grafeas-v1 0.15.0 → 0.16.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/grafeas/v1/build_pb.rb +1 -1
- data/lib/grafeas/v1/common_pb.rb +1 -1
- data/lib/grafeas/v1/compliance_pb.rb +1 -1
- data/lib/grafeas/v1/discovery_pb.rb +3 -1
- data/lib/grafeas/v1/grafeas_pb.rb +3 -1
- data/lib/grafeas/v1/intoto_statement_pb.rb +12 -1
- data/lib/grafeas/v1/sbom_pb.rb +46 -0
- data/lib/grafeas/v1/version.rb +1 -1
- data/lib/grafeas/v1/vex_pb.rb +1 -1
- data/lib/grafeas/v1/vulnerability_pb.rb +1 -1
- data/proto_docs/google/api/client.rb +4 -0
- data/proto_docs/grafeas/v1/build.rb +6 -0
- data/proto_docs/grafeas/v1/common.rb +3 -0
- data/proto_docs/grafeas/v1/compliance.rb +2 -0
- data/proto_docs/grafeas/v1/discovery.rb +28 -0
- data/proto_docs/grafeas/v1/grafeas.rb +6 -0
- data/proto_docs/grafeas/v1/intoto_statement.rb +119 -0
- data/proto_docs/grafeas/v1/sbom.rb +105 -0
- data/proto_docs/grafeas/v1/vex.rb +6 -0
- data/proto_docs/grafeas/v1/vulnerability.rb +9 -0
- metadata +4 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 57beb4c581dbfc79f1987ca854143de783aac9dca4ad46830545480b83bd0c6d
|
|
4
|
+
data.tar.gz: 0a1f69b8e9fd5d645541ef226e6a02e59c399083acfafca2d1582f273e24b3b0
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: edb2a1c4c39b74bd1113fde39c19b39d010ae4cf75d0e1efea6bf427bbabfe666cafe05c8a3c8e028ca0dd6806b20b7d96b8e008f60d1155b14edcd92ca0e97d
|
|
7
|
+
data.tar.gz: 6e780a675d056ab07410872f50d4d1fa67d7d90a6bf26da7a2b177dae5cbbcb41e9bc3d8eb9acf7a1d29b4a158c0963971e39beb02868aed2cf26c7aab9d0d03
|
data/lib/grafeas/v1/build_pb.rb
CHANGED
|
@@ -9,7 +9,7 @@ require 'grafeas/v1/intoto_statement_pb'
|
|
|
9
9
|
require 'grafeas/v1/provenance_pb'
|
|
10
10
|
|
|
11
11
|
|
|
12
|
-
descriptor_data = "\n\x16grafeas/v1/build.proto\x12\ngrafeas.v1\x1a\"grafeas/v1/intoto_provenance.proto\x1a!grafeas/v1/intoto_statement.proto\x1a\x1bgrafeas/v1/provenance.proto\"$\n\tBuildNote\x12\x17\n\x0f\x62uilder_version\x18\x01 \x01(\t\"\
|
|
12
|
+
descriptor_data = "\n\x16grafeas/v1/build.proto\x12\ngrafeas.v1\x1a\"grafeas/v1/intoto_provenance.proto\x1a!grafeas/v1/intoto_statement.proto\x1a\x1bgrafeas/v1/provenance.proto\"$\n\tBuildNote\x12\x17\n\x0f\x62uilder_version\x18\x01 \x01(\t\"\x94\x02\n\x0f\x42uildOccurrence\x12/\n\nprovenance\x18\x01 \x01(\x0b\x32\x1b.grafeas.v1.BuildProvenance\x12\x18\n\x10provenance_bytes\x18\x02 \x01(\t\x12\x37\n\x11intoto_provenance\x18\x03 \x01(\x0b\x32\x1c.grafeas.v1.InTotoProvenance\x12\x35\n\x10intoto_statement\x18\x04 \x01(\x0b\x32\x1b.grafeas.v1.InTotoStatement\x12\x46\n\x1ain_toto_slsa_provenance_v1\x18\x05 \x01(\x0b\x32\".grafeas.v1.InTotoSlsaProvenanceV1BQ\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
13
13
|
|
|
14
14
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
15
15
|
|
data/lib/grafeas/v1/common_pb.rb
CHANGED
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
require 'google/protobuf'
|
|
6
6
|
|
|
7
7
|
|
|
8
|
-
descriptor_data = "\n\x17grafeas/v1/common.proto\x12\ngrafeas.v1\"(\n\nRelatedUrl\x12\x0b\n\x03url\x18\x01 \x01(\t\x12\r\n\x05label\x18\x02 \x01(\t\"5\n\tSignature\x12\x11\n\tsignature\x18\x01 \x01(\x0c\x12\x15\n\rpublic_key_id\x18\x02 \x01(\t\"d\n\x08\x45nvelope\x12\x0f\n\x07payload\x18\x01 \x01(\x0c\x12\x14\n\x0cpayload_type\x18\x02 \x01(\t\x12\x31\n\nsignatures\x18\x03 \x03(\x0b\x32\x1d.grafeas.v1.EnvelopeSignature\"/\n\x11\x45nvelopeSignature\x12\x0b\n\x03sig\x18\x01 \x01(\x0c\x12\r\n\x05keyid\x18\x02 \x01(\t\"!\n\x0c\x46ileLocation\x12\x11\n\tfile_path\x18\x01 \x01(\t\"/\n\x07License\x12\x12\n\nexpression\x18\x01 \x01(\t\x12\x10\n\x08\x63omments\x18\x02 \x01(\t\",\n\x06\x44igest\x12\x0c\n\x04\x61lgo\x18\x01 \x01(\t\x12\x14\n\x0c\x64igest_bytes\x18\x02 \x01(\x0c*\
|
|
8
|
+
descriptor_data = "\n\x17grafeas/v1/common.proto\x12\ngrafeas.v1\"(\n\nRelatedUrl\x12\x0b\n\x03url\x18\x01 \x01(\t\x12\r\n\x05label\x18\x02 \x01(\t\"5\n\tSignature\x12\x11\n\tsignature\x18\x01 \x01(\x0c\x12\x15\n\rpublic_key_id\x18\x02 \x01(\t\"d\n\x08\x45nvelope\x12\x0f\n\x07payload\x18\x01 \x01(\x0c\x12\x14\n\x0cpayload_type\x18\x02 \x01(\t\x12\x31\n\nsignatures\x18\x03 \x03(\x0b\x32\x1d.grafeas.v1.EnvelopeSignature\"/\n\x11\x45nvelopeSignature\x12\x0b\n\x03sig\x18\x01 \x01(\x0c\x12\r\n\x05keyid\x18\x02 \x01(\t\"!\n\x0c\x46ileLocation\x12\x11\n\tfile_path\x18\x01 \x01(\t\"/\n\x07License\x12\x12\n\nexpression\x18\x01 \x01(\t\x12\x10\n\x08\x63omments\x18\x02 \x01(\t\",\n\x06\x44igest\x12\x0c\n\x04\x61lgo\x18\x01 \x01(\t\x12\x14\n\x0c\x64igest_bytes\x18\x02 \x01(\x0c*\xf0\x01\n\x08NoteKind\x12\x19\n\x15NOTE_KIND_UNSPECIFIED\x10\x00\x12\x11\n\rVULNERABILITY\x10\x01\x12\t\n\x05\x42UILD\x10\x02\x12\t\n\x05IMAGE\x10\x03\x12\x0b\n\x07PACKAGE\x10\x04\x12\x0e\n\nDEPLOYMENT\x10\x05\x12\r\n\tDISCOVERY\x10\x06\x12\x0f\n\x0b\x41TTESTATION\x10\x07\x12\x0b\n\x07UPGRADE\x10\x08\x12\x0e\n\nCOMPLIANCE\x10\t\x12\x14\n\x10\x44SSE_ATTESTATION\x10\n\x12\x1c\n\x18VULNERABILITY_ASSESSMENT\x10\x0b\x12\x12\n\x0eSBOM_REFERENCE\x10\x0c\x42Q\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
9
9
|
|
|
10
10
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
11
11
|
|
|
@@ -7,7 +7,7 @@ require 'google/protobuf'
|
|
|
7
7
|
require 'grafeas/v1/severity_pb'
|
|
8
8
|
|
|
9
9
|
|
|
10
|
-
descriptor_data = "\n\x1bgrafeas/v1/compliance.proto\x12\ngrafeas.v1\x1a\x19grafeas/v1/severity.proto\"\
|
|
10
|
+
