google-apis-ondemandscanning_v1beta1 0.12.0 → 0.16.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: e6ab05ffd76637635c7bb225c14bed8af9cfda1c748d67263c7f86668e01f255
|
4
|
+
data.tar.gz: 10233c4848297c50dfcffbe53828d8fc2f053eb5303143674758425e534f1619
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: '00494bfc7f98f28b2e2afb230a62dfbcb2e035e9730fa5b8d92f1128f19b1b70aff3f77265ded6d27aac1c4bf7182780caa0cac8a75ce38e7ccb04dde7fc1ddf'
|
7
|
+
data.tar.gz: 006a3c856712acfd19b6e84feceea2505ce65b627fbcdf8081d851ec74e146999bdf7f1f9e45d5dc92b046bc8735859971d46e8f7929af4f679a825776b5d92f
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,21 @@
|
|
1
1
|
# Release history for google-apis-ondemandscanning_v1beta1
|
2
2
|
|
3
|
+
### v0.16.0 (2021-12-14)
|
4
|
+
|
5
|
+
* Unspecified changes
|
6
|
+
|
7
|
+
### v0.15.0 (2021-12-09)
|
8
|
+
|
9
|
+
* Regenerated from discovery document revision 20211206
|
10
|
+
|
11
|
+
### v0.14.0 (2021-11-04)
|
12
|
+
|
13
|
+
* Regenerated from discovery document revision 20211029
|
14
|
+
|
15
|
+
### v0.13.0 (2021-10-21)
|
16
|
+
|
17
|
+
* Unspecified changes
|
18
|
+
|
3
19
|
### v0.12.0 (2021-09-01)
|
4
20
|
|
5
21
|
* Regenerated from discovery document revision 20210824
|
data/OVERVIEW.md
CHANGED
@@ -51,7 +51,7 @@ require "google/apis/ondemandscanning_v1beta1"
|
|
51
51
|
client = Google::Apis::OndemandscanningV1beta1::OnDemandScanningService.new
|
52
52
|
|
53
53
|
# Authenticate calls
|
54
|
-
client.
|
54
|
+
client.authorization = # ... use the googleauth gem to create credentials
|
55
55
|
```
|
56
56
|
|
57
57
|
See the class reference docs for information on the methods you can call from a client.
|
@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
|
|
60
60
|
|
61
61
|
More detailed descriptions of the Google simple REST clients are available in two documents.
|
62
62
|
|
63
|
-
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
64
|
-
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/
|
63
|
+
* The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
|
64
|
+
* The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
|
65
65
|
|
66
66
|
(Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Ondemandscanning service in particular.)
|
67
67
|
|
@@ -253,11 +253,19 @@ module Google
|
|
253
253
|
class BuildOccurrence
|
254
254
|
include Google::Apis::Core::Hashable
|
255
255
|
|
256
|
-
#
|
256
|
+
# Deprecated. See InTotoStatement for the replacement. In-toto Provenance
|
257
|
+
# representation as defined in spec.
|
257
258
|
# Corresponds to the JSON property `intotoProvenance`
|
258
259
|
# @return [Google::Apis::OndemandscanningV1beta1::InTotoProvenance]
|
259
260
|
attr_accessor :intoto_provenance
|
260
261
|
|
262
|
+
# Spec defined at https://github.com/in-toto/attestation/tree/main/spec#
|
263
|
+
# statement The serialized InTotoStatement will be stored as Envelope.payload.
|
264
|
+
# Envelope.payloadType is always "application/vnd.in-toto+json".
|
265
|
+
# Corresponds to the JSON property `intotoStatement`
|
266
|
+
# @return [Google::Apis::OndemandscanningV1beta1::InTotoStatement]
|
267
|
+
attr_accessor :intoto_statement
|
268
|
+
|
261
269
|
# Provenance of a build. Contains all information needed to verify the full
|
262
270
|
# details about the build from source to completion.
|
263
271
|
# Corresponds to the JSON property `provenance`
|
@@ -283,6 +291,7 @@ module Google
|
|
283
291
|
# Update properties of this object
|
284
292
|
def update!(**args)
|
285
293
|
@intoto_provenance = args[:intoto_provenance] if args.key?(:intoto_provenance)
|
294
|
+
@intoto_statement = args[:intoto_statement] if args.key?(:intoto_statement)
|
286
295
|
@provenance = args[:provenance] if args.key?(:provenance)
|
287
296
|
@provenance_bytes = args[:provenance_bytes] if args.key?(:provenance_bytes)
