Nuon actions/runner API

openapi: 3.2.0
info:
  contact:
    email: support@nuon.co
    name: Nuon Support
  description: API for managing nuon apps, components, installs, and actions.
  title: Nuon accounts Actions/runner API
  version: 0.19.1074
servers:
- url: https://api.nuon.co/
tags:
- description: actions/runner
  name: actions/runner
paths:
  /v1/action-workflows/configs/{action_workflow_config_id}:
    get:
      deprecated: true
      description: 'Return an action workflow configuration by id.

        '
      operationId: GetActionWorkflowConfig
      parameters:
      - description: action workflow config ID
        in: path
        name: action_workflow_config_id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/app.ActionWorkflowConfig'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
      security:
      - APIKey: []
      - OrgID: []
      summary: get an app action workflow config
      tags:
      - actions/runner
  /v1/installs/{install_id}/action-workflows/runs/{run_id}:
    get:
      deprecated: true
      description: 'Return an install action workflow run by id.

        '
      operationId: GetInstallActionWorkflowRun
      parameters:
      - description: install ID
        in: path
        name: install_id
        required: true
        schema:
          type: string
      - description: run ID
        in: path
        name: run_id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/app.InstallActionWorkflowRun'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/stderr.ErrResponse'
      security:
      - APIKey: []
      - OrgID: []
      summary: get action workflow runs by install id and run id
      tags:
      - actions/runner
components:
  schemas:
    github_com_nuonco_nuon_pkg_labels.Labels:
      additionalProperties:
        type: string
      type: object
    state.InputsState:
      properties:
        inputs:
          additionalProperties:
            type: string
          type: object
        populated:
          type: boolean
      type: object
    plantypes.SyncSecretsPlan:
      properties:
        aws_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_aws_credentials.Config'
        azure_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_azure_credentials.Config'
        cluster_info:
          $ref: '#/components/schemas/kube.ClusterInfo'
        gcp_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_gcp_credentials.Config'
        kubernetes_secrets:
          items:
            $ref: '#/components/schemas/plantypes.KubernetesSecretSync'
          type: array
        sandbox_mode:
          $ref: '#/components/schemas/plantypes.SandboxMode'
      type: object
    state.RunnerState:
      properties:
        id:
          type: string
        populated:
          type: boolean
        runner_group_id:
          type: string
        status:
          type: string
      type: object
    app.VCSConnectionCommit:
      properties:
        author_email:
          type: string
        author_name:
          type: string
        created_at:
          type: string
        created_by_id:
          type: string
        id:
          type: string
        message:
          type: string
        owner_id:
          description: Polymorphic ownership - references VCS config that owns this commit
          type: string
        owner_type:
          type: string
        sha:
          type: string
        updated_at:
          type: string
        vcs_connection_id:
          type: string
      type: object
    compositeerrors.CompositeErrorData:
      properties:
        data:
          description: 'Data is the typed, per-error-type payload: WHAT the error is. Closed

            schema per Type. Read to render sections and by any future view.'
          type: object
        hints:
          allOf:
          - $ref: '#/components/schemas/compositeerrors.Hints'
          description: 'Hints is the open annotation/directive bag: HOW to handle or present the

            error. Canonical keys (Hint*) are honored by specific consumers.'
        message:
          type: string
        sections:
          items:
            $ref: '#/components/schemas/compositeerrors.Section'
          type: array
        severity:
          $ref: '#/components/schemas/compositeerrors.Severity'
        source_id:
          description: 'SourceID / SourceType identify the row this error originated on

