JorgeAlonso

opts := mqtt.NewClientOptions().AddBroker(broker)
client := mqtt.NewClient(opts)

client.Subscribe("wear/+/vitals", 1, func(_ mqtt.Client, m mqtt.Message) {
    var v Vitals
    if err := json.Unmarshal(m.Payload(), &v); err != nil {
        return
    }
    store.Append(deviceID(m.Topic()), v.HeartRate, v.SpO2)
})

server.tool("open_orders", {
  description: "Open sales orders for a customer",
  input: z.object({ cardCode: z.string() }),
}, async ({ cardCode }) => {
  const rows = await hana.query(
    `SELECT "DocNum", "DocTotal" FROM ORDR
     WHERE "CardCode" = ? AND "DocStatus" = 'O'`,
    [cardCode],
  );
  return { content: [{ type: "json", json: rows }] };
});

services:
  app:
    image: registry.local/app:1.8.2
    read_only: true
    security_opt: ["no-new-privileges:true"]
    healthcheck:
      test: ["CMD", "/app", "health"]
  prometheus:
    image: prom/prometheus:v3.5.0
    volumes: ["./prometheus.yml:/etc/prometheus/prometheus.yml:ro"]

$ sudo vallumix audit --profile cis-level1
  ✓ 1.1.2  /tmp on a separate partition
  ✓ 5.2.4  SSH root login disabled
  ✗ 5.2.13 SSH idle timeout not set
  ✓ 6.1.1  permissions on /etc/passwd

  212 controls · 198 pass · 14 fail
$ sudo vallumix apply --only 5.2.13
  applied · rollback point saved