|
288
297
|
end
|
@@ -402,6 +411,96 @@ module Google
|
|
402
411
|
end
|
403
412
|
end
|
404
413
|
|
414
|
+
# Common Vulnerability Scoring System. For details, see https://www.first.org/
|
415
|
+
# cvss/specification-document This is a message we will try to use for storing
|
416
|
+
# multiple versions of CVSS. The intention is that as new versions of CVSS
|
417
|
+
# scores get added, we will be able to modify this message rather than adding
|
418
|
+
# new protos for each new version of the score.
|
419
|
+
class Cvss
|
420
|
+
include Google::Apis::Core::Hashable
|
421
|
+
|
422
|
+
#
|
423
|
+
# Corresponds to the JSON property `attackComplexity`
|
424
|
+
# @return [String]
|
425
|
+
attr_accessor :attack_complexity
|
426
|
+
|
427
|
+
# Base Metrics Represents the intrinsic characteristics of a vulnerability that
|
428
|
+
# are constant over time and across user environments.
|
429
|
+
# Corresponds to the JSON property `attackVector`
|
430
|
+
# @return [String]
|
431
|
+
attr_accessor :attack_vector
|
432
|
+
|
433
|
+
#
|
434
|
+
# Corresponds to the JSON property `authentication`
|
435
|
+
# @return [String]
|
436
|
+
attr_accessor :authentication
|
437
|
+
|
438
|
+
#
|
439
|
+
# Corresponds to the JSON property `availabilityImpact`
|
440
|
+
# @return [String]
|
441
|
+
attr_accessor :availability_impact
|
442
|
+
|
443
|
+
# The base score is a function of the base metric scores.
|
444
|
+
# Corresponds to the JSON property `baseScore`
|
445
|
+
# @return [Float]
|
446
|
+
attr_accessor :base_score
|
447
|
+
|
448
|
+
#
|
449
|
+
# Corresponds to the JSON property `confidentialityImpact`
|
450
|
+
# @return [String]
|
451
|
+
attr_accessor :confidentiality_impact
|
452
|
+
|
453
|
+
#
|
454
|
+
# Corresponds to the JSON property `exploitabilityScore`
|
455
|
+
# @return [Float]
|
456
|
+
attr_accessor :exploitability_score
|
457
|
+
|
458
|
+
#
|
459
|
+
# Corresponds to the JSON property `impactScore`
|
460
|
+
# @return [Float]
|
461
|
+
attr_accessor :impact_score
|
462
|
+
|
463
|
+
#
|
464
|
+
# Corresponds to the JSON property `integrityImpact`
|
465
|
+
# @return [String]
|
466
|
+
attr_accessor :integrity_impact
|
467
|
+
|
468
|
+
#
|
469
|
+
# Corresponds to the JSON property `privilegesRequired`
|
470
|
+
# @return [String]
|
471
|
+
attr_accessor :privileges_required
|
472
|
+
|
473
|
+
#
|
474
|
+
# Corresponds to the JSON property `scope`
|
475
|
+
# @return [String]
|
476
|
+
attr_accessor :scope
|
477
|
+
|
478
|
+
#
|
479
|
+
# Corresponds to the JSON property `userInteraction`
|
480
|
+
# @return [String]
|
481
|
+
attr_accessor :user_interaction
|
482
|
+
|
483
|
+
def initialize(**args)
|
484
|
+
update!(**args)
|
485
|
+
end
|
486
|
+
|
487
|
+
# Update properties of this object
|
488
|
+
def update!(**args)
|
489
|
+
@attack_complexity = args[:attack_complexity] if args.key?(:attack_complexity)
|
490
|
+
@attack_vector = args[:attack_vector] if args.key?(:attack_vector)
|
491
|
+
@authentication = args[:authentication] if args.key?(:authentication)
|
492
|
+
@availability_impact = args[:availability_impact] if args.key?(:availability_impact)
|
493
|
+
@base_score = args[:base_score] if args.key?(:base_score)
|
494
|
+
@confidentiality_impact = args[:confidentiality_impact] if args.key?(:confidentiality_impact)
|
495
|
+
@exploitability_score = args[:exploitability_score] if args.key?(:exploitability_score)
|
496
|
+
@impact_score = args[:impact_score] if args.key?(:impact_score)
|
497
|
+
@integrity_impact = args[:integrity_impact] if args.key?(:integrity_impact)
|
498
|
+
@privileges_required = args[:privileges_required] if args.key?(:privileges_required)
|
499
|
+
@scope = args[:scope] if args.key?(:scope)
|
500
|
+
@user_interaction = args[:user_interaction] if args.key?(:user_interaction)
