google-apis-ondemandscanning_v1 0.36.0 → 0.38.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ffb3d01999ccc34a223bf5fbd8058af07971a8e0988f2de07dd16a7198bb7e3f
-  data.tar.gz: a745bdfb6abc64d010092a2cef6a0c7f04963a0d16beb1e6cbd29bf96c7d2fad
+  metadata.gz: 6e34d77e5870880579179c7b2bd9273665f3d35be3cdd0a8b9ae01927ffd90b8
+  data.tar.gz: 7773d412209a5cee3a3994f83cc8514415c6b7830a97c34ccd373dd57badfdd6
 SHA512:
-  metadata.gz: 12b707cd8d33cffcf20e2719b431b33b59dd9c444738f4039f7f17421134c54df1c23dfb9ed12818cc3476a7382168fc6e4396aae955afdc378d3ce0ff82b9c6
-  data.tar.gz: aa4ba0536966b118bc81e9ec01aa8d5b478974d70ccf5ea22a1bf2d270db996571abdc311bf1351b6620fe899f523bd262228504a98c9f9ff284c073493f7b63
+  metadata.gz: 2304fb4df224a5bc34e35fb7dd20988d43538c3a126a22464d59d4072c970cdeb651e9f73a5986f48a557228f50e4db02448ca6e2b784397d61b69610d78f3ab
+  data.tar.gz: 3cf666c6fdb6cf22c86a4d68088326d18279cff2b2b27b1166f441b75c11ede07a8da729cfe40bc297ad71b58e8cb04c28061ae50ffbe6f6ea98bf7366002106

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-ondemandscanning_v1
 
+### v0.38.0 (2023-05-07)
+
+* Regenerated from discovery document revision 20230501
+
+### v0.37.0 (2023-04-16)
+
+* Regenerated from discovery document revision 20230403
+
 ### v0.36.0 (2023-04-02)
 
 * Regenerated from discovery document revision 20230327

data/lib/google/apis/ondemandscanning_v1/classes.rb

@@ -277,31 +277,6 @@ module Google
         end
       end
       
-      # 
-      class Binary
-        include Google::Apis::Core::Hashable
-      
-        # 
-        # Corresponds to the JSON property `name`
-        # @return [String]
-        attr_accessor :name
-      
-        # 
-        # Corresponds to the JSON property `version`
-        # @return [String]
-        attr_accessor :version
-      
-        def initialize(**args)
-           update!(**args)
-        end
-      
-        # Update properties of this object
-        def update!(**args)
-          @name = args[:name] if args.key?(:name)
-          @version = args[:version] if args.key?(:version)
-        end
-      end
-      
       # Details of a build occurrence.
       class BuildOccurrence
         include Google::Apis::Core::Hashable
@@ -1924,6 +1899,13 @@ module Google
         # @return [String]
         attr_accessor :resource_uri
       
+        # The occurrence representing an SBOM reference as applied to a specific
+        # resource. The occurrence follows the DSSE specification. See https://github.
+        # com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
+        # Corresponds to the JSON property `sbomReference`
+        # @return [Google::Apis::OndemandscanningV1::SbomReferenceOccurrence]
+        attr_accessor :sbom_reference
+      
         # Output only. The time this occurrence was last updated.
         # Corresponds to the JSON property `updateTime`
         # @return [String]
@@ -1964,6 +1946,7 @@ module Google
           @package = args[:package] if args.key?(:package)
           @remediation = args[:remediation] if args.key?(:remediation)
           @resource_uri = args[:resource_uri] if args.key?(:resource_uri)
+          @sbom_reference = args[:sbom_reference] if args.key?(:sbom_reference)
           @update_time = args[:update_time] if args.key?(:update_time)
           @upgrade = args[:upgrade] if args.key?(:upgrade)
           @vulnerability = args[:vulnerability] if args.key?(:vulnerability)
@@ -2044,11 +2027,11 @@ module Google
         # The binary package. This is significant when the source is different than the
         # binary itself. Historically if they've differed, we've stored the name of the
         # source and its version in the package/version fields, but we should also store
-        # the binary package info, as that's what's actually installed. See https://b.
-        # corp.google.com/issues/175908657#comment15
-        # Corresponds to the JSON property `binary`
-        # @return [Google::Apis::OndemandscanningV1::Binary]
-        attr_accessor :binary
+        # the binary package info, as that's what's actually installed. See b/175908657#
+        # comment15.
+        # Corresponds to the JSON property `binaryVersion`
+        # @return [Google::Apis::OndemandscanningV1::PackageVersion]
+        attr_accessor :binary_version
       
         # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which
         # the vulnerability may manifest. Examples include distro or storage location
@@ -2107,6 +2090,14 @@ module Google
         # @return [Array<String>]
         attr_accessor :patched_cve
       
