google-apis-ondemandscanning_v1 0.10.0 → 0.14.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 27fab3b6e496511fe7a92326d3e7b97c006e2a82f0f6cde5984e5bd3c6b9375e
|
4
|
+
data.tar.gz: 4a8360e4895738ffd5ea3b1487f57e749732f83dea7946c608198a128452b575
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: a9863b9abc6379e3eb70097b2ed417b2fb6cffd75c0f7bdc69fe459b851e3dba463f01cd9d702e22d9039c1b3bc23a4a859199bde1c457dcf917a00586b71dfc
|
7
|
+
data.tar.gz: d67ed9f7ed4f1018f98c9621011903a619fe3de7ba0a5d9be93dbe1e338a67ceff97c89758b6e4e60c8c13514638adb73c108888bd52eceedb4c495907bf7e06
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,21 @@
|
|
1
1
|
# Release history for google-apis-ondemandscanning_v1
|
2
2
|
|
3
|
+
### v0.14.0 (2021-12-14)
|
4
|
+
|
5
|
+
* Unspecified changes
|
6
|
+
|
7
|
+
### v0.13.0 (2021-12-09)
|
8
|
+
|
9
|
+
* Regenerated from discovery document revision 20211206
|
10
|
+
|
11
|
+
### v0.12.0 (2021-11-04)
|
12
|
+
|
13
|
+
* Regenerated from discovery document revision 20211029
|
14
|
+
|
15
|
+
### v0.11.0 (2021-10-21)
|
16
|
+
|
17
|
+
* Unspecified changes
|
18
|
+
|
3
19
|
### v0.10.0 (2021-09-16)
|
4
20
|
|
5
21
|
* Regenerated from discovery document revision 20210911
|
data/OVERVIEW.md
CHANGED
@@ -51,7 +51,7 @@ require "google/apis/ondemandscanning_v1"
|
|
51
51
|
client = Google::Apis::OndemandscanningV1::OnDemandScanningService.new
|
52
52
|
|
53
53
|
# Authenticate calls
|
54
|
-
client.
|
54
|
+
client.authorization = # ... use the googleauth gem to create credentials
|
55
55
|
```
|
56
56
|
|
57
57
|
See the class reference docs for information on the methods you can call from a client.
|
@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
|
|
60
60
|
|
61
61
|
More detailed descriptions of the Google simple REST clients are available in two documents.
|
62
62
|
|
63
|
-
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
64
|
-
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
63
|
+
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
|
64
|
+
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
|
65
65
|
|
66
66
|
(Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Ondemandscanning service in particular.)
