google-api-client 0.37.0 → 0.38.0

data/generated/google/apis/securitycenter_v1p1beta1/classes.rb

@@ -328,6 +328,112 @@ module Google
         end
       end
       
+      # Security Command Center finding.
+      # A finding is a record of assessment data like security, risk, health, or
+      # privacy, that is ingested into Security Command Center for presentation,
+      # notification, analysis, policy testing, and enforcement. For example, a
+      # cross-site scripting (XSS) vulnerability in an App Engine application is a
+      # finding.
+      # When adding a new field hidden behind a visibility label, ensure it is also
+      # hidden from Notifications:
+      # http://google3/java/com/google/cloud/security/riskdashboard/notification/
+      # actions/streaming/FindingTranslator.java?l=26
+      class Finding
+        include Google::Apis::Core::Hashable
+      
+        # The additional taxonomy group within findings from a given source.
+        # This field is immutable after creation time.
+        # Example: "XSS_FLASH_INJECTION"
+        # Corresponds to the JSON property `category`
+        # @return [String]
+        attr_accessor :category
+      
+        # The time at which the finding was created in Security Command Center.
+        # Corresponds to the JSON property `createTime`
+        # @return [String]
+        attr_accessor :create_time
+      
+        # The time at which the event took place. For example, if the finding
+        # represents an open firewall it would capture the time the detector believes
+        # the firewall became open. The accuracy is determined by the detector.
+        # Corresponds to the JSON property `eventTime`
+        # @return [String]
+        attr_accessor :event_time
+      
+        # The URI that, if available, points to a web page outside of Security
+        # Command Center where additional information about the finding can be found.
+        # This field is guaranteed to be either empty or a well formed URL.
+        # Corresponds to the JSON property `externalUri`
+        # @return [String]
+        attr_accessor :external_uri
+      
+        # The relative resource name of this finding. See:
+        # https://cloud.google.com/apis/design/resource_names#relative_resource_name
+        # Example:
+        # "organizations/`organization_id`/sources/`source_id`/findings/`finding_id`"
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The relative resource name of the source the finding belongs to. See:
+        # https://cloud.google.com/apis/design/resource_names#relative_resource_name
+        # This field is immutable after creation time.
+        # For example:
+        # "organizations/`organization_id`/sources/`source_id`"
+        # Corresponds to the JSON property `parent`
+        # @return [String]
+        attr_accessor :parent
+      
+        # For findings on Google Cloud resources, the full resource
+        # name of the Google Cloud resource this finding is for. See:
+        # https://cloud.google.com/apis/design/resource_names#full_resource_name
+        # When the finding is for a non-Google Cloud resource, the resourceName can
+        # be a customer or partner defined string. This field is immutable after
+        # creation time.
+        # Corresponds to the JSON property `resourceName`
+        # @return [String]
+        attr_accessor :resource_name
+      
+        # User specified security marks that are attached to the parent Security
+        # Command Center resource. Security marks are scoped within a Security Command
+        # Center organization -- they can be modified and viewed by all users who have
+        # proper permissions on the organization.
+        # Corresponds to the JSON property `securityMarks`
+        # @return [Google::Apis::SecuritycenterV1p1beta1::SecurityMarks]
+        attr_accessor :security_marks
+      
+        # Source specific properties. These properties are managed by the source
+        # that writes the finding. The key names in the source_properties map must be
+        # between 1 and 255 characters, and must start with a letter and contain
+        # alphanumeric characters or underscores only.
+        # Corresponds to the JSON property `sourceProperties`
+        # @return [Hash<String,Object>]
+        attr_accessor :source_properties
+      
+        # The state of the finding.
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @category = args[:category] if args.key?(:category)
+          @create_time = args[:create_time] if args.key?(:create_time)
+          @event_time = args[:event_time] if args.key?(:event_time)
+          @external_uri = args[:external_uri] if args.key?(:external_uri)
+          @name = args[:name] if args.key?(:name)
+          @parent = args[:parent] if args.key?(:parent)
+          @resource_name = args[:resource_name] if args.key?(:resource_name)
+          @security_marks = args[:security_marks] if args.key?(:security_marks)
+          @source_properties = args[:source_properties] if args.key?(:source_properties)
+          @state = args[:state] if args.key?(:state)
+        end
+      end
+      
       # Request message for `GetIamPolicy` method.
       class GetIamPolicyRequest
         include Google::Apis::Core::Hashable
@@ -371,6 +477,40 @@ module Google
         end
       end
       
