krishicks 67374efdf8 fix(ocsf): emit schema-valid event identities (#3247) ...

Previously, every event from a sandbox reused the sandbox ID as its event
ID. Consumers deduplicating security records could mistake separate events
for the same record, and missing device types or empty image objects could
prevent schema validation.

Give each event its own ID, retain the sandbox association separately, and
classify the environment as Other/Sandbox while keeping the OS separate.
Omit unknown container details instead of emitting empty objects.

Security tooling can now distinguish events from the same sandbox and read
their identity consistently after serialization.

Refs #1055

Signed-off-by: Kris Hicks <khicks@nvidia.com>

2026-09-10 16:35:24 +00:00

..

accessing-logs.mdx

feat(sandbox): add canonical main process (#2726)

2026-08-20 22:18:23 +00:00

logging.mdx

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

ocsf-json-export.mdx

fix(ocsf): emit schema-valid event identities (#3247)

2026-09-10 16:35:24 +00:00