google-cloud-container_analysis-v1 0.4.6 → 0.4.7

data/proto_docs/grafeas/v1/compliance.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Grafeas
+  module V1
+    # @!attribute [rw] title
+    #   @return [::String]
+    #     The title that identifies this compliance check.
+    # @!attribute [rw] description
+    #   @return [::String]
+    #     A description about this compliance check.
+    # @!attribute [rw] version
+    #   @return [::Array<::Grafeas::V1::ComplianceVersion>]
+    #     The OS and config versions the benchmark applies to.
+    # @!attribute [rw] rationale
+    #   @return [::String]
+    #     A rationale for the existence of this compliance check.
+    # @!attribute [rw] remediation
+    #   @return [::String]
+    #     A description of remediation steps if the compliance check fails.
+    # @!attribute [rw] cis_benchmark
+    #   @return [::Grafeas::V1::ComplianceNote::CisBenchmark]
+    # @!attribute [rw] scan_instructions
+    #   @return [::String]
+    #     Serialized scan instructions with a predefined format.
+    class ComplianceNote
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+
+      # A compliance check that is a CIS benchmark.
+      # @!attribute [rw] profile_level
+      #   @return [::Integer]
+      # @!attribute [rw] severity
+      #   @return [::Grafeas::V1::Severity]
+      class CisBenchmark
+        include ::Google::Protobuf::MessageExts
+        extend ::Google::Protobuf::MessageExts::ClassMethods
+      end
+    end
+
+    # Describes the CIS benchmark version that is applicable to a given OS and
+    # os version.
+    # @!attribute [rw] cpe_uri
+    #   @return [::String]
+    #     The CPE URI (https://cpe.mitre.org/specification/) this benchmark is
+    #     applicable to.
+    # @!attribute [rw] version
+    #   @return [::String]
+    #     The version of the benchmark. This is set to the version of the OS-specific
+    #     CIS document the benchmark is defined in.
+    class ComplianceVersion
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # An indication that the compliance checks in the associated ComplianceNote
+    # were not satisfied for particular resources or a specified reason.
+    # @!attribute [rw] non_compliant_files
+    #   @return [::Array<::Grafeas::V1::NonCompliantFile>]
+    # @!attribute [rw] non_compliance_reason
+    #   @return [::String]
+    class ComplianceOccurrence
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # Details about files that caused a compliance check to fail.
+    # @!attribute [rw] path
+    #   @return [::String]
+    #     Empty if `display_command` is set.
+    # @!attribute [rw] display_command
+    #   @return [::String]
+    #     Command to display the non-compliant files.
+    # @!attribute [rw] reason
+    #   @return [::String]
+    #     Explains why a file is non compliant for a CIS check.
+    class NonCompliantFile
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+  end
+end