+      # Cloud SCC's Notification
+      class GoogleCloudSecuritycenterV1NotificationMessage
+        include Google::Apis::Core::Hashable
+      
+        # Security Command Center finding.
+        # A finding is a record of assessment data like security, risk, health, or
+        # privacy, that is ingested into Security Command Center for presentation,
+        # notification, analysis, policy testing, and enforcement. For example, a
+        # cross-site scripting (XSS) vulnerability in an App Engine application is a
+        # finding.
+        # When adding a new field hidden behind a visibility label, ensure it is also
+        # hidden from Notifications:
+        # http://google3/java/com/google/cloud/security/riskdashboard/notification/
+        # actions/streaming/FindingTranslator.java?l=26
+        # Corresponds to the JSON property `finding`
+        # @return [Google::Apis::SecuritycenterV1p1beta1::Finding]
+        attr_accessor :finding
+      
+        # Name of the notification config that generated current notification.
+        # Corresponds to the JSON property `notificationConfigName`
+        # @return [String]
+        attr_accessor :notification_config_name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @finding = args[:finding] if args.key?(:finding)
+          @notification_config_name = args[:notification_config_name] if args.key?(:notification_config_name)
+        end
+      end
+      
       # Response of asset discovery run
       class GoogleCloudSecuritycenterV1RunAssetDiscoveryResponse
         include Google::Apis::Core::Hashable
@@ -421,22 +561,24 @@ module Google
         end
       end
       
-      # Cloud Security Command Center's (Cloud SCC) representation of a Google Cloud
-      # Platform (GCP) resource.
-      # The Asset is a Cloud SCC resource that captures information about a single
-      # GCP resource. All modifications to an Asset are only within the context of
-      # Cloud SCC and don't affect the referenced GCP resource.
+      # Security Command Center representation of a Google Cloud
+      # resource.
+      # The Asset is a Security Command Center resource that captures information
+      # about a single Google Cloud resource. All modifications to an Asset are only
+      # within the context of Security Command Center and don't affect the referenced
+      # Google Cloud resource.
       class GoogleCloudSecuritycenterV1p1beta1Asset
         include Google::Apis::Core::Hashable
       
-        # The time at which the asset was created in Cloud SCC.
+        # The time at which the asset was created in Security Command Center.
         # Corresponds to the JSON property `createTime`
         # @return [String]
         attr_accessor :create_time
       
-        # IAM Policy information associated with the GCP resource described by the
-        # Cloud SCC asset. This information is managed and defined by the GCP
-        # resource and cannot be modified by the user.
+        # Cloud IAM Policy information associated with the Google Cloud resource
+        # described by the Security Command Center asset. This information is managed
+        # and defined by the Google Cloud resource and cannot be modified by the
+        # user.
         # Corresponds to the JSON property `iamPolicy`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1IamPolicy]
         attr_accessor :iam_policy
@@ -450,20 +592,20 @@ module Google
         attr_accessor :name
       
         # Resource managed properties. These properties are managed and defined by
-        # the GCP resource and cannot be modified by the user.
+        # the Google Cloud resource and cannot be modified by the user.
         # Corresponds to the JSON property `resourceProperties`
         # @return [Hash<String,Object>]
         attr_accessor :resource_properties
       
-        # Cloud SCC managed properties. These properties are managed by Cloud SCC and
-        # cannot be modified by the user.
+        # Security Command Center managed properties. These properties are managed by
+        # Security Command Center and cannot be modified by the user.
         # Corresponds to the JSON property `securityCenterProperties`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1SecurityCenterProperties]
         attr_accessor :security_center_properties
       