            (polymorphic, same shape as OwnerID/OwnerType). Set at the record site,

            e.g. ("runner_job_execution_results", "<result id>"). Enables a future

            JOINable view without a separate error table.'
          type: string
        source_type:
          type: string
        type:
          type: string
        version:
          description: Version is the payload schema version (SchemaVersion at write time).
          type: integer
      type: object
    signaldb.SignalData:
      properties:
        signal: {}
      type: object
    app.Role:
      properties:
        createdBy:
          $ref: '#/components/schemas/app.Account'
        created_at:
          type: string
        created_by_id:
          type: string
        id:
          type: string
        policies:
          items:
            $ref: '#/components/schemas/app.Policy'
          type: array
        role_type:
          $ref: '#/components/schemas/app.RoleType'
        updated_at:
          type: string
      type: object
    app.PulumiComponentConfig:
      properties:
        component_config_connection_id:
          description: parent reference
          type: string
        config:
          additionalProperties:
            type: string
          type: object
        connected_github_vcs_config:
          $ref: '#/components/schemas/app.ConnectedGithubVCSConfig'
        created_at:
          type: string
        created_by_id:
          type: string
        env_vars:
          additionalProperties:
            type: string
          type: object
        id:
          type: string
        public_git_vcs_config:
          $ref: '#/components/schemas/app.PublicGitVCSConfig'
        runtime:
          description: pulumi configuration values
          type: string
        updated_at:
          type: string
        version:
          type: string
      type: object
    plantypes.TerraformBackend:
      properties:
        workspaceID:
          type: string
      required:
      - workspaceID
      type: object
    state.AzureCloudAccount:
      properties:
        location:
          type: string
      type: object
    outputs.SecretSyncOutput:
      properties:
        arn:
          type: string
        azure_key_vault_secret_id:
          type: string
        exists:
          type: boolean
        gcp_secret_name:
          type: string
        kubernetes_key:
          type: string
        kubernetes_name:
          type: string
        kubernetes_namespace:
          type: string
        length:
          type: integer
        name:
          type: string
        timestamp:
          type: string
      type: object
    iam.StaticCredentials:
      properties:
        access_key_id:
          type: string
        secret_access_key:
          type: string
        session_token:
          type: string
      type: object
    plantypes.KubernetesManifestDeployPlan:
      properties:
        aws_auth:
          allOf:
          - $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_aws_credentials.Config'
          description: Auth for cloud providers
        azure_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_azure_credentials.Config'
        cluster_info:
          $ref: '#/components/schemas/kube.ClusterInfo'
        gcp_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_gcp_credentials.Config'
        manifest:
          description: 'Manifest is populated at runtime from the OCI artifact.

            This field is no longer set during plan creation - it''s populated by the runner

            after pulling the OCI artifact during Initialize().'
          type: string
        namespace:
          type: string
        oci_artifact:
          allOf:
          - $ref: '#/components/schemas/plantypes.OCIArtifactReference'
          description: OCIArtifact reference (set during plan creation, used by runner to pull manifest)
        state:
          allOf:
          - $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_types_state.State'
          description: 'State carries the install state the runner needs to interpolate

