Issues with asset types in "Get Vulnerable Assets by RQL"

Describe the bug

In the Get Vulnerable Assets by RQL endpoint, some asset types return error 400 unless they're written with spaces instead of camel case, while others always return an error

Expected behavior

Asset types following the documented strings should return the assets accordingly.

Current behavior

1. The following assetType strings return error 400 invalid_rql_query: Invalid asset type value, while the equivalent strings with spaces return the expected output:

   • serverlessFunction vs serverless function
   • deployedImage vs deployed image
   • vmImage vs vm image

2. registryImage returns invalid type regardless of how it's spelled

3. iac returns error 500

Possible solution

Make the implementation follow the current docs (use camel case and allow filtering for registryImage and iac

Steps to reproduce

1. Send a request to list-vulnerable-assets with any of the reported assetType strings
2. Verify the error on response

Context

Causing error in our integration when using the expected strings

Your Environment

• Version used:
• Environment name and version (e.g. Chrome 59, node.js 5.4, python 3.7.3):
• Operating System and version (desktop or mobile):
• Link to your project:

Start from the documented Get Vulnerable Assets by RQL endpoint and reproduce each reported assetType request. Trace the endpoint implementation to determine why camel-case values fail and why registryImage and iac error. Done means the documented camel-case values work and registryImage and iac return filtered assets without errors.