google-apis-ondemandscanning_v1 0.37.0 → 0.39.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4f4df01283484c4c0a09ec01ad2cdd6caa02c4db300d011bd94bb1597e177561
-  data.tar.gz: ab55f3a32012b7f2b2c6f62c88df2a55819e5174956dc22221c7f0908e432373
+  metadata.gz: 388c15616165e493856f804ac0fbe29a5ab5c17f3eced02c7942074c2f17664d
+  data.tar.gz: 171e17747cc2efbf1e40f2aee0e2d8d156c29e6ac652edac7246a379afced91f
 SHA512:
-  metadata.gz: 7ea7078039a927f4d9c6af41d785a52ce6ee37e7e290d2507aabf47b70203b4611a1ec5467e232966527432d251e6f078d3decbf24f2e49ef8bfc0c320ec5bcb
-  data.tar.gz: 797fec5771da6489e2d77328e9445d292dbd252eb98ea35ec41cafda7cd9539b191ce8a6fc60957f4113562e0424d386da35250de81905e856d2b8f9cfe5727e
+  metadata.gz: 9ce60d2540ceabdd50743869252ab7c05753d143a82ba500f4b44dbc0adad6fbe716ef0d3648adf2d36329969a21bb959a21a5a955d3b6ac7f0347ca00667177
+  data.tar.gz: 8548f518c736adeae71a59070cae1c30dba9de4ebf47727228dea1d6ad51c2937c7486b304f82df703c3f8a2f244d2f1e7e2b622fa55571c573edc63ba478b97

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-ondemandscanning_v1
 
+### v0.39.0 (2023-05-28)
+
+* Regenerated from discovery document revision 20230522
+
+### v0.38.0 (2023-05-07)
+
+* Regenerated from discovery document revision 20230501
+
 ### v0.37.0 (2023-04-16)
 
 * Regenerated from discovery document revision 20230403

data/lib/google/apis/ondemandscanning_v1/classes.rb

@@ -278,18 +278,25 @@ module Google
       end
       
       # 
-      class Binary
+      class BinarySourceInfo
         include Google::Apis::Core::Hashable
       
-        # 
-        # Corresponds to the JSON property `name`
-        # @return [String]
-        attr_accessor :name
+        # The binary package. This is significant when the source is different than the
+        # binary itself. Historically if they've differed, we've stored the name of the
+        # source and its version in the package/version fields, but we should also store
+        # the binary package info, as that's what's actually installed. See b/175908657#
+        # comment15.
+        # Corresponds to the JSON property `binaryVersion`
+        # @return [Google::Apis::OndemandscanningV1::PackageVersion]
+        attr_accessor :binary_version
       
-        # 
-        # Corresponds to the JSON property `version`
-        # @return [String]
-        attr_accessor :version
+        # The source package. Similar to the above, this is significant when the source
+        # is different than the binary itself. Since the top-level package/version
+        # fields are based on an if/else, we need a separate field for both binary and
+        # source if we want to know definitively where the data is coming from.
+        # Corresponds to the JSON property `sourceVersion`
+        # @return [Google::Apis::OndemandscanningV1::PackageVersion]
+        attr_accessor :source_version
       
         def initialize(**args)
            update!(**args)
@@ -297,8 +304,8 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @name = args[:name] if args.key?(:name)
-          @version = args[:version] if args.key?(:version)
+          @binary_version = args[:binary_version] if args.key?(:binary_version)
+          @source_version = args[:source_version] if args.key?(:source_version)
         end
       end
       
@@ -1924,6 +1931,13 @@ module Google
         # @return [String]
         attr_accessor :resource_uri
       
