aws-sdk-securityagent 1.19.0 → 1.21.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 59805d9b7f6aad7b60dfd98d4e7a115a5a9e2a01df878aaa9ab255bfb8f23625
-  data.tar.gz: 8d3c15cf8892f19b36cf18f7472d6f10761f689141af5880a7fea249709f5d62
+  metadata.gz: 3b4961111d82551f7a07cf21434d2e6e747974f181cf0c5d84240c705f3e41e9
+  data.tar.gz: ab5877ad5978bef03582386c3685f20848b2d41e8da97f048b0dd0f806bc3270
 SHA512:
-  metadata.gz: f7b8f009d8873c93bc7ccbf0564d388569bbbae7556670ff1a301b671c55f7a4d2fde04cd5fb072b7b4870cb664657cf5f656b4f9bc633172b444ad0af32c1c8
-  data.tar.gz: b96c6c9443aa0d1410c56823bd42c2eb45a5ef87358a3980fa2efe546f2106ad49e5d20ab324f3d92b9fb6993b40d72afa440be15c7437cff73862e8f076b8e4
+  metadata.gz: 281a1e05c82e9375c8b847162689f99989433c38e0ce744549b461b6153b0727a27e05f812e8f946eef073a148ac9bb78e62ad39d8de19daef1889374b127b8a
+  data.tar.gz: 0c63130b44be50507929b1faf23e5dece690273f5a63e2a9a325b7d2428fba1da74e213b4d8db707fadc6d3e6d31eb290ee2151a32133029cca183011c9c87ae

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.21.0 (2026-10-08)
+------------------
+
+* Feature - Include model field for suggested remediation steps as part of findings
+
+1.20.0 (2026-10-02)
+------------------
+
+* Feature - Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review.
+
 1.19.0 (2026-09-29)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.19.0
+1.21.0

