action anchore_add_credential {
  label: "add/replace credential"
  provider: anchore
  method: POST
  path: "/user/credentials"
  encoding: json
  input: {
    type: "object"
    description: "A login credential mapped to a user identity. For password credentials, the username to present for Basic auth is the user's username from the user record"
    required: ["type", "value"]
    properties: {
      created_at: {
        type: "string"
        description: "The timestamp of creation of the credential"
      }
      type: {
        type: "string"
        description: "The type of credential"
        enum: ["password"]
      }
      value: {
        type: "string"
        description: "The credential value (e.g. the password)"
      }
    }
  }
  output: {
    type: "object"
    description: "A username for authenticating with one or more types of credentials. User type defines the expected credentials allowed for the user. Native users have passwords, External users have no credential internally. Internal users are service/system users for inter-service communication."
    required: ["username"]
    properties: {
      created_at: {
        type: "string"
        format: "date-time"
        description: "The timestampt the user record was created"
      }
      last_updated: {
        type: "string"
        format: "date-time"
        description: "The timestamp of the last update to this record"
      }
      source: {
        type: "string"
        description: "If the user is external, this is the source that the user was initialized from. All other user types have this set to null"
      }
      type: {
        type: "string"
        description: "The user's type"
        enum: ["native", "internal", "external"]
      }
      username: {
        type: "string"
        description: "The username to authenticate with"
      }
    }
  }
}