|
67
67
|
|
@@ -104,7 +104,8 @@ module Google
|
|
104
104
|
class AnalyzePackagesRequestV1
|
105
105
|
include Google::Apis::Core::Hashable
|
106
106
|
|
107
|
-
# Whether to include OSV data in the scan.
|
107
|
+
# [DEPRECATED] Whether to include OSV data in the scan. For backwards
|
108
|
+
# compatibility reasons, this field can be neither removed nor renamed.
|
108
109
|
# Corresponds to the JSON property `includeOsvData`
|
109
110
|
# @return [Boolean]
|
110
111
|
attr_accessor :include_osv_data
|
@@ -260,11 +261,19 @@ module Google
|
|
260
261
|
class BuildOccurrence
|
261
262
|
include Google::Apis::Core::Hashable
|
262
263
|
|
263
|
-
#
|
264
|
+
# Deprecated. See InTotoStatement for the replacement. In-toto Provenance
|
265
|
+
# representation as defined in spec.
|
264
266
|
# Corresponds to the JSON property `intotoProvenance`
|
265
267
|
# @return [Google::Apis::OndemandscanningV1::InTotoProvenance]
|
266
268
|
attr_accessor :intoto_provenance
|
267
269
|
|
270
|
+
# Spec defined at https://github.com/in-toto/attestation/tree/main/spec#
|
271
|
+
# statement The serialized InTotoStatement will be stored as Envelope.payload.
|
272
|
+
# Envelope.payloadType is always "application/vnd.in-toto+json".
|
273
|
+
# Corresponds to the JSON property `intotoStatement`
|
274
|
+
# @return [Google::Apis::OndemandscanningV1::InTotoStatement]
|
275
|
+
attr_accessor :intoto_statement
|
276
|
+
|
268
277
|
# Provenance of a build. Contains all information needed to verify the full
|
269
278
|
# details about the build from source to completion.
|
270
279
|
# Corresponds to the JSON property `provenance`
|
@@ -290,6 +299,7 @@ module Google
|
|
290
299
|
# Update properties of this object
|
291
300
|
def update!(**args)
|
292
301
|
@intoto_provenance = args[:intoto_provenance] if args.key?(:intoto_provenance)
|
302
|
+
@intoto_statement = args[:intoto_statement] if args.key?(:intoto_statement)
|
293
303
|
@provenance = args[:provenance] if args.key?(:provenance)
|
294
304
|
@provenance_bytes = args[:provenance_bytes] if args.key?(:provenance_bytes)
|
295
305
|
end
|
@@ -409,6 +419,96 @@ module Google
|
|
409
419
|
end
|
410
420
|
end
|
411
421
|
|
422
|
+
# Common Vulnerability Scoring System. For details, see https://www.first.org/
|
423
|
+
# cvss/specification-document This is a message we will try to use for storing
|
424
|
+
# multiple versions of CVSS. The intention is that as new versions of CVSS
|
425
|
+
# scores get added, we will be able to modify this message rather than adding
|
426
|
+
# new protos for each new version of the score.
|
427
|
+
class Cvss
|
428
|
+
include Google::Apis::Core::Hashable
|
429
|
+
|
430
|
+
#
|
431
|
+
# Corresponds to the JSON property `attackComplexity`
|
432
|
+
# @return [String]
|
433
|
+
attr_accessor :attack_complexity
|
434
|
+
|
435
|
+
# Base Metrics Represents the intrinsic characteristics of a vulnerability that
|
436
|
+
# are constant over time and across user environments.
|
437
|
+
# Corresponds to the JSON property `attackVector`
|
438
|
+
# @return [String]
|
439
|
+
attr_accessor :attack_vector
|
440
|
+
|
441
|
+
#
|
442
|
+
# Corresponds to the JSON property `authentication`
|
443
|
+
# @return [String]
|
444
|
+
attr_accessor :authentication
|
445
|
+
|
446
|
+
#
|
447
|
+
# Corresponds to the JSON property `availabilityImpact`
|
448
|
+
# @return [String]
|
449
|
+
attr_accessor :availability_impact
|
450
|
+
|
451
|
+
# The base score is a function of the base metric scores.
|
452
|
+
# Corresponds to the JSON property `baseScore`
|
453
|
+
# @return [Float]
|
454
|
+
attr_accessor :base_score
|
455
|
+
|
456
|
+
#
|
457
|
+
# Corresponds to the JSON property `confidentialityImpact`
|
458
|
+
# @return [String]
|
459
|
+
attr_accessor :confidentiality_impact
|
460
|
+
|
461
|
+
#
|
462
|
+
# Corresponds to the JSON property `exploitabilityScore`
|
463
|
+
# @return [Float]
|
464
|
+
attr_accessor :exploitability_score
|
465
|
+
|
466
|
+
#
|
467
|
+
# Corresponds to the JSON property `impactScore`
|
468
|
+
# @return [Float]
|
469
|
+
attr_accessor :impact_score
|
470
|
+
|
471
|
+
#
|
472
|
+
# Corresponds to the JSON property `integrityImpact`
|
473
|
+
# @return [String]
|
474
|
+
attr_accessor :integrity_impact
|
475
|
+
|
476
|
+
#
|
477
|
+
# Corresponds to the JSON property `privilegesRequired`
|
478
|
+
# @return [String]
|
479
|
+
attr_accessor :privileges_required
|
480
|
+
|
481
|
+
#
|
482
|
+
# Corresponds to the JSON property `scope`
|
483
|
+
# @return [String]
|
484
|
+
attr_accessor :scope
|
485
|
+
|
486
|
+
#
|
487
|
+
# Corresponds to the JSON property `userInteraction`
|
488
|
+
# @return [String]
|
489
|
+
attr_accessor :user_interaction
|
490
|
+
|
491
|
+
def initialize(**args)
|
492
|
+
update!(**args)
|
493
|
+
end
|
494
|
+
|
495
|
+
# Update properties of this object
|
496
|
+
def update!(**args)
|
497
|
+
@attack_complexity = args[:attack_complexity] if args.key?(:attack_complexity)
|
498
|
+
@attack_vector = args[:attack_vector] if args.key?(:attack_vector)
|
499
|
+
@authentication = args[:authentication] if args.key?(:authentication)
|
500
|
+
@availability_impact = args[:availability_impact] if args.key?(:availability_impact)
|
501
|
+
@base_score = args[:base_score] if args.key?(:base_score)
|
502
|
+
@confidentiality_impact = args[:confidentiality_impact] if args.key?(:confidentiality_impact)
|
503
|
+
@exploitability_score = args[:exploitability_score] if args.key?(:exploitability_score)
|
504
|
+
@impact_score = args[:impact_score] if args.key?(:impact_score)
|
505
|
+
@integrity_impact = args[:integrity_impact] if args.key?(:integrity_impact)
|
506
|
+
@privileges_required = args[:privileges_required] if args.key?(:privileges_required)
|
507
|
+
@scope = args[:scope] if args.key?(:scope)
|
508
|
+
@user_interaction = args[:user_interaction] if args.key?(:user_interaction)