data/lib/aws-sdk-securityagent/client.rb

@@ -1148,6 +1148,7 @@ module Aws::SecurityAgent
     #   resp.findings[0].confidence #=> String, one of "FALSE_POSITIVE", "UNCONFIRMED", "LOW", "MEDIUM", "HIGH"
     #   resp.findings[0].validation_status #=> String, one of "CONFIRMED", "NOT_REPRODUCED", "VALIDATION_FAILED", "VALIDATING", "NOT_VALIDATED"
     #   resp.findings[0].attack_script #=> String
+    #   resp.findings[0].remediation_code #=> String
     #   resp.findings[0].code_remediation_task.status #=> String, one of "IN_PROGRESS", "COMPLETED", "FAILED"
     #   resp.findings[0].code_remediation_task.status_reason #=> String
     #   resp.findings[0].code_remediation_task.task_details #=> Array
@@ -4230,15 +4231,47 @@ module Aws::SecurityAgent
     #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.project #=> String
     #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.project_id #=> String
     #   resp.integrated_resource_summaries[0].resource.azure_dev_ops_repository.access_type #=> String, one of "PRIVATE", "PUBLIC"
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].events #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].events[0] #=> String, one of "PULL_REQUEST_READY_FOR_REVIEW", "PULL_REQUEST_DRAFT", "PULL_REQUEST_LABEL_ADDED"
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].filters #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].filters[0].type #=> String, one of "TARGET_BRANCH", "LABEL"
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].filters[0].patterns #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].filters[0].patterns[0] #=> String
+    #   resp.integrated_resource_summaries[0].capabilities.github.trigger_filter_groups[0].filters[0].match_mode #=> String, one of "INCLUDE", "EXCLUDE"
     #   resp.integrated_resource_summaries[0].capabilities.github.leave_comments #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.github.remediate_code #=> Boolean
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].events #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].events[0] #=> String, one of "PULL_REQUEST_READY_FOR_REVIEW", "PULL_REQUEST_DRAFT", "PULL_REQUEST_LABEL_ADDED"
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].filters #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].filters[0].type #=> String, one of "TARGET_BRANCH", "LABEL"
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].filters[0].patterns #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].filters[0].patterns[0] #=> String
+    #   resp.integrated_resource_summaries[0].capabilities.gitlab.trigger_filter_groups[0].filters[0].match_mode #=> String, one of "INCLUDE", "EXCLUDE"
     #   resp.integrated_resource_summaries[0].capabilities.gitlab.leave_comments #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.gitlab.remediate_code #=> Boolean
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].events #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].events[0] #=> String, one of "PULL_REQUEST_READY_FOR_REVIEW", "PULL_REQUEST_DRAFT", "PULL_REQUEST_LABEL_ADDED"
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].filters #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].filters[0].type #=> String, one of "TARGET_BRANCH", "LABEL"
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].filters[0].patterns #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].filters[0].patterns[0] #=> String
+    #   resp.integrated_resource_summaries[0].capabilities.bitbucket.trigger_filter_groups[0].filters[0].match_mode #=> String, one of "INCLUDE", "EXCLUDE"
     #   resp.integrated_resource_summaries[0].capabilities.bitbucket.leave_comments #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.bitbucket.remediate_code #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.confluence.fetch_document #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.confluence.create_document #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.confluence.update_document #=> Boolean
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].events #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].events[0] #=> String, one of "PULL_REQUEST_READY_FOR_REVIEW", "PULL_REQUEST_DRAFT", "PULL_REQUEST_LABEL_ADDED"
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].filters #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].filters[0].type #=> String, one of "TARGET_BRANCH", "LABEL"
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].filters[0].patterns #=> Array
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].filters[0].patterns[0] #=> String
+    #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.trigger_filter_groups[0].filters[0].match_mode #=> String, one of "INCLUDE", "EXCLUDE"
     #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.leave_comments #=> Boolean
     #   resp.integrated_resource_summaries[0].capabilities.azure_dev_ops.remediate_code #=> Boolean
     #   resp.next_token #=> String
@@ -5771,14 +5804,50 @@ module Aws::SecurityAgent
     #         },
     #         capabilities: {
     #           github: {
+    #             trigger_filter_groups: [
+    #               {
+    #                 events: ["PULL_REQUEST_READY_FOR_REVIEW"], # accepts PULL_REQUEST_READY_FOR_REVIEW, PULL_REQUEST_DRAFT, PULL_REQUEST_LABEL_ADDED
+    #                 filters: [
+    #                   {
+    #                     type: "TARGET_BRANCH", # required, accepts TARGET_BRANCH, LABEL
+    #                     patterns: ["TriggerRegexPattern"], # required
+    #                     match_mode: "INCLUDE", # accepts INCLUDE, EXCLUDE
+    #                   },
+    #                 ],
+    #               },
+    #             ],
     #             leave_comments: false,
     #             remediate_code: false,
     #           },
     #           gitlab: {
+    #             trigger_filter_groups: [
+    #               {
+    #                 events: ["PULL_REQUEST_READY_FOR_REVIEW"], # accepts PULL_REQUEST_READY_FOR_REVIEW, PULL_REQUEST_DRAFT, PULL_REQUEST_LABEL_ADDED
+    #                 filters: [
+    #                   {
+    #                     type: "TARGET_BRANCH", # required, accepts TARGET_BRANCH, LABEL
+    #                     patterns: ["TriggerRegexPattern"], # required
+    #                     match_mode: "INCLUDE", # accepts INCLUDE, EXCLUDE
+    #                   },
+    #                 ],
+    #               },
+    #             ],
     #             leave_comments: false,
     #             remediate_code: false,
     #           },
     #           bitbucket: {
+    #             trigger_filter_groups: [
+    #               {
+    #                 events: ["PULL_REQUEST_READY_FOR_REVIEW"], # accepts PULL_REQUEST_READY_FOR_REVIEW, PULL_REQUEST_DRAFT, PULL_REQUEST_LABEL_ADDED
+    #                 filters: [
+    #                   {
+    #                     type: "TARGET_BRANCH", # required, accepts TARGET_BRANCH, LABEL
+    #                     patterns: ["TriggerRegexPattern"], # required
+    #                     match_mode: "INCLUDE", # accepts INCLUDE, EXCLUDE
+    #                   },
+    #                 ],
+    #               },
+    #             ],
     #             leave_comments: false,
     #             remediate_code: false,
     #           },
@@ -5788,6 +5857,18 @@ module Aws::SecurityAgent
     #             update_document: false,
     #           },
     #           azure_dev_ops: {
+    #             trigger_filter_groups: [
+    #               {
+    #                 events: ["PULL_REQUEST_READY_FOR_REVIEW"], # accepts PULL_REQUEST_READY_FOR_REVIEW, PULL_REQUEST_DRAFT, PULL_REQUEST_LABEL_ADDED
+    #                 filters: [
+    #                   {
+    #                     type: "TARGET_BRANCH", # required, accepts TARGET_BRANCH, LABEL
+    #                     patterns: ["TriggerRegexPattern"], # required
+    #                     match_mode: "INCLUDE", # accepts INCLUDE, EXCLUDE
+    #                   },
+    #                 ],
+    #               },
+    #             ],
     #             leave_comments: false,
     #             remediate_code: false,
     #           },
@@ -6620,7 +6701,7 @@ module Aws::SecurityAgent
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityagent'
-      context[:gem_version] = '1.19.0'
+      context[:gem_version] = '1.21.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityagent/client_api.rb