|
501
|
+
end
|
502
|
+
end
|
503
|
+
|
405
504
|
# The category to which the update belongs.
|
406
505
|
class Category
|
407
506
|
include Google::Apis::Core::Hashable
|
@@ -574,7 +673,8 @@ module Google
|
|
574
673
|
end
|
575
674
|
end
|
576
675
|
|
577
|
-
#
|
676
|
+
# Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
|
677
|
+
# the top level of the Occurrence.
|
578
678
|
class DsseAttestationOccurrence
|
579
679
|
include Google::Apis::Core::Hashable
|
580
680
|
|
@@ -1039,7 +1139,12 @@ module Google
|
|
1039
1139
|
class InTotoStatement
|
1040
1140
|
include Google::Apis::Core::Hashable
|
1041
1141
|
|
1042
|
-
# "https://in-toto.io/
|
1142
|
+
# Always "https://in-toto.io/Statement/v0.1".
|
1143
|
+
# Corresponds to the JSON property `_type`
|
1144
|
+
# @return [String]
|
1145
|
+
attr_accessor :_type
|
1146
|
+
|
1147
|
+
# "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
|
1043
1148
|
# Corresponds to the JSON property `predicateType`
|
1044
1149
|
# @return [String]
|
1045
1150
|
attr_accessor :predicate_type
|
@@ -1049,26 +1154,27 @@ module Google
|
|
1049
1154
|
# @return [Google::Apis::OndemandscanningV1beta1::InTotoProvenance]
|
1050
1155
|
attr_accessor :provenance
|
1051
1156
|
|
1157
|
+
#
|
1158
|
+
# Corresponds to the JSON property `slsaProvenance`
|
1159
|
+
# @return [Google::Apis::OndemandscanningV1beta1::SlsaProvenance]
|
1160
|
+
attr_accessor :slsa_provenance
|
1161
|
+
|
1052
1162
|
#
|
1053
1163
|
# Corresponds to the JSON property `subject`
|
1054
1164
|
# @return [Array<Google::Apis::OndemandscanningV1beta1::Subject>]
|
1055
1165
|
attr_accessor :subject
|
1056
1166
|
|
1057
|
-
# Always "https://in-toto.io/Statement/v0.1".
|
1058
|
-
# Corresponds to the JSON property `type`
|
1059
|
-
# @return [String]
|
1060
|
-
attr_accessor :type
|
1061
|
-
|
1062
1167
|
def initialize(**args)
|
1063
1168
|
update!(**args)
|
1064
1169
|
end
|
1065
1170
|
|
1066
1171
|
# Update properties of this object
|
1067
1172
|
def update!(**args)
|
1173
|
+
@_type = args[:_type] if args.key?(:_type)
|
1068
1174
|
@predicate_type = args[:predicate_type] if args.key?(:predicate_type)
|
1069
1175
|
@provenance = args[:provenance] if args.key?(:provenance)
|
1176
|
+
@slsa_provenance = args[:slsa_provenance] if args.key?(:slsa_provenance)
|
1070
1177
|
@subject = args[:subject] if args.key?(:subject)
|
1071
|
-
@type = args[:type] if args.key?(:type)
|
1072
1178
|
end
|
1073
1179
|
end
|
1074
1180
|
|
@@ -1204,6 +1310,31 @@ module Google
|
|
1204
1310
|
end
|
1205
1311
|
end
|
1206
1312
|
|
1313
|
+
#
|
1314
|
+
class Material
|
1315
|
+
include Google::Apis::Core::Hashable
|
1316
|
+
|
1317
|
+
#
|
1318
|
+
# Corresponds to the JSON property `digest`
|
1319
|
+
# @return [Hash<String,String>]
|
1320
|
+
attr_accessor :digest
|
1321
|
+
|
1322
|
+
#
|
1323
|
+
# Corresponds to the JSON property `uri`
|
1324
|
+
# @return [String]
|
1325
|
+
attr_accessor :uri
|
1326
|
+
|
1327
|
+
def initialize(**args)
|
1328
|
+
update!(**args)
|
1329
|
+
end
|
1330
|
+
|
1331
|
+
# Update properties of this object
|
1332
|
+
def update!(**args)
|
1333
|
+
@digest = args[:digest] if args.key?(:digest)
|
1334
|
+
@uri = args[:uri] if args.key?(:uri)
