google-apis-ondemandscanning_v1 0.9.0 → 0.13.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 5847ab3aa2c975b2dabec7bf1d4bceb13582e5d63574af9e8c53eabe76971c12
|
4
|
+
data.tar.gz: f4c58348f580414d22070a1b4d397a95034ba83abd3e7025685c9d23e29e287b
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: c0343d75e15a0378707781e1c0d11bcb9b80e32259cf13246c7249dbfbf606bd152182a71c32c04640a0e30eb6ee5fc49eda02c3d4edce4def06012ff96ffd36
|
7
|
+
data.tar.gz: 90d9cbff7611f6244aa55296f06de3080b9260b78ee6e08b058d32db82eccd1d0bddec86ea8d998b8565a6ec68c48657d263add064c24aeb5f9396a19de0fdda
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,21 @@
|
|
1
1
|
# Release history for google-apis-ondemandscanning_v1
|
2
2
|
|
3
|
+
### v0.13.0 (2021-12-09)
|
4
|
+
|
5
|
+
* Regenerated from discovery document revision 20211206
|
6
|
+
|
7
|
+
### v0.12.0 (2021-11-04)
|
8
|
+
|
9
|
+
* Regenerated from discovery document revision 20211029
|
10
|
+
|
11
|
+
### v0.11.0 (2021-10-21)
|
12
|
+
|
13
|
+
* Unspecified changes
|
14
|
+
|
15
|
+
### v0.10.0 (2021-09-16)
|
16
|
+
|
17
|
+
* Regenerated from discovery document revision 20210911
|
18
|
+
|
3
19
|
### v0.9.0 (2021-09-01)
|
4
20
|
|
5
21
|
* Regenerated from discovery document revision 20210824
|
data/OVERVIEW.md
CHANGED
@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
|
|
60
60
|
|
61
61
|
More detailed descriptions of the Google simple REST clients are available in two documents.
|
62
62
|
|
63
|
-
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
64
|
-
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
63
|
+
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
|
64
|
+
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
|
65
65
|
|
66
66
|
(Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Ondemandscanning service in particular.)
|
67
67
|
|
@@ -104,6 +104,13 @@ module Google
|
|
104
104
|
class AnalyzePackagesRequestV1
|
105
105
|
include Google::Apis::Core::Hashable
|
106
106
|
|
107
|
+
# [DEPRECATED] Whether to include OSV data in the scan. For backwards
|
108
|
+
# compatibility reasons, this field can be neither removed nor renamed.
|
109
|
+
# Corresponds to the JSON property `includeOsvData`
|
110
|
+
# @return [Boolean]
|
111
|
+
attr_accessor :include_osv_data
|
112
|
+
alias_method :include_osv_data?, :include_osv_data
|
113
|
+
|
107
114
|
# The packages to analyze.
|
108
115
|
# Corresponds to the JSON property `packages`
|
109
116
|
# @return [Array<Google::Apis::OndemandscanningV1::PackageData>]
|
@@ -120,6 +127,7 @@ module Google
|
|
120
127
|
|
121
128
|
# Update properties of this object
|
122
129
|
def update!(**args)
|
130
|
+
@include_osv_data = args[:include_osv_data] if args.key?(:include_osv_data)
|
123
131
|
@packages = args[:packages] if args.key?(:packages)
|
124
132
|
@resource_uri = args[:resource_uri] if args.key?(:resource_uri)
