: Auto-update the execution engine
  idx: 14
  start: v13.x
  status: new
- id: BiosUUIDAsID
  desc: "Use BIOS UUID as the asset ID. Preferred over SerialNumber for VMs since some hypervisors (e.g., OpenStack) pass through the host's serial number to VMs, making it non-unique. On detected VMs, the BIOS UUID detector is added automatically; this flag enables it on non-VM (bare metal) machines."
  idx: 15
  start: v13.x
  status: new
- id: ExchangeTokenForToken
  desc: "When exchanging an external identity token with upstream (WIF), request a bearer token response (response_type=TOKEN) in place of certificate-based service-account credentials."
  idx: 16
  start: v13.x
  status: new
- id: TerraformResolveVars
  desc: "Resolve var.* and local.* references in Terraform HCL block arguments to their effective values (variable defaults overridden by .tfvars, locals evaluated from those). Unresolvable references fall back to their reference string; the unresolved view stays available via terraform.block.argumentReferences."
  idx: 17
  start: v13.x
  status: new