|
1335
|
+
end
|
1336
|
+
end
|
1337
|
+
|
1207
1338
|
# Other properties of the build.
|
1208
1339
|
class Metadata
|
1209
1340
|
include Google::Apis::Core::Hashable
|
@@ -1326,7 +1457,8 @@ module Google
|
|
1326
1457
|
# @return [Google::Apis::OndemandscanningV1beta1::DiscoveryOccurrence]
|
1327
1458
|
attr_accessor :discovery
|
1328
1459
|
|
1329
|
-
#
|
1460
|
+
# Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at
|
1461
|
+
# the top level of the Occurrence.
|
1330
1462
|
# Corresponds to the JSON property `dsseAttestation`
|
1331
1463
|
# @return [Google::Apis::OndemandscanningV1beta1::DsseAttestationOccurrence]
|
1332
1464
|
attr_accessor :dsse_attestation
|
@@ -1839,6 +1971,210 @@ module Google
|
|
1839
1971
|
end
|
1840
1972
|
end
|
1841
1973
|
|
1974
|
+
#
|
1975
|
+
class SlsaBuilder
|
1976
|
+
include Google::Apis::Core::Hashable
|
1977
|
+
|
1978
|
+
#
|
1979
|
+
# Corresponds to the JSON property `id`
|
1980
|
+
# @return [String]
|
1981
|
+
attr_accessor :id
|
1982
|
+
|
1983
|
+
def initialize(**args)
|
1984
|
+
update!(**args)
|
1985
|
+
end
|
1986
|
+
|
1987
|
+
# Update properties of this object
|
1988
|
+
def update!(**args)
|
1989
|
+
@id = args[:id] if args.key?(:id)
|
1990
|
+
end
|
1991
|
+
end
|
1992
|
+
|
1993
|
+
# Indicates that the builder claims certain fields in this message to be
|
1994
|
+
# complete.
|
1995
|
+
class SlsaCompleteness
|
1996
|
+
include Google::Apis::Core::Hashable
|
1997
|
+
|
1998
|
+
# If true, the builder claims that recipe.arguments is complete, meaning that
|
1999
|
+
# all external inputs are properly captured in the recipe.
|
2000
|
+
# Corresponds to the JSON property `arguments`
|
2001
|
+
# @return [Boolean]
|
2002
|
+
attr_accessor :arguments
|
2003
|
+
alias_method :arguments?, :arguments
|
2004
|
+
|
2005
|
+
# If true, the builder claims that recipe.environment is claimed to be complete.
|
2006
|
+
# Corresponds to the JSON property `environment`
|
2007
|
+
# @return [Boolean]
|
2008
|
+
attr_accessor :environment
|
2009
|
+
alias_method :environment?, :environment
|
2010
|
+
|
2011
|
+
# If true, the builder claims that materials are complete, usually through some
|
2012
|
+
# controls to prevent network access. Sometimes called "hermetic".
|
2013
|
+
# Corresponds to the JSON property `materials`
|
2014
|
+
# @return [Boolean]
|
2015
|
+
attr_accessor :materials
|
2016
|
+
alias_method :materials?, :materials
|
2017
|
+
|
2018
|
+
def initialize(**args)
|
2019
|
+
update!(**args)
|
2020
|
+
end
|
2021
|
+
|
2022
|
+
# Update properties of this object
|
2023
|
+
def update!(**args)
|
2024
|
+
@arguments = args[:arguments] if args.key?(:arguments)
|
2025
|
+
@environment = args[:environment] if args.key?(:environment)
|
2026
|
+
@materials = args[:materials] if args.key?(:materials)
