google-apis-ondemandscanning_v1beta1 0.10.0 → 0.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ca7c8242539d37bac1f33704d42d26c9e5991da165029063cec2ec11d40c3561
-  data.tar.gz: f46b3949597e913709b71b93fee2ef8ebc6501e459156df8947567308dcb9fe8
+  metadata.gz: 15b67f782f5ba2490b1c8e503b632eb1225c01d665c7939194e1d989e77bc697
+  data.tar.gz: 92ca0a09c8c4bb4982acced543cb25432cdb7d165369dfdd33ef7475b620ab74
 SHA512:
-  metadata.gz: e747c7d26a8b1c2a8b7d3997a4e8942dd3ae58be7597cfe06897fd435fb1c4e10f0a6190f871f780a92399916535fc77178226fa0885e66682e569e92dbe2d88
-  data.tar.gz: b3394d8ed19e07486d28aa73962241e35436cb1d6203ae36a74565526f3c69089b0cdb10916b90ac059e155999a7ad8a18cf3cee500846f8e62c3bc328f46e5d
+  metadata.gz: 806717a4122076c3550cc29679975b627548120ac9834a8a9495d24d3bc0843a27442bffdefa5be14387de371b10680a43a258fa65df1953425db1e3b02f6c16
+  data.tar.gz: ca118a54dc3db41f4f75ec010a9df5e1122272244a279fd27695640f146e1512e21c7abe963fda1215a197134dc86f4de540bc96b424efdc50e4df9d53bd5abc

data/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Release history for google-apis-ondemandscanning_v1beta1
 
+### v0.14.0 (2021-11-04)
+
+* Regenerated from discovery document revision 20211029
+
+### v0.13.0 (2021-10-21)
+
+* Unspecified changes
+
+### v0.12.0 (2021-09-01)
+
+* Regenerated from discovery document revision 20210824
+
+### v0.11.0 (2021-08-05)
+
+* Regenerated from discovery document revision 20210731
+
 ### v0.10.0 (2021-06-29)
 
 * Regenerated using generator version 0.4.0

data/OVERVIEW.md

@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
 
 More detailed descriptions of the Google simple REST clients are available in two documents.
 
- *  The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/master/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
- *  The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/master/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
+ *  The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
+ *  The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
 
 (Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Ondemandscanning service in particular.)
 

data/lib/google/apis/ondemandscanning_v1beta1/classes.rb

@@ -253,6 +253,19 @@ module Google
       class BuildOccurrence
         include Google::Apis::Core::Hashable
       
+        # Deprecated. See InTotoStatement for the replacement. In-toto Provenance
+        # representation as defined in spec.
+        # Corresponds to the JSON property `intotoProvenance`
+        # @return [Google::Apis::OndemandscanningV1beta1::InTotoProvenance]
+        attr_accessor :intoto_provenance
+      
+        # Spec defined at https://github.com/in-toto/attestation/tree/main/spec#
+        # statement The serialized InTotoStatement will be stored as Envelope.payload.
+        # Envelope.payloadType is always "application/vnd.in-toto+json".
+        # Corresponds to the JSON property `intotoStatement`
+        # @return [Google::Apis::OndemandscanningV1beta1::InTotoStatement]
+        attr_accessor :intoto_statement
+      
         # Provenance of a build. Contains all information needed to verify the full
         # details about the build from source to completion.
         # Corresponds to the JSON property `provenance`
@@ -277,6 +290,8 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @intoto_provenance = args[:intoto_provenance] if args.key?(:intoto_provenance)
+          @intoto_statement = args[:intoto_statement] if args.key?(:intoto_statement)
           @provenance = args[:provenance] if args.key?(:provenance)
           @provenance_bytes = args[:provenance_bytes] if args.key?(:provenance_bytes)
         end
@@ -377,6 +392,25 @@ module Google
         end
       end
       
+      # 
+      class BuilderConfig
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+        end
+      end
+      
       # The category to which the update belongs.
       class Category
         include Google::Apis::Core::Hashable
@@ -486,6 +520,43 @@ module Google
         end
       end
       