descriptor_data = "\n\x1bgrafeas/v1/compliance.proto\x12\ngrafeas.v1\x1a\x19grafeas/v1/severity.proto\"\xf1\x02\n\x0e\x43omplianceNote\x12\r\n\x05title\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12.\n\x07version\x18\x03 \x03(\x0b\x32\x1d.grafeas.v1.ComplianceVersion\x12\x11\n\trationale\x18\x04 \x01(\t\x12\x13\n\x0bremediation\x18\x05 \x01(\t\x12@\n\rcis_benchmark\x18\x06 \x01(\x0b\x32\'.grafeas.v1.ComplianceNote.CisBenchmarkH\x00\x12\x19\n\x11scan_instructions\x18\x07 \x01(\x0c\x12\x10\n\x06impact\x18\x08 \x01(\tH\x01\x1aM\n\x0c\x43isBenchmark\x12\x15\n\rprofile_level\x18\x01 \x01(\x05\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.SeverityB\x11\n\x0f\x63ompliance_typeB\x12\n\x10potential_impact\"Q\n\x11\x43omplianceVersion\x12\x0f\n\x07\x63pe_uri\x18\x01 \x01(\t\x12\x1a\n\x12\x62\x65nchmark_document\x18\x03 \x01(\t\x12\x0f\n\x07version\x18\x02 \x01(\t\"p\n\x14\x43omplianceOccurrence\x12\x39\n\x13non_compliant_files\x18\x02 \x03(\x0b\x32\x1c.grafeas.v1.NonCompliantFile\x12\x1d\n\x15non_compliance_reason\x18\x03 \x01(\t\"I\n\x10NonCompliantFile\x12\x0c\n\x04path\x18\x01 \x01(\t\x12\x17\n\x0f\x64isplay_command\x18\x02 \x01(\t\x12\x0e\n\x06reason\x18\x03 \x01(\tBQ\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
11
11
|
|
|
12
12
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
13
13
|
|
|
@@ -10,7 +10,7 @@ require 'google/rpc/status_pb'
|
|
|
10
10
|
require 'grafeas/v1/common_pb'
|
|
11
11
|
|
|
12
12
|
|
|
13
|
-
descriptor_data = "\n\x1agrafeas/v1/discovery.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17google/rpc/status.proto\x1a\x17grafeas/v1/common.proto\"<\n\rDiscoveryNote\x12+\n\ranalysis_kind\x18\x01 \x01(\x0e\x32\x14.grafeas.v1.NoteKind\"\
|
|
13
|
+
descriptor_data = "\n\x1agrafeas/v1/discovery.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17google/rpc/status.proto\x1a\x17grafeas/v1/common.proto\"<\n\rDiscoveryNote\x12+\n\ranalysis_kind\x18\x01 \x01(\x0e\x32\x14.grafeas.v1.NoteKind\"\xe9\x07\n\x13\x44iscoveryOccurrence\x12O\n\x13\x63ontinuous_analysis\x18\x01 \x01(\x0e\x32\x32.grafeas.v1.DiscoveryOccurrence.ContinuousAnalysis\x12G\n\x0f\x61nalysis_status\x18\x02 \x01(\x0e\x32..grafeas.v1.DiscoveryOccurrence.AnalysisStatus\x12M\n\x12\x61nalysis_completed\x18\x07 \x01(\x0b\x32\x31.grafeas.v1.DiscoveryOccurrence.AnalysisCompleted\x12*\n\x0e\x61nalysis_error\x18\x08 \x03(\x0b\x32\x12.google.rpc.Status\x12\x31\n\x15\x61nalysis_status_error\x18\x03 \x01(\x0b\x32\x12.google.rpc.Status\x12\x0b\n\x03\x63pe\x18\x04 \x01(\t\x12\x32\n\x0elast_scan_time\x18\x05 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x35\n\x0c\x61rchive_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12?\n\x0bsbom_status\x18\t \x01(\x0b\x32*.grafeas.v1.DiscoveryOccurrence.SBOMStatus\x1a*\n\x11\x41nalysisCompleted\x12\x15\n\ranalysis_type\x18\x01 \x03(\t\x1a\xa9\x01\n\nSBOMStatus\x12H\n\nsbom_state\x18\x01 \x01(\x0e\x32\x34.grafeas.v1.DiscoveryOccurrence.SBOMStatus.SBOMState\x12\r\n\x05\x65rror\x18\x02 \x01(\t\"B\n\tSBOMState\x12\x1a\n\x16SBOM_STATE_UNSPECIFIED\x10\x00\x12\x0b\n\x07PENDING\x10\x01\x12\x0c\n\x08\x43OMPLETE\x10\x02\"S\n\x12\x43ontinuousAnalysis\x12#\n\x1f\x43ONTINUOUS_ANALYSIS_UNSPECIFIED\x10\x00\x12\n\n\x06\x41\x43TIVE\x10\x01\x12\x0c\n\x08INACTIVE\x10\x02\"\xa3\x01\n\x0e\x41nalysisStatus\x12\x1f\n\x1b\x41NALYSIS_STATUS_UNSPECIFIED\x10\x00\x12\x0b\n\x07PENDING\x10\x01\x12\x0c\n\x08SCANNING\x10\x02\x12\x14\n\x10\x46INISHED_SUCCESS\x10\x03\x12\x0c\n\x08\x43OMPLETE\x10\x03\x12\x13\n\x0f\x46INISHED_FAILED\x10\x04\x12\x18\n\x14\x46INISHED_UNSUPPORTED\x10\x05\x1a\x02\x10\x01\x42Q\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
14
14
|
|
|
15
15
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
16
16
|
|
|
@@ -43,6 +43,8 @@ module Grafeas
|
|
|
43
43
|
DiscoveryNote = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryNote").msgclass
|
|
44
44
|
DiscoveryOccurrence = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryOccurrence").msgclass
|
|
45
45
|
DiscoveryOccurrence::AnalysisCompleted = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryOccurrence.AnalysisCompleted").msgclass
|
|
46
|
+
DiscoveryOccurrence::SBOMStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryOccurrence.SBOMStatus").msgclass
|
|
47
|
+
DiscoveryOccurrence::SBOMStatus::SBOMState = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryOccurrence.SBOMStatus.SBOMState").enummodule
|
|
46
48
|
DiscoveryOccurrence::ContinuousAnalysis = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryOccurrence.ContinuousAnalysis").enummodule
|
|
47
49
|
DiscoveryOccurrence::AnalysisStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.DiscoveryOccurrence.AnalysisStatus").enummodule
|
|
48
50
|
end
|
|
@@ -20,12 +20,13 @@ require 'grafeas/v1/discovery_pb'
|
|
|
20
20
|
require 'grafeas/v1/dsse_attestation_pb'
|
|
21
21
|
require 'grafeas/v1/image_pb'
|
|
22
22
|
require 'grafeas/v1/package_pb'
|
|
23
|
+
require 'grafeas/v1/sbom_pb'
|
|
23
24
|
require 'grafeas/v1/upgrade_pb'
|
|
24
25
|
require 'grafeas/v1/vex_pb'
|
|
25
26
|
require 'grafeas/v1/vulnerability_pb'
|
|
26
27
|
|
|
27
28
|
|
|
28
|
-