|
2027
|
+
end
|
2028
|
+
end
|
2029
|
+
|
2030
|
+
# Other properties of the build.
|
2031
|
+
class SlsaMetadata
|
2032
|
+
include Google::Apis::Core::Hashable
|
2033
|
+
|
2034
|
+
# The timestamp of when the build completed.
|
2035
|
+
# Corresponds to the JSON property `buildFinishedOn`
|
2036
|
+
# @return [String]
|
2037
|
+
attr_accessor :build_finished_on
|
2038
|
+
|
2039
|
+
# Identifies the particular build invocation, which can be useful for finding
|
2040
|
+
# associated logs or other ad-hoc analysis. The value SHOULD be globally unique,
|
2041
|
+
# per in-toto Provenance spec.
|
2042
|
+
# Corresponds to the JSON property `buildInvocationId`
|
2043
|
+
# @return [String]
|
2044
|
+
attr_accessor :build_invocation_id
|
2045
|
+
|
2046
|
+
# The timestamp of when the build started.
|
2047
|
+
# Corresponds to the JSON property `buildStartedOn`
|
2048
|
+
# @return [String]
|
2049
|
+
attr_accessor :build_started_on
|
2050
|
+
|
2051
|
+
# Indicates that the builder claims certain fields in this message to be
|
2052
|
+
# complete.
|
2053
|
+
# Corresponds to the JSON property `completeness`
|
2054
|
+
# @return [Google::Apis::OndemandscanningV1beta1::SlsaCompleteness]
|
2055
|
+
attr_accessor :completeness
|
2056
|
+
|
2057
|
+
# If true, the builder claims that running the recipe on materials will produce
|
2058
|
+
# bit-for-bit identical output.
|
2059
|
+
# Corresponds to the JSON property `reproducible`
|
2060
|
+
# @return [Boolean]
|
2061
|
+
attr_accessor :reproducible
|
2062
|
+
alias_method :reproducible?, :reproducible
|
2063
|
+
|
2064
|
+
def initialize(**args)
|
2065
|
+
update!(**args)
|
2066
|
+
end
|
2067
|
+
|
2068
|
+
# Update properties of this object
|
2069
|
+
def update!(**args)
|
2070
|
+
@build_finished_on = args[:build_finished_on] if args.key?(:build_finished_on)
|
2071
|
+
@build_invocation_id = args[:build_invocation_id] if args.key?(:build_invocation_id)
|
2072
|
+
@build_started_on = args[:build_started_on] if args.key?(:build_started_on)
|
2073
|
+
@completeness = args[:completeness] if args.key?(:completeness)
|
2074
|
+
@reproducible = args[:reproducible] if args.key?(:reproducible)
|
2075
|
+
end
|
2076
|
+
end
|
2077
|
+
|
2078
|
+
#
|
2079
|
+
class SlsaProvenance
|
2080
|
+
include Google::Apis::Core::Hashable
|
2081
|
+
|
2082
|
+
# required
|
2083
|
+
# Corresponds to the JSON property `builder`
|
2084
|
+
# @return [Google::Apis::OndemandscanningV1beta1::SlsaBuilder]
|
2085
|
+
attr_accessor :builder
|
2086
|
+
|
2087
|
+
# The collection of artifacts that influenced the build including sources,
|
2088
|
+
# dependencies, build tools, base images, and so on. This is considered to be
|
2089
|
+
# incomplete unless metadata.completeness.materials is true. Unset or null is
|
2090
|
+
# equivalent to empty.
|
2091
|
+
# Corresponds to the JSON property `materials`
|
2092
|
+
# @return [Array<Google::Apis::OndemandscanningV1beta1::Material>]
|
2093
|
+
attr_accessor :materials
|
2094
|
+
|
2095
|
+
# Other properties of the build.
|
2096
|
+
# Corresponds to the JSON property `metadata`
|
2097
|
+
# @return [Google::Apis::OndemandscanningV1beta1::SlsaMetadata]
|
2098
|
+
attr_accessor :metadata
|
2099
|
+
|
2100
|
+
# Steps taken to build the artifact. For a TaskRun, typically each container
|
2101
|
+
# corresponds to one step in the recipe.
|
2102
|
+
# Corresponds to the JSON property `recipe`
|
2103
|
+
# @return [Google::Apis::OndemandscanningV1beta1::SlsaRecipe]
|
2104
|
+
attr_accessor :recipe
|
2105
|
+
|
2106
|
+
def initialize(**args)
|
2107
|
+
update!(**args)
|
2108
|
+
end
|
2109
|
+
|
2110
|
+
# Update properties of this object
|
2111
|
+
def update!(**args)
|
2112
|
+
@builder = args[:builder] if args.key?(:builder)
|
2113
|
+
@materials = args[:materials] if args.key?(:materials)
|
2114
|
+
@metadata = args[:metadata] if args.key?(:metadata)
|
2115
|
+
@recipe = args[:recipe] if args.key?(:recipe)