            nuon template placeholders into the kustomize-produced manifest.yaml

            after pulling the OCI artifact. Nil for inline-manifest deploys,

            which are pre-rendered planner-side and short-circuit the OCI pull

            on the runner. Same shape as SandboxRunPlan.State.'
      type: object
    app.QueueSignal:
      properties:
        callback:
          $ref: '#/components/schemas/callback.Ref'
        callbacks:
          items:
            $ref: '#/components/schemas/callback.Ref'
          type: array
        created_at:
          type: string
        created_by_id:
          type: string
        emitter_id:
          description: 'Optional: if this signal was emitted by an emitter'
          type: string
        enqueued:
          type: boolean
        execution_count:
          type: integer
        expires_at:
          type: string
        id:
          type: string
        org_id:
          type: string
        owner_id:
          type: string
        owner_type:
          type: string
        queue:
          $ref: '#/components/schemas/app.Queue'
        queue_id:
          type: string
        signal:
          $ref: '#/components/schemas/signaldb.SignalData'
        signal_context:
          $ref: '#/components/schemas/cctx.SignalContext'
        status:
          $ref: '#/components/schemas/app.CompositeStatus'
        type:
          type: string
        updated_at:
          type: string
        workflow:
          $ref: '#/components/schemas/signaldb.WorkflowRef'
      type: object
    app.ComponentType:
      enum:
      - terraform_module
      - helm_chart
      - docker_build
      - external_image
      - job
      - kubernetes_manifest
      - pulumi
      - unknown
      type: string
      x-enum-varnames:
      - ComponentTypeTerraformModule
      - ComponentTypeHelmChart
      - ComponentTypeDockerBuild
      - ComponentTypeExternalImage
      - ComponentTypeJob
      - ComponentTypeKubernetesManifest
      - ComponentTypePulumi
      - ComponentTypeUnknown
    app.WorkflowStepPolicyValidation:
      properties:
        created_at:
          type: string
        created_by_id:
          type: string
        id:
          type: string
        install_workflow_step_id:
          description: install workflow step is the install step that this was performed within
          type: string
        response:
          description: 'response is the kyverno response (deprecated: use Reports for detailed results)'
          type: string
        runner_job_id:
          description: runnerJobID is the runner job that this was performed within
          type: string
        status:
          allOf:
          - $ref: '#/components/schemas/app.CompositeStatus'
          description: status denotes whether this passed, or whether it failed the job.
        updated_at:
          type: string
      type: object
    configs.OCIRegistryAuth:
      properties:
        password:
          type: string
        username:
          type: string
      type: object
    state.ActionWorkflowState:
      properties:
        id:
          type: string
        outputs:
          additionalProperties: {}
          type: object
        populated:
          type: boolean
        status:
          type: string
      type: object
    plantypes.BuildPlan:
      properties:
        component_build_id:
          type: string
        component_id:
          type: string
        container_image_pull_plan:
          $ref: '#/components/schemas/plantypes.ContainerImagePullPlan'
        docker_build_plan:
          $ref: '#/components/schemas/plantypes.DockerBuildPlan'
        dst_registry:
          $ref: '#/components/schemas/configs.OCIRegistryRepository'
        dst_tag:
          type: string
        git_source:
          $ref: '#/components/schemas/plantypes.GitSource'
        helm_build_plan:
          $ref: '#/components/schemas/plantypes.HelmBuildPlan'
        kubernetes_manifest_build_plan:
          $ref: '#/components/schemas/plantypes.KubernetesManifestBuildPlan'
        pulumi_build_plan:
          $ref: '#/components/schemas/plantypes.PulumiBuildPlan'
        sandbox_mode:
          $ref: '#/components/schemas/plantypes.SandboxMode'
        terraform_build_plan:
          $ref: '#/components/schemas/plantypes.TerraformBuildPlan'
      required:
      - dst_registry
      - dst_tag
      type: object
    app.InstallRoleUsage:
      properties:
        created_at:
          type: string
        created_by_id:
          type: string
        id:
          type: string
        install_role_id:
          type: string
        org_id:
          type: string
        role_name:
          type: string
        role_selection_trace:
          items:
            $ref: '#/components/schemas/app.InstallRoleSelectionRecord'
          type: array
        role_source:
          type: string
        runner_job:
          $ref: '#/components/schemas/app.RunnerJob'
        runner_job_id:
          type: string
        updated_at:
          type: string
        workflow:
          $ref: '#/components/schemas/app.Workflow'
        workflow_step_id:
          type: string
      type: object
    state.AWSCloudAccount:
      properties:
        region:
          type: string
      type: object
    app.QueueEmitter:
      properties:
        created_at:
          type: string
        created_by_id:
          type: string
        cron_schedule:
          description: 'Schedule configuration

            For cron mode: cron expression (e.g., "0 * * * *")'
          type: string
        description:
          type: string
        emit_count:
          type: integer
        fired:
          description: 'For scheduled mode: whether the signal has been fired'
          type: boolean
        id:
          type: string
        jitter_window:
          description: 'For cron mode: spread emitter ticks deterministically across this window

            to avoid thundering-herd when many emitters share a schedule. A hash of the

            emitter ID determines each emitter''s static offset within the window. Zero

            disables jitter (default).'
          type: integer
        last_emitted_at:
          type: string
        mode:
          allOf:
          - $ref: '#/components/schemas/app.QueueEmitterMode'
          description: 'Emitter mode: "cron" for recurring, "scheduled" for one-shot'
        name:
          description: Emitter identity
          type: string
        next_emit_at:
          type: string
        org_id:
          type: string
        queue_id:
          description: 'Many-to-one: each emitter belongs to exactly one queue'
          type: string
        scheduled_at:
          description: 'For scheduled mode: the time to fire the signal'
          type: string
        signal_expires_in:
          description: 'Optional TTL for emitted signals. When set, each emitted signal''s ExpiresAt