@@ -500,6 +500,16 @@ module Aws::SecurityAgent
     ThreatSummary = Shapes::StructureShape.new(name: 'ThreatSummary')
     ThreatSummaryList = Shapes::ListShape.new(name: 'ThreatSummaryList')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
+    TriggerEvent = Shapes::StringShape.new(name: 'TriggerEvent')
+    TriggerEventList = Shapes::ListShape.new(name: 'TriggerEventList')
+    TriggerFilter = Shapes::StructureShape.new(name: 'TriggerFilter')
+    TriggerFilterGroup = Shapes::StructureShape.new(name: 'TriggerFilterGroup')
+    TriggerFilterGroups = Shapes::ListShape.new(name: 'TriggerFilterGroups')
+    TriggerFilterList = Shapes::ListShape.new(name: 'TriggerFilterList')
+    TriggerFilterMatchMode = Shapes::StringShape.new(name: 'TriggerFilterMatchMode')
+    TriggerFilterType = Shapes::StringShape.new(name: 'TriggerFilterType')
+    TriggerRegexPattern = Shapes::StringShape.new(name: 'TriggerRegexPattern')
+    TriggerRegexPatternList = Shapes::ListShape.new(name: 'TriggerRegexPatternList')
     TrustedCaCertificate = Shapes::StructureShape.new(name: 'TrustedCaCertificate')
     TrustedCaCertificateList = Shapes::ListShape.new(name: 'TrustedCaCertificateList')
     UntagResourceInput = Shapes::StructureShape.new(name: 'UntagResourceInput')
@@ -671,6 +681,7 @@ module Aws::SecurityAgent
     AzureDevOpsRepositoryResource.add_member(:project, Shapes::ShapeRef.new(shape: String, location_name: "project"))
     AzureDevOpsRepositoryResource.struct_class = Types::AzureDevOpsRepositoryResource
 
+    AzureDevOpsResourceCapabilities.add_member(:trigger_filter_groups, Shapes::ShapeRef.new(shape: TriggerFilterGroups, location_name: "triggerFilterGroups"))
     AzureDevOpsResourceCapabilities.add_member(:leave_comments, Shapes::ShapeRef.new(shape: Boolean, location_name: "leaveComments"))
     AzureDevOpsResourceCapabilities.add_member(:remediate_code, Shapes::ShapeRef.new(shape: Boolean, location_name: "remediateCode"))
     AzureDevOpsResourceCapabilities.struct_class = Types::AzureDevOpsResourceCapabilities
@@ -892,6 +903,7 @@ module Aws::SecurityAgent
     BitbucketRepositoryResource.add_member(:workspace, Shapes::ShapeRef.new(shape: BitbucketWorkspace, required: true, location_name: "workspace"))
     BitbucketRepositoryResource.struct_class = Types::BitbucketRepositoryResource
 