-        # User specified security marks that are attached to the parent Cloud Security
-        # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
-        # SCC organization -- they can be modified and viewed by all users who have
+        # User specified security marks that are attached to the parent Security
+        # Command Center resource. Security marks are scoped within a Security Command
+        # Center organization -- they can be modified and viewed by all users who have
         # proper permissions on the organization.
         # Corresponds to the JSON property `securityMarks`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1SecurityMarks]
@@ -491,11 +633,11 @@ module Google
         end
       end
       
-      # Cloud Security Command Center (Cloud SCC) finding.
+      # Security Command Center finding.
       # A finding is a record of assessment data (security, risk, health or privacy)
-      # ingested into Cloud SCC for presentation, notification, analysis,
-      # policy testing, and enforcement. For example, an XSS vulnerability in an
-      # App Engine application is a finding.
+      # ingested into Security Command Center for presentation, notification,
+      # analysis, policy testing, and enforcement. For example, an XSS vulnerability
+      # in an App Engine application is a finding.
       class GoogleCloudSecuritycenterV1p1beta1Finding
         include Google::Apis::Core::Hashable
       
@@ -506,7 +648,7 @@ module Google
         # @return [String]
         attr_accessor :category
       
-        # The time at which the finding was created in Cloud SCC.
+        # The time at which the finding was created in Security Command Center.
         # Corresponds to the JSON property `createTime`
         # @return [String]
         attr_accessor :create_time
@@ -518,9 +660,9 @@ module Google
         # @return [String]
         attr_accessor :event_time
       
-        # The URI that, if available, points to a web page outside of Cloud SCC
-        # where additional information about the finding can be found. This field is
-        # guaranteed to be either empty or a well formed URL.
+        # The URI that, if available, points to a web page outside of Security
+        # Command Center where additional information about the finding can be found.
+        # This field is guaranteed to be either empty or a well formed URL.
         # Corresponds to the JSON property `externalUri`
         # @return [String]
         attr_accessor :external_uri
@@ -542,19 +684,19 @@ module Google
         # @return [String]
         attr_accessor :parent
       
-        # For findings on Google Cloud Platform (GCP) resources, the full resource
-        # name of the GCP resource this finding is for. See:
+        # For findings on Google Cloud resources, the full resource
+        # name of the Google Cloud resource this finding is for. See:
         # https://cloud.google.com/apis/design/resource_names#full_resource_name
-        # When the finding is for a non-GCP resource, the resourceName can be a
-        # customer or partner defined string.
-        # This field is immutable after creation time.
+        # When the finding is for a non-Google Cloud resource, the resourceName can
+        # be a customer or partner defined string. This field is immutable after
+        # creation time.
         # Corresponds to the JSON property `resourceName`
         # @return [String]
         attr_accessor :resource_name
       
-        # User specified security marks that are attached to the parent Cloud Security
-        # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
-        # SCC organization -- they can be modified and viewed by all users who have
+        # User specified security marks that are attached to the parent Security
+        # Command Center resource. Security marks are scoped within a Security Command
+        # Center organization -- they can be modified and viewed by all users who have
         # proper permissions on the organization.
         # Corresponds to the JSON property `securityMarks`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1SecurityMarks]
@@ -592,14 +734,15 @@ module Google
         end
       end
       
-      # IAM Policy information associated with the GCP resource described by the
-      # Cloud SCC asset. This information is managed and defined by the GCP
-      # resource and cannot be modified by the user.
+      # Cloud IAM Policy information associated with the Google Cloud resource
+      # described by the Security Command Center asset. This information is managed
+      # and defined by the Google Cloud resource and cannot be modified by the
+      # user.
       class GoogleCloudSecuritycenterV1p1beta1IamPolicy
         include Google::Apis::Core::Hashable
       
