google-api-client 0.28.4 → 0.29.2

data/generated/google/apis/containeranalysis_v1beta1/classes.rb

@@ -95,6 +95,14 @@ module Google
       class Attestation
         include Google::Apis::Core::Hashable
       
+        # An attestation wrapper that uses the Grafeas `Signature` message.
+        # This attestation must define the `serialized_payload` that the `signatures`
+        # verify and any metadata necessary to interpret that plaintext.  The
+        # signatures should always be over the `serialized_payload` bytestring.
+        # Corresponds to the JSON property `genericSignedAttestation`
+        # @return [Google::Apis::ContaineranalysisV1beta1::GenericSignedAttestation]
+        attr_accessor :generic_signed_attestation
+      
         # An attestation wrapper with a PGP-compatible signature. This message only
         # supports `ATTACHED` signatures, where the payload that is signed is included
         # alongside the signature itself in the same file.
@@ -108,6 +116,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @generic_signed_attestation = args[:generic_signed_attestation] if args.key?(:generic_signed_attestation)
           @pgp_signed_attestation = args[:pgp_signed_attestation] if args.key?(:pgp_signed_attestation)
         end
       end
@@ -390,7 +399,7 @@ module Google
         # account. For example, `my-other-app@appspot.gserviceaccount.com`.
         # * `group:`emailid``: An email address that represents a Google group.
         # For example, `admins@example.com`.
-        # * `domain:`domain``: A Google Apps domain name that represents all the
+        # * `domain:`domain``: The G Suite domain (primary) that represents all the
         # users of that domain. For example, `google.com` or `example.com`.
         # Corresponds to the JSON property `members`
         # @return [Array<String>]
@@ -588,6 +597,88 @@ module Google
         end
       end
       
+      # Common Vulnerability Scoring System version 3.
+      # For details, see https://www.first.org/cvss/specification-document
+      class CvsSv3
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `attackComplexity`
+        # @return [String]
+        attr_accessor :attack_complexity
+      
+        # Base Metrics
+        # Represents the intrinsic characteristics of a vulnerability that are
+        # constant over time and across user environments.
+        # Corresponds to the JSON property `attackVector`
+        # @return [String]
+        attr_accessor :attack_vector
+      
+        # 
+        # Corresponds to the JSON property `availabilityImpact`
+        # @return [String]
+        attr_accessor :availability_impact
+      
+        # The base score is a function of the base metric scores.
+        # Corresponds to the JSON property `baseScore`
+        # @return [Float]
+        attr_accessor :base_score
+      
+        # 
+        # Corresponds to the JSON property `confidentialityImpact`
+        # @return [String]
+        attr_accessor :confidentiality_impact
+      
+        # 
+        # Corresponds to the JSON property `exploitabilityScore`
+        # @return [Float]
+        attr_accessor :exploitability_score
+      
+        # 
+        # Corresponds to the JSON property `impactScore`
+        # @return [Float]
+        attr_accessor :impact_score
+      
+        # 
+        # Corresponds to the JSON property `integrityImpact`
+        # @return [String]
+        attr_accessor :integrity_impact
+      
+        # 
+        # Corresponds to the JSON property `privilegesRequired`
+        # @return [String]
+        attr_accessor :privileges_required
+      
+        # 
+        # Corresponds to the JSON property `scope`
+        # @return [String]
+        attr_accessor :scope
+      
+        # 
+        # Corresponds to the JSON property `userInteraction`
+        # @return [String]
+        attr_accessor :user_interaction
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @attack_complexity = args[:attack_complexity] if args.key?(:attack_complexity)
+          @attack_vector = args[:attack_vector] if args.key?(:attack_vector)
+          @availability_impact = args[:availability_impact] if args.key?(:availability_impact)
+          @base_score = args[:base_score] if args.key?(:base_score)
+          @confidentiality_impact = args[:confidentiality_impact] if args.key?(:confidentiality_impact)
+          @exploitability_score = args[:exploitability_score] if args.key?(:exploitability_score)
+          @impact_score = args[:impact_score] if args.key?(:impact_score)
+          @integrity_impact = args[:integrity_impact] if args.key?(:integrity_impact)
+          @privileges_required = args[:privileges_required] if args.key?(:privileges_required)
+          @scope = args[:scope] if args.key?(:scope)
+          @user_interaction = args[:user_interaction] if args.key?(:user_interaction)
+        end
+      end
+      
       # A CloudRepoSourceContext denotes a particular revision in a Google Cloud
       # Source Repo.
       class CloudRepoSourceContext
@@ -900,14 +991,14 @@ module Google
         # @return [String]
         attr_accessor :analysis_status
       
