{
  "description": "SecurityProfileOCI references a security profile stored as an artifact in an OCI registry, with an optional base profile.",
  "properties": {
    "baseProfile": {
      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.SecurityProfileOCIBase",
      "description": "baseProfile optionally specifies the base profile that the container runtime merges with the OCI profile. The effective profile permits an operation only if both permit it. When omitted, the container runtime default profile is the base; a Localhost base profile takes its place."
    },
    "ref": {
      "description": "ref is the OCI reference of the profile. It must be a digest-pinned reference in canonical form, registry/repository@<algorithm>:<digest>, with the registry spelled out (for example docker.io/library/profile, not profile or docker.io/profile). Tags are rejected. The digest algorithm must be sha256, sha384, or sha512. The maximum length is 1024 characters. Pull secrets are assembled in the same way as for the container image by looking up node credentials, service account image pull secrets, and pod spec image pull secrets.",
      "type": [
        "string",
        "null"
      ]
    }
  },
  "required": [
    "ref"
  ],
  "type": "object",
  "$schema": "http://json-schema.org/schema#"
}