New Compromised Dependency

Data Element for a Compromised Dependency

Overview

The tables below define the data elements available in the Workflow action for a Compromised Dependency Detected trigger.

Please note you will need to prepend all data elements with data.

Example: data.dependency_version.name

---

Event Metadata

Name	Example value	Description
workflow_execution_id	9406	Unique identifier for the workflow execution
workflow_id	69	Unique identifier for the workflow definition
resource_id	h4r>>github>>github_repository>>acme-demo>>demo-repo	Heeler resource identifier for the repository
repository_id	927397705	Repository numeric identifier
repository_url	https://github.com/acme-demo/demo-repo	Repository URL

---

Dependency Version

Name	Example value	Description
dependency_version.id	1	Unique identifier for the dependency version
dependency_version.name	test-package	Name of the compromised dependency
dependency_version.version	2.0.0	Version of the compromised dependency
dependency_version.version_constraint	null	Declared version constraint from the manifest (when available)
dependency_version.package_ecosystem	pypi	Package ecosystem where the dependency originates
dependency_version.active	true	Indicates whether the dependency is currently active
dependency_version.found_in_code	true	Indicates the dependency was detected in source code
dependency_version.found_at_runtime	false	Indicates the dependency was observed at runtime
dependency_version.is_direct	null	Indicates whether this is a direct dependency (when known)
dependency_version.first_seen_at	2026-02-03T15:26:31.268883	First time the dependency version was observed
dependency_version.most_recently_seen_at	2026-02-03T15:26:31.268883	Most recent observation of the dependency version
dependency_version.introduced_at	2026-02-03T15:26:31.268882	Timestamp when the dependency was introduced
dependency_version.introduced_changeset	def456	Commit that introduced the dependency
dependency_version.introduced_line_numbers	["3","4"]	Line numbers where the dependency was introduced
dependency_version.last_seen_at	2026-02-03T15:26:31.268883	Last known observation timestamp
dependency_version.last_seen_changeset	def456	Commit where the dependency was last observed
dependency_version.last_seen_line_numbers	["3","4"]	Line numbers where the dependency was last observed
dependency_version.pin_status	unknown	Indicates whether the dependency version is pinned

---

Malicious Package

Name	Example value	Description
malicious_package.id	1	Unique identifier for the malicious package record
malicious_package.name	test-package	Name of the malicious package
malicious_package.version	2.0.0	Version identified as malicious or compromised
malicious_package.ecosystem	maven	Package ecosystem associated with the malicious package
malicious_package.published	2026-02-03T15:26:31.268825	Publish timestamp of the malicious package version
malicious_package.modified	2026-02-03T15:26:31.268827	Last modification timestamp for the malicious package record
malicious_package.summary	null	Short summary describing the malicious behavior (when available)
malicious_package.details	null	Detailed description of the malicious activity (when available)
malicious_package.references	null	External references or advisories related to the malicious package (when available)

---

Code Root

Name	Example value	Description
code_root.id	1	Unique identifier for the code root
code_root.repository_id	h4r>>github>>github_repository>>acme-demo>>demo-repo	Repository identifier associated with the code root
code_root.file	requirements.txt	File where the compromised dependency was detected
code_root.path		Path within the repository (when applicable)
code_root.package_ecosystem	pypi	Dependency ecosystem
code_root.commit_time	2024-10-09T21:43:50	Commit timestamp for the code root
code_root.created_at	2025-01-07T17:28:40.241944	Timestamp when the code root record was created
code_root.updated_at	2026-01-08T08:18:14.508890	Timestamp when the code root record was last updated
code_root.url	http://app.heeler.com/.../modules/1	Direct link to the module (code root) in Heeler

---

Resource (Repository)

Name	Example value	Description
resource.id	927397705	Internal identifier for the repository
resource.org	acme-demo	Organization that owns the repository
resource.name	demo-repo	Repository name
resource.full_name	acme-demo/demo-repo	Fully qualified repository name
resource.language	Go	Primary programming language
resource.default_branch	main	Default branch of the repository
resource.private	true	Indicates whether the repository is private
resource.visibility	internal	Visibility level of the repository in Heeler
resource.html_url	https://github.com/acme-demo/demo-repo	Repository URL
resource.clone_url	https://github.com/acme-demo/demo-repo.git	Git clone URL
resource.url	http://app.heeler.com/.../repositories/...	Direct link to the repository in the Heeler UI

---

Team (Optional Context)

Name	Example value	Description
team.id	1	Internal identifier for the team (when included)
team.name	You're Awesome Demo Team	Team name (when included)