+      # Indicates that the builder claims certain fields in this message to be
+      # complete.
+      class Completeness
+        include Google::Apis::Core::Hashable
+      
+        # If true, the builder claims that recipe.arguments is complete, meaning that
+        # all external inputs are properly captured in the recipe.
+        # Corresponds to the JSON property `arguments`
+        # @return [Boolean]
+        attr_accessor :arguments
+        alias_method :arguments?, :arguments
+      
+        # If true, the builder claims that recipe.environment is claimed to be complete.
+        # Corresponds to the JSON property `environment`
+        # @return [Boolean]
+        attr_accessor :environment
+        alias_method :environment?, :environment
+      
+        # If true, the builder claims that materials are complete, usually through some
+        # controls to prevent network access. Sometimes called "hermetic".
+        # Corresponds to the JSON property `materials`
+        # @return [Boolean]
+        attr_accessor :materials
+        alias_method :materials?, :materials
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @arguments = args[:arguments] if args.key?(:arguments)
+          @environment = args[:environment] if args.key?(:environment)
+          @materials = args[:materials] if args.key?(:materials)
+        end
+      end
+      
       # An indication that the compliance checks in the associated ComplianceNote were
       # not satisfied for particular resources or a specified reason.
       class ComplianceOccurrence
@@ -512,6 +583,35 @@ module Google
         end
       end
       
+      # Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
+      # the top level of the Occurrence.
+      class DsseAttestationOccurrence
+        include Google::Apis::Core::Hashable
+      
+        # MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.
+        # proto. An authenticated message of arbitrary type.
+        # Corresponds to the JSON property `envelope`
+        # @return [Google::Apis::OndemandscanningV1beta1::Envelope]
+        attr_accessor :envelope
+      
+        # Spec defined at https://github.com/in-toto/attestation/tree/main/spec#
+        # statement The serialized InTotoStatement will be stored as Envelope.payload.
+        # Envelope.payloadType is always "application/vnd.in-toto+json".
+        # Corresponds to the JSON property `statement`
+        # @return [Google::Apis::OndemandscanningV1beta1::InTotoStatement]
+        attr_accessor :statement
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @envelope = args[:envelope] if args.key?(:envelope)
+          @statement = args[:statement] if args.key?(:statement)
+        end
+      end
+      
       # The period during which some deployable was active in a runtime.
       class DeploymentOccurrence
         include Google::Apis::Core::Hashable
@@ -633,6 +733,65 @@ module Google
         end
       end
       
+      # MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.
+      # proto. An authenticated message of arbitrary type.
+      class Envelope
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `payload`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :payload
+      
+        # 
+        # Corresponds to the JSON property `payloadType`
+        # @return [String]
+        attr_accessor :payload_type
+      
+        # 
+        # Corresponds to the JSON property `signatures`
+        # @return [Array<Google::Apis::OndemandscanningV1beta1::EnvelopeSignature>]
+        attr_accessor :signatures
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @payload = args[:payload] if args.key?(:payload)
+          @payload_type = args[:payload_type] if args.key?(:payload_type)
+          @signatures = args[:signatures] if args.key?(:signatures)
+        end
+      end
+      
+      # 
+      class EnvelopeSignature
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `keyid`
+        # @return [String]
+        attr_accessor :keyid
+      
+        # 
+        # Corresponds to the JSON property `sig`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :sig
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @keyid = args[:keyid] if args.key?(:keyid)
+          @sig = args[:sig] if args.key?(:sig)
+        end
+      end
+      
       # Container message for hashes of byte content of files, used in source messages
       # to verify integrity of source input to the build.
       class FileHashes
@@ -843,6 +1002,92 @@ module Google
         end
       end
       
+      # 
+      class InTotoProvenance
+        include Google::Apis::Core::Hashable
+      
+        # required
+        # Corresponds to the JSON property `builderConfig`
+        # @return [Google::Apis::OndemandscanningV1beta1::BuilderConfig]
+        attr_accessor :builder_config
+      
+        # The collection of artifacts that influenced the build including sources,
+        # dependencies, build tools, base images, and so on. This is considered to be
+        # incomplete unless metadata.completeness.materials is true. Unset or null is
+        # equivalent to empty.
+        # Corresponds to the JSON property `materials`
+        # @return [Array<String>]
+        attr_accessor :materials
+      
+        # Other properties of the build.
+        # Corresponds to the JSON property `metadata`
+        # @return [Google::Apis::OndemandscanningV1beta1::Metadata]
+        attr_accessor :metadata
+      
+        # Steps taken to build the artifact. For a TaskRun, typically each container
+        # corresponds to one step in the recipe.
+        # Corresponds to the JSON property `recipe`
+        # @return [Google::Apis::OndemandscanningV1beta1::Recipe]
+        attr_accessor :recipe
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @builder_config = args[:builder_config] if args.key?(:builder_config)
+          @materials = args[:materials] if args.key?(:materials)
+          @metadata = args[:metadata] if args.key?(:metadata)
+          @recipe = args[:recipe] if args.key?(:recipe)
+        end
+      end
+      
+      # Spec defined at https://github.com/in-toto/attestation/tree/main/spec#
+      # statement The serialized InTotoStatement will be stored as Envelope.payload.
+      # Envelope.payloadType is always "application/vnd.in-toto+json".
+      class InTotoStatement
+        include Google::Apis::Core::Hashable
+      
+        # Always "https://in-toto.io/Statement/v0.1".
+        # Corresponds to the JSON property `_type`
+        # @return [String]
+        attr_accessor :_type
+      
+        # "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
+        # Corresponds to the JSON property `predicateType`
+        # @return [String]
+        attr_accessor :predicate_type
+      
+        # 
+        # Corresponds to the JSON property `provenance`
+        # @return [Google::Apis::OndemandscanningV1beta1::InTotoProvenance]
+        attr_accessor :provenance
+      
+        # 
+        # Corresponds to the JSON property `slsaProvenance`
+        # @return [Google::Apis::OndemandscanningV1beta1::SlsaProvenance]
+        attr_accessor :slsa_provenance
+      
+        # 
+        # Corresponds to the JSON property `subject`
+        # @return [Array<Google::Apis::OndemandscanningV1beta1::Subject>]
+        attr_accessor :subject
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @_type = args[:_type] if args.key?(:_type)
+          @predicate_type = args[:predicate_type] if args.key?(:predicate_type)
+          @provenance = args[:provenance] if args.key?(:provenance)
+          @slsa_provenance = args[:slsa_provenance] if args.key?(:slsa_provenance)
+          @subject = args[:subject] if args.key?(:subject)
+        end
+      end
+      
       # 
       class Jwt
         include Google::Apis::Core::Hashable
@@ -975,6 +1220,79 @@ module Google
         end
       end
       
