google-cloud-security_center-v1 0.8.1 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1b657e12d5e2a6bfbd159e01b4b1eecdf8bf3b0cfeb568132dd0e7243e60dfa2
-  data.tar.gz: b56ea7e9107c6e97921855134e4b80fd6b6293dddfa96fe53ba067a055d2ad28
+  metadata.gz: 9544668b93bf62b6a525f12c79213f71ad4113073505bdec57fea1ed5a10643e
+  data.tar.gz: 71f8ec0fef19f6a77ad40a3070c60d26ac68d176a57c6d005275ca811863a4f1
 SHA512:
-  metadata.gz: 2b30d63db862f8a776031257236e97491ba717e687f7db64809b6e0c6afbd18b636b1f0dd5b8c999aa17e089c4ac935d709140927855dea9fdbc779e08343cc0
-  data.tar.gz: a0ad157f2d483d34c2bb85b827d24e1327804e9de3732467928da3f5d50ca8fb283a5db12735c67dae3360e770e6c7bfc40def598225c4de3d4683de8892d3d0
+  metadata.gz: ba5853c6fdca6c247026b6fb1f0e86c784a5af98cea06a66582ff0f5fa4791da81412096ee18908e95424cd5c97f46f74446f2a12b08475570682dc34dea0b9a
+  data.tar.gz: 9d3652bc7ed972de2162d364970a35fbba0d93e44bf30492f40bc4912a1db6d886e212c09bdbfd02e590fe5e8ddb77e9abbab6fcd441897631a40babfb67ec72

data/lib/google/cloud/security_center/v1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module SecurityCenter
       module V1
-        VERSION = "0.8.1"
+        VERSION = "0.9.0"
       end
     end
   end

data/lib/google/cloud/securitycenter/v1/asset_pb.rb

@@ -1,14 +1,14 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/asset.proto
 
-require 'google/protobuf'
-
 require 'google/api/resource_pb'
 require 'google/cloud/securitycenter/v1/folder_pb'
 require 'google/cloud/securitycenter/v1/security_marks_pb'
 require 'google/protobuf/struct_pb'
 require 'google/protobuf/timestamp_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/asset.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.Asset" do

data/lib/google/cloud/securitycenter/v1/finding_pb.rb

@@ -1,15 +1,16 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/finding.proto
 
-require 'google/protobuf'
-
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/cloud/securitycenter/v1/indicator_pb'
 require 'google/cloud/securitycenter/v1/security_marks_pb'
+require 'google/cloud/securitycenter/v1/vulnerability_pb'
 require 'google/protobuf/struct_pb'
 require 'google/protobuf/timestamp_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/finding.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.Finding" do
@@ -27,6 +28,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :canonical_name, :string, 14
       optional :finding_class, :enum, 17, "google.cloud.securitycenter.v1.Finding.FindingClass"
       optional :indicator, :message, 18, "google.cloud.securitycenter.v1.Indicator"
+      optional :vulnerability, :message, 20, "google.cloud.securitycenter.v1.Vulnerability"
     end
     add_enum "google.cloud.securitycenter.v1.Finding.State" do
       value :STATE_UNSPECIFIED, 0

data/lib/google/cloud/securitycenter/v1/folder_pb.rb

@@ -1,9 +1,9 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/folder.proto
 
+require 'google/api/annotations_pb'
 require 'google/protobuf'
 
-require 'google/api/annotations_pb'
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/folder.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.Folder" do

data/lib/google/cloud/securitycenter/v1/indicator_pb.rb

@@ -1,9 +1,9 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/indicator.proto
 
+require 'google/api/annotations_pb'
 require 'google/protobuf'
 
-require 'google/api/annotations_pb'
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/indicator.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.Indicator" do

data/lib/google/cloud/securitycenter/v1/notification_config_pb.rb

@@ -1,11 +1,11 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/notification_config.proto
 
-require 'google/protobuf'
-
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/notification_config.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.NotificationConfig" do

data/lib/google/cloud/securitycenter/v1/notification_message_pb.rb

@@ -1,11 +1,11 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/notification_message.proto
 
-require 'google/protobuf'
-
 require 'google/cloud/securitycenter/v1/finding_pb'
 require 'google/cloud/securitycenter/v1/resource_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/notification_message.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.NotificationMessage" do

data/lib/google/cloud/securitycenter/v1/organization_settings_pb.rb

@@ -1,10 +1,10 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/organization_settings.proto
 
-require 'google/protobuf'
-
 require 'google/api/resource_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/organization_settings.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.OrganizationSettings" do

data/lib/google/cloud/securitycenter/v1/resource_pb.rb

@@ -1,11 +1,11 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/resource.proto
 
-require 'google/protobuf'
-
 require 'google/api/field_behavior_pb'
 require 'google/cloud/securitycenter/v1/folder_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/resource.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.Resource" do
@@ -14,6 +14,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :project_display_name, :string, 3
       optional :parent, :string, 4
       optional :parent_display_name, :string, 5
+      optional :type, :string, 6
       repeated :folders, :message, 7, "google.cloud.securitycenter.v1.Folder"
     end
   end

data/lib/google/cloud/securitycenter/v1/run_asset_discovery_response_pb.rb

@@ -1,10 +1,10 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/run_asset_discovery_response.proto
 
-require 'google/protobuf'
-
 require 'google/protobuf/duration_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/run_asset_discovery_response.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.RunAssetDiscoveryResponse" do

data/lib/google/cloud/securitycenter/v1/security_marks_pb.rb

@@ -1,10 +1,10 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/security_marks.proto
 
-require 'google/protobuf'
-
 require 'google/api/resource_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/security_marks.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.SecurityMarks" do

data/lib/google/cloud/securitycenter/v1/securitycenter_service_pb.rb

@@ -1,8 +1,6 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/securitycenter_service.proto
 
-require 'google/protobuf'
-
 require 'google/cloud/securitycenter/v1/run_asset_discovery_response_pb'
 require 'google/api/annotations_pb'
 require 'google/api/client_pb'
@@ -23,6 +21,8 @@ require 'google/protobuf/empty_pb'
 require 'google/protobuf/field_mask_pb'
 require 'google/protobuf/struct_pb'
 require 'google/protobuf/timestamp_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/securitycenter_service.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.CreateFindingRequest" do

data/lib/google/cloud/securitycenter/v1/securitycenter_service_services_pb.rb

@@ -27,7 +27,7 @@ module Google
           # V1 APIs for Security Center service.
           class Service
 
-            include GRPC::GenericService
+            include ::GRPC::GenericService
 
             self.marshal_class_method = :encode
             self.unmarshal_class_method = :decode

data/lib/google/cloud/securitycenter/v1/source_pb.rb

@@ -1,10 +1,10 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # source: google/cloud/securitycenter/v1/source.proto
 
-require 'google/protobuf'
-
 require 'google/api/resource_pb'
 require 'google/api/annotations_pb'
+require 'google/protobuf'
+
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/securitycenter/v1/source.proto", :syntax => :proto3) do
     add_message "google.cloud.securitycenter.v1.Source" do

data/lib/google/cloud/securitycenter/v1/vulnerability_pb.rb

@@ -0,0 +1,86 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/securitycenter/v1/vulnerability.proto
+
+require 'google/api/annotations_pb'
+require 'google/protobuf'
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/securitycenter/v1/vulnerability.proto", :syntax => :proto3) do
+    add_message "google.cloud.securitycenter.v1.Vulnerability" do
+      optional :cve, :message, 1, "google.cloud.securitycenter.v1.Cve"
+    end
+    add_message "google.cloud.securitycenter.v1.Cve" do
+      optional :id, :string, 1
+      repeated :references, :message, 2, "google.cloud.securitycenter.v1.Reference"
+      optional :cvssv3, :message, 3, "google.cloud.securitycenter.v1.Cvssv3"
+    end
+    add_message "google.cloud.securitycenter.v1.Reference" do
+      optional :source, :string, 1
+      optional :uri, :string, 2
+    end
+    add_message "google.cloud.securitycenter.v1.Cvssv3" do
+      optional :base_score, :double, 1
+      optional :attack_vector, :enum, 5, "google.cloud.securitycenter.v1.Cvssv3.AttackVector"
+      optional :attack_complexity, :enum, 6, "google.cloud.securitycenter.v1.Cvssv3.AttackComplexity"
+      optional :privileges_required, :enum, 7, "google.cloud.securitycenter.v1.Cvssv3.PrivilegesRequired"
+      optional :user_interaction, :enum, 8, "google.cloud.securitycenter.v1.Cvssv3.UserInteraction"
+      optional :scope, :enum, 9, "google.cloud.securitycenter.v1.Cvssv3.Scope"
+      optional :confidentiality_impact, :enum, 10, "google.cloud.securitycenter.v1.Cvssv3.Impact"
+      optional :integrity_impact, :enum, 11, "google.cloud.securitycenter.v1.Cvssv3.Impact"
+      optional :availability_impact, :enum, 12, "google.cloud.securitycenter.v1.Cvssv3.Impact"
+    end
+    add_enum "google.cloud.securitycenter.v1.Cvssv3.AttackVector" do
+      value :ATTACK_VECTOR_UNSPECIFIED, 0
+      value :ATTACK_VECTOR_NETWORK, 1
+      value :ATTACK_VECTOR_ADJACENT, 2
+      value :ATTACK_VECTOR_LOCAL, 3
+      value :ATTACK_VECTOR_PHYSICAL, 4
+    end
+    add_enum "google.cloud.securitycenter.v1.Cvssv3.AttackComplexity" do
+      value :ATTACK_COMPLEXITY_UNSPECIFIED, 0
+      value :ATTACK_COMPLEXITY_LOW, 1
+      value :ATTACK_COMPLEXITY_HIGH, 2
+    end
+    add_enum "google.cloud.securitycenter.v1.Cvssv3.PrivilegesRequired" do
+      value :PRIVILEGES_REQUIRED_UNSPECIFIED, 0
+      value :PRIVILEGES_REQUIRED_NONE, 1
+      value :PRIVILEGES_REQUIRED_LOW, 2
+      value :PRIVILEGES_REQUIRED_HIGH, 3
+    end
+    add_enum "google.cloud.securitycenter.v1.Cvssv3.UserInteraction" do
+      value :USER_INTERACTION_UNSPECIFIED, 0
+      value :USER_INTERACTION_NONE, 1
+      value :USER_INTERACTION_REQUIRED, 2
+    end
+    add_enum "google.cloud.securitycenter.v1.Cvssv3.Scope" do
+      value :SCOPE_UNSPECIFIED, 0
+      value :SCOPE_UNCHANGED, 1
+      value :SCOPE_CHANGED, 2
+    end
+    add_enum "google.cloud.securitycenter.v1.Cvssv3.Impact" do
+      value :IMPACT_UNSPECIFIED, 0
+      value :IMPACT_HIGH, 1
+      value :IMPACT_LOW, 2
+      value :IMPACT_NONE, 3
+    end
+  end
+end
+
+module Google
+  module Cloud
+    module SecurityCenter
+      module V1
+        Vulnerability = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Vulnerability").msgclass
+        Cve = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cve").msgclass
+        Reference = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Reference").msgclass
+        Cvssv3 = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3").msgclass
+        Cvssv3::AttackVector = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3.AttackVector").enummodule
+        Cvssv3::AttackComplexity = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3.AttackComplexity").enummodule
+        Cvssv3::PrivilegesRequired = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3.PrivilegesRequired").enummodule
+        Cvssv3::UserInteraction = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3.UserInteraction").enummodule
+        Cvssv3::Scope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3.Scope").enummodule
+        Cvssv3::Impact = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Cvssv3.Impact").enummodule
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/securitycenter/v1/finding.rb

@@ -106,6 +106,11 @@ module Google
         #     operating system that, with high confidence, indicates a computer
         #     intrusion.
         #     Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
+        # @!attribute [rw] vulnerability
+        #   @return [::Google::Cloud::SecurityCenter::V1::Vulnerability]
+        #     Represents vulnerability specific fields like cve, cvss scores etc.
+        #     CVE stands for Common Vulnerabilities and Exposures
+        #     (https://cve.mitre.org/about/)
         class Finding
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods

data/proto_docs/google/cloud/securitycenter/v1/resource.rb

@@ -38,6 +38,9 @@ module Google
         # @!attribute [rw] parent_display_name
         #   @return [::String]
         #     The human readable name of resource's parent.
+        # @!attribute [rw] type
+        #   @return [::String]
+        #     The full resource type of the resource.
         # @!attribute [r] folders
         #   @return [::Array<::Google::Cloud::SecurityCenter::V1::Folder>]
         #     Output only. Contains a Folder message for each folder in the assets ancestry.

data/proto_docs/google/cloud/securitycenter/v1/vulnerability.rb

@@ -0,0 +1,226 @@
+# frozen_string_literal: true
+
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module SecurityCenter
+      module V1
+        # Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
+        # @!attribute [rw] cve
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cve]
+        #     CVE stands for Common Vulnerabilities and Exposures
+        #     (https://cve.mitre.org/about/)
+        class Vulnerability
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # CVE stands for Common Vulnerabilities and Exposures.
+        # More information: https://cve.mitre.org
+        # @!attribute [rw] id
+        #   @return [::String]
+        #     The unique identifier for the vulnerability. e.g. CVE-2021-34527
+        # @!attribute [rw] references
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V1::Reference>]
+        #     Additional information about the CVE.
+        #     e.g. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34527
+        # @!attribute [rw] cvssv3
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3]
+        #     Describe Common Vulnerability Scoring System specified at
+        #     https://www.first.org/cvss/v3.1/specification-document
+        class Cve
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Additional Links
+        # @!attribute [rw] source
+        #   @return [::String]
+        #     Source of the reference e.g. NVD
+        # @!attribute [rw] uri
+        #   @return [::String]
+        #     Uri for the mentioned source e.g.
+        #     https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34527.
+        class Reference
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Common Vulnerability Scoring System version 3.
+        # @!attribute [rw] base_score
+        #   @return [::Float]
+        #     The base score is a function of the base metric scores.
+        # @!attribute [rw] attack_vector
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::AttackVector]
+        #     Base Metrics
+        #     Represents the intrinsic characteristics of a vulnerability that are
+        #     constant over time and across user environments.
+        #     This metric reflects the context by which vulnerability exploitation is
+        #     possible.
+        # @!attribute [rw] attack_complexity
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::AttackComplexity]
+        #     This metric describes the conditions beyond the attacker's control that
+        #     must exist in order to exploit the vulnerability.
+        # @!attribute [rw] privileges_required
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::PrivilegesRequired]
+        #     This metric describes the level of privileges an attacker must possess
+        #     before successfully exploiting the vulnerability.
+        # @!attribute [rw] user_interaction
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::UserInteraction]
+        #     This metric captures the requirement for a human user, other than the
+        #     attacker, to participate in the successful compromise of the vulnerable
+        #     component.
+        # @!attribute [rw] scope
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::Scope]
+        #     The Scope metric captures whether a vulnerability in one vulnerable
+        #     component impacts resources in components beyond its security scope.
+        # @!attribute [rw] confidentiality_impact
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::Impact]
+        #     This metric measures the impact to the confidentiality of the information
+        #     resources managed by a software component due to a successfully exploited
+        #     vulnerability.
+        # @!attribute [rw] integrity_impact
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::Impact]
+        #     This metric measures the impact to integrity of a successfully exploited
+        #     vulnerability.
+        # @!attribute [rw] availability_impact
+        #   @return [::Google::Cloud::SecurityCenter::V1::Cvssv3::Impact]
+        #     This metric measures the impact to the availability of the impacted
+        #     component resulting from a successfully exploited vulnerability.
+        class Cvssv3
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # This metric reflects the context by which vulnerability exploitation is
+          # possible.
+          module AttackVector
+            # Invalid value.
+            ATTACK_VECTOR_UNSPECIFIED = 0
+
+            # The vulnerable component is bound to the network stack and the set of
+            # possible attackers extends beyond the other options listed below, up to
+            # and including the entire Internet.
+            ATTACK_VECTOR_NETWORK = 1
+
+            # The vulnerable component is bound to the network stack, but the attack is
+            # limited at the protocol level to a logically adjacent topology.
+            ATTACK_VECTOR_ADJACENT = 2
+
+            # The vulnerable component is not bound to the network stack and the
+            # attacker's path is via read/write/execute capabilities.
+            ATTACK_VECTOR_LOCAL = 3
+
+            # The attack requires the attacker to physically touch or manipulate the
+            # vulnerable component.
+            ATTACK_VECTOR_PHYSICAL = 4
+          end
+
+          # This metric describes the conditions beyond the attacker's control that
+          # must exist in order to exploit the vulnerability.
+          module AttackComplexity
+            # Invalid value.
+            ATTACK_COMPLEXITY_UNSPECIFIED = 0
+
+            # Specialized access conditions or extenuating circumstances do not exist.
+            # An attacker can expect repeatable success when attacking the vulnerable
+            # component.
+            ATTACK_COMPLEXITY_LOW = 1
+
+            # A successful attack depends on conditions beyond the attacker's control.
+            # That is, a successful attack cannot be accomplished at will, but requires
+            # the attacker to invest in some measurable amount of effort in preparation
+            # or execution against the vulnerable component before a successful attack
+            # can be expected.
+            ATTACK_COMPLEXITY_HIGH = 2
+          end
+
+          # This metric describes the level of privileges an attacker must possess
+          # before successfully exploiting the vulnerability.
+          module PrivilegesRequired
+            # Invalid value.
+            PRIVILEGES_REQUIRED_UNSPECIFIED = 0
+
+            # The attacker is unauthorized prior to attack, and therefore does not
+            # require any access to settings or files of the vulnerable system to
+            # carry out an attack.
+            PRIVILEGES_REQUIRED_NONE = 1
+
+            # The attacker requires privileges that provide basic user capabilities
+            # that could normally affect only settings and files owned by a user.
+            # Alternatively, an attacker with Low privileges has the ability to access
+            # only non-sensitive resources.
+            PRIVILEGES_REQUIRED_LOW = 2
+
+            # The attacker requires privileges that provide significant (e.g.,
+            # administrative) control over the vulnerable component allowing access to
+            # component-wide settings and files.
+            PRIVILEGES_REQUIRED_HIGH = 3
+          end
+
+          # This metric captures the requirement for a human user, other than the
+          # attacker, to participate in the successful compromise of the vulnerable
+          # component.
+          module UserInteraction
+            # Invalid value.
+            USER_INTERACTION_UNSPECIFIED = 0
+
+            # The vulnerable system can be exploited without interaction from any user.
+            USER_INTERACTION_NONE = 1
+
+            # Successful exploitation of this vulnerability requires a user to take
+            # some action before the vulnerability can be exploited.
+            USER_INTERACTION_REQUIRED = 2
+          end
+
+          # The Scope metric captures whether a vulnerability in one vulnerable
+          # component impacts resources in components beyond its security scope.
+          module Scope
+            # Invalid value.
+            SCOPE_UNSPECIFIED = 0
+
+            # An exploited vulnerability can only affect resources managed by the same
+            # security authority.
+            SCOPE_UNCHANGED = 1
+
+            # An exploited vulnerability can affect resources beyond the security scope
+            # managed by the security authority of the vulnerable component.
+            SCOPE_CHANGED = 2
+          end
+
+          # The Impact metrics capture the effects of a successfully exploited
+          # vulnerability on the component that suffers the worst outcome that is most
+          # directly and predictably associated with the attack.
+          module Impact
+            # Invalid value.
+            IMPACT_UNSPECIFIED = 0
+
+            # High impact.
+            IMPACT_HIGH = 1
+
+            # Low impact.
+            IMPACT_LOW = 2
+
+            # No impact.
+            IMPACT_NONE = 3
+          end
+        end
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-security_center-v1
 version: !ruby/object:Gem::Version
-  version: 0.8.1
+  version: 0.9.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-08-11 00:00:00.000000000 Z
+date: 2021-10-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -210,6 +210,7 @@ files:
 - lib/google/cloud/securitycenter/v1/securitycenter_service_pb.rb
 - lib/google/cloud/securitycenter/v1/securitycenter_service_services_pb.rb
 - lib/google/cloud/securitycenter/v1/source_pb.rb
+- lib/google/cloud/securitycenter/v1/vulnerability_pb.rb
 - proto_docs/README.md
 - proto_docs/google/api/field_behavior.rb
 - proto_docs/google/api/resource.rb
@@ -225,6 +226,7 @@ files:
 - proto_docs/google/cloud/securitycenter/v1/security_marks.rb
 - proto_docs/google/cloud/securitycenter/v1/securitycenter_service.rb
 - proto_docs/google/cloud/securitycenter/v1/source.rb
+- proto_docs/google/cloud/securitycenter/v1/vulnerability.rb
 - proto_docs/google/iam/v1/iam_policy.rb
 - proto_docs/google/iam/v1/options.rb
 - proto_docs/google/iam/v1/policy.rb