-        # The `Status` type defines a logical error model that is suitable for different
-        # programming environments, including REST APIs and RPC APIs. It is used by
-        # [gRPC](https://github.com/grpc). The error model is designed to be:
+        # The `Status` type defines a logical error model that is suitable for
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). The error model is designed to be:
         # - Simple to use and understand for most users
         # - Flexible enough to meet unexpected needs
         # # Overview
-        # The `Status` message contains three pieces of data: error code, error message,
-        # and error details. The error code should be an enum value of
+        # The `Status` message contains three pieces of data: error code, error
+        # message, and error details. The error code should be an enum value of
         # google.rpc.Code, but it may accept additional error codes if needed.  The
         # error message should be a developer-facing English message that helps
         # developers *understand* and *resolve* the error. If a localized user-facing
@@ -1161,7 +1252,7 @@ module Google
         end
       end
       
-      # Per resource and severity counts of fixable and total vulnerabilites.
+      # Per resource and severity counts of fixable and total vulnerabilities.
       class FixableTotalByDigest
         include Google::Apis::Core::Hashable
       
@@ -1199,6 +1290,49 @@ module Google
         end
       end
       
+      # An attestation wrapper that uses the Grafeas `Signature` message.
+      # This attestation must define the `serialized_payload` that the `signatures`
+      # verify and any metadata necessary to interpret that plaintext.  The
+      # signatures should always be over the `serialized_payload` bytestring.
+      class GenericSignedAttestation
+        include Google::Apis::Core::Hashable
+      
+        # Type (for example schema) of the attestation payload that was signed.
+        # The verifier must ensure that the provided type is one that the verifier
+        # supports, and that the attestation payload is a valid instantiation of that
+        # type (for example by validating a JSON schema).
+        # Corresponds to the JSON property `contentType`
+        # @return [String]
+        attr_accessor :content_type
+      
+        # The serialized payload that is verified by one or more `signatures`.
+        # The encoding and semantic meaning of this payload must match what is set in
+        # `content_type`.
+        # Corresponds to the JSON property `serializedPayload`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :serialized_payload
+      
+        # One or more signatures over `serialized_payload`.  Verifier implementations
+        # should consider this attestation message verified if at least one
+        # `signature` verifies `serialized_payload`.  See `Signature` in common.proto
+        # for more details on signature structure and verification.
+        # Corresponds to the JSON property `signatures`
+        # @return [Array<Google::Apis::ContaineranalysisV1beta1::Signature>]
+        attr_accessor :signatures
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @content_type = args[:content_type] if args.key?(:content_type)
+          @serialized_payload = args[:serialized_payload] if args.key?(:serialized_payload)
+          @signatures = args[:signatures] if args.key?(:signatures)
+        end
+      end
+      
       # A SourceContext referring to a Gerrit project.
       class GerritSourceContext
         include Google::Apis::Core::Hashable
@@ -1428,6 +1562,13 @@ module Google
         # @return [Float]
         attr_accessor :cvss_score
       
+        # The distro assigned severity for this vulnerability when it is
+        # available, and note provider assigned severity when distro has not yet
+        # assigned a severity for this vulnerability.
+        # Corresponds to the JSON property `effectiveSeverity`
+        # @return [String]
+        attr_accessor :effective_severity
+      
         # Output only. A detailed description of this vulnerability.
         # Corresponds to the JSON property `longDescription`
         # @return [String]
@@ -1467,6 +1608,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @cvss_score = args[:cvss_score] if args.key?(:cvss_score)
+          @effective_severity = args[:effective_severity] if args.key?(:effective_severity)
           @long_description = args[:long_description] if args.key?(:long_description)
           @package_issue = args[:package_issue] if args.key?(:package_issue)
           @related_urls = args[:related_urls] if args.key?(:related_urls)
@@ -2017,6 +2159,7 @@ module Google
         # @return [Google::Apis::ContaineranalysisV1beta1::VulnerabilityLocation]
         attr_accessor :fixed_location
       