+        # The source package. Similar to the above, this is significant when the source
+        # is different than the binary itself. Since the top-level package/version
+        # fields are based on an if/else, we need a separate field for both binary and
+        # source if we want to know definitively where the data is coming from.
+        # Corresponds to the JSON property `sourceVersion`
+        # @return [Google::Apis::OndemandscanningV1::PackageVersion]
+        attr_accessor :source_version
+      
         # 
         # Corresponds to the JSON property `unused`
         # @return [String]
@@ -2124,7 +2115,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @architecture = args[:architecture] if args.key?(:architecture)
-          @binary = args[:binary] if args.key?(:binary)
+          @binary_version = args[:binary_version] if args.key?(:binary_version)
           @cpe_uri = args[:cpe_uri] if args.key?(:cpe_uri)
           @dependency_chain = args[:dependency_chain] if args.key?(:dependency_chain)
           @file_location = args[:file_location] if args.key?(:file_location)
@@ -2135,6 +2126,7 @@ module Google
           @package = args[:package] if args.key?(:package)
           @package_type = args[:package_type] if args.key?(:package_type)
           @patched_cve = args[:patched_cve] if args.key?(:patched_cve)
+          @source_version = args[:source_version] if args.key?(:source_version)
           @unused = args[:unused] if args.key?(:unused)
           @version = args[:version] if args.key?(:version)
         end
@@ -2280,6 +2272,31 @@ module Google
         end
       end
       
+      # 
+      class PackageVersion
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # 
+        # Corresponds to the JSON property `version`
+        # @return [String]
+        attr_accessor :version
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+          @version = args[:version] if args.key?(:version)
+        end
+      end
+      
       # Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31)
       # and a repo name within that project.
       class ProjectRepoId
@@ -2449,6 +2466,119 @@ module Google
         end
       end
       
+      # The occurrence representing an SBOM reference as applied to a specific
+      # resource. The occurrence follows the DSSE specification. See https://github.
+      # com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
+      class SbomReferenceOccurrence
+        include Google::Apis::Core::Hashable
+      
+        # The actual payload that contains the SBOM Reference data. The payload follows
+        # the intoto statement specification. See https://github.com/in-toto/attestation/
+        # blob/main/spec/v1.0/statement.md for more details.
+        # Corresponds to the JSON property `payload`
+        # @return [Google::Apis::OndemandscanningV1::SbomReferenceIntotoPayload]
+        attr_accessor :payload
+      
+        # The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the
+        # intoto format, this value is expected to be 'application/vnd.in-toto+json'.
+        # Corresponds to the JSON property `payloadType`
+        # @return [String]
+        attr_accessor :payload_type
+      
+        # The signatures over the payload.
+        # Corresponds to the JSON property `signatures`
+        # @return [Array<Google::Apis::OndemandscanningV1::EnvelopeSignature>]
+        attr_accessor :signatures
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @payload = args[:payload] if args.key?(:payload)
+          @payload_type = args[:payload_type] if args.key?(:payload_type)
+          @signatures = args[:signatures] if args.key?(:signatures)
+        end
+      end
+      
+      # The actual payload that contains the SBOM Reference data. The payload follows
+      # the intoto statement specification. See https://github.com/in-toto/attestation/
+      # blob/main/spec/v1.0/statement.md for more details.
+      class SbomReferenceIntotoPayload
+        include Google::Apis::Core::Hashable
+      
+        # Identifier for the schema of the Statement.
+        # Corresponds to the JSON property `_type`
+        # @return [String]
+        attr_accessor :_type
+      
+        # A predicate which describes the SBOM being referenced.
+        # Corresponds to the JSON property `predicate`
+        # @return [Google::Apis::OndemandscanningV1::SbomReferenceIntotoPredicate]
+        attr_accessor :predicate
+      
+        # URI identifying the type of the Predicate.
+        # Corresponds to the JSON property `predicateType`
+        # @return [String]
+        attr_accessor :predicate_type
+      
+        # Set of software artifacts that the attestation applies to. Each element
+        # represents a single software artifact.
+        # Corresponds to the JSON property `subject`
+        # @return [Array<Google::Apis::OndemandscanningV1::Subject>]
+        attr_accessor :subject
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @_type = args[:_type] if args.key?(:_type)
+          @predicate = args[:predicate] if args.key?(:predicate)
+          @predicate_type = args[:predicate_type] if args.key?(:predicate_type)
+          @subject = args[:subject] if args.key?(:subject)
+        end
+      end
+      
+      # A predicate which describes the SBOM being referenced.
+      class SbomReferenceIntotoPredicate
+        include Google::Apis::Core::Hashable
+      
+        # A map of algorithm to digest of the contents of the SBOM.
+        # Corresponds to the JSON property `digest`
+        # @return [Hash<String,String>]
+        attr_accessor :digest
+      
+        # The location of the SBOM.
+        # Corresponds to the JSON property `location`
+        # @return [String]
+        attr_accessor :location
+      
+        # The mime type of the SBOM.
+        # Corresponds to the JSON property `mimeType`
+        # @return [String]
+        attr_accessor :mime_type
+      
+        # The person or system referring this predicate to the consumer.
+        # Corresponds to the JSON property `referrerId`
+        # @return [String]
+        attr_accessor :referrer_id
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @digest = args[:digest] if args.key?(:digest)
+          @location = args[:location] if args.key?(:location)
+          @mime_type = args[:mime_type] if args.key?(:mime_type)
+          @referrer_id = args[:referrer_id] if args.key?(:referrer_id)
+        end
+      end
+      
       # Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to
       # the trust anchors defined in policy (e.g. a Kritis policy). Typically this
       # means that the verifier has been configured with a map from `public_key_id` to