+    BitbucketResourceCapabilities.add_member(:trigger_filter_groups, Shapes::ShapeRef.new(shape: TriggerFilterGroups, location_name: "triggerFilterGroups"))
     BitbucketResourceCapabilities.add_member(:leave_comments, Shapes::ShapeRef.new(shape: Boolean, location_name: "leaveComments"))
     BitbucketResourceCapabilities.add_member(:remediate_code, Shapes::ShapeRef.new(shape: Boolean, location_name: "remediateCode"))
     BitbucketResourceCapabilities.struct_class = Types::BitbucketResourceCapabilities
@@ -1445,6 +1457,7 @@ module Aws::SecurityAgent
     Finding.add_member(:confidence, Shapes::ShapeRef.new(shape: ConfidenceLevel, location_name: "confidence"))
     Finding.add_member(:validation_status, Shapes::ShapeRef.new(shape: ValidationStatus, location_name: "validationStatus"))
     Finding.add_member(:attack_script, Shapes::ShapeRef.new(shape: String, location_name: "attackScript"))
+    Finding.add_member(:remediation_code, Shapes::ShapeRef.new(shape: String, location_name: "remediationCode"))
     Finding.add_member(:code_remediation_task, Shapes::ShapeRef.new(shape: CodeRemediationTask, location_name: "codeRemediationTask"))
     Finding.add_member(:last_updated_by, Shapes::ShapeRef.new(shape: String, location_name: "lastUpdatedBy"))
     Finding.add_member(:customer_note, Shapes::ShapeRef.new(shape: String, location_name: "customerNote"))
@@ -1549,6 +1562,7 @@ module Aws::SecurityAgent
     GitHubRepositoryResource.add_member(:owner, Shapes::ShapeRef.new(shape: GitHubOwner, required: true, location_name: "owner"))
     GitHubRepositoryResource.struct_class = Types::GitHubRepositoryResource
 
+    GitHubResourceCapabilities.add_member(:trigger_filter_groups, Shapes::ShapeRef.new(shape: TriggerFilterGroups, location_name: "triggerFilterGroups"))
     GitHubResourceCapabilities.add_member(:leave_comments, Shapes::ShapeRef.new(shape: Boolean, location_name: "leaveComments"))
     GitHubResourceCapabilities.add_member(:remediate_code, Shapes::ShapeRef.new(shape: Boolean, location_name: "remediateCode"))
     GitHubResourceCapabilities.struct_class = Types::GitHubResourceCapabilities
@@ -1569,6 +1583,7 @@ module Aws::SecurityAgent
     GitLabRepositoryResource.add_member(:namespace, Shapes::ShapeRef.new(shape: GitLabNamespace, required: true, location_name: "namespace"))
     GitLabRepositoryResource.struct_class = Types::GitLabRepositoryResource
 
+    GitLabResourceCapabilities.add_member(:trigger_filter_groups, Shapes::ShapeRef.new(shape: TriggerFilterGroups, location_name: "triggerFilterGroups"))
     GitLabResourceCapabilities.add_member(:leave_comments, Shapes::ShapeRef.new(shape: Boolean, location_name: "leaveComments"))
     GitLabResourceCapabilities.add_member(:remediate_code, Shapes::ShapeRef.new(shape: Boolean, location_name: "remediateCode"))
     GitLabResourceCapabilities.struct_class = Types::GitLabResourceCapabilities
@@ -2506,6 +2521,23 @@ module Aws::SecurityAgent
     ThrottlingException.add_member(:quota_code, Shapes::ShapeRef.new(shape: String, location_name: "quotaCode"))
     ThrottlingException.struct_class = Types::ThrottlingException
 
