action firmalyzer_get_risk {
  label: "Get iot device firmware risk analysis"
  provider: firmalyzer
  method: GET
  path: "/firmware/{firmware_hash}/risk"
  encoding: json
  input: {
    type: "object"
    properties: {
      firmware_hash: {
        type: "string"
        description: "SHA2 hash of device firmware"
      }
    }
    required: ["firmware_hash"]
    additionalProperties: false
  }
  output: {
    type: "object"
    properties: {
      risk_summary: {
        type: "object"
      }
      vulnerable_components: {
        type: "array"
        items: {
          type: "object"
          properties: {
            category: {
              type: "string"
            }
            cvss_max: {
              type: "number"
            }
            name: {
              type: "string"
            }
            version: {
              type: "string"
            }
            vulnerabilities: {
              type: "array"
              items: {
                type: "object"
                properties: {
                  cve_id: {
                    type: "string"
                  }
                  cvss: {
                    type: "number"
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}