+        # Deprecated, use Details.effective_severity instead
         # The severity (e.g., distro assigned severity) for this vulnerability.
         # Corresponds to the JSON property `severityName`
         # @return [String]
@@ -2399,6 +2542,70 @@ module Google
         end
       end
       
+      # Verifiers (e.g. Kritis implementations) MUST verify signatures
+      # with respect to the trust anchors defined in policy (e.g. a Kritis policy).
+      # Typically this means that the verifier has been configured with a map from
+      # `public_key_id` to public key material (and any required parameters, e.g.
+      # signing algorithm).
+      # In particular, verification implementations MUST NOT treat the signature
+      # `public_key_id` as anything more than a key lookup hint. The `public_key_id`
+      # DOES NOT validate or authenticate a public key; it only provides a mechanism
+      # for quickly selecting a public key ALREADY CONFIGURED on the verifier through
+      # a trusted channel. Verification implementations MUST reject signatures in any
+      # of the following circumstances:
+      # * The `public_key_id` is not recognized by the verifier.
+      # * The public key that `public_key_id` refers to does not verify the
+      # signature with respect to the payload.
+      # The `signature` contents SHOULD NOT be "attached" (where the payload is
+      # included with the serialized `signature` bytes). Verifiers MUST ignore any
+      # "attached" payload and only verify signatures with respect to explicitly
+      # provided payload (e.g. a `payload` field on the proto message that holds
+      # this Signature, or the canonical serialization of the proto message that
+      # holds this signature).
+      class Signature
+        include Google::Apis::Core::Hashable
+      
+        # The identifier for the public key that verifies this signature.
+        # * The `public_key_id` is required.
+        # * The `public_key_id` MUST be an RFC3986 conformant URI.
+        # * When possible, the `public_key_id` SHOULD be an immutable reference,
+        # such as a cryptographic digest.
+        # Examples of valid `public_key_id`s:
+        # OpenPGP V4 public key fingerprint:
+        # * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA"
+        # See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more
+        # details on this scheme.
+        # RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER
+        # serialization):
+        # * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
+        # * "nih:///sha-256;
+        # 703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
+        # Corresponds to the JSON property `publicKeyId`
+        # @return [String]
+        attr_accessor :public_key_id
+      
+        # The content of the signature, an opaque bytestring.
+        # The payload that this signature verifies MUST be unambiguously provided
+        # with the Signature during verification. A wrapper message might provide
+        # the payload explicitly. Alternatively, a message might have a canonical
+        # serialization that can always be unambiguously computed to derive the
+        # payload.
+        # Corresponds to the JSON property `signature`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :signature
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @public_key_id = args[:public_key_id] if args.key?(:public_key_id)
+          @signature = args[:signature] if args.key?(:signature)
+        end
+      end
+      
       # Source describes the location of the source used for the build.
       class Source
         include Google::Apis::Core::Hashable
@@ -2486,14 +2693,14 @@ module Google
         end
       end
       
-      # The `Status` type defines a logical error model that is suitable for different
-      # programming environments, including REST APIs and RPC APIs. It is used by
-      # [gRPC](https://github.com/grpc). The error model is designed to be:
+      # The `Status` type defines a logical error model that is suitable for
+      # different programming environments, including REST APIs and RPC APIs. It is
+      # used by [gRPC](https://github.com/grpc). The error model is designed to be:
       # - Simple to use and understand for most users
       # - Flexible enough to meet unexpected needs
       # # Overview
-      # The `Status` message contains three pieces of data: error code, error message,
-      # and error details. The error code should be an enum value of
+      # The `Status` message contains three pieces of data: error code, error
+      # message, and error details. The error code should be an enum value of
       # google.rpc.Code, but it may accept additional error codes if needed.  The
       # error message should be a developer-facing English message that helps
       # developers *understand* and *resolve* the error. If a localized user-facing
@@ -2648,6 +2855,12 @@ module Google
         # @return [Float]
         attr_accessor :cvss_score
       