|
509
|
+
end
|
510
|
+
end
|
511
|
+
|
412
512
|
# The category to which the update belongs.
|
413
513
|
class Category
|
414
514
|
include Google::Apis::Core::Hashable
|
@@ -581,7 +681,8 @@ module Google
|
|
581
681
|
end
|
582
682
|
end
|
583
683
|
|
584
|
-
#
|
684
|
+
# Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
|
685
|
+
# the top level of the Occurrence.
|
585
686
|
class DsseAttestationOccurrence
|
586
687
|
include Google::Apis::Core::Hashable
|
587
688
|
|
@@ -1046,7 +1147,12 @@ module Google
|
|
1046
1147
|
class InTotoStatement
|
1047
1148
|
include Google::Apis::Core::Hashable
|
1048
1149
|
|
1049
|
-
# "https://in-toto.io/
|
1150
|
+
# Always "https://in-toto.io/Statement/v0.1".
|
1151
|
+
# Corresponds to the JSON property `_type`
|
1152
|
+
# @return [String]
|
1153
|
+
attr_accessor :_type
|
1154
|
+
|
1155
|
+
# "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
|
1050
1156
|
# Corresponds to the JSON property `predicateType`
|
1051
1157
|
# @return [String]
|
1052
1158
|
attr_accessor :predicate_type
|
@@ -1056,26 +1162,27 @@ module Google
|
|
1056
1162
|
# @return [Google::Apis::OndemandscanningV1::InTotoProvenance]
|
1057
1163
|
attr_accessor :provenance
|
1058
1164
|
|
1165
|
+
#
|
1166
|
+
# Corresponds to the JSON property `slsaProvenance`
|
1167
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaProvenance]
|
1168
|
+
attr_accessor :slsa_provenance
|
1169
|
+
|
1059
1170
|
#
|
1060
1171
|
# Corresponds to the JSON property `subject`
|
1061
1172
|
# @return [Array<Google::Apis::OndemandscanningV1::Subject>]
|
1062
1173
|
attr_accessor :subject
|
1063
1174
|
|
1064
|
-
# Always "https://in-toto.io/Statement/v0.1".
|
1065
|
-
# Corresponds to the JSON property `type`
|
1066
|
-
# @return [String]
|
1067
|
-
attr_accessor :type
|
1068
|
-
|
1069
1175
|
def initialize(**args)
|
1070
1176
|
update!(**args)
|
1071
1177
|
end
|
1072
1178
|
|
1073
1179
|
# Update properties of this object
|
1074
1180
|
def update!(**args)
|
1181
|
+
@_type = args[:_type] if args.key?(:_type)
|
1075
1182
|
@predicate_type = args[:predicate_type] if args.key?(:predicate_type)
|
1076
1183
|
@provenance = args[:provenance] if args.key?(:provenance)
|
1184
|
+
@slsa_provenance = args[:slsa_provenance] if args.key?(:slsa_provenance)
|
1077
1185
|
@subject = args[:subject] if args.key?(:subject)
|
1078
|
-
@type = args[:type] if args.key?(:type)
|
1079
1186
|
end
|
1080
1187
|
end
|
1081
1188
|
|
@@ -1211,6 +1318,31 @@ module Google
|
|
1211
1318
|
end
|
1212
1319
|
end
|
1213
1320
|
|
1321
|
+
#
|
1322
|
+
class Material
|
1323
|
+
include Google::Apis::Core::Hashable
|
1324
|
+
|
1325
|
+
#
|
1326
|
+
# Corresponds to the JSON property `digest`
|
1327
|
+
# @return [Hash<String,String>]
|
1328
|
+
attr_accessor :digest
|
1329
|
+
|
1330
|
+
#
|
1331
|
+
# Corresponds to the JSON property `uri`
|
1332
|
+
# @return [String]
|
1333
|
+
attr_accessor :uri
|
1334
|
+
|
1335
|
+
def initialize(**args)
|
1336
|
+
update!(**args)
|
1337
|
+
end
|
1338
|
+
|
1339
|
+
# Update properties of this object
|
1340
|
+
def update!(**args)
|
1341
|
+
@digest = args[:digest] if args.key?(:digest)
|
1342
|
+
@uri = args[:uri] if args.key?(:uri)
