{
  "title": "CVE-Übersicht (Trivy)",
  "uid": "cve-overview",
  "tags": ["security", "cve", "gitops-47"],
  "timezone": "browser",
  "schemaVersion": 39,
  "refresh": "5m",
  "time": { "from": "now-30d", "to": "now" },
  "panels": [
    {
      "type": "stat", "title": "Offene CRITICAL", "id": 1,
      "gridPos": { "x": 0, "y": 0, "w": 4, "h": 4 },
      "fieldConfig": { "defaults": { "color": { "mode": "thresholds" }, "thresholds": { "mode": "absolute", "steps": [ { "color": "green", "value": null }, { "color": "red", "value": 1 } ] } }, "overrides": [] },
      "targets": [ { "expr": "sum(trivy_vuln_count{severity=\"CRITICAL\"}) or vector(0)", "instant": true, "refId": "A" } ]
    },
    {
      "type": "stat", "title": "Offene HIGH", "id": 2,
      "gridPos": { "x": 4, "y": 0, "w": 4, "h": 4 },
      "fieldConfig": { "defaults": { "color": { "mode": "thresholds" }, "thresholds": { "mode": "absolute", "steps": [ { "color": "green", "value": null }, { "color": "orange", "value": 1 } ] } }, "overrides": [] },
      "targets": [ { "expr": "sum(trivy_vuln_count{severity=\"HIGH\"}) or vector(0)", "instant": true, "refId": "A" } ]
    },
    {
      "type": "stat", "title": "MEDIUM/LOW (Summe)", "id": 3,
      "gridPos": { "x": 8, "y": 0, "w": 4, "h": 4 },
      "targets": [ { "expr": "sum(trivy_vuln_count{severity=~\"MEDIUM|LOW\"}) or vector(0)", "instant": true, "refId": "A" } ]
    },
    {
      "type": "stat", "title": "Ältester Scan (Stunden)", "id": 4,
      "gridPos": { "x": 12, "y": 0, "w": 4, "h": 4 },
      "fieldConfig": { "defaults": { "unit": "h", "color": { "mode": "thresholds" }, "thresholds": { "mode": "absolute", "steps": [ { "color": "green", "value": null }, { "color": "red", "value": 48 } ] } }, "overrides": [] },
      "targets": [ { "expr": "(time() - min(trivy_last_scan_timestamp)) / 3600", "instant": true, "refId": "A" } ]
    },
    {
      "type": "table", "title": "Offene CVEs (HIGH/CRITICAL) — CVE · Ort · Typ · Paket · Fix · seit", "id": 5,
      "gridPos": { "x": 0, "y": 4, "w": 24, "h": 12 },
      "targets": [
        { "expr": "trivy_vuln_info", "instant": true, "format": "table", "refId": "A" },
        { "expr": "trivy_vuln_first_seen_timestamp * 1000", "instant": true, "format": "table", "refId": "B" }
      ],
      "transformations": [
        { "id": "merge", "options": {} },
        { "id": "organize", "options": {
            "excludeByName": { "Time": true, "__name__": true, "job": true, "instance": true, "Value #A": true },
            "renameByName": { "cve": "CVE", "severity": "Severity", "host": "Ort (Host)", "target_type": "Typ", "target": "Target", "pkg": "Paket", "installed": "Installiert", "fixed_version": "Fix-Version", "Value #B": "Erstmals gesehen" }
        } }
      ],
      "fieldConfig": { "defaults": {}, "overrides": [
        { "matcher": { "id": "byName", "options": "Erstmals gesehen" }, "properties": [ { "id": "unit", "value": "dateTimeAsIso" } ] },
        { "matcher": { "id": "byName", "options": "CVE" }, "properties": [ { "id": "links", "value": [ { "title": "NVD (Mitigation/Details)", "targetBlank": true, "url": "https://nvd.nist.gov/vuln/detail/${__value.text}" } ] } ] }
      ] }
    },
    {
      "type": "state-timeline", "title": "Zeitstrahl: offene HIGH/CRITICAL je Target", "id": 6,
      "gridPos": { "x": 0, "y": 16, "w": 24, "h": 8 },
      "targets": [ { "expr": "count by (target) (trivy_vuln_info)", "legendFormat": "{{target}}", "refId": "A" } ],
      "fieldConfig": { "defaults": { "custom": { "fillOpacity": 70 } }, "overrides": [] }
    },
    {
      "type": "timeseries", "title": "Funde je Severity über Zeit", "id": 7,
      "gridPos": { "x": 0, "y": 24, "w": 24, "h": 8 },
      "targets": [ { "expr": "sum by (severity) (trivy_vuln_count)", "legendFormat": "{{severity}}", "refId": "A" } ]
    }
  ]
}