+    TriggerEventList.member = Shapes::ShapeRef.new(shape: TriggerEvent)
+
+    TriggerFilter.add_member(:type, Shapes::ShapeRef.new(shape: TriggerFilterType, required: true, location_name: "type"))
+    TriggerFilter.add_member(:patterns, Shapes::ShapeRef.new(shape: TriggerRegexPatternList, required: true, location_name: "patterns"))
+    TriggerFilter.add_member(:match_mode, Shapes::ShapeRef.new(shape: TriggerFilterMatchMode, location_name: "matchMode"))
+    TriggerFilter.struct_class = Types::TriggerFilter
+
+    TriggerFilterGroup.add_member(:events, Shapes::ShapeRef.new(shape: TriggerEventList, location_name: "events"))
+    TriggerFilterGroup.add_member(:filters, Shapes::ShapeRef.new(shape: TriggerFilterList, location_name: "filters"))
+    TriggerFilterGroup.struct_class = Types::TriggerFilterGroup
+
+    TriggerFilterGroups.member = Shapes::ShapeRef.new(shape: TriggerFilterGroup)
+
+    TriggerFilterList.member = Shapes::ShapeRef.new(shape: TriggerFilter)
+
+    TriggerRegexPatternList.member = Shapes::ShapeRef.new(shape: TriggerRegexPattern)
+
     TrustedCaCertificate.add_member(:source, Shapes::ShapeRef.new(shape: CaCertificateSource, required: true, location_name: "source"))
     TrustedCaCertificate.struct_class = Types::TrustedCaCertificate
 

data/lib/aws-sdk-securityagent/types.rb

@@ -528,6 +528,13 @@ module Aws::SecurityAgent
 
     # Capabilities for an integrated Azure DevOps repository.
     #
+    # @!attribute [rw] trigger_filter_groups
+    #   The filter groups that control which pull request events start an
+    #   automatic code review when `leaveComments` is enabled. A review
+    #   starts when any group matches. If you omit this, a review starts on
+    #   `PULL_REQUEST_READY_FOR_REVIEW` events.
+    #   @return [Array<Types::TriggerFilterGroup>]
+    #
     # @!attribute [rw] leave_comments
     #   Whether to post code review comments on pull requests.
     #   @return [Boolean]
@@ -539,6 +546,7 @@ module Aws::SecurityAgent
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/AzureDevOpsResourceCapabilities AWS API Documentation
     #
     class AzureDevOpsResourceCapabilities < Struct.new(
+      :trigger_filter_groups,
       :leave_comments,
       :remediate_code)
       SENSITIVE = []
@@ -1575,6 +1583,13 @@ module Aws::SecurityAgent
 
     # Capabilities for an integrated Bitbucket repository.
     #
+    # @!attribute [rw] trigger_filter_groups
+    #   The filter groups that control which pull request events start an
+    #   automatic code review when `leaveComments` is enabled. A review
+    #   starts when any group matches. If you omit this, a review starts on
+    #   `PULL_REQUEST_READY_FOR_REVIEW` events.
+    #   @return [Array<Types::TriggerFilterGroup>]
+    #
     # @!attribute [rw] leave_comments
     #   Whether to post code review comments on pull requests.
     #   @return [Boolean]
@@ -1586,6 +1601,7 @@ module Aws::SecurityAgent
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/BitbucketResourceCapabilities AWS API Documentation
     #
     class BitbucketResourceCapabilities < Struct.new(
+      :trigger_filter_groups,
       :leave_comments,
       :remediate_code)
       SENSITIVE = []
@@ -4069,6 +4085,12 @@ module Aws::SecurityAgent
     #   The attack script used to reproduce the finding.
     #   @return [String]
     #
+    # @!attribute [rw] remediation_code
+    #   The suggested fix for the finding, describing the changes
+    #   recommended to remediate the vulnerability, with example code or
+    #   configuration.
+    #   @return [String]
+    #
     # @!attribute [rw] code_remediation_task
     #   The code remediation task associated with the finding, if code
     #   remediation was initiated.
@@ -4136,6 +4158,7 @@ module Aws::SecurityAgent
       :confidence,
       :validation_status,
       :attack_script,
+      :remediation_code,
       :code_remediation_task,
       :last_updated_by,
       :customer_note,
@@ -4564,6 +4587,13 @@ module Aws::SecurityAgent
 