data/proto_docs/grafeas/v1/cvss.rb

@@ -107,5 +107,110 @@ module Grafeas
         IMPACT_NONE = 3
       end
     end
+
+    # Common Vulnerability Scoring System.
+    # For details, see https://www.first.org/cvss/specification-document
+    # This is a message we will try to use for storing multiple versions of
+    # CVSS. The intention is that as new versions of CVSS scores get added, we
+    # will be able to modify this message rather than adding new protos for each
+    # new version of the score.
+    # @!attribute [rw] base_score
+    #   @return [::Float]
+    #     The base score is a function of the base metric scores.
+    # @!attribute [rw] exploitability_score
+    #   @return [::Float]
+    # @!attribute [rw] impact_score
+    #   @return [::Float]
+    # @!attribute [rw] attack_vector
+    #   @return [::Grafeas::V1::CVSS::AttackVector]
+    #     Base Metrics
+    #     Represents the intrinsic characteristics of a vulnerability that are
+    #     constant over time and across user environments.
+    # @!attribute [rw] attack_complexity
+    #   @return [::Grafeas::V1::CVSS::AttackComplexity]
+    # @!attribute [rw] authentication
+    #   @return [::Grafeas::V1::CVSS::Authentication]
+    # @!attribute [rw] privileges_required
+    #   @return [::Grafeas::V1::CVSS::PrivilegesRequired]
+    # @!attribute [rw] user_interaction
+    #   @return [::Grafeas::V1::CVSS::UserInteraction]
+    # @!attribute [rw] scope
+    #   @return [::Grafeas::V1::CVSS::Scope]
+    # @!attribute [rw] confidentiality_impact
+    #   @return [::Grafeas::V1::CVSS::Impact]
+    # @!attribute [rw] integrity_impact
+    #   @return [::Grafeas::V1::CVSS::Impact]
+    # @!attribute [rw] availability_impact
+    #   @return [::Grafeas::V1::CVSS::Impact]
+    class CVSS
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+
+      module AttackVector
+        ATTACK_VECTOR_UNSPECIFIED = 0
+
+        ATTACK_VECTOR_NETWORK = 1
+
+        ATTACK_VECTOR_ADJACENT = 2
+
+        ATTACK_VECTOR_LOCAL = 3
+
+        ATTACK_VECTOR_PHYSICAL = 4
+      end
+
+      module AttackComplexity
+        ATTACK_COMPLEXITY_UNSPECIFIED = 0
+
+        ATTACK_COMPLEXITY_LOW = 1
+
+        ATTACK_COMPLEXITY_HIGH = 2
+      end
+
+      module Authentication
+        AUTHENTICATION_UNSPECIFIED = 0
+
+        AUTHENTICATION_MULTIPLE = 1
+
+        AUTHENTICATION_SINGLE = 2
+
+        AUTHENTICATION_NONE = 3
+      end
+
+      module PrivilegesRequired
+        PRIVILEGES_REQUIRED_UNSPECIFIED = 0
+
+        PRIVILEGES_REQUIRED_NONE = 1
+
+        PRIVILEGES_REQUIRED_LOW = 2
+
+        PRIVILEGES_REQUIRED_HIGH = 3
+      end
+
+      module UserInteraction
+        USER_INTERACTION_UNSPECIFIED = 0
+
+        USER_INTERACTION_NONE = 1
+
+        USER_INTERACTION_REQUIRED = 2
+      end
+
+      module Scope
+        SCOPE_UNSPECIFIED = 0
+
+        SCOPE_UNCHANGED = 1
+
+        SCOPE_CHANGED = 2
+      end
+
+      module Impact
+        IMPACT_UNSPECIFIED = 0
+
+        IMPACT_HIGH = 1
+
+        IMPACT_LOW = 2
+
+        IMPACT_NONE = 3
+      end
+    end
   end
 end

data/proto_docs/grafeas/v1/deployment.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Grafeas
+  module V1
+    # An artifact that can be deployed in some runtime.
+    # @!attribute [rw] resource_uri
+    #   @return [::Array<::String>]
+    #     Required. Resource URI for the artifact being deployed.
+    class DeploymentNote
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The period during which some deployable was active in a runtime.
+    # @!attribute [rw] user_email
+    #   @return [::String]
+    #     Identity of the user that triggered this deployment.
+    # @!attribute [rw] deploy_time
+    #   @return [::Google::Protobuf::Timestamp]
+    #     Required. Beginning of the lifetime of this deployment.
+    # @!attribute [rw] undeploy_time
+    #   @return [::Google::Protobuf::Timestamp]
+    #     End of the lifetime of this deployment.
+    # @!attribute [rw] config
+    #   @return [::String]
+    #     Configuration used to create this deployment.
+    # @!attribute [rw] address
+    #   @return [::String]
+    #     Address of the runtime element hosting this deployment.
+    # @!attribute [rw] resource_uri
+    #   @return [::Array<::String>]
+    #     Output only. Resource URI for the artifact being deployed taken from
+    #     the deployable field with the same name.
+    # @!attribute [rw] platform
+    #   @return [::Grafeas::V1::DeploymentOccurrence::Platform]
+    #     Platform hosting this deployment.
+    class DeploymentOccurrence
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+
+      # Types of platforms.
+      module Platform
+        # Unknown.
+        PLATFORM_UNSPECIFIED = 0
+
+        # Google Container Engine.
+        GKE = 1
+
+        # Google App Engine: Flexible Environment.
+        FLEX = 2
+
+        # Custom user-defined platform.
+        CUSTOM = 3
+      end
+    end
+  end
+end