+        # Common Vulnerability Scoring System version 3.
+        # For details, see https://www.first.org/cvss/specification-document
+        # Corresponds to the JSON property `cvssV3`
+        # @return [Google::Apis::ContaineranalysisV1beta1::CvsSv3]
+        attr_accessor :cvss_v3
+      
         # All information about the package to specifically identify this
         # vulnerability. One entry per (version range and cpe_uri) the package
         # vulnerability has manifested in.
@@ -2675,6 +2888,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @cvss_score = args[:cvss_score] if args.key?(:cvss_score)
+          @cvss_v3 = args[:cvss_v3] if args.key?(:cvss_v3)
           @details = args[:details] if args.key?(:details)
           @severity = args[:severity] if args.key?(:severity)
           @windows_details = args[:windows_details] if args.key?(:windows_details)

data/generated/google/apis/containeranalysis_v1beta1/representations.rb

@@ -112,6 +112,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class CvsSv3
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class CloudRepoSourceContext
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -202,6 +208,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GenericSignedAttestation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class GerritSourceContext
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -394,6 +406,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Signature
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Source
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -474,6 +492,8 @@ module Google
       class Attestation
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :generic_signed_attestation, as: 'genericSignedAttestation', class: Google::Apis::ContaineranalysisV1beta1::GenericSignedAttestation, decorator: Google::Apis::ContaineranalysisV1beta1::GenericSignedAttestation::Representation
+      
           property :pgp_signed_attestation, as: 'pgpSignedAttestation', class: Google::Apis::ContaineranalysisV1beta1::PgpSignedAttestation, decorator: Google::Apis::ContaineranalysisV1beta1::PgpSignedAttestation::Representation
       
         end
@@ -596,6 +616,23 @@ module Google
         end
       end
       
+      class CvsSv3
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :attack_complexity, as: 'attackComplexity'
+          property :attack_vector, as: 'attackVector'
+          property :availability_impact, as: 'availabilityImpact'
+          property :base_score, as: 'baseScore'
+          property :confidentiality_impact, as: 'confidentialityImpact'
+          property :exploitability_score, as: 'exploitabilityScore'
+          property :impact_score, as: 'impactScore'
+          property :integrity_impact, as: 'integrityImpact'
+          property :privileges_required, as: 'privilegesRequired'
+          property :scope, as: 'scope'
+          property :user_interaction, as: 'userInteraction'
+        end
+      end
+      
       class CloudRepoSourceContext
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -752,6 +789,16 @@ module Google
         end
       end
       
+      class GenericSignedAttestation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :content_type, as: 'contentType'
+          property :serialized_payload, :base64 => true, as: 'serializedPayload'
+          collection :signatures, as: 'signatures', class: Google::Apis::ContaineranalysisV1beta1::Signature, decorator: Google::Apis::ContaineranalysisV1beta1::Signature::Representation
+      
+        end
+      end
+      
       class GerritSourceContext
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -830,6 +877,7 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :cvss_score, as: 'cvssScore'
+          property :effective_severity, as: 'effectiveSeverity'
           property :long_description, as: 'longDescription'
           collection :package_issue, as: 'packageIssue', class: Google::Apis::ContaineranalysisV1beta1::PackageIssue, decorator: Google::Apis::ContaineranalysisV1beta1::PackageIssue::Representation
       
@@ -1081,6 +1129,14 @@ module Google
         end
       end
       
+      class Signature
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :public_key_id, as: 'publicKeyId'
+          property :signature, :base64 => true, as: 'signature'
+        end
+      end
+      
       class Source
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1144,6 +1200,8 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :cvss_score, as: 'cvssScore'
+          property :cvss_v3, as: 'cvssV3', class: Google::Apis::ContaineranalysisV1beta1::CvsSv3, decorator: Google::Apis::ContaineranalysisV1beta1::CvsSv3::Representation
+      
           collection :details, as: 'details', class: Google::Apis::ContaineranalysisV1beta1::Detail, decorator: Google::Apis::ContaineranalysisV1beta1::Detail::Representation
       
           property :severity, as: 'severity'