Concepts
Asset
The inventory unit, its five kinds, and how identity deduplicates it.
An asset is the inventory unit and the thing you onboard. Everything Kissaki scans is an asset of one kind:
| Kind | What it is |
|---|---|
repository | A code repository, by owner/name. |
domain | A web or API host (a dashboard target is a domain asset). |
container | A container image, by registry and digest. |
cloud | A connected cloud account. |
vm | A host, public or agent-reported. |
Identity and deduplication
Each asset carries an identity - the per-kind fields that name it - and an identity_key, a hash of that identity used to deduplicate registration. Adding the same repository twice resolves to one asset, not two.
Verified
An asset is not scannable until it is verified: ownership has been proven.
verified is exactly what the scan selection reads before it will scan
anything. See ownership verification.