|
2116
|
+
end
|
2117
|
+
end
|
2118
|
+
|
2119
|
+
# Steps taken to build the artifact. For a TaskRun, typically each container
|
2120
|
+
# corresponds to one step in the recipe.
|
2121
|
+
class SlsaRecipe
|
2122
|
+
include Google::Apis::Core::Hashable
|
2123
|
+
|
2124
|
+
# Collection of all external inputs that influenced the build on top of recipe.
|
2125
|
+
# definedInMaterial and recipe.entryPoint. For example, if the recipe type were "
|
2126
|
+
# make", then this might be the flags passed to make aside from the target,
|
2127
|
+
# which is captured in recipe.entryPoint. Depending on the recipe Type, the
|
2128
|
+
# structure may be different.
|
2129
|
+
# Corresponds to the JSON property `arguments`
|
2130
|
+
# @return [Hash<String,Object>]
|
2131
|
+
attr_accessor :arguments
|
2132
|
+
|
2133
|
+
# Index in materials containing the recipe steps that are not implied by recipe.
|
2134
|
+
# type. For example, if the recipe type were "make", then this would point to
|
2135
|
+
# the source containing the Makefile, not the make program itself. Set to -1 if
|
2136
|
+
# the recipe doesn't come from a material, as zero is default unset value for
|
2137
|
+
# int64.
|
2138
|
+
# Corresponds to the JSON property `definedInMaterial`
|
2139
|
+
# @return [Fixnum]
|
2140
|
+
attr_accessor :defined_in_material
|
2141
|
+
|
2142
|
+
# String identifying the entry point into the build. This is often a path to a
|
2143
|
+
# configuration file and/or a target label within that file. The syntax and
|
2144
|
+
# meaning are defined by recipe.type. For example, if the recipe type were "make"
|
2145
|
+
# , then this would reference the directory in which to run make as well as
|
2146
|
+
# which target to use.
|
2147
|
+
# Corresponds to the JSON property `entryPoint`
|
2148
|
+
# @return [String]
|
2149
|
+
attr_accessor :entry_point
|
2150
|
+
|
2151
|
+
# Any other builder-controlled inputs necessary for correctly evaluating the
|
2152
|
+
# recipe. Usually only needed for reproducing the build but not evaluated as
|
2153
|
+
# part of policy. Depending on the recipe Type, the structure may be different.
|
2154
|
+
# Corresponds to the JSON property `environment`
|
2155
|
+
# @return [Hash<String,Object>]
|
2156
|
+
attr_accessor :environment
|
2157
|
+
|
2158
|
+
# URI indicating what type of recipe was performed. It determines the meaning of
|
2159
|
+
# recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
|
2160
|
+
# Corresponds to the JSON property `type`
|
2161
|
+
# @return [String]
|
2162
|
+
attr_accessor :type
|
2163
|
+
|
2164
|
+
def initialize(**args)
|
2165
|
+
update!(**args)
|
2166
|
+
end
|
2167
|
+
|
2168
|
+
# Update properties of this object
|
2169
|
+
def update!(**args)
|
2170
|
+
@arguments = args[:arguments] if args.key?(:arguments)
|
2171
|
+
@defined_in_material = args[:defined_in_material] if args.key?(:defined_in_material)
|
2172
|
+
@entry_point = args[:entry_point] if args.key?(:entry_point)
|
2173
|
+
@environment = args[:environment] if args.key?(:environment)
|
2174
|
+
@type = args[:type] if args.key?(:type)
|
2175
|
+
end
|
2176
|
+
end
|
2177
|
+
|
1842
2178
|
# Source describes the location of the source used for the build.
|
1843
2179
|
class Source
|
1844
2180
|
include Google::Apis::Core::Hashable
|
@@ -1967,7 +2303,8 @@ module Google
|
|
1967
2303
|
class Subject
|
1968
2304
|
include Google::Apis::Core::Hashable
|
1969
2305
|
|
1970
|
-
# "": ""
|
2306
|
+
# "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/
|
2307
|
+
# attestation/blob/main/spec/field_types.md#DigestSet
|
1971
2308
|
# Corresponds to the JSON property `digest`
|
1972
2309
|
# @return [Hash<String,String>]
|
1973
2310
|
attr_accessor :digest
|
@@ -2143,6 +2480,15 @@ module Google
|
|
2143
2480
|
# @return [Float]
|
2144
2481
|
attr_accessor :cvss_score
|
2145
2482
|
|
2483
|
+
# Common Vulnerability Scoring System. For details, see https://www.first.org/
|
2484
|
+
# cvss/specification-document This is a message we will try to use for storing
|
2485
|
+
# multiple versions of CVSS. The intention is that as new versions of CVSS
|
2486
|
+
# scores get added, we will be able to modify this message rather than adding
|
2487
|
+
# new protos for each new version of the score.
|
2488
|
+
# Corresponds to the JSON property `cvssv3`
|
2489
|
+
# @return [Google::Apis::OndemandscanningV1beta1::Cvss]
|
2490
|
+
attr_accessor :cvssv3
|
2491
|
+
|
2146
2492
|
# The distro assigned severity for this vulnerability when it is available,
|
2147
2493
|
# otherwise this is the note provider assigned severity. When there are multiple
|
2148
2494
|
# PackageIssues for this vulnerability, they can have different effective
|
@@ -2200,6 +2546,7 @@ module Google
|
|
2200
2546
|
# Update properties of this object
|
2201
2547
|
def update!(**args)
|
2202
2548
|
@cvss_score = args[:cvss_score] if args.key?(:cvss_score)
|
2549
|
+
@cvssv3 = args[:cvssv3] if args.key?(:cvssv3)
|
2203
2550
|
@effective_severity = args[:effective_severity] if args.key?(:effective_severity)
