Container

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-guardduty/refs/heads/main/json-schema/guardduty-container-schema.json",
  "title": "Container",
  "description": "Details of a container.",
  "type": "object",
  "properties": {
    "ContainerRuntime": {
      "allOf": [
        {
          "$ref": "#/components/schemas/String"
        },
        {
          "xml": {
            "name": "containerRuntime"
          },
          "description": "The container runtime (such as, Docker or containerd) used to run the container."
        }
      ]
    },
    "Id": {
      "allOf": [
        {
          "$ref": "#/components/schemas/String"
        },
        {
          "xml": {
            "name": "id"
          },
          "description": "Container ID."
        }
      ]
    },
    "Name": {
      "allOf": [
        {
          "$ref": "#/components/schemas/String"
        },
        {
          "xml": {
            "name": "name"
          },
          "description": "Container name."
        }
      ]
    },
    "Image": {
      "allOf": [
        {
          "$ref": "#/components/schemas/String"
        },
        {
          "xml": {
            "name": "image"
          },
          "description": "Container image."
        }
      ]
    },
    "ImagePrefix": {
      "allOf": [
        {
          "$ref": "#/components/schemas/String"
        },
        {
          "xml": {
            "name": "imagePrefix"
          },
          "description": "Part of the image name before the last slash. For example, imagePrefix for public.ecr.aws/amazonlinux/amazonlinux:latest would be public.ecr.aws/amazonlinux. If the image name is relative and does not have a slash, this field is empty."
        }
      ]
    },
    "VolumeMounts": {
      "allOf": [
        {
          "$ref": "#/components/schemas/VolumeMounts"
        },
        {
          "xml": {
            "name": "volumeMounts"
          },
          "description": "Container volume mounts."
        }
      ]
    },
    "SecurityContext": {
      "allOf": [
        {
          "$ref": "#/components/schemas/SecurityContext"
        },
        {
          "xml": {
            "name": "securityContext"
          },
          "description": "Container security context."
        }
      ]
    }
  }
}