|
1343
|
+
end
|
1344
|
+
end
|
1345
|
+
|
1214
1346
|
# Other properties of the build.
|
1215
1347
|
class Metadata
|
1216
1348
|
include Google::Apis::Core::Hashable
|
@@ -1333,7 +1465,8 @@ module Google
|
|
1333
1465
|
# @return [Google::Apis::OndemandscanningV1::DiscoveryOccurrence]
|
1334
1466
|
attr_accessor :discovery
|
1335
1467
|
|
1336
|
-
#
|
1468
|
+
# Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
|
1469
|
+
# the top level of the Occurrence.
|
1337
1470
|
# Corresponds to the JSON property `dsseAttestation`
|
1338
1471
|
# @return [Google::Apis::OndemandscanningV1::DsseAttestationOccurrence]
|
1339
1472
|
attr_accessor :dsse_attestation
|
@@ -1846,6 +1979,210 @@ module Google
|
|
1846
1979
|
end
|
1847
1980
|
end
|
1848
1981
|
|
1982
|
+
#
|
1983
|
+
class SlsaBuilder
|
1984
|
+
include Google::Apis::Core::Hashable
|
1985
|
+
|
1986
|
+
#
|
1987
|
+
# Corresponds to the JSON property `id`
|
1988
|
+
# @return [String]
|
1989
|
+
attr_accessor :id
|
1990
|
+
|
1991
|
+
def initialize(**args)
|
1992
|
+
update!(**args)
|
1993
|
+
end
|
1994
|
+
|
1995
|
+
# Update properties of this object
|
1996
|
+
def update!(**args)
|
1997
|
+
@id = args[:id] if args.key?(:id)
|
1998
|
+
end
|
1999
|
+
end
|
2000
|
+
|
2001
|
+
# Indicates that the builder claims certain fields in this message to be
|
2002
|
+
# complete.
|
2003
|
+
class SlsaCompleteness
|
2004
|
+
include Google::Apis::Core::Hashable
|
2005
|
+
|
2006
|
+
# If true, the builder claims that recipe.arguments is complete, meaning that
|
2007
|
+
# all external inputs are properly captured in the recipe.
|
2008
|
+
# Corresponds to the JSON property `arguments`
|
2009
|
+
# @return [Boolean]
|
2010
|
+
attr_accessor :arguments
|
2011
|
+
alias_method :arguments?, :arguments
|
2012
|
+
|
2013
|
+
# If true, the builder claims that recipe.environment is claimed to be complete.
|
2014
|
+
# Corresponds to the JSON property `environment`
|
2015
|
+
# @return [Boolean]
|
2016
|
+
attr_accessor :environment
|
2017
|
+
alias_method :environment?, :environment
|
2018
|
+
|
2019
|
+
# If true, the builder claims that materials are complete, usually through some
|
2020
|
+
# controls to prevent network access. Sometimes called "hermetic".
|
2021
|
+
# Corresponds to the JSON property `materials`
|
2022
|
+
# @return [Boolean]
|
2023
|
+
attr_accessor :materials
|
2024
|
+
alias_method :materials?, :materials
|
2025
|
+
|
2026
|
+
def initialize(**args)
|
2027
|
+
update!(**args)
|
2028
|
+
end
|
2029
|
+
|
2030
|
+
# Update properties of this object
|
2031
|
+
def update!(**args)
|
2032
|
+
@arguments = args[:arguments] if args.key?(:arguments)
|
2033
|
+
@environment = args[:environment] if args.key?(:environment)
|
2034
|
+
@materials = args[:materials] if args.key?(:materials)
|
2035
|
+
end
|
2036
|
+
end
|
2037
|
+
|
2038
|
+
# Other properties of the build.
|
2039
|
+
class SlsaMetadata
|
2040
|
+
include Google::Apis::Core::Hashable
|
2041
|
+
|
2042
|
+
# The timestamp of when the build completed.
|
2043
|
+
# Corresponds to the JSON property `buildFinishedOn`
|
2044
|
+
# @return [String]
|
2045
|
+
attr_accessor :build_finished_on
|
2046
|
+
|
2047
|
+
# Identifies the particular build invocation, which can be useful for finding
|
2048
|
+
# associated logs or other ad-hoc analysis. The value SHOULD be globally unique,
|
2049
|
+
# per in-toto Provenance spec.
|
2050
|
+
# Corresponds to the JSON property `buildInvocationId`
|
2051
|
+
# @return [String]
|
2052
|
+
attr_accessor :build_invocation_id
|
2053
|
+
|
2054
|
+
# The timestamp of when the build started.
|
2055
|
+
# Corresponds to the JSON property `buildStartedOn`
|
2056
|
+
# @return [String]
|
2057
|
+
attr_accessor :build_started_on
|
2058
|
+
|
2059
|
+
# Indicates that the builder claims certain fields in this message to be
|
2060
|
+
# complete.
|
2061
|
+
# Corresponds to the JSON property `completeness`
|
2062
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaCompleteness]