descriptor_data = "\n\x18grafeas/v1/grafeas.proto\x12\ngrafeas.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a google/protobuf/field_mask.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x1cgrafeas/v1/attestation.proto\x1a\x16grafeas/v1/build.proto\x1a\x17grafeas/v1/common.proto\x1a\x1bgrafeas/v1/compliance.proto\x1a\x1bgrafeas/v1/deployment.proto\x1a\x1agrafeas/v1/discovery.proto\x1a!grafeas/v1/dsse_attestation.proto\x1a\x16grafeas/v1/image.proto\x1a\x18grafeas/v1/package.proto\x1a\x18grafeas/v1/upgrade.proto\x1a\x14grafeas/v1/vex.proto\x1a\x1egrafeas/v1/vulnerability.proto\"\xfb\x06\n\nOccurrence\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x14\n\x0cresource_uri\x18\x02 \x01(\t\x12\x11\n\tnote_name\x18\x03 \x01(\t\x12\"\n\x04kind\x18\x04 \x01(\x0e\x32\x14.grafeas.v1.NoteKind\x12\x13\n\x0bremediation\x18\x05 \x01(\t\x12/\n\x0b\x63reate_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0bupdate_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12<\n\rvulnerability\x18\x08 \x01(\x0b\x32#.grafeas.v1.VulnerabilityOccurrenceH\x00\x12,\n\x05\x62uild\x18\t \x01(\x0b\x32\x1b.grafeas.v1.BuildOccurrenceH\x00\x12,\n\x05image\x18\n \x01(\x0b\x32\x1b.grafeas.v1.ImageOccurrenceH\x00\x12\x30\n\x07package\x18\x0b \x01(\x0b\x32\x1d.grafeas.v1.PackageOccurrenceH\x00\x12\x36\n\ndeployment\x18\x0c \x01(\x0b\x32 .grafeas.v1.DeploymentOccurrenceH\x00\x12\x34\n\tdiscovery\x18\r \x01(\x0b\x32\x1f.grafeas.v1.DiscoveryOccurrenceH\x00\x12\x38\n\x0b\x61ttestation\x18\x0e \x01(\x0b\x32!.grafeas.v1.AttestationOccurrenceH\x00\x12\x30\n\x07upgrade\x18\x0f \x01(\x0b\x32\x1d.grafeas.v1.UpgradeOccurrenceH\x00\x12\x36\n\ncompliance\x18\x10 \x01(\x0b\x32 .grafeas.v1.ComplianceOccurrenceH\x00\x12\x41\n\x10\x64sse_attestation\x18\x11 \x01(\x0b\x32%.grafeas.v1.DSSEAttestationOccurrenceH\x00\x12&\n\x08\x65nvelope\x18\x12 \x01(\x0b\x32\x14.grafeas.v1.Envelope:G\xea\x41\x44\n\x15grafeas.io/Occurrence\x12+projects/{project}/occurrences/{occurrence}B\t\n\x07\x64\x65tails\"\xbe\x07\n\x04Note\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x19\n\x11short_description\x18\x02 \x01(\t\x12\x18\n\x10long_description\x18\x03 \x01(\t\x12\"\n\x04kind\x18\x04 \x01(\x0e\x32\x14.grafeas.v1.NoteKind\x12+\n\x0brelated_url\x18\x05 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x33\n\x0f\x65xpiration_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0b\x63reate_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0bupdate_time\x18\x08 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x1a\n\x12related_note_names\x18\t \x03(\t\x12\x36\n\rvulnerability\x18\n \x01(\x0b\x32\x1d.grafeas.v1.VulnerabilityNoteH\x00\x12&\n\x05\x62uild\x18\x0b \x01(\x0b\x32\x15.grafeas.v1.BuildNoteH\x00\x12&\n\x05image\x18\x0c \x01(\x0b\x32\x15.grafeas.v1.ImageNoteH\x00\x12*\n\x07package\x18\r \x01(\x0b\x32\x17.grafeas.v1.PackageNoteH\x00\x12\x30\n\ndeployment\x18\x0e \x01(\x0b\x32\x1a.grafeas.v1.DeploymentNoteH\x00\x12.\n\tdiscovery\x18\x0f \x01(\x0b\x32\x19.grafeas.v1.DiscoveryNoteH\x00\x12\x32\n\x0b\x61ttestation\x18\x10 \x01(\x0b\x32\x1b.grafeas.v1.AttestationNoteH\x00\x12*\n\x07upgrade\x18\x11 \x01(\x0b\x32\x17.grafeas.v1.UpgradeNoteH\x00\x12\x30\n\ncompliance\x18\x12 \x01(\x0b\x32\x1a.grafeas.v1.ComplianceNoteH\x00\x12;\n\x10\x64sse_attestation\x18\x13 \x01(\x0b\x32\x1f.grafeas.v1.DSSEAttestationNoteH\x00\x12K\n\x18vulnerability_assessment\x18\x14 \x01(\x0b\x32\'.grafeas.v1.VulnerabilityAssessmentNoteH\x00:5\xea\x41\x32\n\x0fgrafeas.io/Note\x12\x1fprojects/{project}/notes/{note}B\x06\n\x04type\"C\n\x14GetOccurrenceRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\"{\n\x16ListOccurrencesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x0e\n\x06\x66ilter\x18\x02 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"_\n\x17ListOccurrencesResponse\x12+\n\x0boccurrences\x18\x01 \x03(\x0b\x32\x16.grafeas.v1.Occurrence\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"F\n\x17\x44\x65leteOccurrenceRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\"v\n\x17\x43reateOccurrenceRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12/\n\noccurrence\x18\x02 \x01(\x0b\x32\x16.grafeas.v1.OccurrenceB\x03\xe0\x41\x02\"\xa8\x01\n\x17UpdateOccurrenceRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\x12/\n\noccurrence\x18\x02 \x01(\x0b\x32\x16.grafeas.v1.OccurrenceB\x03\xe0\x41\x02\x12/\n\x0bupdate_mask\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.FieldMask\"7\n\x0eGetNoteRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\"G\n\x18GetOccurrenceNoteRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\"u\n\x10ListNotesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x0e\n\x06\x66ilter\x18\x02 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"M\n\x11ListNotesResponse\x12\x1f\n\x05notes\x18\x01 \x03(\x0b\x32\x10.grafeas.v1.Note\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\":\n\x11\x44\x65leteNoteRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\"z\n\x11\x43reateNoteRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x14\n\x07note_id\x18\x02 \x01(\tB\x03\xe0\x41\x02\x12#\n\x04note\x18\x03 \x01(\x0b\x32\x10.grafeas.v1.NoteB\x03\xe0\x41\x02\"\x90\x01\n\x11UpdateNoteRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\x12#\n\x04note\x18\x02 \x01(\x0b\x32\x10.grafeas.v1.NoteB\x03\xe0\x41\x02\x12/\n\x0bupdate_mask\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.FieldMask\"z\n\x1aListNoteOccurrencesRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\x12\x0e\n\x06\x66ilter\x18\x02 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"c\n\x1bListNoteOccurrencesResponse\x12+\n\x0boccurrences\x18\x01 \x03(\x0b\x32\x16.grafeas.v1.Occurrence\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\xc9\x01\n\x17\x42\x61tchCreateNotesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x42\n\x05notes\x18\x02 \x03(\x0b\x32..grafeas.v1.BatchCreateNotesRequest.NotesEntryB\x03\xe0\x41\x02\x1a>\n\nNotesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x1f\n\x05value\x18\x02 \x01(\x0b\x32\x10.grafeas.v1.Note:\x02\x38\x01\";\n\x18\x42\x61tchCreateNotesResponse\x12\x1f\n\x05notes\x18\x01 \x03(\x0b\x32\x10.grafeas.v1.Note\"}\n\x1d\x42\x61tchCreateOccurrencesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x30\n\x0boccurrences\x18\x02 \x03(\x0b\x32\x16.grafeas.v1.OccurrenceB\x03\xe0\x41\x02\"M\n\x1e\x42\x61tchCreateOccurrencesResponse\x12+\n\x0boccurrences\x18\x01 \x03(\x0b\x32\x16.grafeas.v1.Occurrence2\x92\x10\n\x07Grafeas\x12}\n\rGetOccurrence\x12 .grafeas.v1.GetOccurrenceRequest\x1a\x16.grafeas.v1.Occurrence\"2\xda\x41\x04name\x82\xd3\xe4\x93\x02%\x12#/v1/{name=projects/*/occurrences/*}\x12\x97\x01\n\x0fListOccurrences\x12\".grafeas.v1.ListOccurrencesRequest\x1a#.grafeas.v1.ListOccurrencesResponse\";\xda\x41\rparent,filter\x82\xd3\xe4\x93\x02%\x12#/v1/{parent=projects/*}/occurrences\x12\x83\x01\n\x10\x44\x65leteOccurrence\x12#.grafeas.v1.DeleteOccurrenceRequest\x1a\x16.google.protobuf.Empty\"2\xda\x41\x04name\x82\xd3\xe4\x93\x02%*#/v1/{name=projects/*/occurrences/*}\x12\x9c\x01\n\x10\x43reateOccurrence\x12#.grafeas.v1.CreateOccurrenceRequest\x1a\x16.grafeas.v1.Occurrence\"K\xda\x41\x11parent,occurrence\x82\xd3\xe4\x93\x02\x31\"#/v1/{parent=projects/*}/occurrences:\noccurrence\x12\xc0\x01\n\x16\x42\x61tchCreateOccurrences\x12).grafeas.v1.BatchCreateOccurrencesRequest\x1a*.grafeas.v1.BatchCreateOccurrencesResponse\"O\xda\x41\x12parent,occurrences\x82\xd3\xe4\x93\x02\x34\"//v1/{parent=projects/*}/occurrences:batchCreate:\x01*\x12\xa6\x01\n\x10UpdateOccurrence\x12#.grafeas.v1.UpdateOccurrenceRequest\x1a\x16.grafeas.v1.Occurrence\"U\xda\x41\x1bname,occurrence,update_mask\x82\xd3\xe4\x93\x02\x31\x32#/v1/{name=projects/*/occurrences/*}:\noccurrence\x12\x85\x01\n\x11GetOccurrenceNote\x12$.grafeas.v1.GetOccurrenceNoteRequest\x1a\x10.grafeas.v1.Note\"8\xda\x41\x04name\x82\xd3\xe4\x93\x02+\x12)/v1/{name=projects/*/occurrences/*}/notes\x12\x65\n\x07GetNote\x12\x1a.grafeas.v1.GetNoteRequest\x1a\x10.grafeas.v1.Note\",\xda\x41\x04name\x82\xd3\xe4\x93\x02\x1f\x12\x1d/v1/{name=projects/*/notes/*}\x12\x7f\n\tListNotes\x12\x1c.grafeas.v1.ListNotesRequest\x1a\x1d.grafeas.v1.ListNotesResponse\"5\xda\x41\rparent,filter\x82\xd3\xe4\x93\x02\x1f\x12\x1d/v1/{parent=projects/*}/notes\x12q\n\nDeleteNote\x12\x1d.grafeas.v1.DeleteNoteRequest\x1a\x16.google.protobuf.Empty\",\xda\x41\x04name\x82\xd3\xe4\x93\x02\x1f*\x1d/v1/{name=projects/*/notes/*}\x12\x80\x01\n\nCreateNote\x12\x1d.grafeas.v1.CreateNoteRequest\x1a\x10.grafeas.v1.Note\"A\xda\x41\x13parent,note_id,note\x82\xd3\xe4\x93\x02%\"\x1d/v1/{parent=projects/*}/notes:\x04note\x12\xa2\x01\n\x10\x42\x61tchCreateNotes\x12#.grafeas.v1.BatchCreateNotesRequest\x1a$.grafeas.v1.BatchCreateNotesResponse\"C\xda\x41\x0cparent,notes\x82\xd3\xe4\x93\x02.\")/v1/{parent=projects/*}/notes:batchCreate:\x01*\x12\x82\x01\n\nUpdateNote\x12\x1d.grafeas.v1.UpdateNoteRequest\x1a\x10.grafeas.v1.Note\"C\xda\x41\x15name,note,update_mask\x82\xd3\xe4\x93\x02%2\x1d/v1/{name=projects/*/notes/*}:\x04note\x12\xa7\x01\n\x13ListNoteOccurrences\x12&.grafeas.v1.ListNoteOccurrencesRequest\x1a\'.grafeas.v1.ListNoteOccurrencesResponse\"?\xda\x41\x0bname,filter\x82\xd3\xe4\x93\x02+\x12)/v1/{name=projects/*/notes/*}/occurrences\x1a#\xca\x41 containeranalysis.googleapis.comB|\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRA\xea\x41(\n\x12grafeas.io/Project\x12\x12projects/{project}b\x06proto3"
|
|
29
|
+
descriptor_data = "\n\x18grafeas/v1/grafeas.proto\x12\ngrafeas.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a google/protobuf/field_mask.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x1cgrafeas/v1/attestation.proto\x1a\x16grafeas/v1/build.proto\x1a\x17grafeas/v1/common.proto\x1a\x1bgrafeas/v1/compliance.proto\x1a\x1bgrafeas/v1/deployment.proto\x1a\x1agrafeas/v1/discovery.proto\x1a!grafeas/v1/dsse_attestation.proto\x1a\x16grafeas/v1/image.proto\x1a\x18grafeas/v1/package.proto\x1a\x15grafeas/v1/sbom.proto\x1a\x18grafeas/v1/upgrade.proto\x1a\x14grafeas/v1/vex.proto\x1a\x1egrafeas/v1/vulnerability.proto\"\xba\x07\n\nOccurrence\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x14\n\x0cresource_uri\x18\x02 \x01(\t\x12\x11\n\tnote_name\x18\x03 \x01(\t\x12\"\n\x04kind\x18\x04 \x01(\x0e\x32\x14.grafeas.v1.NoteKind\x12\x13\n\x0bremediation\x18\x05 \x01(\t\x12/\n\x0b\x63reate_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0bupdate_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12<\n\rvulnerability\x18\x08 \x01(\x0b\x32#.grafeas.v1.VulnerabilityOccurrenceH\x00\x12,\n\x05\x62uild\x18\t \x01(\x0b\x32\x1b.grafeas.v1.BuildOccurrenceH\x00\x12,\n\x05image\x18\n \x01(\x0b\x32\x1b.grafeas.v1.ImageOccurrenceH\x00\x12\x30\n\x07package\x18\x0b \x01(\x0b\x32\x1d.grafeas.v1.PackageOccurrenceH\x00\x12\x36\n\ndeployment\x18\x0c \x01(\x0b\x32 .grafeas.v1.DeploymentOccurrenceH\x00\x12\x34\n\tdiscovery\x18\r \x01(\x0b\x32\x1f.grafeas.v1.DiscoveryOccurrenceH\x00\x12\x38\n\x0b\x61ttestation\x18\x0e \x01(\x0b\x32!.grafeas.v1.AttestationOccurrenceH\x00\x12\x30\n\x07upgrade\x18\x0f \x01(\x0b\x32\x1d.grafeas.v1.UpgradeOccurrenceH\x00\x12\x36\n\ncompliance\x18\x10 \x01(\x0b\x32 .grafeas.v1.ComplianceOccurrenceH\x00\x12\x41\n\x10\x64sse_attestation\x18\x11 \x01(\x0b\x32%.grafeas.v1.DSSEAttestationOccurrenceH\x00\x12=\n\x0esbom_reference\x18\x13 \x01(\x0b\x32#.grafeas.v1.SBOMReferenceOccurrenceH\x00\x12&\n\x08\x65nvelope\x18\x12 \x01(\x0b\x32\x14.grafeas.v1.Envelope:G\xea\x41\x44\n\x15grafeas.io/Occurrence\x12+projects/{project}/occurrences/{occurrence}B\t\n\x07\x64\x65tails\"\xf7\x07\n\x04Note\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x19\n\x11short_description\x18\x02 \x01(\t\x12\x18\n\x10long_description\x18\x03 \x01(\t\x12\"\n\x04kind\x18\x04 \x01(\x0e\x32\x14.grafeas.v1.NoteKind\x12+\n\x0brelated_url\x18\x05 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x33\n\x0f\x65xpiration_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0b\x63reate_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0bupdate_time\x18\x08 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x1a\n\x12related_note_names\x18\t \x03(\t\x12\x36\n\rvulnerability\x18\n \x01(\x0b\x32\x1d.grafeas.v1.VulnerabilityNoteH\x00\x12&\n\x05\x62uild\x18\x0b \x01(\x0b\x32\x15.grafeas.v1.BuildNoteH\x00\x12&\n\x05image\x18\x0c \x01(\x0b\x32\x15.grafeas.v1.ImageNoteH\x00\x12*\n\x07package\x18\r \x01(\x0b\x32\x17.grafeas.v1.PackageNoteH\x00\x12\x30\n\ndeployment\x18\x0e \x01(\x0b\x32\x1a.grafeas.v1.DeploymentNoteH\x00\x12.\n\tdiscovery\x18\x0f \x01(\x0b\x32\x19.grafeas.v1.DiscoveryNoteH\x00\x12\x32\n\x0b\x61ttestation\x18\x10 \x01(\x0b\x32\x1b.grafeas.v1.AttestationNoteH\x00\x12*\n\x07upgrade\x18\x11 \x01(\x0b\x32\x17.grafeas.v1.UpgradeNoteH\x00\x12\x30\n\ncompliance\x18\x12 \x01(\x0b\x32\x1a.grafeas.v1.ComplianceNoteH\x00\x12;\n\x10\x64sse_attestation\x18\x13 \x01(\x0b\x32\x1f.grafeas.v1.DSSEAttestationNoteH\x00\x12K\n\x18vulnerability_assessment\x18\x14 \x01(\x0b\x32\'.grafeas.v1.VulnerabilityAssessmentNoteH\x00\x12\x37\n\x0esbom_reference\x18\x15 \x01(\x0b\x32\x1d.grafeas.v1.SBOMReferenceNoteH\x00:5\xea\x41\x32\n\x0fgrafeas.io/Note\x12\x1fprojects/{project}/notes/{note}B\x06\n\x04type\"C\n\x14GetOccurrenceRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\"{\n\x16ListOccurrencesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x0e\n\x06\x66ilter\x18\x02 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"_\n\x17ListOccurrencesResponse\x12+\n\x0boccurrences\x18\x01 \x03(\x0b\x32\x16.grafeas.v1.Occurrence\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"F\n\x17\x44\x65leteOccurrenceRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\"v\n\x17\x43reateOccurrenceRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12/\n\noccurrence\x18\x02 \x01(\x0b\x32\x16.grafeas.v1.OccurrenceB\x03\xe0\x41\x02\"\xa8\x01\n\x17UpdateOccurrenceRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\x12/\n\noccurrence\x18\x02 \x01(\x0b\x32\x16.grafeas.v1.OccurrenceB\x03\xe0\x41\x02\x12/\n\x0bupdate_mask\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.FieldMask\"7\n\x0eGetNoteRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\"G\n\x18GetOccurrenceNoteRequest\x12+\n\x04name\x18\x01 \x01(\tB\x1d\xe0\x41\x02\xfa\x41\x17\n\x15grafeas.io/Occurrence\"u\n\x10ListNotesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x0e\n\x06\x66ilter\x18\x02 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"M\n\x11ListNotesResponse\x12\x1f\n\x05notes\x18\x01 \x03(\x0b\x32\x10.grafeas.v1.Note\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\":\n\x11\x44\x65leteNoteRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\"z\n\x11\x43reateNoteRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x14\n\x07note_id\x18\x02 \x01(\tB\x03\xe0\x41\x02\x12#\n\x04note\x18\x03 \x01(\x0b\x32\x10.grafeas.v1.NoteB\x03\xe0\x41\x02\"\x90\x01\n\x11UpdateNoteRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\x12#\n\x04note\x18\x02 \x01(\x0b\x32\x10.grafeas.v1.NoteB\x03\xe0\x41\x02\x12/\n\x0bupdate_mask\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.FieldMask\"z\n\x1aListNoteOccurrencesRequest\x12%\n\x04name\x18\x01 \x01(\tB\x17\xe0\x41\x02\xfa\x41\x11\n\x0fgrafeas.io/Note\x12\x0e\n\x06\x66ilter\x18\x02 \x01(\t\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"c\n\x1bListNoteOccurrencesResponse\x12+\n\x0boccurrences\x18\x01 \x03(\x0b\x32\x16.grafeas.v1.Occurrence\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\xc9\x01\n\x17\x42\x61tchCreateNotesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x42\n\x05notes\x18\x02 \x03(\x0b\x32..grafeas.v1.BatchCreateNotesRequest.NotesEntryB\x03\xe0\x41\x02\x1a>\n\nNotesEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\x1f\n\x05value\x18\x02 \x01(\x0b\x32\x10.grafeas.v1.Note:\x02\x38\x01\";\n\x18\x42\x61tchCreateNotesResponse\x12\x1f\n\x05notes\x18\x01 \x03(\x0b\x32\x10.grafeas.v1.Note\"}\n\x1d\x42\x61tchCreateOccurrencesRequest\x12*\n\x06parent\x18\x01 \x01(\tB\x1a\xe0\x41\x02\xfa\x41\x14\n\x12grafeas.io/Project\x12\x30\n\x0boccurrences\x18\x02 \x03(\x0b\x32\x16.grafeas.v1.OccurrenceB\x03\xe0\x41\x02\"M\n\x1e\x42\x61tchCreateOccurrencesResponse\x12+\n\x0boccurrences\x18\x01 \x03(\x0b\x32\x16.grafeas.v1.Occurrence2\xc7\x12\n\x07Grafeas\x12\xb0\x01\n\rGetOccurrence\x12 .grafeas.v1.GetOccurrenceRequest\x1a\x16.grafeas.v1.Occurrence\"e\xda\x41\x04name\x82\xd3\xe4\x93\x02X\x12#/v1/{name=projects/*/occurrences/*}Z1\x12//v1/{name=projects/*/locations/*/occurrences/*}\x12\xca\x01\n\x0fListOccurrences\x12\".grafeas.v1.ListOccurrencesRequest\x1a#.grafeas.v1.ListOccurrencesResponse\"n\xda\x41\rparent,filter\x82\xd3\xe4\x93\x02X\x12#/v1/{parent=projects/*}/occurrencesZ1\x12//v1/{parent=projects/*/locations/*}/occurrences\x12\x83\x01\n\x10\x44\x65leteOccurrence\x12#.grafeas.v1.DeleteOccurrenceRequest\x1a\x16.google.protobuf.Empty\"2\xda\x41\x04name\x82\xd3\xe4\x93\x02%*#/v1/{name=projects/*/occurrences/*}\x12\x9c\x01\n\x10\x43reateOccurrence\x12#.grafeas.v1.CreateOccurrenceRequest\x1a\x16.grafeas.v1.Occurrence\"K\xda\x41\x11parent,occurrence\x82\xd3\xe4\x93\x02\x31\"#/v1/{parent=projects/*}/occurrences:\noccurrence\x12\xc0\x01\n\x16\x42\x61tchCreateOccurrences\x12).grafeas.v1.BatchCreateOccurrencesRequest\x1a*.grafeas.v1.BatchCreateOccurrencesResponse\"O\xda\x41\x12parent,occurrences\x82\xd3\xe4\x93\x02\x34\"//v1/{parent=projects/*}/occurrences:batchCreate:\x01*\x12\xa6\x01\n\x10UpdateOccurrence\x12#.grafeas.v1.UpdateOccurrenceRequest\x1a\x16.grafeas.v1.Occurrence\"U\xda\x41\x1bname,occurrence,update_mask\x82\xd3\xe4\x93\x02\x31\x32#/v1/{name=projects/*/occurrences/*}:\noccurrence\x12\xbe\x01\n\x11GetOccurrenceNote\x12$.grafeas.v1.GetOccurrenceNoteRequest\x1a\x10.grafeas.v1.Note\"q\xda\x41\x04name\x82\xd3\xe4\x93\x02\x64\x12)/v1/{name=projects/*/occurrences/*}/notesZ7\x12\x35/v1/{name=projects/*/locations/*/occurrences/*}/notes\x12\x92\x01\n\x07GetNote\x12\x1a.grafeas.v1.GetNoteRequest\x1a\x10.grafeas.v1.Note\"Y\xda\x41\x04name\x82\xd3\xe4\x93\x02L\x12\x1d/v1/{name=projects/*/notes/*}Z+\x12)/v1/{name=projects/*/locations/*/notes/*}\x12\xac\x01\n\tListNotes\x12\x1c.grafeas.v1.ListNotesRequest\x1a\x1d.grafeas.v1.ListNotesResponse\"b\xda\x41\rparent,filter\x82\xd3\xe4\x93\x02L\x12\x1d/v1/{parent=projects/*}/notesZ+\x12)/v1/{parent=projects/*/locations/*}/notes\x12q\n\nDeleteNote\x12\x1d.grafeas.v1.DeleteNoteRequest\x1a\x16.google.protobuf.Empty\",\xda\x41\x04name\x82\xd3\xe4\x93\x02\x1f*\x1d/v1/{name=projects/*/notes/*}\x12\x80\x01\n\nCreateNote\x12\x1d.grafeas.v1.CreateNoteRequest\x1a\x10.grafeas.v1.Note\"A\xda\x41\x13parent,note_id,note\x82\xd3\xe4\x93\x02%\"\x1d/v1/{parent=projects/*}/notes:\x04note\x12\xa2\x01\n\x10\x42\x61tchCreateNotes\x12#.grafeas.v1.BatchCreateNotesRequest\x1a$.grafeas.v1.BatchCreateNotesResponse\"C\xda\x41\x0cparent,notes\x82\xd3\xe4\x93\x02.\")/v1/{parent=projects/*}/notes:batchCreate:\x01*\x12\x82\x01\n\nUpdateNote\x12\x1d.grafeas.v1.UpdateNoteRequest\x1a\x10.grafeas.v1.Note\"C\xda\x41\x15name,note,update_mask\x82\xd3\xe4\x93\x02%2\x1d/v1/{name=projects/*/notes/*}:\x04note\x12\xe0\x01\n\x13ListNoteOccurrences\x12&.grafeas.v1.ListNoteOccurrencesRequest\x1a\'.grafeas.v1.ListNoteOccurrencesResponse\"x\xda\x41\x0bname,filter\x82\xd3\xe4\x93\x02\x64\x12)/v1/{name=projects/*/notes/*}/occurrencesZ7\x12\x35/v1/{name=projects/*/locations/*/notes/*}/occurrences\x1a#\xca\x41 containeranalysis.googleapis.comB|\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRA\xea\x41(\n\x12grafeas.io/Project\x12\x12projects/{project}b\x06proto3"
|
|
29
30
|
|
|
30
31
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
31
32
|
|
|
@@ -51,6 +52,7 @@ rescue TypeError
|
|
|
51
52
|
["grafeas.v1.UpgradeOccurrence", "grafeas/v1/upgrade.proto"],
|
|
52
53
|
["grafeas.v1.ComplianceOccurrence", "grafeas/v1/compliance.proto"],
|
|
53
54
|
["grafeas.v1.DSSEAttestationOccurrence", "grafeas/v1/dsse_attestation.proto"],
|
|
55
|
+
["grafeas.v1.SBOMReferenceOccurrence", "grafeas/v1/sbom.proto"],
|
|
54
56
|
["grafeas.v1.Envelope", "grafeas/v1/common.proto"],
|
|
55
57
|
["grafeas.v1.VulnerabilityAssessmentNote", "grafeas/v1/vex.proto"],
|
|
56
58
|
["google.protobuf.FieldMask", "google/protobuf/field_mask.proto"],
|
|
@@ -4,12 +4,14 @@
|
|
|
4
4
|
|
|
5
5
|
require 'google/protobuf'
|
|
6
6
|
|
|
7
|
+
require 'google/protobuf/struct_pb'
|
|
8
|
+
require 'google/protobuf/timestamp_pb'
|
|
7
9
|
require 'grafeas/v1/intoto_provenance_pb'
|
|
8
10
|
require 'grafeas/v1/slsa_provenance_pb'
|
|
9
11
|
require 'grafeas/v1/slsa_provenance_zero_two_pb'
|
|
10
12
|
|
|
11
13
|
|
|
12
|
-
descriptor_data = "\n!grafeas/v1/intoto_statement.proto\x12\ngrafeas.v1\x1a\"grafeas/v1/intoto_provenance.proto\x1a grafeas/v1/slsa_provenance.proto\x1a)grafeas/v1/slsa_provenance_zero_two.proto\"\xa3\x02\n\x0fInTotoStatement\x12\x13\n\x04type\x18\x01 \x01(\tR\x05_type\x12$\n\x07subject\x18\x02 \x03(\x0b\x32\x13.grafeas.v1.Subject\x12\x16\n\x0epredicate_type\x18\x03 \x01(\t\x12\x32\n\nprovenance\x18\x04 \x01(\x0b\x32\x1c.grafeas.v1.InTotoProvenanceH\x00\x12\x35\n\x0fslsa_provenance\x18\x05 \x01(\x0b\x32\x1a.grafeas.v1.SlsaProvenanceH\x00\x12\x45\n\x18slsa_provenance_zero_two\x18\x06 \x01(\x0b\x32!.grafeas.v1.SlsaProvenanceZeroTwoH\x00\x42\x0b\n\tpredicate\"w\n\x07Subject\x12\x0c\n\x04name\x18\x01 \x01(\t\x12/\n\x06\x64igest\x18\x02 \x03(\x0b\x32\x1f.grafeas.v1.Subject.DigestEntry\x1a-\n\x0b\x44igestEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\
|
|
14
|
+
descriptor_data = "\n!grafeas/v1/intoto_statement.proto\x12\ngrafeas.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\"grafeas/v1/intoto_provenance.proto\x1a grafeas/v1/slsa_provenance.proto\x1a)grafeas/v1/slsa_provenance_zero_two.proto\"\xa3\x02\n\x0fInTotoStatement\x12\x13\n\x04type\x18\x01 \x01(\tR\x05_type\x12$\n\x07subject\x18\x02 \x03(\x0b\x32\x13.grafeas.v1.Subject\x12\x16\n\x0epredicate_type\x18\x03 \x01(\t\x12\x32\n\nprovenance\x18\x04 \x01(\x0b\x32\x1c.grafeas.v1.InTotoProvenanceH\x00\x12\x35\n\x0fslsa_provenance\x18\x05 \x01(\x0b\x32\x1a.grafeas.v1.SlsaProvenanceH\x00\x12\x45\n\x18slsa_provenance_zero_two\x18\x06 \x01(\x0b\x32!.grafeas.v1.SlsaProvenanceZeroTwoH\x00\x42\x0b\n\tpredicate\"w\n\x07Subject\x12\x0c\n\x04name\x18\x01 \x01(\t\x12/\n\x06\x64igest\x18\x02 \x03(\x0b\x32\x1f.grafeas.v1.Subject.DigestEntry\x1a-\n\x0b\x44igestEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xcb\x0c\n\x16InTotoSlsaProvenanceV1\x12\x13\n\x04type\x18\x01 \x01(\tR\x05_type\x12$\n\x07subject\x18\x02 \x03(\x0b\x32\x13.grafeas.v1.Subject\x12\x16\n\x0epredicate_type\x18\x03 \x01(\t\x12\x46\n\tpredicate\x18\x04 \x01(\x0b\x32\x33.grafeas.v1.InTotoSlsaProvenanceV1.SlsaProvenanceV1\x1a\xa4\x01\n\x10SlsaProvenanceV1\x12L\n\x10\x62uild_definition\x18\x01 \x01(\x0b\x32\x32.grafeas.v1.InTotoSlsaProvenanceV1.BuildDefinition\x12\x42\n\x0brun_details\x18\x02 \x01(\x0b\x32-.grafeas.v1.InTotoSlsaProvenanceV1.RunDetails\x1a\xe7\x01\n\x0f\x42uildDefinition\x12\x12\n\nbuild_type\x18\x01 \x01(\t\x12\x34\n\x13\x65xternal_parameters\x18\x02 \x01(\x0b\x32\x17.google.protobuf.Struct\x12\x34\n\x13internal_parameters\x18\x03 \x01(\x0b\x32\x17.google.protobuf.Struct\x12T\n\x15resolved_dependencies\x18\x04 \x03(\x0b\x32\x35.grafeas.v1.InTotoSlsaProvenanceV1.ResourceDescriptor\x1a\x9a\x03\n\x12ResourceDescriptor\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x0b\n\x03uri\x18\x02 \x01(\t\x12Q\n\x06\x64igest\x18\x03 \x03(\x0b\x32\x41.grafeas.v1.InTotoSlsaProvenanceV1.ResourceDescriptor.DigestEntry\x12\x0f\n\x07\x63ontent\x18\x04 \x01(\x0c\x12\x19\n\x11\x64ownload_location\x18\x05 \x01(\t\x12\x12\n\nmedia_type\x18\x06 \x01(\t\x12[\n\x0b\x61nnotations\x18\x07 \x03(\x0b\x32\x46.grafeas.v1.InTotoSlsaProvenanceV1.ResourceDescriptor.AnnotationsEntry\x1a-\n\x0b\x44igestEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1aJ\n\x10\x41nnotationsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12%\n\x05value\x18\x02 \x01(\x0b\x32\x16.google.protobuf.Value:\x02\x38\x01\x1a\xe2\x01\n\nRunDetails\x12\x45\n\x07\x62uilder\x18\x01 \x01(\x0b\x32\x34.grafeas.v1.InTotoSlsaProvenanceV1.ProvenanceBuilder\x12\x42\n\x08metadata\x18\x02 \x01(\x0b\x32\x30.grafeas.v1.InTotoSlsaProvenanceV1.BuildMetadata\x12I\n\nbyproducts\x18\x03 \x03(\x0b\x32\x35.grafeas.v1.InTotoSlsaProvenanceV1.ResourceDescriptor\x1a\xf8\x01\n\x11ProvenanceBuilder\x12\n\n\x02id\x18\x01 \x01(\t\x12R\n\x07version\x18\x02 \x03(\x0b\x32\x41.grafeas.v1.InTotoSlsaProvenanceV1.ProvenanceBuilder.VersionEntry\x12S\n\x14\x62uilder_dependencies\x18\x03 \x03(\x0b\x32\x35.grafeas.v1.InTotoSlsaProvenanceV1.ResourceDescriptor\x1a.\n\x0cVersionEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a\x87\x01\n\rBuildMetadata\x12\x15\n\rinvocation_id\x18\x01 \x01(\t\x12.\n\nstarted_on\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12/\n\x0b\x66inished_on\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.TimestampBg\n\rio.grafeas.v1B\x14InTotoStatementProtoP\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
13
15
|
|
|
14
16
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
15
17
|
|
|
@@ -27,6 +29,8 @@ rescue TypeError
|
|
|
27
29
|
["grafeas.v1.InTotoProvenance", "grafeas/v1/intoto_provenance.proto"],
|
|
28
30
|
["grafeas.v1.SlsaProvenance", "grafeas/v1/slsa_provenance.proto"],
|
|
29
31
|
["grafeas.v1.SlsaProvenanceZeroTwo", "grafeas/v1/slsa_provenance_zero_two.proto"],
|
|
32
|
+
["google.protobuf.Struct", "google/protobuf/struct.proto"],
|
|
33
|
+
["google.protobuf.Timestamp", "google/protobuf/timestamp.proto"],
|
|
30
34
|
]
|
|
31
35
|
imports.each do |type_name, expected_filename|
|
|
32
36
|
import_file = pool.lookup(type_name).file_descriptor
|
|
@@ -42,5 +46,12 @@ module Grafeas
|
|
|
42
46
|
module V1
|
|
43
47
|
InTotoStatement = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoStatement").msgclass
|
|
44
48
|
Subject = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.Subject").msgclass
|
|
49
|
+
InTotoSlsaProvenanceV1 = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1").msgclass
|
|
50
|
+
InTotoSlsaProvenanceV1::SlsaProvenanceV1 = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1.SlsaProvenanceV1").msgclass
|
|
51
|
+
InTotoSlsaProvenanceV1::BuildDefinition = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1.BuildDefinition").msgclass
|
|
52
|
+
InTotoSlsaProvenanceV1::ResourceDescriptor = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1.ResourceDescriptor").msgclass
|
|
53
|
+
InTotoSlsaProvenanceV1::RunDetails = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1.RunDetails").msgclass
|
|
54
|
+
InTotoSlsaProvenanceV1::ProvenanceBuilder = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1.ProvenanceBuilder").msgclass
|
|
55
|
+
InTotoSlsaProvenanceV1::BuildMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.InTotoSlsaProvenanceV1.BuildMetadata").msgclass
|
|
45
56
|
end
|
|
46
57
|
end
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
3
|
+
# source: grafeas/v1/sbom.proto
|
|
4
|
+
|
|
5
|
+
require 'google/protobuf'
|
|
6
|
+
|
|
7
|
+
require 'grafeas/v1/common_pb'
|
|
8
|
+