+        # The occurrence representing an SBOM reference as applied to a specific
+        # resource. The occurrence follows the DSSE specification. See https://github.
+        # com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
+        # Corresponds to the JSON property `sbomReference`
+        # @return [Google::Apis::OndemandscanningV1::SbomReferenceOccurrence]
+        attr_accessor :sbom_reference
+      
         # Output only. The time this occurrence was last updated.
         # Corresponds to the JSON property `updateTime`
         # @return [String]
@@ -1964,6 +1978,7 @@ module Google
           @package = args[:package] if args.key?(:package)
           @remediation = args[:remediation] if args.key?(:remediation)
           @resource_uri = args[:resource_uri] if args.key?(:resource_uri)
+          @sbom_reference = args[:sbom_reference] if args.key?(:sbom_reference)
           @update_time = args[:update_time] if args.key?(:update_time)
           @upgrade = args[:upgrade] if args.key?(:upgrade)
           @vulnerability = args[:vulnerability] if args.key?(:vulnerability)
@@ -2041,14 +2056,15 @@ module Google
         # @return [String]
         attr_accessor :architecture
       
-        # The binary package. This is significant when the source is different than the
-        # binary itself. Historically if they've differed, we've stored the name of the
-        # source and its version in the package/version fields, but we should also store
-        # the binary package info, as that's what's actually installed. See b/175908657#
-        # comment15.
-        # Corresponds to the JSON property `binary`
-        # @return [Google::Apis::OndemandscanningV1::Binary]
-        attr_accessor :binary
+        # A bundle containing the binary and source information.
+        # Corresponds to the JSON property `binarySourceInfo`
+        # @return [Array<Google::Apis::OndemandscanningV1::BinarySourceInfo>]
+        attr_accessor :binary_source_info
+      
+        # DEPRECATED
+        # Corresponds to the JSON property `binaryVersion`
+        # @return [Google::Apis::OndemandscanningV1::PackageVersion]
+        attr_accessor :binary_version
       
         # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which
         # the vulnerability may manifest. Examples include distro or storage location
@@ -2107,6 +2123,11 @@ module Google
         # @return [Array<String>]
         attr_accessor :patched_cve
       
+        # DEPRECATED
+        # Corresponds to the JSON property `sourceVersion`
+        # @return [Google::Apis::OndemandscanningV1::PackageVersion]
+        attr_accessor :source_version
+      
         # 
         # Corresponds to the JSON property `unused`
         # @return [String]
@@ -2124,7 +2145,8 @@ module Google
         # Update properties of this object
         def update!(**args)
           @architecture = args[:architecture] if args.key?(:architecture)
-          @binary = args[:binary] if args.key?(:binary)
+          @binary_source_info = args[:binary_source_info] if args.key?(:binary_source_info)
+          @binary_version = args[:binary_version] if args.key?(:binary_version)
           @cpe_uri = args[:cpe_uri] if args.key?(:cpe_uri)
           @dependency_chain = args[:dependency_chain] if args.key?(:dependency_chain)
           @file_location = args[:file_location] if args.key?(:file_location)
@@ -2135,6 +2157,7 @@ module Google
           @package = args[:package] if args.key?(:package)
           @package_type = args[:package_type] if args.key?(:package_type)
           @patched_cve = args[:patched_cve] if args.key?(:patched_cve)
+          @source_version = args[:source_version] if args.key?(:source_version)
           @unused = args[:unused] if args.key?(:unused)
           @version = args[:version] if args.key?(:version)
         end
@@ -2280,6 +2303,31 @@ module Google
         end
       end
       
+      # 
+      class PackageVersion
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # 
+        # Corresponds to the JSON property `version`
+        # @return [String]
+        attr_accessor :version
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+          @version = args[:version] if args.key?(:version)
+        end
+      end
+      
       # Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31)
       # and a repo name within that project.
       class ProjectRepoId
@@ -2449,6 +2497,119 @@ module Google
         end
       end
       