+      # 
+      class Material
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `digest`
+        # @return [Hash<String,String>]
+        attr_accessor :digest
+      
+        # 
+        # Corresponds to the JSON property `uri`
+        # @return [String]
+        attr_accessor :uri
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @digest = args[:digest] if args.key?(:digest)
+          @uri = args[:uri] if args.key?(:uri)
+        end
+      end
+      
+      # Other properties of the build.
+      class Metadata
+        include Google::Apis::Core::Hashable
+      
+        # The timestamp of when the build completed.
+        # Corresponds to the JSON property `buildFinishedOn`
+        # @return [String]
+        attr_accessor :build_finished_on
+      
+        # Identifies the particular build invocation, which can be useful for finding
+        # associated logs or other ad-hoc analysis. The value SHOULD be globally unique,
+        # per in-toto Provenance spec.
+        # Corresponds to the JSON property `buildInvocationId`
+        # @return [String]
+        attr_accessor :build_invocation_id
+      
+        # The timestamp of when the build started.
+        # Corresponds to the JSON property `buildStartedOn`
+        # @return [String]
+        attr_accessor :build_started_on
+      
+        # Indicates that the builder claims certain fields in this message to be
+        # complete.
+        # Corresponds to the JSON property `completeness`
+        # @return [Google::Apis::OndemandscanningV1beta1::Completeness]
+        attr_accessor :completeness
+      
+        # If true, the builder claims that running the recipe on materials will produce
+        # bit-for-bit identical output.
+        # Corresponds to the JSON property `reproducible`
+        # @return [Boolean]
+        attr_accessor :reproducible
+        alias_method :reproducible?, :reproducible
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @build_finished_on = args[:build_finished_on] if args.key?(:build_finished_on)
+          @build_invocation_id = args[:build_invocation_id] if args.key?(:build_invocation_id)
+          @build_started_on = args[:build_started_on] if args.key?(:build_started_on)
+          @completeness = args[:completeness] if args.key?(:completeness)
+          @reproducible = args[:reproducible] if args.key?(:reproducible)
+        end
+      end
+      
       # Details about files that caused a compliance check to fail.
       class NonCompliantFile
         include Google::Apis::Core::Hashable
@@ -1049,6 +1367,18 @@ module Google
         # @return [Google::Apis::OndemandscanningV1beta1::DiscoveryOccurrence]
         attr_accessor :discovery
       
+        # Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
+        # the top level of the Occurrence.
+        # Corresponds to the JSON property `dsseAttestation`
+        # @return [Google::Apis::OndemandscanningV1beta1::DsseAttestationOccurrence]
+        attr_accessor :dsse_attestation
+      
+        # MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.
+        # proto. An authenticated message of arbitrary type.
+        # Corresponds to the JSON property `envelope`
+        # @return [Google::Apis::OndemandscanningV1beta1::Envelope]
+        attr_accessor :envelope
+      
         # Details of the derived image portion of the DockerImage relationship. This
         # image would be produced from a Dockerfile with FROM .
         # Corresponds to the JSON property `image`
@@ -1122,6 +1452,8 @@ module Google
           @create_time = args[:create_time] if args.key?(:create_time)
           @deployment = args[:deployment] if args.key?(:deployment)
           @discovery = args[:discovery] if args.key?(:discovery)
+          @dsse_attestation = args[:dsse_attestation] if args.key?(:dsse_attestation)
+          @envelope = args[:envelope] if args.key?(:envelope)
           @image = args[:image] if args.key?(:image)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
@@ -1277,6 +1609,13 @@ module Google
         # @return [Google::Apis::OndemandscanningV1beta1::Version]
         attr_accessor :affected_version
       