     # The capabilities enabled for a GitHub resource integration.
     #
+    # @!attribute [rw] trigger_filter_groups
+    #   The filter groups that control which pull request events start an
+    #   automatic code review when `leaveComments` is enabled. A review
+    #   starts when any group matches. If you omit this, a review starts on
+    #   `PULL_REQUEST_READY_FOR_REVIEW` events.
+    #   @return [Array<Types::TriggerFilterGroup>]
+    #
     # @!attribute [rw] leave_comments
     #   Indicates whether the integration can leave comments on pull
     #   requests.
@@ -4577,6 +4607,7 @@ module Aws::SecurityAgent
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/GitHubResourceCapabilities AWS API Documentation
     #
     class GitHubResourceCapabilities < Struct.new(
+      :trigger_filter_groups,
       :leave_comments,
       :remediate_code)
       SENSITIVE = []
@@ -4666,6 +4697,13 @@ module Aws::SecurityAgent
 
     # Capabilities for an integrated GitLab repository.
     #
+    # @!attribute [rw] trigger_filter_groups
+    #   The filter groups that control which merge request events start an
+    #   automatic code review when `leaveComments` is enabled. A review
+    #   starts when any group matches. If you omit this, a review starts on
+    #   `PULL_REQUEST_READY_FOR_REVIEW` events.
+    #   @return [Array<Types::TriggerFilterGroup>]
+    #
     # @!attribute [rw] leave_comments
     #   Whether to post code review comments on merge request discussions.
     #   @return [Boolean]
@@ -4677,6 +4715,7 @@ module Aws::SecurityAgent
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/GitLabResourceCapabilities AWS API Documentation
     #
     class GitLabResourceCapabilities < Struct.new(
+      :trigger_filter_groups,
       :leave_comments,
       :remediate_code)
       SENSITIVE = []
@@ -8684,6 +8723,53 @@ module Aws::SecurityAgent
       include Aws::Structure
     end
 
+    # A condition on a pull request value.
+    #
+    # @!attribute [rw] type
+    #   The pull request value to match.
+    #   @return [String]
+    #
+    # @!attribute [rw] patterns
+    #   The regular expressions to match against the value.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] match_mode
+    #   Whether the value must match the patterns. The default is `INCLUDE`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/TriggerFilter AWS API Documentation
+    #
+    class TriggerFilter < Struct.new(
+      :type,
+      :patterns,
+      :match_mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A set of conditions that start an automatic code review when they all
+    # pass. A filter group must include `events`, `filters`, or both.
+    #
+    # @!attribute [rw] events
+    #   Passes when the pull request event is one of the listed events. If
+    #   you omit this, the group matches `PULL_REQUEST_READY_FOR_REVIEW` and
+    #   `PULL_REQUEST_DRAFT` events only.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] filters
+    #   Passes when every filter passes. If you omit this, the group matches
+    #   its events on any target branch and with any labels.
+    #   @return [Array<Types::TriggerFilter>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityagent-2025-09-06/TriggerFilterGroup AWS API Documentation
+    #
+    class TriggerFilterGroup < Struct.new(
+      :events,
+      :filters)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A trust anchor used when validating a target endpoint's TLS
     # certificate.
     #

data/lib/aws-sdk-securityagent.rb

@@ -55,7 +55,7 @@ module Aws::SecurityAgent
   autoload :EndpointProvider, 'aws-sdk-securityagent/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityagent/endpoints'
 
-  GEM_VERSION = '1.19.0'
+  GEM_VERSION = '1.21.0'
 
 end
 

data/sig/client.rbs

@@ -1520,14 +1520,23 @@ module Aws
                                              },
                                              capabilities: {
                                                github: {
+                                                 trigger_filter_groups: Array[
+                                                   Params::trigger_filter_group
+                                                 ]?,
                                                  leave_comments: bool?,
                                                  remediate_code: bool?
                                                }?,
                                                gitlab: {
+                                                 trigger_filter_groups: Array[
+                                                   Params::trigger_filter_group
+                                                 ]?,
                                                  leave_comments: bool?,
                                                  remediate_code: bool?
                                                }?,
                                                bitbucket: {
+                                                 trigger_filter_groups: Array[
+                                                   Params::trigger_filter_group
+                                                 ]?,
                                                  leave_comments: bool?,
                                                  remediate_code: bool?
                                                }?,
@@ -1537,6 +1546,9 @@ module Aws
                                                  update_document: bool?
                                                }?,
                                                azure_dev_ops: {
+                                                 trigger_filter_groups: Array[
+                                                   Params::trigger_filter_group
+                                                 ]?,
                                                  leave_comments: bool?,
                                                  remediate_code: bool?
                                                }?