data/lib/google/apis/ondemandscanning_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module OndemandscanningV1
       # Version of the google-apis-ondemandscanning_v1 gem
-      GEM_VERSION = "0.36.0"
+      GEM_VERSION = "0.38.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.12.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20230327"
+      REVISION = "20230501"
     end
   end
 end

data/lib/google/apis/ondemandscanning_v1/representations.rb

@@ -76,12 +76,6 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class Binary
-        class Representation < Google::Apis::Core::JsonRepresentation; end
-      
-        include Google::Apis::Core::JsonObjectSupport
-      end
-      
       class BuildOccurrence
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -376,6 +370,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class PackageVersion
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ProjectRepoId
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -406,6 +406,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SbomReferenceOccurrence
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SbomReferenceIntotoPayload
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SbomReferenceIntotoPredicate
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Signature
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -583,14 +601,6 @@ module Google
         end
       end
       
-      class Binary
-        # @private
-        class Representation < Google::Apis::Core::JsonRepresentation
-          property :name, as: 'name'
-          property :version, as: 'version'
-        end
-      end
-      
       class BuildOccurrence
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1057,6 +1067,8 @@ module Google
       
           property :remediation, as: 'remediation'
           property :resource_uri, as: 'resourceUri'
+          property :sbom_reference, as: 'sbomReference', class: Google::Apis::OndemandscanningV1::SbomReferenceOccurrence, decorator: Google::Apis::OndemandscanningV1::SbomReferenceOccurrence::Representation
+      
           property :update_time, as: 'updateTime'
           property :upgrade, as: 'upgrade', class: Google::Apis::OndemandscanningV1::UpgradeOccurrence, decorator: Google::Apis::OndemandscanningV1::UpgradeOccurrence::Representation
       
@@ -1081,7 +1093,7 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :architecture, as: 'architecture'
-          property :binary, as: 'binary', class: Google::Apis::OndemandscanningV1::Binary, decorator: Google::Apis::OndemandscanningV1::Binary::Representation
+          property :binary_version, as: 'binaryVersion', class: Google::Apis::OndemandscanningV1::PackageVersion, decorator: Google::Apis::OndemandscanningV1::PackageVersion::Representation
       
           property :cpe_uri, as: 'cpeUri'
           collection :dependency_chain, as: 'dependencyChain', class: Google::Apis::OndemandscanningV1::LanguagePackageDependency, decorator: Google::Apis::OndemandscanningV1::LanguagePackageDependency::Representation
@@ -1096,6 +1108,8 @@ module Google
           property :package, as: 'package'
           property :package_type, as: 'packageType'
           collection :patched_cve, as: 'patchedCve'
+          property :source_version, as: 'sourceVersion', class: Google::Apis::OndemandscanningV1::PackageVersion, decorator: Google::Apis::OndemandscanningV1::PackageVersion::Representation
+      
           property :unused, as: 'unused'
           property :version, as: 'version'
         end
@@ -1136,6 +1150,14 @@ module Google
         end
       end
       
+      class PackageVersion
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :name, as: 'name'
+          property :version, as: 'version'
+        end
+      end
+      
       class ProjectRepoId
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1182,6 +1204,39 @@ module Google
         end
       end
       
+      class SbomReferenceOccurrence
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :payload, as: 'payload', class: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPayload, decorator: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPayload::Representation
+      
+          property :payload_type, as: 'payloadType'
+          collection :signatures, as: 'signatures', class: Google::Apis::OndemandscanningV1::EnvelopeSignature, decorator: Google::Apis::OndemandscanningV1::EnvelopeSignature::Representation
+      
+        end
+      end
+      
+      class SbomReferenceIntotoPayload
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :_type, as: '_type'
+          property :predicate, as: 'predicate', class: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPredicate, decorator: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPredicate::Representation
+      
+          property :predicate_type, as: 'predicateType'
+          collection :subject, as: 'subject', class: Google::Apis::OndemandscanningV1::Subject, decorator: Google::Apis::OndemandscanningV1::Subject::Representation
+      
+        end
+      end
+      
+      class SbomReferenceIntotoPredicate
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :digest, as: 'digest'
+          property :location, as: 'location'
+          property :mime_type, as: 'mimeType'
+          property :referrer_id, as: 'referrerId'
+        end
+      end
+      
       class Signature
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-ondemandscanning_v1
 version: !ruby/object:Gem::Version
-  version: 0.36.0
+  version: 0.38.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-02 00:00:00.000000000 Z
+date: 2023-05-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.36.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.38.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1
 post_install_message: 
 rdoc_options: []