|
2204
2551
|
@fix_available = args[:fix_available] if args.key?(:fix_available)
|
2205
2552
|
@long_description = args[:long_description] if args.key?(:long_description)
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module OndemandscanningV1beta1
|
18
18
|
# Version of the google-apis-ondemandscanning_v1beta1 gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.16.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
22
|
GENERATOR_VERSION = "0.4.0"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20211206"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
@@ -88,6 +88,12 @@ module Google
|
|
88
88
|
include Google::Apis::Core::JsonObjectSupport
|
89
89
|
end
|
90
90
|
|
91
|
+
class Cvss
|
92
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
|
+
|
94
|
+
include Google::Apis::Core::JsonObjectSupport
|
95
|
+
end
|
96
|
+
|
91
97
|
class Category
|
92
98
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
93
99
|
|
@@ -238,6 +244,12 @@ module Google
|
|
238
244
|
include Google::Apis::Core::JsonObjectSupport
|
239
245
|
end
|
240
246
|
|
247
|
+
class Material
|
248
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
249
|
+
|
250
|
+
include Google::Apis::Core::JsonObjectSupport
|
251
|
+
end
|
252
|
+
|
241
253
|
class Metadata
|
242
254
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
243
255
|
|
@@ -310,6 +322,36 @@ module Google
|
|
310
322
|
include Google::Apis::Core::JsonObjectSupport
|
311
323
|
end
|
312
324
|
|
325
|
+
class SlsaBuilder
|
326
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
327
|
+
|
328
|
+
include Google::Apis::Core::JsonObjectSupport
|
329
|
+
end
|
330
|
+
|
331
|
+
class SlsaCompleteness
|
332
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
333
|
+
|
334
|
+
include Google::Apis::Core::JsonObjectSupport
|
335
|
+
end
|
336
|
+
|
337
|
+
class SlsaMetadata
|
338
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
339
|
+
|
340
|
+
include Google::Apis::Core::JsonObjectSupport
|
341
|
+
end
|
342
|
+
|
343
|
+
class SlsaProvenance
|
344
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
345
|
+
|
346
|
+
include Google::Apis::Core::JsonObjectSupport
|
347
|
+
end
|
348
|
+
|
349
|
+
class SlsaRecipe
|
350
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
351
|
+
|
352
|
+
include Google::Apis::Core::JsonObjectSupport
|
353
|
+
end
|
354
|
+
|
313
355
|
class Source
|
314
356
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
315
357
|
|
@@ -436,6 +478,8 @@ module Google
|
|
436
478
|
class Representation < Google::Apis::Core::JsonRepresentation
|
437
479
|
property :intoto_provenance, as: 'intotoProvenance', class: Google::Apis::OndemandscanningV1beta1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1beta1::InTotoProvenance::Representation
|
438
480
|
|
481
|
+
property :intoto_statement, as: 'intotoStatement', class: Google::Apis::OndemandscanningV1beta1::InTotoStatement, decorator: Google::Apis::OndemandscanningV1beta1::InTotoStatement::Representation
|
482
|
+
|
439
483
|
property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1beta1::BuildProvenance, decorator: Google::Apis::OndemandscanningV1beta1::BuildProvenance::Representation
|
440
484
|
|
441
485
|
property :provenance_bytes, as: 'provenanceBytes'
|
@@ -471,6 +515,24 @@ module Google
|
|
471
515
|
end
|
472
516
|
end
|
473
517
|
|
518
|
+
class Cvss
|
519
|
+
# @private
|
520
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
521
|
+
property :attack_complexity, as: 'attackComplexity'
|
522
|
+
property :attack_vector, as: 'attackVector'
|
523
|
+
property :authentication, as: 'authentication'
|
524
|
+
property :availability_impact, as: 'availabilityImpact'
|
525
|
+
property :base_score, as: 'baseScore'
|
526
|
+
property :confidentiality_impact, as: 'confidentialityImpact'
|
527
|
+
property :exploitability_score, as: 'exploitabilityScore'
|
528
|
+
property :impact_score, as: 'impactScore'
|
529
|
+
property :integrity_impact, as: 'integrityImpact'
|
530
|
+
property :privileges_required, as: 'privilegesRequired'
|
531
|
+
property :scope, as: 'scope'
|
532
|
+
property :user_interaction, as: 'userInteraction'
|
533
|
+
end
|
534
|
+
end
|
535
|
+
|
474
536
|
class Category
|
475
537
|
# @private
|
476
538
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -659,12 +721,14 @@ module Google
|
|
659
721
|
class InTotoStatement
|
660
722
|
# @private
|
661
723
|
class Representation < Google::Apis::Core::JsonRepresentation
|
724
|
+
property :_type, as: '_type'
|
662
725
|
property :predicate_type, as: 'predicateType'
|
663
726
|
property :provenance, as: 'provenance', class: Google::Apis::OndemandscanningV1beta1::InTotoProvenance, decorator: Google::Apis::OndemandscanningV1beta1::InTotoProvenance::Representation
|
664
727
|
|
728
|
+
property :slsa_provenance, as: 'slsaProvenance', class: Google::Apis::OndemandscanningV1beta1::SlsaProvenance, decorator: Google::Apis::OndemandscanningV1beta1::SlsaProvenance::Representation
|
729
|
+
|
665
730
|