            is computed as time.Now().Add(SignalExpiresIn) at emission time.'
          type: integer
        signal_template:
          $ref: '#/components/schemas/signaldb.SignalData'
        signal_type:
          description: Signal template - the signal to emit on each tick
          type: string
        status:
          allOf:
          - $ref: '#/components/schemas/app.CompositeStatus'
          description: Runtime state using shared CompositeStatus
        updated_at:
          type: string
        workflow:
          allOf:
          - $ref: '#/components/schemas/signaldb.WorkflowRef'
          description: Workflow reference for the emitter's cron workflow
      type: object
    github_com_nuonco_nuon_pkg_labels.Selector:
      properties:
        match_labels:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_labels.Labels'
        not_match_labels:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_labels.Labels'
      type: object
    app.Status:
      enum:
      - error
      - pending
      - in-progress
      - checking-plan
      - success
      - not-attempted
      - cancelled
      - retrying
      - discarded
      - user-skipped
      - auto-skipped
      - planning
      - applying
      - queued
      - warning
      - failed-pending-retry
      - generating
      - awaiting-user-run
      - provisioning
      - active
      - outdated
      - expired
      - approved
      - drifted
      - no-drift
      - approval-expired
      - approval-denied
      - approval-retry
      - building
      - deleting
      - noop
      - approval-awaiting
      type: string
      x-enum-varnames:
      - StatusError
      - StatusPending
      - StatusInProgress
      - StatusCheckPlan
      - StatusSuccess
      - StatusNotAttempted
      - StatusCancelled
      - StatusRetrying
      - StatusDiscarded
      - StatusUserSkipped
      - StatusAutoSkipped
      - StatusPlanning
      - StatusApplying
      - StatusQueued
      - StatusWarning
      - StatusFailedPendingRetry
      - InstallStackVersionStatusGenerating
      - InstallStackVersionStatusPendingUser
      - InstallStackVersionStatusProvisioning
      - InstallStackVersionStatusActive
      - InstallStackVersionStatusOutdated
      - InstallStackVersionStatusExpired
      - WorkflowStepApprovalStatusApproved
      - WorkflowStepDrifted
      - WorkflowStepNoDrift
      - WorkflowStepApprovalStatusApprovalExpired
      - WorkflowStepApprovalStatusApprovalDenied
      - WorkflowStepApprovalStatusApprovalRetryPlan
      - StatusBuilding
      - StatusDeleting
      - InstallDeployStatusV2Noop
      - AwaitingApproval
    plantypes.FetchImageMetadataPlan:
      properties:
        include_attestation_layers:
          type: boolean
        include_attestation_manifests:
          type: boolean
        include_index:
          description: Options for metadata fetching
          type: boolean
        registry:
          allOf:
          - $ref: '#/components/schemas/configs.OCIRegistryRepository'
          description: Registry configuration for the source image
        sandbox_mode:
          $ref: '#/components/schemas/plantypes.SandboxMode'
        tag:
          description: Tag is the image tag to fetch metadata for
          type: string
      required:
      - registry
      - tag
      type: object
    app.RunnerJobPlan:
      properties:
        composite_plan:
          allOf:
          - $ref: '#/components/schemas/plantypes.CompositePlan'
          description: 'Deprecated: composite plans are read from CompositePlanBlob (S3). This