|
2063
|
+
attr_accessor :completeness
|
2064
|
+
|
2065
|
+
# If true, the builder claims that running the recipe on materials will produce
|
2066
|
+
# bit-for-bit identical output.
|
2067
|
+
# Corresponds to the JSON property `reproducible`
|
2068
|
+
# @return [Boolean]
|
2069
|
+
attr_accessor :reproducible
|
2070
|
+
alias_method :reproducible?, :reproducible
|
2071
|
+
|
2072
|
+
def initialize(**args)
|
2073
|
+
update!(**args)
|
2074
|
+
end
|
2075
|
+
|
2076
|
+
# Update properties of this object
|
2077
|
+
def update!(**args)
|
2078
|
+
@build_finished_on = args[:build_finished_on] if args.key?(:build_finished_on)
|
2079
|
+
@build_invocation_id = args[:build_invocation_id] if args.key?(:build_invocation_id)
|
2080
|
+
@build_started_on = args[:build_started_on] if args.key?(:build_started_on)
|
2081
|
+
@completeness = args[:completeness] if args.key?(:completeness)
|
2082
|
+
@reproducible = args[:reproducible] if args.key?(:reproducible)
|
2083
|
+
end
|
2084
|
+
end
|
2085
|
+
|
2086
|
+
#
|
2087
|
+
class SlsaProvenance
|
2088
|
+
include Google::Apis::Core::Hashable
|
2089
|
+
|
2090
|
+
# required
|
2091
|
+
# Corresponds to the JSON property `builder`
|
2092
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaBuilder]
|
2093
|
+
attr_accessor :builder
|
2094
|
+
|
2095
|
+
# The collection of artifacts that influenced the build including sources,
|
2096
|
+
# dependencies, build tools, base images, and so on. This is considered to be
|
2097
|
+
# incomplete unless metadata.completeness.materials is true. Unset or null is
|
2098
|
+
# equivalent to empty.
|
2099
|
+
# Corresponds to the JSON property `materials`
|
2100
|
+
# @return [Array<Google::Apis::OndemandscanningV1::Material>]
|
2101
|
+
attr_accessor :materials
|
2102
|
+
|
2103
|
+
# Other properties of the build.
|
2104
|
+
# Corresponds to the JSON property `metadata`
|
2105
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaMetadata]
|
2106
|
+
attr_accessor :metadata
|
2107
|
+
|
2108
|
+
# Steps taken to build the artifact. For a TaskRun, typically each container
|
2109
|
+
# corresponds to one step in the recipe.
|
2110
|
+
# Corresponds to the JSON property `recipe`
|
2111
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaRecipe]
|
2112
|
+
attr_accessor :recipe
|
2113
|
+
|
2114
|
+
def initialize(**args)
|
2115
|
+
update!(**args)
|
2116
|
+
end
|
2117
|
+
|
2118
|
+
# Update properties of this object
|
2119
|
+
def update!(**args)
|
2120
|
+
@builder = args[:builder] if args.key?(:builder)
|
2121
|
+
@materials = args[:materials] if args.key?(:materials)
|
2122
|
+
@metadata = args[:metadata] if args.key?(:metadata)
|
2123
|
+
@recipe = args[:recipe] if args.key?(:recipe)