         # The JSON representation of the Policy associated with the asset.
-        # See https://cloud.google.com/iam/reference/rest/v1p1beta1/Policy for
+        # See https://cloud.google.com/iam/docs/reference/rest/v1/Policy for
         # format details.
         # Corresponds to the JSON property `policyBlob`
         # @return [String]
@@ -615,15 +758,15 @@ module Google
         end
       end
       
-      # Cloud SCC's Notification
+      # Security Command Center's Notification
       class GoogleCloudSecuritycenterV1p1beta1NotificationMessage
         include Google::Apis::Core::Hashable
       
-        # Cloud Security Command Center (Cloud SCC) finding.
+        # Security Command Center finding.
         # A finding is a record of assessment data (security, risk, health or privacy)
-        # ingested into Cloud SCC for presentation, notification, analysis,
-        # policy testing, and enforcement. For example, an XSS vulnerability in an
-        # App Engine application is a finding.
+        # ingested into Security Command Center for presentation, notification,
+        # analysis, policy testing, and enforcement. For example, an XSS vulnerability
+        # in an App Engine application is a finding.
         # Corresponds to the JSON property `finding`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1Finding]
         attr_accessor :finding
@@ -676,8 +819,8 @@ module Google
         end
       end
       
-      # Cloud SCC managed properties. These properties are managed by Cloud SCC and
-      # cannot be modified by the user.
+      # Security Command Center managed properties. These properties are managed by
+      # Security Command Center and cannot be modified by the user.
       class GoogleCloudSecuritycenterV1p1beta1SecurityCenterProperties
         include Google::Apis::Core::Hashable
       
@@ -686,7 +829,7 @@ module Google
         # @return [String]
         attr_accessor :resource_display_name
       
-        # The full resource name of the GCP resource this asset
+        # The full resource name of the Google Cloud resource this asset
         # represents. This field is immutable after create time. See:
         # https://cloud.google.com/apis/design/resource_names#full_resource_name
         # Corresponds to the JSON property `resourceName`
@@ -720,10 +863,10 @@ module Google
         # @return [String]
         attr_accessor :resource_project_display_name
       
-        # The type of the GCP resource. Examples include: APPLICATION,
+        # The type of the Google Cloud resource. Examples include: APPLICATION,
         # PROJECT, and ORGANIZATION. This is a case insensitive field defined by
-        # Cloud SCC and/or the producer of the resource and is immutable
-        # after create time.
+        # Security Command Center and/or the producer of the resource and is
+        # immutable after create time.
         # Corresponds to the JSON property `resourceType`
         # @return [String]
         attr_accessor :resource_type
@@ -745,9 +888,9 @@ module Google
         end
       end
       
-      # User specified security marks that are attached to the parent Cloud Security
-      # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
-      # SCC organization -- they can be modified and viewed by all users who have
+      # User specified security marks that are attached to the parent Security
+      # Command Center resource. Security marks are scoped within a Security Command
+      # Center organization -- they can be modified and viewed by all users who have
       # proper permissions on the organization.
       class GoogleCloudSecuritycenterV1p1beta1SecurityMarks
         include Google::Apis::Core::Hashable
@@ -789,11 +932,12 @@ module Google
       class GoogleCloudSecuritycenterV1p1beta1TemporalAsset
         include Google::Apis::Core::Hashable
       
-        # Cloud Security Command Center's (Cloud SCC) representation of a Google Cloud
-        # Platform (GCP) resource.
-        # The Asset is a Cloud SCC resource that captures information about a single
-        # GCP resource. All modifications to an Asset are only within the context of
-        # Cloud SCC and don't affect the referenced GCP resource.
+        # Security Command Center representation of a Google Cloud
+        # resource.
+        # The Asset is a Security Command Center resource that captures information
+        # about a single Google Cloud resource. All modifications to an Asset are only
+        # within the context of Security Command Center and don't affect the referenced
+        # Google Cloud resource.
         # Corresponds to the JSON property `asset`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1Asset]
         attr_accessor :asset
@@ -887,6 +1031,10 @@ module Google
         # * security_center_properties.resource_project_display_name: `=`, `:`
         # * security_center_properties.resource_owners: `=`, `:`
         # For example, `resource_properties.size = 100` is a valid filter string.
+        # Use a partial match on the empty string to filter based on a property
+        # existing: "resource_properties.my_property : \"\""
+        # Use a negated partial match on the empty string to filter based on a
+        # property not existing: "-resource_properties.my_property : \"\""
         # Corresponds to the JSON property `filter`
         # @return [String]
         attr_accessor :filter
@@ -1001,12 +1149,18 @@ module Google
         # two times don't affect the result. For example, the results aren't affected
         # if the finding is made inactive and then active again.
         # Possible "state_change" values when compare_duration is specified:
-        # * "CHANGED":   indicates that the finding was present at the start of
-        # compare_duration, but changed its state at read_time.
-        # * "UNCHANGED": indicates that the finding was present at the start of
-        # compare_duration and did not change state at read_time.
-        # * "ADDED":     indicates that the finding was not present at the start
-        # of compare_duration, but was present at read_time.
+        # * "CHANGED":   indicates that the finding was present and matched the given
+        # filter at the start of compare_duration, but changed its
+        # state at read_time.
+        # * "UNCHANGED": indicates that the finding was present and matched the given
+        # filter at the start of compare_duration and did not change
+        # state at read_time.
+        # * "ADDED":     indicates that the finding did not match the given filter or
+        # was not present at the start of compare_duration, but was
+        # present at read_time.
+        # * "REMOVED":   indicates that the finding was present and matched the
+        # filter at the start of compare_duration, but did not match
+        # the filter at read_time.
         # If compare_duration is not specified, then the only possible state_change
         # is "UNUSED",  which will be the state_change set for all findings present
         # at read_time.
@@ -1048,6 +1202,10 @@ module Google
         # * security_marks.marks: `=`, `:`
         # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
         # For example, `source_properties.size = 100` is a valid filter string.
+        # Use a partial match on the empty string to filter based on a property
+        # existing: "source_properties.my_property : \"\""
+        # Use a negated partial match on the empty string to filter based on a
+        # property not existing: "-source_properties.my_property : \"\""
         # Corresponds to the JSON property `filter`
         # @return [String]
         attr_accessor :filter
@@ -1210,11 +1368,12 @@ module Google
       class ListAssetsResult
         include Google::Apis::Core::Hashable
       
-        # Cloud Security Command Center's (Cloud SCC) representation of a Google Cloud
-        # Platform (GCP) resource.
-        # The Asset is a Cloud SCC resource that captures information about a single
-        # GCP resource. All modifications to an Asset are only within the context of
-        # Cloud SCC and don't affect the referenced GCP resource.
+        # Security Command Center representation of a Google Cloud
+        # resource.
+        # The Asset is a Security Command Center resource that captures information
+        # about a single Google Cloud resource. All modifications to an Asset are only
+        # within the context of Security Command Center and don't affect the referenced
+        # Google Cloud resource.
         # Corresponds to the JSON property `asset`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1Asset]
         attr_accessor :asset
@@ -1277,16 +1436,16 @@ module Google
       class ListFindingsResult
         include Google::Apis::Core::Hashable
       
-        # Cloud Security Command Center (Cloud SCC) finding.
+        # Security Command Center finding.
         # A finding is a record of assessment data (security, risk, health or privacy)
-        # ingested into Cloud SCC for presentation, notification, analysis,
-        # policy testing, and enforcement. For example, an XSS vulnerability in an
-        # App Engine application is a finding.
+        # ingested into Security Command Center for presentation, notification,
+        # analysis, policy testing, and enforcement. For example, an XSS vulnerability
+        # in an App Engine application is a finding.
         # Corresponds to the JSON property `finding`
         # @return [Google::Apis::SecuritycenterV1p1beta1::GoogleCloudSecuritycenterV1p1beta1Finding]
         attr_accessor :finding
       
