Add field attribute to the Workload Protection hash action

.generator/schemas/v2/openapi.yaml

@@ -10205,11 +10205,11 @@ components:
     CloudWorkloadSecurityAgentPolicyVersion:
       description: The versions of the policy
       properties:
-        Date:
+        date:
           description: The date and time the version was created
           nullable: true
           type: string
-        Name:
+        name:
           description: The version of the policy
           example: 1.47.0-rc2
           type: string
@@ -10236,8 +10236,11 @@ components:
           $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionSet'
       type: object
     CloudWorkloadSecurityAgentRuleActionHash:
-      additionalProperties: {}
-      description: An empty object indicating the hash action
+      description: Hash file specified by the field attribute
+      properties:
+        field:
+          description: The field of the hash action
+          type: string
       type: object
     CloudWorkloadSecurityAgentRuleActionMetadata:
       description: The metadata action applied on the scope matching the rule
@@ -10285,9 +10288,14 @@ components:
           format: int64
           type: integer
         value:
-          description: The value of the set action
-          type: string
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionSetValue'
       type: object
+    CloudWorkloadSecurityAgentRuleActionSetValue:
+      description: The value of the set action
+      oneOf:
+      - type: string
+      - type: integer
+      - type: boolean
     CloudWorkloadSecurityAgentRuleActions:
       description: The array of actions the rule can perform if triggered
       items:

cassettes/v2/CSM-Threats_3156990395/Create-a-Workload-Protection-agent-rule-returns-Bad-Request-response_1067572025/frozen.json

@@ -1 +1 @@
-"2025-10-10T15:20:39.566Z"
+"2025-11-28T15:36:35.422Z"

cassettes/v2/CSM-Threats_3156990395/Create-a-Workload-Protection-agent-rule-returns-Bad-Request-response_1067572025/recording.har

@@ -8,7 +8,7 @@
     },
     "entries": [
       {
-        "_id": "396b2fca731ed8ac116876592ae9c6ea",
+        "_id": "283aabc9ec1634fe102a86372e557504",
         "_order": 0,
         "cache": {},
         "request": {
@@ -26,13 +26,13 @@
               "value": "application/json"
             }
           ],
-          "headersSize": 593,
+          "headersSize": 595,
           "httpVersion": "HTTP/1.1",
           "method": "POST",
           "postData": {
             "mimeType": "application/json",
             "params": [],
-            "text": "{\"data\":{\"attributes\":{\"description\":\"My agent policy\",\"enabled\":true,\"hostTags\":[\"env:staging\"],\"name\":\"testcreateaworkloadprotectionagentrulereturnsbadrequestresponse1760109639\"},\"type\":\"policy\"}}"
+            "text": "{\"data\":{\"attributes\":{\"description\":\"My agent policy\",\"enabled\":true,\"hostTags\":[\"env:staging\"],\"name\":\"testcreateaworkloadprotectionagentrulereturnsbadrequestresponse1764344195\"},\"type\":\"policy\"}}"
           },
           "queryString": [],
           "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/policy"
@@ -42,7 +42,7 @@
           "content": {
             "mimeType": "application/json",
             "size": 450,
-            "text": "{\"data\":{\"id\":\"sr5-i0h-lty\",\"type\":\"policy\",\"attributes\":{\"blockingRulesCount\":0,\"datadogManaged\":false,\"description\":\"My agent policy\",\"disabledRulesCount\":1,\"enabled\":true,\"hostTagsLists\":[[\"env:staging\"]],\"monitoringRulesCount\":7,\"name\":\"testcreateaworkloadprotectionagentrulereturnsbadrequestresponse1760109639\",\"pinned\":false,\"policyVersion\":\"1\",\"ruleCount\":8,\"updateDate\":1760109639958,\"updater\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"}}}}"
+            "text": "{\"data\":{\"id\":\"nry-cel-dxv\",\"type\":\"policy\",\"attributes\":{\"blockingRulesCount\":0,\"datadogManaged\":false,\"description\":\"My agent policy\",\"disabledRulesCount\":1,\"enabled\":true,\"hostTagsLists\":[[\"env:staging\"]],\"monitoringRulesCount\":7,\"name\":\"testcreateaworkloadprotectionagentrulereturnsbadrequestresponse1764344195\",\"pinned\":false,\"policyVersion\":\"1\",\"ruleCount\":8,\"updateDate\":1764344195792,\"updater\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"}}}}"
           },
           "cookies": [],
           "headers": [
@@ -57,11 +57,11 @@
           "status": 200,
           "statusText": "OK"
         },
-        "startedDateTime": "2025-10-10T15:20:39.571Z",
-        "time": 859
+        "startedDateTime": "2025-11-28T15:36:35.428Z",
+        "time": 1050
       },
       {
-        "_id": "c96671f68a37c051f820b4c05a204de7",
+        "_id": "d0805eda3a639b57a7558fc74ff3375b",
         "_order": 0,
         "cache": {},
         "request": {
@@ -79,23 +79,23 @@
               "value": "application/json"
             }
           ],
-          "headersSize": 596,
+          "headersSize": 598,
           "httpVersion": "HTTP/1.1",
           "method": "POST",
           "postData": {
             "mimeType": "application/json",
             "params": [],
-            "text": "{\"data\":{\"attributes\":{\"description\":\"My Agent rule\",\"enabled\":true,\"expression\":\"exec.file.name\",\"filters\":[],\"name\":\"my_agent_rule\",\"policy_id\":\"sr5-i0h-lty\",\"product_tags\":[]},\"type\":\"agent_rule\"}}"
+            "text": "{\"data\":{\"attributes\":{\"description\":\"My Agent rule\",\"enabled\":true,\"expression\":\"exec.file.name\",\"filters\":[],\"name\":\"my_agent_rule\",\"policy_id\":\"nry-cel-dxv\",\"product_tags\":[]},\"type\":\"agent_rule\"}}"
           },
           "queryString": [],
           "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/agent_rules"
         },
         "response": {
-          "bodySize": 121,
+          "bodySize": 154,
           "content": {
             "mimeType": "application/json",
-            "size": 121,
-            "text": "{\"errors\":[\"input_validation_error(Field 'name' is invalid: the name 'my_agent_rule' is already used by a custom rule)\"]}"
+            "size": 154,
+            "text": "{\"errors\":[\"input_validation_error(Field 'expression' is invalid: rule `my_agent_rule` error: rule syntax error: bool expected: 1:1: exec.file.name\\n^)\"]}"
           },
           "cookies": [],
           "headers": [
@@ -110,11 +110,11 @@
           "status": 400,
           "statusText": "Bad Request"
         },
-        "startedDateTime": "2025-10-10T15:20:40.436Z",
-        "time": 393
+        "startedDateTime": "2025-11-28T15:36:36.486Z",
+        "time": 628
       },
       {
-        "_id": "033f489d6cfaff7becf8fafbf0d27dcc",
+        "_id": "47e0a928887d4b8ae794d955bebef6a7",
         "_order": 0,
         "cache": {},
         "request": {
@@ -127,11 +127,11 @@
               "value": "*/*"
             }
           ],
-          "headersSize": 541,
+          "headersSize": 543,
           "httpVersion": "HTTP/1.1",
           "method": "DELETE",
           "queryString": [],
-          "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/policy/sr5-i0h-lty"
+          "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/policy/nry-cel-dxv"
         },
         "response": {
           "bodySize": 0,
@@ -152,8 +152,8 @@
           "status": 204,
           "statusText": "No Content"
         },
-        "startedDateTime": "2025-10-10T15:20:40.833Z",
-        "time": 919
+        "startedDateTime": "2025-11-28T15:36:37.120Z",
+        "time": 450
       }
     ],
     "pages": [],

cassettes/v2/CSM-Threats_3156990395/Create-a-Workload-Protection-agent-rule-returns-OK-response_2698696373/frozen.json

@@ -1 +1 @@
-"2025-10-10T15:20:41.757Z"
+"2025-11-28T15:36:37.578Z"

cassettes/v2/CSM-Threats_3156990395/Create-a-Workload-Protection-agent-rule-returns-OK-response_2698696373/recording.har

@@ -8,7 +8,7 @@
     },
     "entries": [
       {
-        "_id": "603ef16c2dcad915a44a8a6dde147f65",
+        "_id": "0b163d950002c75bf98bc17bddace27f",
         "_order": 0,
         "cache": {},
         "request": {
@@ -26,13 +26,13 @@
               "value": "application/json"
             }
           ],
-          "headersSize": 593,
+          "headersSize": 595,
           "httpVersion": "HTTP/1.1",
           "method": "POST",
           "postData": {
             "mimeType": "application/json",
             "params": [],
-            "text": "{\"data\":{\"attributes\":{\"description\":\"My agent policy\",\"enabled\":true,\"hostTags\":[\"env:staging\"],\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1760109641\"},\"type\":\"policy\"}}"
+            "text": "{\"data\":{\"attributes\":{\"description\":\"My agent policy\",\"enabled\":true,\"hostTags\":[\"env:staging\"],\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1764344197\"},\"type\":\"policy\"}}"
           },
           "queryString": [],
           "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/policy"
@@ -42,7 +42,7 @@
           "content": {
             "mimeType": "application/json",
             "size": 442,
-            "text": "{\"data\":{\"id\":\"cwy-qfn-4k8\",\"type\":\"policy\",\"attributes\":{\"blockingRulesCount\":0,\"datadogManaged\":false,\"description\":\"My agent policy\",\"disabledRulesCount\":1,\"enabled\":true,\"hostTagsLists\":[[\"env:staging\"]],\"monitoringRulesCount\":7,\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1760109641\",\"pinned\":false,\"policyVersion\":\"1\",\"ruleCount\":8,\"updateDate\":1760109642133,\"updater\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"}}}}"
+            "text": "{\"data\":{\"id\":\"5mn-pob-n7y\",\"type\":\"policy\",\"attributes\":{\"blockingRulesCount\":0,\"datadogManaged\":false,\"description\":\"My agent policy\",\"disabledRulesCount\":1,\"enabled\":true,\"hostTagsLists\":[[\"env:staging\"]],\"monitoringRulesCount\":7,\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1764344197\",\"pinned\":false,\"policyVersion\":\"1\",\"ruleCount\":8,\"updateDate\":1764344197937,\"updater\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"}}}}"
           },
           "cookies": [],
           "headers": [
@@ -57,11 +57,11 @@
           "status": 200,
           "statusText": "OK"
         },
-        "startedDateTime": "2025-10-10T15:20:41.759Z",
-        "time": 1077
+        "startedDateTime": "2025-11-28T15:36:37.581Z",
+        "time": 863
       },
       {
-        "_id": "22c237a1151205b5ba1b14fd5787676a",
+        "_id": "77fb5d22fd4824b9ea60396fb3c17a33",
         "_order": 0,
         "cache": {},
         "request": {
@@ -79,13 +79,13 @@
               "value": "application/json"
             }
           ],
-          "headersSize": 596,
+          "headersSize": 598,
           "httpVersion": "HTTP/1.1",
           "method": "POST",
           "postData": {
             "mimeType": "application/json",
             "params": [],
-            "text": "{\"data\":{\"attributes\":{\"agent_version\":\"> 7.60\",\"description\":\"My Agent rule\",\"enabled\":true,\"expression\":\"exec.file.name == \\\"sh\\\"\",\"filters\":[],\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1760109641\",\"policy_id\":\"cwy-qfn-4k8\",\"product_tags\":[]},\"type\":\"agent_rule\"}}"
+            "text": "{\"data\":{\"attributes\":{\"agent_version\":\"> 7.60\",\"description\":\"My Agent rule\",\"enabled\":true,\"expression\":\"exec.file.name == \\\"sh\\\"\",\"filters\":[],\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1764344197\",\"policy_id\":\"5mn-pob-n7y\",\"product_tags\":[]},\"type\":\"agent_rule\"}}"
           },
           "queryString": [],