data/proto_docs/grafeas/v1/discovery.rb

@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Grafeas
+  module V1
+    # A note that indicates a type of analysis a provider would perform. This note
+    # exists in a provider's project. A `Discovery` occurrence is created in a
+    # consumer's project at the start of analysis.
+    # @!attribute [rw] analysis_kind
+    #   @return [::Grafeas::V1::NoteKind]
+    #     Required. Immutable. The kind of analysis that is handled by this
+    #     discovery.
+    class DiscoveryNote
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # Provides information about the analysis status of a discovered resource.
+    # @!attribute [rw] continuous_analysis
+    #   @return [::Grafeas::V1::DiscoveryOccurrence::ContinuousAnalysis]
+    #     Whether the resource is continuously analyzed.
+    # @!attribute [rw] analysis_status
+    #   @return [::Grafeas::V1::DiscoveryOccurrence::AnalysisStatus]
+    #     The status of discovery for the resource.
+    # @!attribute [rw] analysis_status_error
+    #   @return [::Google::Rpc::Status]
+    #     When an error is encountered this will contain a LocalizedMessage under
+    #     details to show to the user. The LocalizedMessage is output only and
+    #     populated by the API.
+    # @!attribute [rw] cpe
+    #   @return [::String]
+    #     The CPE of the resource being scanned.
+    # @!attribute [rw] last_scan_time
+    #   @return [::Google::Protobuf::Timestamp]
+    #     The last time this resource was scanned.
+    # @!attribute [r] archive_time
+    #   @return [::Google::Protobuf::Timestamp]
+    #     The time occurrences related to this discovery occurrence were archived.
+    class DiscoveryOccurrence
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+
+      # Whether the resource is continuously analyzed.
+      module ContinuousAnalysis
+        # Unknown.
+        CONTINUOUS_ANALYSIS_UNSPECIFIED = 0
+
+        # The resource is continuously analyzed.
+        ACTIVE = 1
+
+        # The resource is ignored for continuous analysis.
+        INACTIVE = 2
+      end
+
+      # Analysis status for a resource. Currently for initial analysis only (not
+      # updated in continuous analysis).
+      module AnalysisStatus
+        # Unknown.
+        ANALYSIS_STATUS_UNSPECIFIED = 0
+
+        # Resource is known but no action has been taken yet.
+        PENDING = 1
+
+        # Resource is being analyzed.
+        SCANNING = 2
+
+        # Analysis has finished successfully.
+        FINISHED_SUCCESS = 3
+
+        # Analysis has finished unsuccessfully, the analysis itself is in a bad
+        # state.
+        FINISHED_FAILED = 4
+
+        # The resource is known not to be supported
+        FINISHED_UNSUPPORTED = 5
+      end
+    end
+  end
+end

data/proto_docs/grafeas/v1/dsse_attestation.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Grafeas
+  module V1
+    # @!attribute [rw] hint
+    #   @return [::Grafeas::V1::DSSEAttestationNote::DSSEHint]
+    #     DSSEHint hints at the purpose of the attestation authority.
+    class DSSEAttestationNote
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+
+      # This submessage provides human-readable hints about the purpose of the
+      # authority. Because the name of a note acts as its resource reference, it is
+      # important to disambiguate the canonical name of the Note (which might be a
+      # UUID for security purposes) from "readable" names more suitable for debug
+      # output. Note that these hints should not be used to look up authorities in
+      # security sensitive contexts, such as when looking up attestations to
+      # verify.
+      # @!attribute [rw] human_readable_name
+      #   @return [::String]
+      #     Required. The human readable name of this attestation authority, for
+      #     example "cloudbuild-prod".
+      class DSSEHint
+        include ::Google::Protobuf::MessageExts
+        extend ::Google::Protobuf::MessageExts::ClassMethods
+      end
+    end
+
+    # Deprecated. Prefer to use a regular Occurrence, and populate the
+    # Envelope at the top level of the Occurrence.
+    # @!attribute [rw] envelope
+    #   @return [::Grafeas::V1::Envelope]
+    #     If doing something security critical, make sure to verify the signatures in
+    #     this metadata.
+    # @!attribute [rw] statement
+    #   @return [::Grafeas::V1::InTotoStatement]
+    class DSSEAttestationOccurrence
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+  end
+end