+        # Output only. The distro or language system assigned severity for this
+        # vulnerability when that is available and note provider assigned severity when
+        # it is not available.
+        # Corresponds to the JSON property `effectiveSeverity`
+        # @return [String]
+        attr_accessor :effective_severity
+      
         # Output only. Whether a fix is available for this package.
         # Corresponds to the JSON property `fixAvailable`
         # @return [Boolean]
@@ -1300,6 +1639,11 @@ module Google
         # @return [Google::Apis::OndemandscanningV1beta1::Version]
         attr_accessor :fixed_version
       
+        # The type of package (e.g. OS, MAVEN, GO).
+        # Corresponds to the JSON property `packageType`
+        # @return [String]
+        attr_accessor :package_type
+      
         def initialize(**args)
            update!(**args)
         end
@@ -1309,10 +1653,12 @@ module Google
           @affected_cpe_uri = args[:affected_cpe_uri] if args.key?(:affected_cpe_uri)
           @affected_package = args[:affected_package] if args.key?(:affected_package)
           @affected_version = args[:affected_version] if args.key?(:affected_version)
+          @effective_severity = args[:effective_severity] if args.key?(:effective_severity)
           @fix_available = args[:fix_available] if args.key?(:fix_available)
           @fixed_cpe_uri = args[:fixed_cpe_uri] if args.key?(:fixed_cpe_uri)
           @fixed_package = args[:fixed_package] if args.key?(:fixed_package)
           @fixed_version = args[:fixed_version] if args.key?(:fixed_version)
+          @package_type = args[:package_type] if args.key?(:package_type)
         end
       end
       
@@ -1368,6 +1714,67 @@ module Google
         end
       end
       
+      # Steps taken to build the artifact. For a TaskRun, typically each container
+      # corresponds to one step in the recipe.
+      class Recipe
+        include Google::Apis::Core::Hashable
+      
+        # Collection of all external inputs that influenced the build on top of recipe.
+        # definedInMaterial and recipe.entryPoint. For example, if the recipe type were "
+        # make", then this might be the flags passed to make aside from the target,
+        # which is captured in recipe.entryPoint. Since the arguments field can greatly
+        # vary in structure, depending on the builder and recipe type, this is of form "
+        # Any".
+        # Corresponds to the JSON property `arguments`
+        # @return [Array<Hash<String,Object>>]
+        attr_accessor :arguments
+      
+        # Index in materials containing the recipe steps that are not implied by recipe.
+        # type. For example, if the recipe type were "make", then this would point to
+        # the source containing the Makefile, not the make program itself. Set to -1 if
+        # the recipe doesn't come from a material, as zero is default unset value for
+        # int64.
+        # Corresponds to the JSON property `definedInMaterial`
+        # @return [Fixnum]
+        attr_accessor :defined_in_material
+      
+        # String identifying the entry point into the build. This is often a path to a
+        # configuration file and/or a target label within that file. The syntax and
+        # meaning are defined by recipe.type. For example, if the recipe type were "make"
+        # , then this would reference the directory in which to run make as well as
+        # which target to use.
+        # Corresponds to the JSON property `entryPoint`
+        # @return [String]
+        attr_accessor :entry_point
+      
+        # Any other builder-controlled inputs necessary for correctly evaluating the
+        # recipe. Usually only needed for reproducing the build but not evaluated as
+        # part of policy. Since the environment field can greatly vary in structure,
+        # depending on the builder and recipe type, this is of form "Any".
+        # Corresponds to the JSON property `environment`
+        # @return [Array<Hash<String,Object>>]
+        attr_accessor :environment
+      
+        # URI indicating what type of recipe was performed. It determines the meaning of
+        # recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @arguments = args[:arguments] if args.key?(:arguments)
+          @defined_in_material = args[:defined_in_material] if args.key?(:defined_in_material)
+          @entry_point = args[:entry_point] if args.key?(:entry_point)
+          @environment = args[:environment] if args.key?(:environment)
+          @type = args[:type] if args.key?(:type)
+        end
+      end
+      
       # Metadata for any related URL information.
       class RelatedUrl
         include Google::Apis::Core::Hashable
@@ -1474,6 +1881,210 @@ module Google
         end
       end
       