data/sig/params.rbs

@@ -106,6 +106,17 @@ module Aws
       ]?
     }
 
+      type trigger_filter_group = {
+      events: Array[("PULL_REQUEST_READY_FOR_REVIEW" | "PULL_REQUEST_DRAFT" | "PULL_REQUEST_LABEL_ADDED")]?,
+      filters: Array[
+        {
+          type: ("TARGET_BRANCH" | "LABEL"),
+          patterns: Array[::String],
+          match_mode: ("INCLUDE" | "EXCLUDE")?
+        }
+      ]?
+    }
+
     end
   end
 end

data/sig/types.rbs

@@ -145,6 +145,7 @@ module Aws::SecurityAgent
     end
 
     class AzureDevOpsResourceCapabilities
+      attr_accessor trigger_filter_groups: ::Array[Types::TriggerFilterGroup]
       attr_accessor leave_comments: bool
       attr_accessor remediate_code: bool
       SENSITIVE: []
@@ -460,6 +461,7 @@ module Aws::SecurityAgent
     end
 
     class BitbucketResourceCapabilities
+      attr_accessor trigger_filter_groups: ::Array[Types::TriggerFilterGroup]
       attr_accessor leave_comments: bool
       attr_accessor remediate_code: bool
       SENSITIVE: []
@@ -1116,6 +1118,7 @@ module Aws::SecurityAgent
       attr_accessor confidence: ("FALSE_POSITIVE" | "UNCONFIRMED" | "LOW" | "MEDIUM" | "HIGH")
       attr_accessor validation_status: ("CONFIRMED" | "NOT_REPRODUCED" | "VALIDATION_FAILED" | "VALIDATING" | "NOT_VALIDATED")
       attr_accessor attack_script: ::String
+      attr_accessor remediation_code: ::String
       attr_accessor code_remediation_task: Types::CodeRemediationTask
       attr_accessor last_updated_by: ::String
       attr_accessor customer_note: ::String
@@ -1238,6 +1241,7 @@ module Aws::SecurityAgent
     end
 
     class GitHubResourceCapabilities
+      attr_accessor trigger_filter_groups: ::Array[Types::TriggerFilterGroup]
       attr_accessor leave_comments: bool
       attr_accessor remediate_code: bool
       SENSITIVE: []
@@ -1266,6 +1270,7 @@ module Aws::SecurityAgent
     end
 
     class GitLabResourceCapabilities
+      attr_accessor trigger_filter_groups: ::Array[Types::TriggerFilterGroup]
       attr_accessor leave_comments: bool
       attr_accessor remediate_code: bool
       SENSITIVE: []
@@ -2374,6 +2379,19 @@ module Aws::SecurityAgent
       SENSITIVE: []
     end
 
+    class TriggerFilter
+      attr_accessor type: ("TARGET_BRANCH" | "LABEL")
+      attr_accessor patterns: ::Array[::String]
+      attr_accessor match_mode: ("INCLUDE" | "EXCLUDE")
+      SENSITIVE: []
+    end
+
+    class TriggerFilterGroup
+      attr_accessor events: ::Array[("PULL_REQUEST_READY_FOR_REVIEW" | "PULL_REQUEST_DRAFT" | "PULL_REQUEST_LABEL_ADDED")]
+      attr_accessor filters: ::Array[Types::TriggerFilter]
+      SENSITIVE: []
+    end
+
     class TrustedCaCertificate
       attr_accessor source: Types::CaCertificateSource
       SENSITIVE: []

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityagent
 version: !ruby/object:Gem::Version
-  version: 1.19.0
+  version: 1.21.0
 platform: ruby
 authors:
 - Amazon Web Services