+      # The occurrence representing an SBOM reference as applied to a specific
+      # resource. The occurrence follows the DSSE specification. See https://github.
+      # com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
+      class SbomReferenceOccurrence
+        include Google::Apis::Core::Hashable
+      
+        # The actual payload that contains the SBOM Reference data. The payload follows
+        # the intoto statement specification. See https://github.com/in-toto/attestation/
+        # blob/main/spec/v1.0/statement.md for more details.
+        # Corresponds to the JSON property `payload`
+        # @return [Google::Apis::OndemandscanningV1::SbomReferenceIntotoPayload]
+        attr_accessor :payload
+      
+        # The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the
+        # intoto format, this value is expected to be 'application/vnd.in-toto+json'.
+        # Corresponds to the JSON property `payloadType`
+        # @return [String]
+        attr_accessor :payload_type
+      
+        # The signatures over the payload.
+        # Corresponds to the JSON property `signatures`
+        # @return [Array<Google::Apis::OndemandscanningV1::EnvelopeSignature>]
+        attr_accessor :signatures
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @payload = args[:payload] if args.key?(:payload)
+          @payload_type = args[:payload_type] if args.key?(:payload_type)
+          @signatures = args[:signatures] if args.key?(:signatures)
+        end
+      end
+      
+      # The actual payload that contains the SBOM Reference data. The payload follows
+      # the intoto statement specification. See https://github.com/in-toto/attestation/
+      # blob/main/spec/v1.0/statement.md for more details.
+      class SbomReferenceIntotoPayload
+        include Google::Apis::Core::Hashable
+      
+        # Identifier for the schema of the Statement.
+        # Corresponds to the JSON property `_type`
+        # @return [String]
+        attr_accessor :_type
+      
+        # A predicate which describes the SBOM being referenced.
+        # Corresponds to the JSON property `predicate`
+        # @return [Google::Apis::OndemandscanningV1::SbomReferenceIntotoPredicate]
+        attr_accessor :predicate
+      
+        # URI identifying the type of the Predicate.
+        # Corresponds to the JSON property `predicateType`
+        # @return [String]
+        attr_accessor :predicate_type
+      
+        # Set of software artifacts that the attestation applies to. Each element
+        # represents a single software artifact.
+        # Corresponds to the JSON property `subject`
+        # @return [Array<Google::Apis::OndemandscanningV1::Subject>]
+        attr_accessor :subject
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @_type = args[:_type] if args.key?(:_type)
+          @predicate = args[:predicate] if args.key?(:predicate)
+          @predicate_type = args[:predicate_type] if args.key?(:predicate_type)
+          @subject = args[:subject] if args.key?(:subject)
+        end
+      end
+      
+      # A predicate which describes the SBOM being referenced.
+      class SbomReferenceIntotoPredicate
+        include Google::Apis::Core::Hashable
+      
+        # A map of algorithm to digest of the contents of the SBOM.
+        # Corresponds to the JSON property `digest`
+        # @return [Hash<String,String>]
+        attr_accessor :digest
+      
+        # The location of the SBOM.
+        # Corresponds to the JSON property `location`
+        # @return [String]
+        attr_accessor :location
+      
+        # The mime type of the SBOM.
+        # Corresponds to the JSON property `mimeType`
+        # @return [String]
+        attr_accessor :mime_type
+      
+        # The person or system referring this predicate to the consumer.
+        # Corresponds to the JSON property `referrerId`
+        # @return [String]
+        attr_accessor :referrer_id
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @digest = args[:digest] if args.key?(:digest)
+          @location = args[:location] if args.key?(:location)
+          @mime_type = args[:mime_type] if args.key?(:mime_type)
+          @referrer_id = args[:referrer_id] if args.key?(:referrer_id)
+        end
+      end
+      
       # Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to
       # the trust anchors defined in policy (e.g. a Kritis policy). Typically this
       # means that the verifier has been configured with a map from `public_key_id` to

data/lib/google/apis/ondemandscanning_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module OndemandscanningV1
       # Version of the google-apis-ondemandscanning_v1 gem
-      GEM_VERSION = "0.37.0"
+      GEM_VERSION = "0.39.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.12.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20230403"
+      REVISION = "20230522"
     end
   end
 end

data/lib/google/apis/ondemandscanning_v1/representations.rb

@@ -76,7 +76,7 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
-      class Binary
+      class BinarySourceInfo
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
@@ -376,6 +376,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class PackageVersion
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ProjectRepoId
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -406,6 +412,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SbomReferenceOccurrence
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SbomReferenceIntotoPayload
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SbomReferenceIntotoPredicate
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Signature
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -583,11 +607,13 @@ module Google
         end
       end
       