+      # 
+      class SlsaBuilder
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+        end
+      end
+      
+      # Indicates that the builder claims certain fields in this message to be
+      # complete.
+      class SlsaCompleteness
+        include Google::Apis::Core::Hashable
+      
+        # If true, the builder claims that recipe.arguments is complete, meaning that
+        # all external inputs are properly captured in the recipe.
+        # Corresponds to the JSON property `arguments`
+        # @return [Boolean]
+        attr_accessor :arguments
+        alias_method :arguments?, :arguments
+      
+        # If true, the builder claims that recipe.environment is claimed to be complete.
+        # Corresponds to the JSON property `environment`
+        # @return [Boolean]
+        attr_accessor :environment
+        alias_method :environment?, :environment
+      
+        # If true, the builder claims that materials are complete, usually through some
+        # controls to prevent network access. Sometimes called "hermetic".
+        # Corresponds to the JSON property `materials`
+        # @return [Boolean]
+        attr_accessor :materials
+        alias_method :materials?, :materials
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @arguments = args[:arguments] if args.key?(:arguments)
+          @environment = args[:environment] if args.key?(:environment)
+          @materials = args[:materials] if args.key?(:materials)
+        end
+      end
+      
+      # Other properties of the build.
+      class SlsaMetadata
+        include Google::Apis::Core::Hashable
+      
+        # The timestamp of when the build completed.
+        # Corresponds to the JSON property `buildFinishedOn`
+        # @return [String]
+        attr_accessor :build_finished_on
+      
+        # Identifies the particular build invocation, which can be useful for finding
+        # associated logs or other ad-hoc analysis. The value SHOULD be globally unique,
+        # per in-toto Provenance spec.
+        # Corresponds to the JSON property `buildInvocationId`
+        # @return [String]
+        attr_accessor :build_invocation_id
+      
+        # The timestamp of when the build started.
+        # Corresponds to the JSON property `buildStartedOn`
+        # @return [String]
+        attr_accessor :build_started_on
+      
+        # Indicates that the builder claims certain fields in this message to be
+        # complete.
+        # Corresponds to the JSON property `completeness`
+        # @return [Google::Apis::OndemandscanningV1beta1::SlsaCompleteness]
+        attr_accessor :completeness
+      
+        # If true, the builder claims that running the recipe on materials will produce
+        # bit-for-bit identical output.
+        # Corresponds to the JSON property `reproducible`
+        # @return [Boolean]
+        attr_accessor :reproducible
+        alias_method :reproducible?, :reproducible
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @build_finished_on = args[:build_finished_on] if args.key?(:build_finished_on)
+          @build_invocation_id = args[:build_invocation_id] if args.key?(:build_invocation_id)
+          @build_started_on = args[:build_started_on] if args.key?(:build_started_on)
+          @completeness = args[:completeness] if args.key?(:completeness)
+          @reproducible = args[:reproducible] if args.key?(:reproducible)
+        end
+      end
+      
+      # 
+      class SlsaProvenance
+        include Google::Apis::Core::Hashable
+      
+        # required
+        # Corresponds to the JSON property `builder`
+        # @return [Google::Apis::OndemandscanningV1beta1::SlsaBuilder]
+        attr_accessor :builder
+      
+        # The collection of artifacts that influenced the build including sources,
+        # dependencies, build tools, base images, and so on. This is considered to be
+        # incomplete unless metadata.completeness.materials is true. Unset or null is
+        # equivalent to empty.
+        # Corresponds to the JSON property `materials`
+        # @return [Array<Google::Apis::OndemandscanningV1beta1::Material>]
+        attr_accessor :materials
+      
+        # Other properties of the build.
+        # Corresponds to the JSON property `metadata`
+        # @return [Google::Apis::OndemandscanningV1beta1::SlsaMetadata]
+        attr_accessor :metadata
+      
+        # Steps taken to build the artifact. For a TaskRun, typically each container
+        # corresponds to one step in the recipe.
+        # Corresponds to the JSON property `recipe`
+        # @return [Google::Apis::OndemandscanningV1beta1::SlsaRecipe]
+        attr_accessor :recipe
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @builder = args[:builder] if args.key?(:builder)
+          @materials = args[:materials] if args.key?(:materials)
+          @metadata = args[:metadata] if args.key?(:metadata)
+          @recipe = args[:recipe] if args.key?(:recipe)
+        end
+      end
+      
+      # Steps taken to build the artifact. For a TaskRun, typically each container
+      # corresponds to one step in the recipe.
+      class SlsaRecipe
+        include Google::Apis::Core::Hashable
+      
+        # Collection of all external inputs that influenced the build on top of recipe.
+        # definedInMaterial and recipe.entryPoint. For example, if the recipe type were "
+        # make", then this might be the flags passed to make aside from the target,
+        # which is captured in recipe.entryPoint. Depending on the recipe Type, the
+        # structure may be different.
+        # Corresponds to the JSON property `arguments`
+        # @return [Hash<String,Object>]
+        attr_accessor :arguments
+      
+        # Index in materials containing the recipe steps that are not implied by recipe.
+        # type. For example, if the recipe type were "make", then this would point to
+        # the source containing the Makefile, not the make program itself. Set to -1 if
+        # the recipe doesn't come from a material, as zero is default unset value for
+        # int64.
+        # Corresponds to the JSON property `definedInMaterial`
+        # @return [Fixnum]
+        attr_accessor :defined_in_material
+      
+        # String identifying the entry point into the build. This is often a path to a
+        # configuration file and/or a target label within that file. The syntax and
+        # meaning are defined by recipe.type. For example, if the recipe type were "make"
+        # , then this would reference the directory in which to run make as well as
+        # which target to use.
+        # Corresponds to the JSON property `entryPoint`
+        # @return [String]
+        attr_accessor :entry_point
+      
+        # Any other builder-controlled inputs necessary for correctly evaluating the
+        # recipe. Usually only needed for reproducing the build but not evaluated as
+        # part of policy. Depending on the recipe Type, the structure may be different.
+        # Corresponds to the JSON property `environment`
+        # @return [Hash<String,Object>]
+        attr_accessor :environment
+      
+        # URI indicating what type of recipe was performed. It determines the meaning of
+        # recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @arguments = args[:arguments] if args.key?(:arguments)
+          @defined_in_material = args[:defined_in_material] if args.key?(:defined_in_material)
+          @entry_point = args[:entry_point] if args.key?(:entry_point)
+          @environment = args[:environment] if args.key?(:environment)
+          @type = args[:type] if args.key?(:type)
+        end
+      end
+      
       # Source describes the location of the source used for the build.
       class Source
         include Google::Apis::Core::Hashable
@@ -1598,6 +2209,32 @@ module Google
         end
       end
       
