// ==== lnx_faspex_container_shell.yml | pipeline: none
(ParentImage endswith "/containerd-shim" or ParentImage endswith "/containerd-shim-runc-v2" or ParentImage endswith "/runc") and (Image endswith "/sh" or Image endswith "/bash" or Image endswith "/dash" or Image endswith "/curl" or Image endswith "/wget" or Image endswith "/nc" or Image endswith "/ncat" or Image endswith "/socat" or Image endswith "/python3" or Image endswith "/perl")

// ==== lnx_faspex_file_change.yml | pipeline: none
TargetFilename startswith "/opt/aspera/" or TargetFilename startswith "/etc/aspera/"

// ==== web_faspex_admin_api_paths.yml | pipeline: none
'cs-uri-stem' contains "/aspera/faspex/api/v5/" and (''cs-uri-stem'' contains "/api/v5/users" or ''cs-uri-stem'' contains "/api/v5/admin" or ''cs-uri-stem'' contains "/api/v5/configuration" or ''cs-uri-stem'' contains "/api/v5/smtp" or ''cs-uri-stem'' contains "/api/v5/ldap" or ''cs-uri-stem'' contains "/api/v5/saml" or ''cs-uri-stem'' contains "/api/v5/api_clients" or ''cs-uri-stem'' contains "/api/v5/registration" or ''cs-uri-stem'' contains "/api/v5/accounts" or ''cs-uri-stem'' contains "/api/v5/all/packages") and 'sc-status' startswith "2"

// ==== web_faspex_admin_api_write.yml | pipeline: none
(''cs-uri-stem'' contains "/aspera/faspex/api/v5/users" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/admin" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/configuration" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/smtp" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/ldap" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/saml" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/api_clients" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/registration" or ''cs-uri-stem'' contains "/aspera/faspex/api/v5/accounts") and ('cs-method' in~ ("POST", "PUT", "PATCH", "DELETE"))

// ==== web_faspex_download_spec.yml | pipeline: none
''cs-uri-stem'' contains "/aspera/faspex/api/v5/packages/" and ''cs-uri-stem'' contains "/transfer_spec/download"