           "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/agent_rules"
@@ -95,7 +95,7 @@
           "content": {
             "mimeType": "application/json",
             "size": 519,
-            "text": "{\"data\":{\"id\":\"iua-dxr-uvh\",\"type\":\"agent_rule\",\"attributes\":{\"category\":\"Process Activity\",\"creationDate\":1760109643225,\"creator\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"},\"defaultRule\":false,\"description\":\"My Agent rule\",\"enabled\":true,\"expression\":\"exec.file.name == \\\"sh\\\"\",\"filters\":[\"os == \\\"linux\\\"\"],\"monitoring\":[\"cwy-qfn-4k8\"],\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1760109641\",\"product_tags\":[],\"updateDate\":1760109643225,\"updater\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"}}}}"
+            "text": "{\"data\":{\"id\":\"l4v-yda-kue\",\"type\":\"agent_rule\",\"attributes\":{\"category\":\"Process Activity\",\"creationDate\":1764344198799,\"creator\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"},\"defaultRule\":false,\"description\":\"My Agent rule\",\"enabled\":true,\"expression\":\"exec.file.name == \\\"sh\\\"\",\"filters\":[\"os == \\\"linux\\\"\"],\"monitoring\":[\"5mn-pob-n7y\"],\"name\":\"testcreateaworkloadprotectionagentrulereturnsokresponse1764344197\",\"product_tags\":[],\"updateDate\":1764344198799,\"updater\":{\"name\":\"frog\",\"handle\":\"frog@datadoghq.com\"}}}}"
           },
           "cookies": [],
           "headers": [
@@ -110,11 +110,11 @@
           "status": 200,
           "statusText": "OK"
         },
-        "startedDateTime": "2025-10-10T15:20:42.840Z",
-        "time": 1256
+        "startedDateTime": "2025-11-28T15:36:38.450Z",
+        "time": 1023
       },
       {
-        "_id": "567fe2bd32e6f22a072992a322614bae",
+        "_id": "582d8e029c45e1518f25208b40b01a01",
         "_order": 0,
         "cache": {},
         "request": {
@@ -127,11 +127,11 @@
               "value": "*/*"
             }
           ],
-          "headersSize": 544,
+          "headersSize": 546,
           "httpVersion": "HTTP/1.1",
           "method": "DELETE",
           "queryString": [],
-          "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/agent_rules/iua-dxr-uvh"
+          "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/agent_rules/l4v-yda-kue"
         },
         "response": {
           "bodySize": 0,
@@ -152,11 +152,11 @@
           "status": 204,
           "statusText": "No Content"
         },
-        "startedDateTime": "2025-10-10T15:20:44.099Z",
-        "time": 964
+        "startedDateTime": "2025-11-28T15:36:39.477Z",
+        "time": 1012
       },
       {
-        "_id": "1c557a34376835b7435cae98d49e1f96",
+        "_id": "3aee0319005a04687589888961193ef6",
         "_order": 0,
         "cache": {},
         "request": {
@@ -169,11 +169,11 @@
               "value": "*/*"
             }
           ],
-          "headersSize": 541,
+          "headersSize": 543,
           "httpVersion": "HTTP/1.1",
           "method": "DELETE",
           "queryString": [],
-          "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/policy/cwy-qfn-4k8"
+          "url": "https://api.datadoghq.com/api/v2/remote_config/products/cws/policy/5mn-pob-n7y"
         },
         "response": {
           "bodySize": 0,
@@ -194,8 +194,8 @@
           "status": 204,
           "statusText": "No Content"
         },
-        "startedDateTime": "2025-10-10T15:20:45.068Z",
-        "time": 933
+        "startedDateTime": "2025-11-28T15:36:40.493Z",
+        "time": 1103
       }
     ],
     "pages": [],

cassettes/v2/CSM-Threats_3156990395/Create-a-Workload-Protection-agent-rule-with-set-action-returns-OK-response_3686873779/frozen.json

@@ -1 +1 @@
-"2025-10-10T15:20:46.004Z"
+"2025-11-28T15:36:41.599Z"