+      # 
+      class Subject
+        include Google::Apis::Core::Hashable
+      
+        # "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/
+        # attestation/blob/main/spec/field_types.md#DigestSet
+        # Corresponds to the JSON property `digest`
+        # @return [Hash<String,String>]
+        attr_accessor :digest
+      
+        # 
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @digest = args[:digest] if args.key?(:digest)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # The Upgrade Distribution represents metadata about the Upgrade for each
       # operating system (CPE). Some distributions have additional metadata around
       # updates, classifying them into various categories and severities.
@@ -1754,7 +2391,13 @@ module Google
         attr_accessor :cvss_score
       
         # The distro assigned severity for this vulnerability when it is available,
-        # otherwise this is the note provider assigned severity.
+        # otherwise this is the note provider assigned severity. When there are multiple
+        # PackageIssues for this vulnerability, they can have different effective
+        # severities because some might be provided by the distro while others are
+        # provided by the language ecosystem for a language pack. For this reason, it is
+        # advised to use the effective severity on the PackageIssue level. In the case
+        # where multiple PackageIssues have differing effective severities, this field
+        # should be the highest severity for any of the PackageIssues.
         # Corresponds to the JSON property `effectiveSeverity`
         # @return [String]
         attr_accessor :effective_severity

data/lib/google/apis/ondemandscanning_v1beta1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module OndemandscanningV1beta1
       # Version of the google-apis-ondemandscanning_v1beta1 gem
-      GEM_VERSION = "0.10.0"
+      GEM_VERSION = "0.14.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.4.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20210613"
+      REVISION = "20211029"
     end
   end
 end

data/lib/google/apis/ondemandscanning_v1beta1/representations.rb

@@ -82,6 +82,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class BuilderConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Category
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -100,12 +106,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Completeness
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ComplianceOccurrence
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class DsseAttestationOccurrence
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class DeploymentOccurrence
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -124,6 +142,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Envelope
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class EnvelopeSignature
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class FileHashes
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -166,6 +196,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class InTotoProvenance
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class InTotoStatement
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Jwt
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -196,6 +238,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Material
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class Metadata
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class NonCompliantFile
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -238,6 +292,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Recipe
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class RelatedUrl
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -256,6 +316,36 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SlsaBuilder
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SlsaCompleteness
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SlsaMetadata
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SlsaProvenance
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SlsaRecipe
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Source
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -274,6 +364,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Subject
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class UpgradeDistribution
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -374,6 +470,10 @@ module Google
       class BuildOccurrence
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :intoto_provenance, as: 'intotoProvenance', class: Google::Apis::OndemandscanningV1beta1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1beta1::InTotoProvenance::Representation
+      
+          property :intoto_statement, as: 'intotoStatement', class: Google::Apis::OndemandscanningV1beta1::InTotoStatement, decorator: Google::Apis::OndemandscanningV1beta1::InTotoStatement::Representation
+      
           property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1beta1::BuildProvenance, decorator: Google::Apis::OndemandscanningV1beta1::BuildProvenance::Representation
       
           property :provenance_bytes, as: 'provenanceBytes'
@@ -402,6 +502,13 @@ module Google
         end
       end
       
