Query: core_instance_secure_boot_enabled

select
  i.id as resource,
  case
    when coalesce(
      (launch_options -> 'isSecureBootEnabled')::bool,
      (launch_options -> 'shieldedInstanceOptions' -> 'isSecureBootEnabled')::bool,
      false
    ) then 'ok'
    else 'alarm'
  end as status,
  case
    when coalesce(
      (launch_options -> 'isSecureBootEnabled')::bool,
      (launch_options -> 'shieldedInstanceOptions' -> 'isSecureBootEnabled')::bool,
      false
    ) then i.title || ' secure boot enabled.'
    else i.title || ' secure boot disabled.'
  end as reason
  
  , i.region as region, i.tenant_name as tenant
  , coalesce(c.name, 'root') as compartment
from
  oci_core_instance as i
  left join oci_identity_compartment as c on c.id = i.compartment_id
where
  coalesce(i.lifecycle_state, '') not in ('TERMINATED', 'TERMINATING');