ssh_key_inventory

{“what”:“SHA-256 fingerprint of the SSH key, e.g. SHA256:…; unique identifier.”,“why”:“Uniquely identifies a key across hosts; used for deduplication and lookups.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.294431030+00:00”}

{“what”:“Absolute path to the key file on the host, e.g. /home/user/.ssh/id_rsa.pub.”,“why”:“Locates the key on disk for rotation or removal; without it the key cannot be managed.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.310947977+00:00”}

{“what”:“SSH key algorithm, e.g. ssh-rsa, ecdsa-sha2-nistp256.”,“why”:“Determines compatibility and strength; needed for policy checks.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.324506411+00:00”}

{“what”:“Free-text comment from the key file, often user@host.”,“why”:“Provides human-readable context for ownership; helps identify responsible party.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.336105361+00:00”}

{“what”:“Key length in bits, e.g. 2048 for RSA.”,“why”:“Assesses cryptographic strength; flags weak keys for replacement.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.349488298+00:00”}

{“what”:“Number of days since the key was first seen or created.”,“why”:“Identifies stale keys that may need review or revocation.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.361751454+00:00”}

{“what”:“Timestamp of the most recent audit of this key.”,“why”:“Tracks audit frequency; ensures keys are reviewed periodically.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.382908783+00:00”}

{“what”:“Lifecycle state: active, revoked, expired, etc.”,“why”:“Filters usable keys from disabled ones; prevents use of invalid keys.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:34.408361961+00:00”}