+      class BuilderConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :id, as: 'id'
+        end
+      end
+      
       class Category
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -433,6 +540,15 @@ module Google
         end
       end
       
+      class Completeness
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :arguments, as: 'arguments'
+          property :environment, as: 'environment'
+          property :materials, as: 'materials'
+        end
+      end
+      
       class ComplianceOccurrence
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -442,6 +558,16 @@ module Google
         end
       end
       
+      class DsseAttestationOccurrence
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :envelope, as: 'envelope', class: Google::Apis::OndemandscanningV1beta1::Envelope, decorator: Google::Apis::OndemandscanningV1beta1::Envelope::Representation
+      
+          property :statement, as: 'statement', class: Google::Apis::OndemandscanningV1beta1::InTotoStatement, decorator: Google::Apis::OndemandscanningV1beta1::InTotoStatement::Representation
+      
+        end
+      end
+      
       class DeploymentOccurrence
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -473,6 +599,24 @@ module Google
         end
       end
       
+      class Envelope
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :payload, :base64 => true, as: 'payload'
+          property :payload_type, as: 'payloadType'
+          collection :signatures, as: 'signatures', class: Google::Apis::OndemandscanningV1beta1::EnvelopeSignature, decorator: Google::Apis::OndemandscanningV1beta1::EnvelopeSignature::Representation
+      
+        end
+      end
+      
+      class EnvelopeSignature
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :keyid, as: 'keyid'
+          property :sig, :base64 => true, as: 'sig'
+        end
+      end
+      
       class FileHashes
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -537,6 +681,33 @@ module Google
         end
       end
       
+      class InTotoProvenance
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :builder_config, as: 'builderConfig', class: Google::Apis::OndemandscanningV1beta1::BuilderConfig, decorator: Google::Apis::OndemandscanningV1beta1::BuilderConfig::Representation
+      
+          collection :materials, as: 'materials'
+          property :metadata, as: 'metadata', class: Google::Apis::OndemandscanningV1beta1::Metadata, decorator: Google::Apis::OndemandscanningV1beta1::Metadata::Representation
+      
+          property :recipe, as: 'recipe', class: Google::Apis::OndemandscanningV1beta1::Recipe, decorator: Google::Apis::OndemandscanningV1beta1::Recipe::Representation
+      
+        end
+      end
+      
+      class InTotoStatement
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :_type, as: '_type'
+          property :predicate_type, as: 'predicateType'
+          property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1beta1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1beta1::InTotoProvenance::Representation
+      
+          property :slsa_provenance, as: 'slsaProvenance', class: Google::Apis::OndemandscanningV1beta1::SlsaProvenance, decorator: Google::Apis::OndemandscanningV1beta1::SlsaProvenance::Representation
+      
+          collection :subject, as: 'subject', class: Google::Apis::OndemandscanningV1beta1::Subject, decorator: Google::Apis::OndemandscanningV1beta1::Subject::Representation
+      
+        end
+      end
+      
       class Jwt
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -580,6 +751,26 @@ module Google
         end
       end
       
+      class Material
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :digest, as: 'digest'
+          property :uri, as: 'uri'
+        end
+      end
+      
+      class Metadata
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :build_finished_on, as: 'buildFinishedOn'
+          property :build_invocation_id, as: 'buildInvocationId'
+          property :build_started_on, as: 'buildStartedOn'
+          property :completeness, as: 'completeness', class: Google::Apis::OndemandscanningV1beta1::Completeness, decorator: Google::Apis::OndemandscanningV1beta1::Completeness::Representation
+      
+          property :reproducible, as: 'reproducible'
+        end
+      end
+      
       class NonCompliantFile
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -603,6 +794,10 @@ module Google
       
           property :discovery, as: 'discovery', class: Google::Apis::OndemandscanningV1beta1::DiscoveryOccurrence, decorator: Google::Apis::OndemandscanningV1beta1::DiscoveryOccurrence::Representation
       