collection :subject, as: 'subject', class: Google::Apis::OndemandscanningV1beta1::Subject, decorator: Google::Apis::OndemandscanningV1beta1::Subject::Representation
|
666
731
|
|
667
|
-
property :type, as: 'type'
|
668
732
|
end
|
669
733
|
end
|
670
734
|
|
@@ -711,6 +775,14 @@ module Google
|
|
711
775
|
end
|
712
776
|
end
|
713
777
|
|
778
|
+
class Material
|
779
|
+
# @private
|
780
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
781
|
+
hash :digest, as: 'digest'
|
782
|
+
property :uri, as: 'uri'
|
783
|
+
end
|
784
|
+
end
|
785
|
+
|
714
786
|
class Metadata
|
715
787
|
# @private
|
716
788
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -862,6 +934,59 @@ module Google
|
|
862
934
|
end
|
863
935
|
end
|
864
936
|
|
937
|
+
class SlsaBuilder
|
938
|
+
# @private
|
939
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
940
|
+
property :id, as: 'id'
|
941
|
+
end
|
942
|
+
end
|
943
|
+
|
944
|
+
class SlsaCompleteness
|
945
|
+
# @private
|
946
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
947
|
+
property :arguments, as: 'arguments'
|
948
|
+
property :environment, as: 'environment'
|
949
|
+
property :materials, as: 'materials'
|
950
|
+
end
|
951
|
+
end
|
952
|
+
|
953
|
+
class SlsaMetadata
|
954
|
+
# @private
|
955
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
956
|
+
property :build_finished_on, as: 'buildFinishedOn'
|
957
|
+
property :build_invocation_id, as: 'buildInvocationId'
|
958
|
+
property :build_started_on, as: 'buildStartedOn'
|
959
|
+
property :completeness, as: 'completeness', class: Google::Apis::OndemandscanningV1beta1::SlsaCompleteness, decorator: Google::Apis::OndemandscanningV1beta1::SlsaCompleteness::Representation
|
960
|
+
|
961
|
+
property :reproducible, as: 'reproducible'
|
962
|
+
end
|
963
|
+
end
|
964
|
+
|
965
|
+
class SlsaProvenance
|
966
|
+
# @private
|
967
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
968
|
+
property :builder, as: 'builder', class: Google::Apis::OndemandscanningV1beta1::SlsaBuilder, decorator: Google::Apis::OndemandscanningV1beta1::SlsaBuilder::Representation
|
969
|
+
|
970
|
+
collection :materials, as: 'materials', class: Google::Apis::OndemandscanningV1beta1::Material, decorator: Google::Apis::OndemandscanningV1beta1::Material::Representation
|
971
|
+
|
972
|
+
property :metadata, as: 'metadata', class: Google::Apis::OndemandscanningV1beta1::SlsaMetadata, decorator: Google::Apis::OndemandscanningV1beta1::SlsaMetadata::Representation
|
973
|
+
|
974
|
+
property :recipe, as: 'recipe', class: Google::Apis::OndemandscanningV1beta1::SlsaRecipe, decorator: Google::Apis::OndemandscanningV1beta1::SlsaRecipe::Representation
|
975
|
+
|
976
|
+
end
|
977
|
+
end
|
978
|
+
|
979
|
+
class SlsaRecipe
|
980
|
+
# @private
|
981
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
982
|
+
hash :arguments, as: 'arguments'
|
983
|
+
property :defined_in_material, :numeric_string => true, as: 'definedInMaterial'
|
984
|
+
property :entry_point, as: 'entryPoint'
|
985
|
+
hash :environment, as: 'environment'
|
986
|
+
property :type, as: 'type'
|
987
|
+
end
|
988
|
+
end
|
989
|
+
|
865
990
|
class Source
|
866
991
|
# @private
|
867
992
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -944,6 +1069,8 @@ module Google
|
|
944
1069
|
# @private
|
945
1070
|
class Representation < Google::Apis::Core::JsonRepresentation
|
946
1071
|
property :cvss_score, as: 'cvssScore'
|
1072
|
+
property :cvssv3, as: 'cvssv3', class: Google::Apis::OndemandscanningV1beta1::Cvss, decorator: Google::Apis::OndemandscanningV1beta1::Cvss::Representation
|
1073
|
+
|
947
1074
|
property :effective_severity, as: 'effectiveSeverity'
|
948
1075
|
property :fix_available, as: 'fixAvailable'
|
949
1076
|
property :long_description, as: 'longDescription'
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-ondemandscanning_v1beta1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.16.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2022-01-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -57,9 +57,9 @@ licenses:
|
|
57
57
|
- Apache-2.0
|
58
58
|
metadata:
|
59
59
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
60
|
-
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
61
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1beta1/v0.
|
62
|
-
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/
|
60
|
+
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1beta1/CHANGELOG.md
|
61
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-ondemandscanning_v1beta1/v0.16.0
|
62
|
+
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-ondemandscanning_v1beta1
|
63
63
|
post_install_message:
|
64
64
|
rdoc_options: []
|
65
65
|
require_paths:
|
@@ -75,7 +75,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
75
75
|
- !ruby/object:Gem::Version
|
76
76
|
version: '0'
|
77
77
|
requirements: []
|
78
|
-
rubygems_version: 3.
|
78
|
+
rubygems_version: 3.3.4
|
79
79
|
signing_key:
|
80
80
|
specification_version: 4
|
81
81
|
summary: Simple REST client for On-Demand Scanning API V1beta1
|