|
2124
|
+
end
|
2125
|
+
end
|
2126
|
+
|
2127
|
+
# Steps taken to build the artifact. For a TaskRun, typically each container
|
2128
|
+
# corresponds to one step in the recipe.
|
2129
|
+
class SlsaRecipe
|
2130
|
+
include Google::Apis::Core::Hashable
|
2131
|
+
|
2132
|
+
# Collection of all external inputs that influenced the build on top of recipe.
|
2133
|
+
# definedInMaterial and recipe.entryPoint. For example, if the recipe type were "
|
2134
|
+
# make", then this might be the flags passed to make aside from the target,
|
2135
|
+
# which is captured in recipe.entryPoint. Depending on the recipe Type, the
|
2136
|
+
# structure may be different.
|
2137
|
+
# Corresponds to the JSON property `arguments`
|
2138
|
+
# @return [Hash<String,Object>]
|
2139
|
+
attr_accessor :arguments
|
2140
|
+
|
2141
|
+
# Index in materials containing the recipe steps that are not implied by recipe.
|
2142
|
+
# type. For example, if the recipe type were "make", then this would point to
|
2143
|
+
# the source containing the Makefile, not the make program itself. Set to -1 if
|
2144
|
+
# the recipe doesn't come from a material, as zero is default unset value for
|
2145
|
+
# int64.
|
2146
|
+
# Corresponds to the JSON property `definedInMaterial`
|
2147
|
+
# @return [Fixnum]
|
2148
|
+
attr_accessor :defined_in_material
|
2149
|
+
|
2150
|
+
# String identifying the entry point into the build. This is often a path to a
|
2151
|
+
# configuration file and/or a target label within that file. The syntax and
|
2152
|
+
# meaning are defined by recipe.type. For example, if the recipe type were "make"
|
2153
|
+
# , then this would reference the directory in which to run make as well as
|
2154
|
+
# which target to use.
|
2155
|
+
# Corresponds to the JSON property `entryPoint`
|
2156
|
+
# @return [String]
|
2157
|
+
attr_accessor :entry_point
|
2158
|
+
|
2159
|
+
# Any other builder-controlled inputs necessary for correctly evaluating the
|
2160
|
+
# recipe. Usually only needed for reproducing the build but not evaluated as
|
2161
|
+
# part of policy. Depending on the recipe Type, the structure may be different.
|
2162
|
+
# Corresponds to the JSON property `environment`
|
2163
|
+
# @return [Hash<String,Object>]
|
2164
|
+
attr_accessor :environment
|
2165
|
+
|
2166
|
+
# URI indicating what type of recipe was performed. It determines the meaning of
|
2167
|
+
# recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
|
2168
|
+
# Corresponds to the JSON property `type`
|
2169
|
+
# @return [String]
|
2170
|
+
attr_accessor :type
|
2171
|
+
|
2172
|
+
def initialize(**args)
|
2173
|
+
update!(**args)
|
2174
|
+
end
|
2175
|
+
|
2176
|
+
# Update properties of this object
|
2177
|
+
def update!(**args)
|
2178
|
+
@arguments = args[:arguments] if args.key?(:arguments)
|
2179
|
+
@defined_in_material = args[:defined_in_material] if args.key?(:defined_in_material)
|
2180
|
+
@entry_point = args[:entry_point] if args.key?(:entry_point)
|
2181
|
+
@environment = args[:environment] if args.key?(:environment)
|
2182
|
+
@type = args[:type] if args.key?(:type)
|
2183
|
+
end
|
2184
|
+
end
|
2185
|
+
|
1849
2186
|
# Source describes the location of the source used for the build.
|
1850
2187
|
class Source
|
1851
2188
|
include Google::Apis::Core::Hashable
|
@@ -1974,7 +2311,8 @@ module Google
|
|
1974
2311
|
class Subject
|
1975
2312
|
include Google::Apis::Core::Hashable
|
1976
2313
|
|
1977
|
-
# "": ""
|
2314
|
+
# "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/
|
2315
|
+
# attestation/blob/main/spec/field_types.md#DigestSet
|
1978
2316
|
# Corresponds to the JSON property `digest`
|
1979
2317
|
# @return [Hash<String,String>]
|
1980
2318
|
attr_accessor :digest
|
@@ -2150,6 +2488,15 @@ module Google
|
|
2150
2488
|
# @return [Float]
|
2151
2489
|
attr_accessor :cvss_score
|
2152
2490
|
|
2491
|
+
# Common Vulnerability Scoring System. For details, see https://www.first.org/
|
2492
|
+
# cvss/specification-document This is a message we will try to use for storing
|
2493
|
+
# multiple versions of CVSS. The intention is that as new versions of CVSS
|
2494
|
+
# scores get added, we will be able to modify this message rather than adding
|
2495
|
+
# new protos for each new version of the score.
|
2496
|
+
# Corresponds to the JSON property `cvssv3`
|
2497
|
+
# @return [Google::Apis::OndemandscanningV1::Cvss]
|
2498
|
+
attr_accessor :cvssv3
|
2499
|
+
|
2153
2500
|
# The distro assigned severity for this vulnerability when it is available,
|
2154
2501
|
# otherwise this is the note provider assigned severity. When there are multiple
|
2155
2502
|
# PackageIssues for this vulnerability, they can have different effective
|
@@ -2207,6 +2554,7 @@ module Google
|
|
2207
2554
|
# Update properties of this object
|
2208
2555
|
def update!(**args)
|
2209
2556
|
@cvss_score = args[:cvss_score] if args.key?(:cvss_score)
|
2557
|
+
@cvssv3 = args[:cvssv3] if args.key?(:cvssv3)
|
2210
2558
|
@effective_severity = args[:effective_severity] if args.key?(:effective_severity)
|
2211
2559
|
@fix_available = args[:fix_available] if args.key?(:fix_available)
|
2212
2560
|
@long_description = args[:long_description] if args.key?(:long_description)
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module OndemandscanningV1
|
18
18
|
# Version of the google-apis-ondemandscanning_v1 gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.14.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
22
|
GENERATOR_VERSION = "0.4.0"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20211206"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
@@ -88,6 +88,12 @@ module Google
|
|
88
88
|
include Google::Apis::Core::JsonObjectSupport
|
89
89
|
end
|
90
90
|
|
91
|
+
class Cvss
|
92
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
|
+
|
94
|
+
include Google::Apis::Core::JsonObjectSupport
|
95
|
+
end
|
96
|
+
|
91
97
|
class Category
|
92
98
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
99
|
|
@@ -238,6 +244,12 @@ module Google
|
|
238
244
|
include Google::Apis::Core::JsonObjectSupport
|
239
245
|
end
|
240
246
|
|
247
|
+
class Material
|
248
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
249
|
+
|
250
|
+
include Google::Apis::Core::JsonObjectSupport
|
251
|
+
end
|
252
|
+
|
241
253
|
class Metadata
|
242
254
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
243
255
|
|
@@ -310,6 +322,36 @@ module Google
|
|
310
322
|
include Google::Apis::Core::JsonObjectSupport
|
311
323
|
end
|
312
324
|
|
325
|
+
class SlsaBuilder
|
326
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
327
|
+
|
328
|
+
include Google::Apis::Core::JsonObjectSupport
|
329
|
+
end
|
330
|
+
|
331
|
+
class SlsaCompleteness
|
332
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
333
|
+
|
334
|
+
include Google::Apis::Core::JsonObjectSupport
|
335
|
+
end
|
336
|
+
|
337
|
+
class SlsaMetadata
|
338
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
339
|
+
|
340
|
+
include Google::Apis::Core::JsonObjectSupport
|
341
|
+
end
|
342
|
+
|
343
|
+
class SlsaProvenance
|
344
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
345
|
+
|
346
|
+
include Google::Apis::Core::JsonObjectSupport
|
347
|
+
end
|
348
|
+
|
349
|
+
class SlsaRecipe
|
350
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
351
|
+
|
352
|
+
include Google::Apis::Core::JsonObjectSupport
|
353
|
+
end
|
354
|
+
|
313
355
|
class Source
|
314
356
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
315
357
|
|
@@ -437,6 +479,8 @@ module Google
|
|
437
479
|
class Representation < Google::Apis::Core::JsonRepresentation
|
438
480
|
property :intoto_provenance, as: 'intotoProvenance', class: Google::Apis::OndemandscanningV1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1::InTotoProvenance::Representation
|
439
481
|
|
482
|
+
property :intoto_statement, as: 'intotoStatement', class: Google::Apis::OndemandscanningV1::InTotoStatement, decorator: Google::Apis::OndemandscanningV1::InTotoStatement::Representation
|
483
|
+
|
440
484
|
property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1::BuildProvenance, decorator: Google::Apis::OndemandscanningV1::BuildProvenance::Representation
|
441
485
|
|
442
486
|
property :provenance_bytes, as: 'provenanceBytes'
|
@@ -472,6 +516,24 @@ module Google
|
|
472
516
|
end
|
473
517
|
end
|
474
518
|
|
519
|
+
class Cvss
|
520
|
+
# @private
|
521
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
522
|
+
property :attack_complexity, as: 'attackComplexity'
|
523
|
+
property :attack_vector, as: 'attackVector'
|
524
|
+
property :authentication, as: 'authentication'
|
525
|
+
property :availability_impact, as: 'availabilityImpact'
|
526
|
+
property :base_score, as: 'baseScore'
|
527
|
+
property :confidentiality_impact, as: 'confidentialityImpact'
|
528
|
+
property :exploitability_score, as: 'exploitabilityScore'
|
529
|
+
property :impact_score, as: 'impactScore'
|
530
|
+
property :integrity_impact, as: 'integrityImpact'
|
531
|
+
property :privileges_required, as: 'privilegesRequired'
|
532
|
+
property :scope, as: 'scope'
|
533
|
+
property :user_interaction, as: 'userInteraction'
|
534
|
+
end
|
535
|
+
end
|
536
|
+
|
475
537
|
class Category
|
476
538
|
# @private
|
477
539
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -660,12 +722,14 @@ module Google
|
|
660
722
|
class InTotoStatement
|
661
723
|
# @private
|
662
724
|
class Representation < Google::Apis::Core::JsonRepresentation
|
725
|
+
property :_type, as: '_type'
|
663
726
|
property :predicate_type, as: 'predicateType'
|
664
727
|
property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1::InTotoProvenance::Representation
|
665
728
|
|
729
|
+
property :slsa_provenance, as: 'slsaProvenance', class: Google::Apis::OndemandscanningV1::SlsaProvenance, decorator: Google::Apis::OndemandscanningV1::SlsaProvenance::Representation
|
730
|
+
|
666
731
|
collection :subject, as: 'subject', class: Google::Apis::OndemandscanningV1::Subject, decorator: Google::Apis::OndemandscanningV1::Subject::Representation
|
667
732
|
|
668
|
-
property :type, as: 'type'
|
669
733
|
end
|
670
734
|
end
|
671
735
|
|
@@ -712,6 +776,14 @@ module Google
|
|
712
776
|
end
|
713
777
|
end
|
714
778
|
|
779
|
+
class Material
|
780
|
+
# @private
|
781
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
782
|
+
hash :digest, as: 'digest'
|
783
|
+
property :uri, as: 'uri'
|
784
|
+
end
|
785
|
+
end
|
786
|
+
|
715
787
|
class Metadata
|
716
788
|
# @private
|
717
789
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -863,6 +935,59 @@ module Google
|
|
863
935
|
end
|
864
936
|
end
|
865
937
|
|
938
|
+
class SlsaBuilder
|
939
|
+
# @private
|
940
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
941
|
+
property :id, as: 'id'
|
942
|
+
end
|
943
|
+
end
|
944
|
+
|
945
|
+
class SlsaCompleteness
|
946
|
+
# @private
|
947
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
948
|
+
property :arguments, as: 'arguments'
|
949
|
+
property :environment, as: 'environment'
|
950
|
+
property :materials, as: 'materials'
|
951
|
+
end
|
952
|
+
end
|
953
|
+
|
954
|
+
class SlsaMetadata
|
955
|
+
# @private
|
956
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
957
|
+
property :build_finished_on, as: 'buildFinishedOn'
|
958
|
+
property :build_invocation_id, as: 'buildInvocationId'
|
959
|
+
property :build_started_on, as: 'buildStartedOn'
|
960
|
+
property :completeness, as: 'completeness', class: Google::Apis::OndemandscanningV1::SlsaCompleteness, decorator: Google::Apis::OndemandscanningV1::SlsaCompleteness::Representation
|
961
|
+
|
962
|
+
property :reproducible, as: 'reproducible'
|
963
|
+
end
|
964
|
+
end
|
965
|
+
|
966
|
+
class SlsaProvenance
|
967
|
+
# @private
|
968
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
969
|
+
property :builder, as: 'builder', class: Google::Apis::OndemandscanningV1::SlsaBuilder, decorator: Google::Apis::OndemandscanningV1::SlsaBuilder::Representation
|
970
|
+
|
971
|
+
collection :materials, as: 'materials', class: Google::Apis::OndemandscanningV1::Material, decorator: Google::Apis::OndemandscanningV1::Material::Representation
|
972
|
+
|
973
|
+
property :metadata, as: 'metadata', class: Google::Apis::OndemandscanningV1::SlsaMetadata, decorator: Google::Apis::OndemandscanningV1::SlsaMetadata::Representation
|
974
|
+
|
975
|
+
property :recipe, as: 'recipe', class: Google::Apis::OndemandscanningV1::SlsaRecipe, decorator: Google::Apis::OndemandscanningV1::SlsaRecipe::Representation
|
976
|
+
|
977
|
+
end
|
978
|
+
end
|
979
|
+
|
980
|
+
class SlsaRecipe
|
981
|
+
# @private
|
982
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
983
|
+
hash :arguments, as: 'arguments'
|
984
|
+
property :defined_in_material, :numeric_string => true, as: 'definedInMaterial'
|
985
|
+
property :entry_point, as: 'entryPoint'
|
986
|
+
hash :environment, as: 'environment'
|
987
|
+
property :type, as: 'type'
|
988
|
+
end
|
989
|
+
end
|
990
|
+
|
866
991
|
class Source
|
867
992
|
# @private
|
868
993
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -945,6 +1070,8 @@ module Google
|
|
945
1070
|
# @private
|
946
1071
|
class Representation < Google::Apis::Core::JsonRepresentation
|
947
1072
|
property :cvss_score, as: 'cvssScore'
|
1073
|
+
property :cvssv3, as: 'cvssv3', class: Google::Apis::OndemandscanningV1::Cvss, decorator: Google::Apis::OndemandscanningV1::Cvss::Representation
|
1074
|
+
|
948
1075
|
property :effective_severity, as: 'effectiveSeverity'
|
949
1076
|
property :fix_available, as: 'fixAvailable'
|
950
1077
|
property :long_description, as: 'longDescription'
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-ondemandscanning_v1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.14.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2022-01-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -57,9 +57,9 @@ licenses:
|
|
57
57
|
- Apache-2.0
|
58
58
|
metadata:
|
59
59
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
60
|
-
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
61
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.
|
62
|
-
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
60
|
+
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1/CHANGELOG.md
|
61
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.14.0
|
62
|
+
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1
|
63
63
|
post_install_message:
|
64
64
|
rdoc_options: []
|
65
65
|
require_paths:
|
@@ -75,7 +75,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
75
75
|
- !ruby/object:Gem::Version
|
76
76
|
version: '0'
|
77
77
|
requirements: []
|
78
|
-
rubygems_version: 3.
|
78
|
+
rubygems_version: 3.3.4
|
79
79
|
signing_key:
|
80
80
|
specification_version: 4
|
81
81
|
summary: Simple REST client for On-Demand Scanning API V1
|