+          property :dsse_attestation, as: 'dsseAttestation', class: Google::Apis::OndemandscanningV1beta1::DsseAttestationOccurrence, decorator: Google::Apis::OndemandscanningV1beta1::DsseAttestationOccurrence::Representation
+      
+          property :envelope, as: 'envelope', class: Google::Apis::OndemandscanningV1beta1::Envelope, decorator: Google::Apis::OndemandscanningV1beta1::Envelope::Representation
+      
           property :image, as: 'image', class: Google::Apis::OndemandscanningV1beta1::ImageOccurrence, decorator: Google::Apis::OndemandscanningV1beta1::ImageOccurrence::Representation
       
           property :kind, as: 'kind'
@@ -652,11 +847,13 @@ module Google
           property :affected_package, as: 'affectedPackage'
           property :affected_version, as: 'affectedVersion', class: Google::Apis::OndemandscanningV1beta1::Version, decorator: Google::Apis::OndemandscanningV1beta1::Version::Representation
       
+          property :effective_severity, as: 'effectiveSeverity'
           property :fix_available, as: 'fixAvailable'
           property :fixed_cpe_uri, as: 'fixedCpeUri'
           property :fixed_package, as: 'fixedPackage'
           property :fixed_version, as: 'fixedVersion', class: Google::Apis::OndemandscanningV1beta1::Version, decorator: Google::Apis::OndemandscanningV1beta1::Version::Representation
       
+          property :package_type, as: 'packageType'
         end
       end
       
@@ -677,6 +874,17 @@ module Google
         end
       end
       
+      class Recipe
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :arguments, as: 'arguments'
+          property :defined_in_material, :numeric_string => true, as: 'definedInMaterial'
+          property :entry_point, as: 'entryPoint'
+          collection :environment, as: 'environment'
+          property :type, as: 'type'
+        end
+      end
+      
       class RelatedUrl
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -702,6 +910,59 @@ module Google
         end
       end
       
+      class SlsaBuilder
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :id, as: 'id'
+        end
+      end
+      
+      class SlsaCompleteness
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :arguments, as: 'arguments'
+          property :environment, as: 'environment'
+          property :materials, as: 'materials'
+        end
+      end
+      
+      class SlsaMetadata
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :build_finished_on, as: 'buildFinishedOn'
+          property :build_invocation_id, as: 'buildInvocationId'
+          property :build_started_on, as: 'buildStartedOn'
+          property :completeness, as: 'completeness', class: Google::Apis::OndemandscanningV1beta1::SlsaCompleteness, decorator: Google::Apis::OndemandscanningV1beta1::SlsaCompleteness::Representation
+      
+          property :reproducible, as: 'reproducible'
+        end
+      end
+      
+      class SlsaProvenance
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :builder, as: 'builder', class: Google::Apis::OndemandscanningV1beta1::SlsaBuilder, decorator: Google::Apis::OndemandscanningV1beta1::SlsaBuilder::Representation
+      
+          collection :materials, as: 'materials', class: Google::Apis::OndemandscanningV1beta1::Material, decorator: Google::Apis::OndemandscanningV1beta1::Material::Representation
+      
+          property :metadata, as: 'metadata', class: Google::Apis::OndemandscanningV1beta1::SlsaMetadata, decorator: Google::Apis::OndemandscanningV1beta1::SlsaMetadata::Representation
+      
+          property :recipe, as: 'recipe', class: Google::Apis::OndemandscanningV1beta1::SlsaRecipe, decorator: Google::Apis::OndemandscanningV1beta1::SlsaRecipe::Representation
+      
+        end
+      end
+      
+      class SlsaRecipe
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :arguments, as: 'arguments'
+          property :defined_in_material, :numeric_string => true, as: 'definedInMaterial'
+          property :entry_point, as: 'entryPoint'
+          hash :environment, as: 'environment'
+          property :type, as: 'type'
+        end
+      end
+      
       class Source
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -737,6 +998,14 @@ module Google
         end
       end
       
+      class Subject
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          hash :digest, as: 'digest'
+          property :name, as: 'name'
+        end
+      end
+      
       class UpgradeDistribution
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/ondemandscanning_v1beta1.rb

@@ -29,7 +29,7 @@ module Google
       # This is NOT the gem version.
       VERSION = 'V1beta1'
 
-      # See, edit, configure, and delete your Google Cloud Platform data
+      # See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-ondemandscanning_v1beta1
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.14.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-05 00:00:00.000000000 Z
+date: 2021-11-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -57,9 +57,9 @@ licenses:
 - Apache-2.0
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
-  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-ondemandscanning_v1beta1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1beta1/v0.10.0
-  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-ondemandscanning_v1beta1
+  changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1beta1/CHANGELOG.md
+  documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1beta1/v0.14.0
+  source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1beta1
 post_install_message: 
 rdoc_options: []
 require_paths: