{
  "dashboard": {
    "title": "Security Audit Overview",
    "description": "Real-time security audit metrics and compliance status",
    "tags": ["audit", "security", "compliance"],
    "timezone": "browser",
    "refresh": "60s",
    "time": {
      "from": "now-7d",
      "to": "now"
    },
    "panels": [
      {
        "id": 1,
        "title": "Total Vulnerabilities",
        "type": "stat",
        "description": "Critical and high severity vulnerabilities detected",
        "targets": [
          {
            "expr": "audit_vulnerabilities_total",
            "refId": "A",
            "legendFormat": "Total Vulnerabilities"
          }
        ],
        "gridPos": {
          "h": 4,
          "w": 6,
          "x": 0,
          "y": 0
        },
        "unit": "short",
        "decimals": 0,
        "thresholds": {
          "mode": "absolute",
          "steps": [
            {"color": "green", "value": 0},
            {"color": "yellow", "value": 5},
            {"color": "red", "value": 10}
          ]
        }
      },
      {
        "id": 2,
        "title": "Critical Vulnerabilities",
        "type": "gauge",
        "description": "Number of critical severity CVEs",
        "targets": [
          {
            "expr": "audit_vulnerabilities_critical",
            "refId": "A"
          }
        ],
        "gridPos": {
          "h": 4,
          "w": 6,
          "x": 6,
          "y": 0
        },
        "unit": "short",
        "decimals": 0,
        "thresholds": {
          "steps": [
            {"color": "green", "value": 0},
            {"color": "red", "value": 1}
          ]
        }
      },
      {
        "id": 3,
        "title": "Policy Violations",
        "type": "gauge",
        "description": "Active policy violations",
        "targets": [
          {
            "expr": "audit_policy_violations_total",
            "refId": "A"
          }
        ],
        "gridPos": {
          "h": 4,
          "w": 6,
          "x": 12,
          "y": 0
        },
        "unit": "short",
        "decimals": 0
      },
      {
        "id": 4,
        "title": "Last Audit Status",
        "type": "stat",
        "description": "Result of most recent audit run",
        "targets": [
          {
            "expr": "audit_last_run_status",
            "refId": "A"
          }
        ],
        "gridPos": {
          "h": 4,
          "w": 6,
          "x": 18,
          "y": 0
        },
        "unit": "short",
        "decimals": 0
      },
      {
        "id": 5,
        "title": "Vulnerabilities by Severity",
        "type": "graph",
        "description": "Distribution of vulnerabilities by severity level",
        "targets": [
          {
            "expr": "audit_vulnerabilities{severity=~\"critical|high|medium|low\"}",
            "refId": "A",
            "legendFormat": "{{ severity }}"
          }
        ],
        "gridPos": {
          "h": 8,
          "w": 12,
          "x": 0,
          "y": 4
        },
        "unit": "short",
        "decimals": 0
      },
      {
        "id": 6,
        "title": "Scan Duration Trend",
        "type": "graph",
        "description": "Time taken for audit scans over time",
        "targets": [
          {
            "expr": "audit_scanner_duration_seconds",
            "refId": "A",
            "legendFormat": "{{ scanner }}"
          }
        ],
        "gridPos": {
          "h": 8,
          "w": 12,
          "x": 12,
          "y": 4
        },
        "unit": "s",
        "decimals": 2
      },
      {
        "id": 7,
        "title": "SBOM Generation Status",
        "type": "stat",
        "description": "Status of SBOM generation",
        "targets": [
          {
            "expr": "audit_sbom_generation_status",
            "refId": "A"
          }
        ],
        "gridPos": {
          "h": 4,
          "w": 6,
          "x": 0,
          "y": 12
        },
        "unit": "short",
        "decimals": 0
      },
      {
        "id": 8,
        "title": "Top Affected Packages",
        "type": "table",
        "description": "Packages with most vulnerabilities",
        "targets": [
          {
            "expr": "topk(10, sum by (package) (audit_vulnerabilities))",
            "refId": "A"
          }
        ],
        "gridPos": {
          "h": 8,
          "w": 18,
          "x": 6,
          "y": 12
        },
        "unit": "short",
        "decimals": 0
      }
    ],
    "templating": {
      "list": []
    },
    "version": 1
  },
  "overwrite": true
}