|
125
133
|
end
|
@@ -253,11 +261,19 @@ module Google
|
|
253
261
|
class BuildOccurrence
|
254
262
|
include Google::Apis::Core::Hashable
|
255
263
|
|
256
|
-
#
|
264
|
+
# Deprecated. See InTotoStatement for the replacement. In-toto Provenance
|
265
|
+
# representation as defined in spec.
|
257
266
|
# Corresponds to the JSON property `intotoProvenance`
|
258
267
|
# @return [Google::Apis::OndemandscanningV1::InTotoProvenance]
|
259
268
|
attr_accessor :intoto_provenance
|
260
269
|
|
270
|
+
# Spec defined at https://github.com/in-toto/attestation/tree/main/spec#
|
271
|
+
# statement The serialized InTotoStatement will be stored as Envelope.payload.
|
272
|
+
# Envelope.payloadType is always "application/vnd.in-toto+json".
|
273
|
+
# Corresponds to the JSON property `intotoStatement`
|
274
|
+
# @return [Google::Apis::OndemandscanningV1::InTotoStatement]
|
275
|
+
attr_accessor :intoto_statement
|
276
|
+
|
261
277
|
# Provenance of a build. Contains all information needed to verify the full
|
262
278
|
# details about the build from source to completion.
|
263
279
|
# Corresponds to the JSON property `provenance`
|
@@ -283,6 +299,7 @@ module Google
|
|
283
299
|
# Update properties of this object
|
284
300
|
def update!(**args)
|
285
301
|
@intoto_provenance = args[:intoto_provenance] if args.key?(:intoto_provenance)
|
302
|
+
@intoto_statement = args[:intoto_statement] if args.key?(:intoto_statement)
|
286
303
|
@provenance = args[:provenance] if args.key?(:provenance)
|
287
304
|
@provenance_bytes = args[:provenance_bytes] if args.key?(:provenance_bytes)
|
288
305
|
end
|
@@ -402,6 +419,96 @@ module Google
|
|
402
419
|
end
|
403
420
|
end
|
404
421
|
|
422
|
+
# Common Vulnerability Scoring System. For details, see https://www.first.org/
|
423
|
+
# cvss/specification-document This is a message we will try to use for storing
|
424
|
+
# multiple versions of CVSS. The intention is that as new versions of CVSS
|
425
|
+
# scores get added, we will be able to modify this message rather than adding
|
426
|
+
# new protos for each new version of the score.
|
427
|
+
class Cvss
|
428
|
+
include Google::Apis::Core::Hashable
|
429
|
+
|
430
|
+
#
|
431
|
+
# Corresponds to the JSON property `attackComplexity`
|
432
|
+
# @return [String]
|
433
|
+
attr_accessor :attack_complexity
|
434
|
+
|
435
|
+
# Base Metrics Represents the intrinsic characteristics of a vulnerability that
|
436
|
+
# are constant over time and across user environments.
|
437
|
+
# Corresponds to the JSON property `attackVector`
|
438
|
+
# @return [String]
|
439
|
+
attr_accessor :attack_vector
|
440
|
+
|
441
|
+
#
|
442
|
+
# Corresponds to the JSON property `authentication`
|
443
|
+
# @return [String]
|
444
|
+
attr_accessor :authentication
|
445
|
+
|
446
|
+
#
|
447
|
+
# Corresponds to the JSON property `availabilityImpact`
|
448
|
+
# @return [String]
|
449
|
+
attr_accessor :availability_impact
|
450
|
+
|
451
|
+
# The base score is a function of the base metric scores.
|
452
|
+
# Corresponds to the JSON property `baseScore`
|
453
|
+
# @return [Float]
|
454
|
+
attr_accessor :base_score
|
455
|
+
|
456
|
+
#
|
457
|
+
# Corresponds to the JSON property `confidentialityImpact`
|
458
|
+
# @return [String]
|
459
|
+
attr_accessor :confidentiality_impact
|
460
|
+
|
461
|
+
#
|
462
|
+
# Corresponds to the JSON property `exploitabilityScore`
|
463
|
+
# @return [Float]
|
464
|
+
attr_accessor :exploitability_score
|
465
|
+
|
466
|
+
#
|
467
|
+
# Corresponds to the JSON property `impactScore`
|
468
|
+
# @return [Float]
|
469
|
+
attr_accessor :impact_score
|
470
|
+
|
471
|
+
#
|
472
|
+
# Corresponds to the JSON property `integrityImpact`
|
473
|
+
# @return [String]
|
474
|
+
attr_accessor :integrity_impact
|
475
|
+
|
476
|
+
#
|
477
|
+
# Corresponds to the JSON property `privilegesRequired`
|
478
|
+
# @return [String]
|
479
|
+
attr_accessor :privileges_required
|
480
|
+
|
481
|
+
#
|
482
|
+
# Corresponds to the JSON property `scope`
|
483
|
+
# @return [String]
|
484
|
+
attr_accessor :scope
|
485
|
+
|
486
|
+
#
|
487
|
+
# Corresponds to the JSON property `userInteraction`
|
488
|
+
# @return [String]
|
489
|
+
attr_accessor :user_interaction
|
490
|
+
|
491
|
+
def initialize(**args)
|
492
|
+
update!(**args)
|
493
|
+
end
|
494
|
+
|
495
|
+
# Update properties of this object
|
496
|
+
def update!(**args)
|
497
|
+
@attack_complexity = args[:attack_complexity] if args.key?(:attack_complexity)
|
498
|
+
@attack_vector = args[:attack_vector] if args.key?(:attack_vector)
|
499
|
+
@authentication = args[:authentication] if args.key?(:authentication)
|
500
|
+
@availability_impact = args[:availability_impact] if args.key?(:availability_impact)
|
501
|
+
@base_score = args[:base_score] if args.key?(:base_score)
|
502
|
+
@confidentiality_impact = args[:confidentiality_impact] if args.key?(:confidentiality_impact)
|
503
|
+
@exploitability_score = args[:exploitability_score] if args.key?(:exploitability_score)
|
504
|
+
@impact_score = args[:impact_score] if args.key?(:impact_score)
|
505
|
+
@integrity_impact = args[:integrity_impact] if args.key?(:integrity_impact)
|
506
|
+
@privileges_required = args[:privileges_required] if args.key?(:privileges_required)
|
507
|
+
@scope = args[:scope] if args.key?(:scope)
|
508
|
+
@user_interaction = args[:user_interaction] if args.key?(:user_interaction)
|
509
|
+
end
|
510
|
+
end
|
511
|
+
|
405
512
|
# The category to which the update belongs.
|
406
513
|
class Category
|
407
514
|
include Google::Apis::Core::Hashable
|
@@ -574,7 +681,8 @@ module Google
|
|
574
681
|
end
|
575
682
|
end
|
576
683
|
|
577
|
-
#
|
684
|
+
# Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
|
685
|
+
# the top level of the Occurrence.
|
578
686
|
class DsseAttestationOccurrence
|
579
687
|
include Google::Apis::Core::Hashable
|
580
688
|
|
@@ -1039,7 +1147,12 @@ module Google
|
|
1039
1147
|
class InTotoStatement
|
1040
1148
|
include Google::Apis::Core::Hashable
|
1041
1149
|
|
1042
|
-
# "https://in-toto.io/
|
1150
|
+
# Always "https://in-toto.io/Statement/v0.1".
|
1151
|
+
# Corresponds to the JSON property `_type`
|
1152
|
+
# @return [String]
|
1153
|
+
attr_accessor :_type
|
1154
|
+
|
1155
|
+
# "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
|
1043
1156
|
# Corresponds to the JSON property `predicateType`
|
1044
1157
|
# @return [String]
|
1045
1158
|
attr_accessor :predicate_type
|
@@ -1049,26 +1162,27 @@ module Google
|
|
1049
1162
|
# @return [Google::Apis::OndemandscanningV1::InTotoProvenance]
|
1050
1163
|
attr_accessor :provenance
|
1051
1164
|
|
1165
|
+
#
|
1166
|
+
# Corresponds to the JSON property `slsaProvenance`
|
1167
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaProvenance]
|
1168
|
+
attr_accessor :slsa_provenance
|
1169
|
+
|
1052
1170
|
#
|
1053
1171
|
# Corresponds to the JSON property `subject`
|
1054
1172
|
# @return [Array<Google::Apis::OndemandscanningV1::Subject>]
|
1055
1173
|
attr_accessor :subject
|
1056
1174
|
|
1057
|
-
# Always "https://in-toto.io/Statement/v0.1".
|
1058
|
-
# Corresponds to the JSON property `type`
|
1059
|
-
# @return [String]
|
1060
|
-
attr_accessor :type
|
1061
|
-
|
1062
1175
|
def initialize(**args)
|
1063
1176
|
update!(**args)
|
1064
1177
|
end
|
1065
1178
|
|
1066
1179
|
# Update properties of this object
|
1067
1180
|
def update!(**args)
|
1181
|
+
@_type = args[:_type] if args.key?(:_type)
|
1068
1182
|
@predicate_type = args[:predicate_type] if args.key?(:predicate_type)
|
1069
1183
|
@provenance = args[:provenance] if args.key?(:provenance)
|
1184
|
+
@slsa_provenance = args[:slsa_provenance] if args.key?(:slsa_provenance)
|
1070
1185
|
@subject = args[:subject] if args.key?(:subject)
|
1071
|
-
@type = args[:type] if args.key?(:type)
|
1072
1186
|
end
|
1073
1187
|
end
|
1074
1188
|
|
@@ -1204,6 +1318,31 @@ module Google
|
|
1204
1318
|
end
|
1205
1319
|
end
|
1206
1320
|
|
1321
|
+
#
|
1322
|
+
class Material
|
1323
|
+
include Google::Apis::Core::Hashable
|
1324
|
+
|
1325
|
+
#
|
1326
|
+
# Corresponds to the JSON property `digest`
|
1327
|
+
# @return [Hash<String,String>]
|
1328
|
+
attr_accessor :digest
|
1329
|
+
|
1330
|
+
#
|
1331
|
+
# Corresponds to the JSON property `uri`
|
1332
|
+
# @return [String]
|
1333
|
+
attr_accessor :uri
|
1334
|
+
|
1335
|
+
def initialize(**args)
|
1336
|
+
update!(**args)
|
1337
|
+
end
|
1338
|
+
|
1339
|
+
# Update properties of this object
|
1340
|
+
def update!(**args)
|
1341
|
+
@digest = args[:digest] if args.key?(:digest)
|
1342
|
+
@uri = args[:uri] if args.key?(:uri)
|
1343
|
+
end
|
1344
|
+
end
|
1345
|
+
|
1207
1346
|
# Other properties of the build.
|
1208
1347
|
class Metadata
|
1209
1348
|
include Google::Apis::Core::Hashable
|
@@ -1326,7 +1465,8 @@ module Google
|
|
1326
1465
|
# @return [Google::Apis::OndemandscanningV1::DiscoveryOccurrence]
|
1327
1466
|
attr_accessor :discovery
|
1328
1467
|
|
1329
|
-
#
|
1468
|
+
# Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
|
1469
|
+
# the top level of the Occurrence.
|
1330
1470
|
# Corresponds to the JSON property `dsseAttestation`
|
1331
1471
|
# @return [Google::Apis::OndemandscanningV1::DsseAttestationOccurrence]
|
1332
1472
|
attr_accessor :dsse_attestation
|
@@ -1839,6 +1979,210 @@ module Google
|
|
1839
1979
|
end
|
1840
1980
|
end
|
1841
1981
|
|
1982
|
+
#
|
1983
|
+
class SlsaBuilder
|
1984
|
+
include Google::Apis::Core::Hashable
|
1985
|
+
|
1986
|
+
#
|
1987
|
+
# Corresponds to the JSON property `id`
|
1988
|
+
# @return [String]
|
1989
|
+
attr_accessor :id
|
1990
|
+
|
1991
|
+
def initialize(**args)
|
1992
|
+
update!(**args)
|
1993
|
+
end
|
1994
|
+
|
1995
|
+
# Update properties of this object
|
1996
|
+
def update!(**args)
|
1997
|
+
@id = args[:id] if args.key?(:id)
|
1998
|
+
end
|
1999
|
+
end
|
2000
|
+
|
2001
|
+
# Indicates that the builder claims certain fields in this message to be
|
2002
|
+
# complete.
|
2003
|
+
class SlsaCompleteness
|
2004
|
+
include Google::Apis::Core::Hashable
|
2005
|
+
|
2006
|
+
# If true, the builder claims that recipe.arguments is complete, meaning that
|
2007
|
+
# all external inputs are properly captured in the recipe.
|
2008
|
+
# Corresponds to the JSON property `arguments`
|
2009
|
+
# @return [Boolean]
|
2010
|
+
attr_accessor :arguments
|
2011
|
+
alias_method :arguments?, :arguments
|
2012
|
+
|
2013
|
+
# If true, the builder claims that recipe.environment is claimed to be complete.
|
2014
|
+
# Corresponds to the JSON property `environment`
|
2015
|
+
# @return [Boolean]
|
2016
|
+
attr_accessor :environment
|
2017
|
+
alias_method :environment?, :environment
|
2018
|
+
|
2019
|
+
# If true, the builder claims that materials are complete, usually through some
|
2020
|
+
# controls to prevent network access. Sometimes called "hermetic".
|
2021
|
+
# Corresponds to the JSON property `materials`
|
2022
|
+
# @return [Boolean]
|
2023
|
+
attr_accessor :materials
|
2024
|
+
alias_method :materials?, :materials
|
2025
|
+
|
2026
|
+
def initialize(**args)
|
2027
|
+
update!(**args)
|
2028
|
+
end
|
2029
|
+
|
2030
|
+
# Update properties of this object
|
2031
|
+
def update!(**args)
|
2032
|
+
@arguments = args[:arguments] if args.key?(:arguments)
|
2033
|
+
@environment = args[:environment] if args.key?(:environment)
|
2034
|
+
@materials = args[:materials] if args.key?(:materials)
|
2035
|
+
end
|
2036
|
+
end
|
2037
|
+
|
2038
|
+
# Other properties of the build.
|
2039
|
+
class SlsaMetadata
|
2040
|
+
include Google::Apis::Core::Hashable
|
2041
|
+
|
2042
|
+
# The timestamp of when the build completed.
|
2043
|
+
# Corresponds to the JSON property `buildFinishedOn`
|
2044
|
+
# @return [String]
|
2045
|
+
attr_accessor :build_finished_on
|
2046
|
+
|
2047
|
+
# Identifies the particular build invocation, which can be useful for finding
|
2048
|
+
# associated logs or other ad-hoc analysis. The value SHOULD be globally unique,
|
2049
|
+
# per in-toto Provenance spec.
|
2050
|
+
# Corresponds to the JSON property `buildInvocationId`
|
2051
|
+
# @return [String]
|
2052
|
+
attr_accessor :build_invocation_id
|
2053
|
+
|
2054
|
+
# The timestamp of when the build started.
|
2055
|
+
# Corresponds to the JSON property `buildStartedOn`
|
2056
|
+
# @return [String]
|
2057
|
+
attr_accessor :build_started_on
|
2058
|
+
|
2059
|
+
# Indicates that the builder claims certain fields in this message to be
|
2060
|
+
# complete.
|
2061
|
+
# Corresponds to the JSON property `completeness`
|
2062
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaCompleteness]
|
2063
|
+
attr_accessor :completeness
|
2064
|
+
|
2065
|
+
# If true, the builder claims that running the recipe on materials will produce
|
2066
|
+
# bit-for-bit identical output.
|
2067
|
+
# Corresponds to the JSON property `reproducible`
|
2068
|
+
# @return [Boolean]
|
2069
|
+
attr_accessor :reproducible
|
2070
|
+
alias_method :reproducible?, :reproducible
|
2071
|
+
|
2072
|
+
def initialize(**args)
|
2073
|
+
update!(**args)
|
2074
|
+
end
|
2075
|
+
|
2076
|
+
# Update properties of this object
|
2077
|
+
def update!(**args)
|
2078
|
+
@build_finished_on = args[:build_finished_on] if args.key?(:build_finished_on)
|
2079
|
+
@build_invocation_id = args[:build_invocation_id] if args.key?(:build_invocation_id)
|
2080
|
+
@build_started_on = args[:build_started_on] if args.key?(:build_started_on)
|
2081
|
+
@completeness = args[:completeness] if args.key?(:completeness)
|
2082
|
+
@reproducible = args[:reproducible] if args.key?(:reproducible)
|
2083
|
+
end
|
2084
|
+
end
|
2085
|
+
|
2086
|
+
#
|
2087
|
+
class SlsaProvenance
|
2088
|
+
include Google::Apis::Core::Hashable
|
2089
|
+
|
2090
|
+
# required
|
2091
|
+
# Corresponds to the JSON property `builder`
|
2092
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaBuilder]
|
2093
|
+
attr_accessor :builder
|
2094
|
+
|
2095
|
+
# The collection of artifacts that influenced the build including sources,
|
2096
|
+
# dependencies, build tools, base images, and so on. This is considered to be
|
2097
|
+
# incomplete unless metadata.completeness.materials is true. Unset or null is
|
2098
|
+
# equivalent to empty.
|
2099
|
+
# Corresponds to the JSON property `materials`
|
2100
|
+
# @return [Array<Google::Apis::OndemandscanningV1::Material>]
|
2101
|
+
attr_accessor :materials
|
2102
|
+
|
2103
|
+
# Other properties of the build.
|
2104
|
+
# Corresponds to the JSON property `metadata`
|
2105
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaMetadata]
|
2106
|
+
attr_accessor :metadata
|
2107
|
+
|
2108
|
+
# Steps taken to build the artifact. For a TaskRun, typically each container
|
2109
|
+
# corresponds to one step in the recipe.
|
2110
|
+
# Corresponds to the JSON property `recipe`
|
2111
|
+
# @return [Google::Apis::OndemandscanningV1::SlsaRecipe]
|
2112
|
+
attr_accessor :recipe
|
2113
|
+
|
2114
|
+
def initialize(**args)
|
2115
|
+
update!(**args)
|
2116
|
+
end
|
2117
|
+
|
2118
|
+
# Update properties of this object
|
2119
|
+
def update!(**args)
|
2120
|
+
@builder = args[:builder] if args.key?(:builder)
|
2121
|
+
@materials = args[:materials] if args.key?(:materials)
|
2122
|
+
@metadata = args[:metadata] if args.key?(:metadata)
|
2123
|
+
@recipe = args[:recipe] if args.key?(:recipe)
|
2124
|
+
end
|
2125
|
+
end
|
2126
|
+
|
2127
|
+
# Steps taken to build the artifact. For a TaskRun, typically each container
|
2128
|
+
# corresponds to one step in the recipe.
|
2129
|
+
class SlsaRecipe
|
2130
|
+
include Google::Apis::Core::Hashable
|
2131
|
+
|
2132
|
+
# Collection of all external inputs that influenced the build on top of recipe.
|
2133
|
+
# definedInMaterial and recipe.entryPoint. For example, if the recipe type were "
|
2134
|
+
# make", then this might be the flags passed to make aside from the target,
|
2135
|
+
# which is captured in recipe.entryPoint. Depending on the recipe Type, the
|
2136
|
+
# structure may be different.
|
2137
|
+
# Corresponds to the JSON property `arguments`
|
2138
|
+
# @return [Hash<String,Object>]
|
2139
|
+
attr_accessor :arguments
|
2140
|
+
|
2141
|
+
# Index in materials containing the recipe steps that are not implied by recipe.
|
2142
|
+
# type. For example, if the recipe type were "make", then this would point to
|
2143
|
+
# the source containing the Makefile, not the make program itself. Set to -1 if
|
2144
|
+
# the recipe doesn't come from a material, as zero is default unset value for
|
2145
|
+
# int64.
|
2146
|
+
# Corresponds to the JSON property `definedInMaterial`
|
2147
|
+
# @return [Fixnum]
|
2148
|
+
attr_accessor :defined_in_material
|
2149
|
+
|
2150
|
+
# String identifying the entry point into the build. This is often a path to a
|
2151
|
+
# configuration file and/or a target label within that file. The syntax and
|
2152
|
+
# meaning are defined by recipe.type. For example, if the recipe type were "make"
|
2153
|
+
# , then this would reference the directory in which to run make as well as
|
2154
|
+
# which target to use.
|
2155
|
+
# Corresponds to the JSON property `entryPoint`
|
2156
|
+
# @return [String]
|
2157
|
+
attr_accessor :entry_point
|
2158
|
+
|
2159
|
+
# Any other builder-controlled inputs necessary for correctly evaluating the
|
2160
|
+
# recipe. Usually only needed for reproducing the build but not evaluated as
|
2161
|
+
# part of policy. Depending on the recipe Type, the structure may be different.
|
2162
|
+
# Corresponds to the JSON property `environment`
|
2163
|
+
# @return [Hash<String,Object>]
|
2164
|
+
attr_accessor :environment
|
2165
|
+
|
2166
|
+
# URI indicating what type of recipe was performed. It determines the meaning of
|
2167
|
+
# recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
|
2168
|
+
# Corresponds to the JSON property `type`
|
2169
|
+
# @return [String]
|
2170
|
+
attr_accessor :type
|
2171
|
+
|
2172
|
+
def initialize(**args)
|
2173
|
+
update!(**args)
|
2174
|
+
end
|
2175
|
+
|
2176
|
+
# Update properties of this object
|
2177
|
+
def update!(**args)
|
2178
|
+
@arguments = args[:arguments] if args.key?(:arguments)
|
2179
|
+
@defined_in_material = args[:defined_in_material] if args.key?(:defined_in_material)
|
2180
|
+
@entry_point = args[:entry_point] if args.key?(:entry_point)
|
2181
|
+
@environment = args[:environment] if args.key?(:environment)
|
2182
|
+
@type = args[:type] if args.key?(:type)
|
2183
|
+
end
|
2184
|
+
end
|
2185
|
+
|
1842
2186
|
# Source describes the location of the source used for the build.
|
1843
2187
|
class Source
|
1844
2188
|
include Google::Apis::Core::Hashable
|
@@ -1967,7 +2311,8 @@ module Google
|
|
1967
2311
|
class Subject
|
1968
2312
|
include Google::Apis::Core::Hashable
|
1969
2313
|
|
1970
|
-
# "": ""
|
2314
|
+
# "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/
|
2315
|
+
# attestation/blob/main/spec/field_types.md#DigestSet
|
1971
2316
|
# Corresponds to the JSON property `digest`
|
1972
2317
|
# @return [Hash<String,String>]
|
1973
2318
|
attr_accessor :digest
|
@@ -2143,6 +2488,15 @@ module Google
|
|
2143
2488
|
# @return [Float]
|
2144
2489
|
attr_accessor :cvss_score
|
2145
2490
|
|
2491
|
+
# Common Vulnerability Scoring System. For details, see https://www.first.org/
|
2492
|
+
# cvss/specification-document This is a message we will try to use for storing
|
2493
|
+
# multiple versions of CVSS. The intention is that as new versions of CVSS
|
2494
|
+
# scores get added, we will be able to modify this message rather than adding
|
2495
|
+
# new protos for each new version of the score.
|
2496
|
+
# Corresponds to the JSON property `cvssv3`
|
2497
|
+
# @return [Google::Apis::OndemandscanningV1::Cvss]
|
2498
|
+
attr_accessor :cvssv3
|
2499
|
+
|
2146
2500
|
# The distro assigned severity for this vulnerability when it is available,
|
2147
2501
|
# otherwise this is the note provider assigned severity. When there are multiple
|
2148
2502
|
# PackageIssues for this vulnerability, they can have different effective
|
@@ -2200,6 +2554,7 @@ module Google
|
|
2200
2554
|
# Update properties of this object
|
2201
2555
|
def update!(**args)
|
2202
2556
|
@cvss_score = args[:cvss_score] if args.key?(:cvss_score)
|
2557
|
+
@cvssv3 = args[:cvssv3] if args.key?(:cvssv3)
|
2203
2558
|
@effective_severity = args[:effective_severity] if args.key?(:effective_severity)
|
2204
2559
|
@fix_available = args[:fix_available] if args.key?(:fix_available)
|
2205
2560
|
@long_description = args[:long_description] if args.key?(:long_description)
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module OndemandscanningV1
|
18
18
|
# Version of the google-apis-ondemandscanning_v1 gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.13.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
22
|
GENERATOR_VERSION = "0.4.0"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20211206"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
@@ -88,6 +88,12 @@ module Google
|
|
88
88
|
include Google::Apis::Core::JsonObjectSupport
|
89
89
|
end
|
90
90
|
|
91
|
+
class Cvss
|
92
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
|
+
|
94
|
+
include Google::Apis::Core::JsonObjectSupport
|
95
|
+
end
|
96
|
+
|
91
97
|
class Category
|
92
98
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
99
|
|
@@ -238,6 +244,12 @@ module Google
|
|
238
244
|
include Google::Apis::Core::JsonObjectSupport
|
239
245
|
end
|
240
246
|
|
247
|
+
class Material
|
248
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
249
|
+
|
250
|
+
include Google::Apis::Core::JsonObjectSupport
|
251
|
+
end
|
252
|
+
|
241
253
|
class Metadata
|
242
254
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
243
255
|
|
@@ -310,6 +322,36 @@ module Google
|
|
310
322
|
include Google::Apis::Core::JsonObjectSupport
|
311
323
|
end
|
312
324
|
|
325
|
+
class SlsaBuilder
|
326
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
327
|
+
|
328
|
+
include Google::Apis::Core::JsonObjectSupport
|
329
|
+
end
|
330
|
+
|
331
|
+
class SlsaCompleteness
|
332
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
333
|
+
|
334
|
+
include Google::Apis::Core::JsonObjectSupport
|
335
|
+
end
|
336
|
+
|
337
|
+
class SlsaMetadata
|
338
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
339
|
+
|
340
|
+
include Google::Apis::Core::JsonObjectSupport
|
341
|
+
end
|
342
|
+
|
343
|
+
class SlsaProvenance
|
344
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
345
|
+
|
346
|
+
include Google::Apis::Core::JsonObjectSupport
|
347
|
+
end
|
348
|
+
|
349
|
+
class SlsaRecipe
|
350
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
351
|
+
|
352
|
+
include Google::Apis::Core::JsonObjectSupport
|
353
|
+
end
|
354
|
+
|
313
355
|
class Source
|
314
356
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
315
357
|
|
@@ -391,6 +433,7 @@ module Google
|
|
391
433
|
class AnalyzePackagesRequestV1
|
392
434
|
# @private
|
393
435
|
class Representation < Google::Apis::Core::JsonRepresentation
|
436
|
+
property :include_osv_data, as: 'includeOsvData'
|
394
437
|
collection :packages, as: 'packages', class: Google::Apis::OndemandscanningV1::PackageData, decorator: Google::Apis::OndemandscanningV1::PackageData::Representation
|
395
438
|
|
396
439
|
property :resource_uri, as: 'resourceUri'
|
@@ -436,6 +479,8 @@ module Google
|
|
436
479
|
class Representation < Google::Apis::Core::JsonRepresentation
|
437
480
|
property :intoto_provenance, as: 'intotoProvenance', class: Google::Apis::OndemandscanningV1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1::InTotoProvenance::Representation
|
438
481
|
|
482
|
+
property :intoto_statement, as: 'intotoStatement', class: Google::Apis::OndemandscanningV1::InTotoStatement, decorator: Google::Apis::OndemandscanningV1::InTotoStatement::Representation
|
483
|
+
|
439
484
|
property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1::BuildProvenance, decorator: Google::Apis::OndemandscanningV1::BuildProvenance::Representation
|
440
485
|
|
441
486
|
property :provenance_bytes, as: 'provenanceBytes'
|
@@ -471,6 +516,24 @@ module Google
|
|
471
516
|
end
|
472
517
|
end
|
473
518
|
|
519
|
+
class Cvss
|
520
|
+
# @private
|
521
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
522
|
+
property :attack_complexity, as: 'attackComplexity'
|
523
|
+
property :attack_vector, as: 'attackVector'
|
524
|
+
property :authentication, as: 'authentication'
|
525
|
+
property :availability_impact, as: 'availabilityImpact'
|
526
|
+
property :base_score, as: 'baseScore'
|
527
|
+
property :confidentiality_impact, as: 'confidentialityImpact'
|
528
|
+
property :exploitability_score, as: 'exploitabilityScore'
|
529
|
+
property :impact_score, as: 'impactScore'
|
530
|
+
property :integrity_impact, as: 'integrityImpact'
|
531
|
+
property :privileges_required, as: 'privilegesRequired'
|
532
|
+
property :scope, as: 'scope'
|
533
|
+
property :user_interaction, as: 'userInteraction'
|
534
|
+
end
|
535
|
+
end
|
536
|
+
|
474
537
|
class Category
|
475
538
|
# @private
|
476
539
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -659,12 +722,14 @@ module Google
|
|
659
722
|
class InTotoStatement
|
660
723
|
# @private
|
661
724
|
class Representation < Google::Apis::Core::JsonRepresentation
|
725
|
+
property :_type, as: '_type'
|
662
726
|
property :predicate_type, as: 'predicateType'
|
663
727
|
property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1::InTotoProvenance::Representation
|
664
728
|
|
729
|
+
property :slsa_provenance, as: 'slsaProvenance', class: Google::Apis::OndemandscanningV1::SlsaProvenance, decorator: Google::Apis::OndemandscanningV1::SlsaProvenance::Representation
|
730
|
+
|
665
731
|
collection :subject, as: 'subject', class: Google::Apis::OndemandscanningV1::Subject, decorator: Google::Apis::OndemandscanningV1::Subject::Representation
|
666
732
|
|
667
|
-
property :type, as: 'type'
|
668
733
|
end
|
669
734
|
end
|
670
735
|
|
@@ -711,6 +776,14 @@ module Google
|
|
711
776
|
end
|
712
777
|
end
|
713
778
|
|
779
|
+
class Material
|
780
|
+
# @private
|
781
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
782
|
+
hash :digest, as: 'digest'
|
783
|
+
property :uri, as: 'uri'
|
784
|
+
end
|
785
|
+
end
|
786
|
+
|
714
787
|
class Metadata
|
715
788
|
# @private
|
716
789
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -862,6 +935,59 @@ module Google
|
|
862
935
|
end
|
863
936
|
end
|
864
937
|
|
938
|
+
class SlsaBuilder
|
939
|
+
# @private
|
940
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
941
|
+
property :id, as: 'id'
|
942
|
+
end
|
943
|
+
end
|
944
|
+
|
945
|
+
class SlsaCompleteness
|
946
|
+
# @private
|
947
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
948
|
+
property :arguments, as: 'arguments'
|
949
|
+
property :environment, as: 'environment'
|
950
|
+
property :materials, as: 'materials'
|
951
|
+
end
|
952
|
+
end
|
953
|
+
|
954
|
+
class SlsaMetadata
|
955
|
+
# @private
|
956
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
957
|
+
property :build_finished_on, as: 'buildFinishedOn'
|
958
|
+
property :build_invocation_id, as: 'buildInvocationId'
|
959
|
+
property :build_started_on, as: 'buildStartedOn'
|
960
|
+
property :completeness, as: 'completeness', class: Google::Apis::OndemandscanningV1::SlsaCompleteness, decorator: Google::Apis::OndemandscanningV1::SlsaCompleteness::Representation
|
961
|
+
|
962
|
+
property :reproducible, as: 'reproducible'
|
963
|
+
end
|
964
|
+
end
|
965
|
+
|
966
|
+
class SlsaProvenance
|
967
|
+
# @private
|
968
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
969
|
+
property :builder, as: 'builder', class: Google::Apis::OndemandscanningV1::SlsaBuilder, decorator: Google::Apis::OndemandscanningV1::SlsaBuilder::Representation
|
970
|
+
|
971
|
+
collection :materials, as: 'materials', class: Google::Apis::OndemandscanningV1::Material, decorator: Google::Apis::OndemandscanningV1::Material::Representation
|
972
|
+
|
973
|
+
property :metadata, as: 'metadata', class: Google::Apis::OndemandscanningV1::SlsaMetadata, decorator: Google::Apis::OndemandscanningV1::SlsaMetadata::Representation
|
974
|
+
|
975
|
+
property :recipe, as: 'recipe', class: Google::Apis::OndemandscanningV1::SlsaRecipe, decorator: Google::Apis::OndemandscanningV1::SlsaRecipe::Representation
|
976
|
+
|
977
|
+
end
|
978
|
+
end
|
979
|
+
|
980
|
+
class SlsaRecipe
|
981
|
+
# @private
|
982
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
983
|
+
hash :arguments, as: 'arguments'
|
984
|
+
property :defined_in_material, :numeric_string => true, as: 'definedInMaterial'
|
985
|
+
property :entry_point, as: 'entryPoint'
|
986
|
+
hash :environment, as: 'environment'
|
987
|
+
property :type, as: 'type'
|
988
|
+
end
|
989
|
+
end
|
990
|
+
|
865
991
|
class Source
|
866
992
|
# @private
|
867
993
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -944,6 +1070,8 @@ module Google
|
|
944
1070
|
# @private
|
945
1071
|
class Representation < Google::Apis::Core::JsonRepresentation
|
946
1072
|
property :cvss_score, as: 'cvssScore'
|
1073
|
+
property :cvssv3, as: 'cvssv3', class: Google::Apis::OndemandscanningV1::Cvss, decorator: Google::Apis::OndemandscanningV1::Cvss::Representation
|
1074
|
+
|
947
1075
|
property :effective_severity, as: 'effectiveSeverity'
|
948
1076
|
property :fix_available, as: 'fixAvailable'
|
949
1077
|
property :long_description, as: 'longDescription'
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-ondemandscanning_v1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.13.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-12-13 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -57,9 +57,9 @@ licenses:
|
|
57
57
|
- Apache-2.0
|
58
58
|
metadata:
|
59
59
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
60
|
-
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
61
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.
|
62
|
-
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
60
|
+
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1/CHANGELOG.md
|
61
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1/v0.13.0
|
62
|
+
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1
|
63
63
|
post_install_message:
|
64
64
|
rdoc_options: []
|
65
65
|
require_paths:
|