            jsonb column is retained only as a fallback for rows not yet backfilled.'
        created_at:
          type: string
        created_by_id:
          type: string
        id:
          type: string
        org_id:
          type: string
        plan_json:
          type: string
        runner_job_id:
          type: string
        updated_at:
          type: string
      type: object
    compositeerrors.SectionKind:
      enum:
      - markdown
      - text
      - code
      type: string
      x-enum-varnames:
      - SectionMarkdown
      - SectionText
      - SectionCode
    app.ComponentBuild:
      properties:
        app_branch_run_id:
          type: string
        checksum:
          description: checksum of our intermediate component config
          type: string
        component_config_connection:
          $ref: '#/components/schemas/app.ComponentConfigConnection'
        component_config_connection_id:
          description: 'DEPRECATED: will retain the field to connect against the last component config connection that set this build'
          type: string
        component_config_version:
          type: integer
        component_id:
          description: Read-only fields set on the object to de-nest data
          type: string
        component_name:
          type: string
        created_at:
          type: string
        created_by:
          $ref: '#/components/schemas/app.Account'
        created_by_id:
          type: string
        git_ref:
          type: string
        id:
          type: string
        install_deploys:
          items:
            $ref: '#/components/schemas/app.InstallDeploy'
          type: array
        log_stream:
          $ref: '#/components/schemas/app.LogStream'
        no_op:
          description: "NoOp is true when the runner detected SourceDigest matches the previous\nbuild's SourceDigest and skipped the artifact push.\n\nDownstream contract:\n  - The build is still marked Active because the bytes it represents\n    are deployable (they live in the install registry under the prior\n    build that pushed them).\n  - No new install deploys are auto-queued for a NoOp build; the\n    dep-aware deploy path handles fan-out for installs that depend\n    on the underlying image.\n  - pollForDeployableBuild treats NoOp builds as Active without any\n    special-casing because the deployable artifact at the same\n    SourceDigest is already present in the install registry from the\n    prior build."
          type: boolean
        policy_reports:
          items:
            $ref: '#/components/schemas/app.PolicyReport'
          type: array
        queue_signal:
          allOf:
          - $ref: '#/components/schemas/app.QueueSignal'
          description: QueueSignal is the signal enqueued when this build was created via the queue path
        releases:
          items:
            $ref: '#/components/schemas/app.ComponentRelease'
          type: array
        resolved_at:
          description: ResolvedAt is when the runner resolved SourceRef to SourceDigest.
          type: string
        resolved_tag:
          description: 'ResolvedTag is the tag the runner actually pulled from. For digest-pinned

            refs this is empty. For mutable/semver refs this is the concrete tag the

            runner selected (e.g. "1.25.5" even if SourceRef pinned "1.25.3" with a

            "~1.25.0" update_policy constraint).'
          type: string
        runner_job:
          allOf:
          - $ref: '#/components/schemas/app.RunnerJob'
          description: runner details
        source_checksum:
          description: checksum of the component's source directory at build time
          type: string
        source_digest:
          description: 'SourceDigest is the manifest list digest of the resolved source ref,

            e.g. "sha256:abc...". This is the canonical content address of what was

            pulled and is used for build dedup.'
          type: string
        source_image:
          description: SourceImage is the repository portion of SourceRef without tag/digest, e.g. "nginx".
          type: string
        source_media_type:
          description: 'SourceMediaType records the media type of the resolved manifest (image,

            image index, OCI artifact, etc.) for downstream rendering decisions.'
          type: string
        source_ref:
          description: 'Source identity for image-type builds.