-      class Binary
+      class BinarySourceInfo
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
-          property :name, as: 'name'
-          property :version, as: 'version'
+          property :binary_version, as: 'binaryVersion', class: Google::Apis::OndemandscanningV1::PackageVersion, decorator: Google::Apis::OndemandscanningV1::PackageVersion::Representation
+      
+          property :source_version, as: 'sourceVersion', class: Google::Apis::OndemandscanningV1::PackageVersion, decorator: Google::Apis::OndemandscanningV1::PackageVersion::Representation
+      
         end
       end
       
@@ -1057,6 +1083,8 @@ module Google
       
           property :remediation, as: 'remediation'
           property :resource_uri, as: 'resourceUri'
+          property :sbom_reference, as: 'sbomReference', class: Google::Apis::OndemandscanningV1::SbomReferenceOccurrence, decorator: Google::Apis::OndemandscanningV1::SbomReferenceOccurrence::Representation
+      
           property :update_time, as: 'updateTime'
           property :upgrade, as: 'upgrade', class: Google::Apis::OndemandscanningV1::UpgradeOccurrence, decorator: Google::Apis::OndemandscanningV1::UpgradeOccurrence::Representation
       
@@ -1081,7 +1109,9 @@ module Google
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
           property :architecture, as: 'architecture'
-          property :binary, as: 'binary', class: Google::Apis::OndemandscanningV1::Binary, decorator: Google::Apis::OndemandscanningV1::Binary::Representation
+          collection :binary_source_info, as: 'binarySourceInfo', class: Google::Apis::OndemandscanningV1::BinarySourceInfo, decorator: Google::Apis::OndemandscanningV1::BinarySourceInfo::Representation
+      
+          property :binary_version, as: 'binaryVersion', class: Google::Apis::OndemandscanningV1::PackageVersion, decorator: Google::Apis::OndemandscanningV1::PackageVersion::Representation
       
           property :cpe_uri, as: 'cpeUri'
           collection :dependency_chain, as: 'dependencyChain', class: Google::Apis::OndemandscanningV1::LanguagePackageDependency, decorator: Google::Apis::OndemandscanningV1::LanguagePackageDependency::Representation
@@ -1096,6 +1126,8 @@ module Google
           property :package, as: 'package'
           property :package_type, as: 'packageType'
           collection :patched_cve, as: 'patchedCve'
+          property :source_version, as: 'sourceVersion', class: Google::Apis::OndemandscanningV1::PackageVersion, decorator: Google::Apis::OndemandscanningV1::PackageVersion::Representation
+      
           property :unused, as: 'unused'
           property :version, as: 'version'
         end
@@ -1136,6 +1168,14 @@ module Google
         end
       end
       
+      class PackageVersion
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :name, as: 'name'
+          property :version, as: 'version'
+        end
+      end
+      
       class ProjectRepoId
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1182,6 +1222,39 @@ module Google
         end
       end
       
+      class SbomReferenceOccurrence
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :payload, as: 'payload', class: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPayload, decorator: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPayload::Representation
+      
+          property :payload_type, as: 'payloadType'
+          collection :signatures, as: 'signatures', class: Google::Apis::OndemandscanningV1::EnvelopeSignature, decorator: Google::Apis::OndemandscanningV1::EnvelopeSignature::Representation
+      
+        end
+      end
+      
+      class SbomReferenceIntotoPayload
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :_type, as: '_type'
+          property :predicate, as: 'predicate', class: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPredicate, decorator: Google::Apis::OndemandscanningV1::SbomReferenceIntotoPredicate::Representation
+      
+          property :predicate_type, as: 'predicateType'
+          collection :subject, as: 'subject', class: Google::Apis::OndemandscanningV1::Subject, decorator: Google::Apis::OndemandscanningV1::Subject::Representation
+      
+        end
+      end
+      
+      class SbomReferenceIntotoPredicate
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :digest, as: 'digest'
+          property :location, as: 'location'
+          property :mime_type, as: 'mimeType'
+          property :referrer_id, as: 'referrerId'
+        end
+      end
+      
       class Signature
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-ondemandscanning_v1
 version: !ruby/object:Gem::Version
-  version: 0.37.0
+  version: 0.39.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-16 00:00:00.000000000 Z
+date: 2023-05-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.37.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.39.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1
 post_install_message: 
 rdoc_options: []