-        # Information related to the Google Cloud Platform (GCP) resource that is
+        # Information related to the Google Cloud resource that is
         # associated with this finding.
         # Corresponds to the JSON property `resource`
         # @return [Google::Apis::SecuritycenterV1p1beta1::Resource]
@@ -1386,9 +1545,10 @@ module Google
         end
       end
       
-      # Cloud Security Command Center (Cloud SCC) notification configs.
-      # A notification config is a Cloud SCC resource that contains the configuration
-      # to send notifications for create/update events of findings, assets and etc.
+      # Security Command Center notification configs.
+      # A notification config is a Security Command Center resource that contains the
+      # configuration to send notifications for create/update events of findings,
+      # assets and etc.
       class NotificationConfig
         include Google::Apis::Core::Hashable
       
@@ -1410,14 +1570,14 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # The PubSub topic to send notifications to. Its format is
+        # The Pub/Sub topic to send notifications to. Its format is
         # "projects/[project_id]/topics/[topic]".
         # Corresponds to the JSON property `pubsubTopic`
         # @return [String]
         attr_accessor :pubsub_topic
       
         # Output only. The service account that needs "pubsub.topics.publish"
-        # permission to publish to the PubSub topic.
+        # permission to publish to the Pub/Sub topic.
         # Corresponds to the JSON property `serviceAccount`
         # @return [String]
         attr_accessor :service_account
@@ -1507,8 +1667,8 @@ module Google
         end
       end
       
-      # User specified settings that are attached to the Cloud Security Command
-      # Center (Cloud SCC) organization.
+      # User specified settings that are attached to the Security Command
+      # Center organization.
       class OrganizationSettings
         include Google::Apis::Core::Hashable
       
@@ -1666,7 +1826,7 @@ module Google
         end
       end
       
-      # Information related to the Google Cloud Platform (GCP) resource that is
+      # Information related to the Google Cloud resource that is
       # associated with this finding.
       class Resource
         include Google::Apis::Core::Hashable
@@ -1724,6 +1884,45 @@ module Google
         end
       end
       
+      # User specified security marks that are attached to the parent Security
+      # Command Center resource. Security marks are scoped within a Security Command
+      # Center organization -- they can be modified and viewed by all users who have
+      # proper permissions on the organization.
+      class SecurityMarks
+        include Google::Apis::Core::Hashable
+      
+        # Mutable user specified security marks belonging to the parent resource.
+        # Constraints are as follows:
+        # * Keys and values are treated as case insensitive
+        # * Keys must be between 1 - 256 characters (inclusive)
+        # * Keys must be letters, numbers, underscores, or dashes
+        # * Values have leading and trailing whitespace trimmed, remaining
+        # characters must be between 1 - 4096 characters (inclusive)
+        # Corresponds to the JSON property `marks`
+        # @return [Hash<String,String>]
+        attr_accessor :marks
+      
+        # The relative resource name of the SecurityMarks. See:
+        # https://cloud.google.com/apis/design/resource_names#relative_resource_name
+        # Examples:
+        # "organizations/`organization_id`/assets/`asset_id`/securityMarks"
+        # "organizations/`organization_id`/sources/`source_id`/findings/`finding_id`/
+        # securityMarks".
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @marks = args[:marks] if args.key?(:marks)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # Request message for updating a finding's state.
       class SetFindingStateRequest
         include Google::Apis::Core::Hashable
@@ -1833,7 +2032,7 @@ module Google
         end
       end
       
-      # Cloud Security Command Center's (Cloud SCC) finding source. A finding source
+      # Security Command Center finding source. A finding source
       # is an entity or a mechanism that can produce a finding. A source is like a
       # container of findings that come from the same scanner, logger, monitor, etc.
       class Source
@@ -1841,7 +2040,7 @@ module Google
       
         # The description of the source (max of 1024 characters).
         # Example:
-        # "Cloud Security Scanner is a web security scanner for common
+        # "Web Security Scanner is a web security scanner for common
         # vulnerabilities in App Engine applications. It can automatically
         # scan and detect four common vulnerabilities, including cross-site-scripting
         # (XSS), Flash injection, mixed content (HTTP in HTTPS), and