            SourceRef is what the user wrote in the spec, e.g. "nginx:1.25.3" or

            "myimage@sha256:...". Always populated for image-type builds so we have a

            permanent record of what was requested at build time.'
          type: string
        status:
          type: string
        status_description:
          type: string
        status_v2:
          $ref: '#/components/schemas/app.CompositeStatus'
        updated_at:
          type: string
        vcs_connection_commit:
          $ref: '#/components/schemas/app.VCSConnectionCommit'
      type: object
    compositeerrors.Hints:
      additionalProperties:
        type: string
      type: object
    plantypes.SandboxMode:
      properties:
        enabled:
          type: boolean
        helm:
          $ref: '#/components/schemas/plantypes.HelmSandboxMode'
        kubernetes_manifest:
          $ref: '#/components/schemas/plantypes.KubernetesSandboxMode'
        outputs:
          additionalProperties: {}
          type: object
        pulumi:
          $ref: '#/components/schemas/plantypes.PulumiSandboxMode'
        terraform:
          $ref: '#/components/schemas/plantypes.TerraformSandboxMode'
      type: object
    app.JobComponentConfig:
      properties:
        args:
          items:
            type: string
          type: array
        cmd:
          items:
            type: string
          type: array
        component_config_connection_id:
          description: value
          type: string
        created_at:
          type: string
        created_by_id:
          type: string
        env_vars:
          additionalProperties:
            type: string
          type: object
        id:
          type: string
        image_url:
          description: Image attributes, copied from a docker_buid or external_image component.
          type: string
        tag:
          type: string
        updated_at:
          type: string
      type: object
    plantypes.TerraformDeployPlan:
      properties:
        aws_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_aws_credentials.Config'
        azure_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_azure_credentials.Config'
        cluster_info:
          $ref: '#/components/schemas/kube.ClusterInfo'
        env_vars:
          additionalProperties:
            type: string
          type: object
        gcp_auth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_gcp_credentials.Config'
        hooks:
          $ref: '#/components/schemas/plantypes.TerraformDeployHooks'
        plan_json:
          items:
            type: integer
          type: array
        policies:
          additionalProperties:
            type: string
          type: object
        state:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_types_state.State'
        terraform_backend:
          $ref: '#/components/schemas/plantypes.TerraformBackend'
        vars:
          additionalProperties: {}
          type: object
        vars_files:
          items:
            type: string
          type: array
      type: object
    plantypes.OCIArtifactReference:
      properties:
        digest:
          description: Digest is the immutable artifact digest (e.g., sha256:abc123...)
          type: string
        tag:
          description: Tag is the artifact tag (typically the build ID)
          type: string
        url:
          description: URL is the full artifact URL (e.g., registry.nuon.co/org_id/app_id)
          type: string
      type: object
    plantypes.OCISource:
      properties:
        registry:
          $ref: '#/components/schemas/configs.OCIRegistryRepository'
        tag:
          type: string
      type: object
    app.AppBranch:
      properties:
        app_id:
          type: string
        configs:
          items:
            $ref: '#/components/schemas/app.AppBranchConfig'
          type: array
        created_at:
          type: string
        created_by_id:
          type: string
        id:
          type: string
        managed_by:
          type: string
        name:
          type: string
        org_id:
          type: string
        queue:
          $ref: '#/components/schemas/app.Queue'
        updated_at:
          type: string
        workflow_count:
          type: integer
        workflows:
          items:
            $ref: '#/components/schemas/app.Workflow'
          type: array
      type: object
    plantypes.TerraformSandboxMode:
      properties:
        plan_contents:
          description: create the plan output
          type: string
        plan_display_contents:
          type: string
        state_json:
          description: needs to be the outputs of `terraform show -json`
          type: string
        workspace_id:
          type: string
      type: object
    app.HelmConfig:
      properties:
        chart_name:
          type: string
        helm_repo_config:
          $ref: '#/components/schemas/app.HelmRepoConfig'
        namespace:
          type: string
        skip_crds:
          type: boolean
        storage_driver:
          type: string
        take_ownership:
          description: Newer fields that we don't need to store as columns in the database
          type: boolean
        values:
          additionalProperties:
            type: string
          type: object
        values_files:
          items:
            type: string
          type: array
      type: object
    callback.Ref:
      properties:
        namespace:
          type: string
        signal_name:
          type: string
        workflow_id:
          type: string
      type: object
    credentials.StaticCredentials:
      properties:
        access_key_id:
          type: string
        secret_access_key:
          type: string
        session_token:
          type: string
      required:
      - access_key_id
      - secret_access_key
      - session_token
      type: object
    configs.OCIRegistryRepository:
      properties:
        acrauth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_azure_credentials.Config'
        ecrauth:
          $ref: '#/components/schemas/github_com_nuonco_nuon_pkg_aws_credentials.Config'
        loginServer:
          type: string
        ociauth:
          $ref: '#/components/schemas/configs.OCIRegistryAuth'
        plugin:
          type: string
        region:
          type: string
        registryType:
          $ref: '#/components/schemas/configs.OCIRegistryType'
        repository:
          description: based on the type of access, either the repository (ecr) or login server (acr) will be provided.
          type: string
        serviceAccountEmail:
          type: string
        workloadIdentityProvider:
          type: string
      type: object
    app.PolicyReportOwnerType:
      enum:
      - install_deploys
      - install_sandbox_runs
      - component_builds
      type: string
      x-enum-varnames:
      - PolicyReportOwnerTypeInstallDeploy
      - PolicyRe

# --- truncated at 32 KB (131 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/nuon/refs/heads/main/openapi/nuon-actions-runner-api-openapi.yml