require 'grafeas/v1/intoto_statement_pb'
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
descriptor_data = "\n\x15grafeas/v1/sbom.proto\x12\ngrafeas.v1\x1a\x17grafeas/v1/common.proto\x1a!grafeas/v1/intoto_statement.proto\"4\n\x11SBOMReferenceNote\x12\x0e\n\x06\x66ormat\x18\x01 \x01(\t\x12\x0f\n\x07version\x18\x02 \x01(\t\"\x9b\x01\n\x17SBOMReferenceOccurrence\x12\x37\n\x07payload\x18\x01 \x01(\x0b\x32&.grafeas.v1.SbomReferenceIntotoPayload\x12\x14\n\x0cpayload_type\x18\x02 \x01(\t\x12\x31\n\nsignatures\x18\x03 \x03(\x0b\x32\x1d.grafeas.v1.EnvelopeSignature\"\xac\x01\n\x1aSbomReferenceIntotoPayload\x12\x13\n\x04type\x18\x01 \x01(\tR\x05_type\x12\x16\n\x0epredicate_type\x18\x02 \x01(\t\x12$\n\x07subject\x18\x03 \x03(\x0b\x32\x13.grafeas.v1.Subject\x12;\n\tpredicate\x18\x04 \x01(\x0b\x32(.grafeas.v1.SbomReferenceIntotoPredicate\"\xcd\x01\n\x1cSbomReferenceIntotoPredicate\x12\x13\n\x0breferrer_id\x18\x01 \x01(\t\x12\x10\n\x08location\x18\x02 \x01(\t\x12\x11\n\tmime_type\x18\x03 \x01(\t\x12\x44\n\x06\x64igest\x18\x04 \x03(\x0b\x32\x34.grafeas.v1.SbomReferenceIntotoPredicate.DigestEntry\x1a-\n\x0b\x44igestEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x42Q\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
12
|
+
|
|
13
|
+
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
14
|
+
|
|
15
|
+
begin
|
|
16
|
+
pool.add_serialized_file(descriptor_data)
|
|
17
|
+
rescue TypeError
|
|
18
|
+
# Compatibility code: will be removed in the next major version.
|
|
19
|
+
require 'google/protobuf/descriptor_pb'
|
|
20
|
+
parsed = Google::Protobuf::FileDescriptorProto.decode(descriptor_data)
|
|
21
|
+
parsed.clear_dependency
|
|
22
|
+
serialized = parsed.class.encode(parsed)
|
|
23
|
+
file = pool.add_serialized_file(serialized)
|
|
24
|
+
warn "Warning: Protobuf detected an import path issue while loading generated file #{__FILE__}"
|
|
25
|
+
imports = [
|
|
26
|
+
["grafeas.v1.EnvelopeSignature", "grafeas/v1/common.proto"],
|
|
27
|
+
["grafeas.v1.Subject", "grafeas/v1/intoto_statement.proto"],
|
|
28
|
+
]
|
|
29
|
+
imports.each do |type_name, expected_filename|
|
|
30
|
+
import_file = pool.lookup(type_name).file_descriptor
|
|
31
|
+
if import_file.name != expected_filename
|
|
32
|
+
warn "- #{file.name} imports #{expected_filename}, but that import was loaded as #{import_file.name}"
|
|
33
|
+
end
|
|
34
|
+
end
|
|
35
|
+
warn "Each proto file must use a consistent fully-qualified name."
|
|
36
|
+
warn "This will become an error in the next major version."
|
|
37
|
+
end
|
|
38
|
+
|
|
39
|
+
module Grafeas
|
|
40
|
+
module V1
|
|
41
|
+
SBOMReferenceNote = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.SBOMReferenceNote").msgclass
|
|
42
|
+
SBOMReferenceOccurrence = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.SBOMReferenceOccurrence").msgclass
|
|
43
|
+
SbomReferenceIntotoPayload = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.SbomReferenceIntotoPayload").msgclass
|
|
44
|
+
SbomReferenceIntotoPredicate = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.SbomReferenceIntotoPredicate").msgclass
|
|
45
|
+
end
|
|
46
|
+
end
|
data/lib/grafeas/v1/version.rb
CHANGED
data/lib/grafeas/v1/vex_pb.rb
CHANGED
|
@@ -7,7 +7,7 @@ require 'google/protobuf'
|
|
|
7
7
|
require 'grafeas/v1/common_pb'
|
|
8
8
|
|
|
9
9
|
|
|
10
|
-
descriptor_data = "\n\x14grafeas/v1/vex.proto\x12\ngrafeas.v1\x1a\x17grafeas/v1/common.proto\"\
|
|
10
|
+
descriptor_data = "\n\x14grafeas/v1/vex.proto\x12\ngrafeas.v1\x1a\x17grafeas/v1/common.proto\"\xc8\r\n\x1bVulnerabilityAssessmentNote\x12\r\n\x05title\x18\x01 \x01(\t\x12\x19\n\x11short_description\x18\x02 \x01(\t\x12\x18\n\x10long_description\x18\x03 \x01(\t\x12\x15\n\rlanguage_code\x18\x04 \x01(\t\x12\x44\n\tpublisher\x18\x05 \x01(\x0b\x32\x31.grafeas.v1.VulnerabilityAssessmentNote.Publisher\x12@\n\x07product\x18\x06 \x01(\x0b\x32/.grafeas.v1.VulnerabilityAssessmentNote.Product\x12\x46\n\nassessment\x18\x07 \x01(\x0b\x32\x32.grafeas.v1.VulnerabilityAssessmentNote.Assessment\x1aQ\n\tPublisher\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x19\n\x11issuing_authority\x18\x02 \x01(\t\x12\x1b\n\x13publisher_namespace\x18\x03 \x01(\t\x1aH\n\x07Product\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\n\n\x02id\x18\x02 \x01(\t\x12\x15\n\x0bgeneric_uri\x18\x03 \x01(\tH\x00\x42\x0c\n\nidentifier\x1a\xe0\t\n\nAssessment\x12\x0f\n\x03\x63ve\x18\x01 \x01(\tB\x02\x18\x01\x12\x18\n\x10vulnerability_id\x18\t \x01(\t\x12\x19\n\x11short_description\x18\x02 \x01(\t\x12\x18\n\x10long_description\x18\x03 \x01(\t\x12,\n\x0crelated_uris\x18\x04 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12G\n\x05state\x18\x05 \x01(\x0e\x32\x38.grafeas.v1.VulnerabilityAssessmentNote.Assessment.State\x12\x0f\n\x07impacts\x18\x06 \x03(\t\x12W\n\rjustification\x18\x07 \x01(\x0b\x32@.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Justification\x12T\n\x0cremediations\x18\x08 \x03(\x0b\x32>.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Remediation\x1a\x8c\x03\n\rJustification\x12n\n\x12justification_type\x18\x01 \x01(\x0e\x32R.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Justification.JustificationType\x12\x0f\n\x07\x64\x65tails\x18\x02 \x01(\t\"\xf9\x01\n\x11JustificationType\x12\"\n\x1eJUSTIFICATION_TYPE_UNSPECIFIED\x10\x00\x12\x19\n\x15\x43OMPONENT_NOT_PRESENT\x10\x01\x12\x1f\n\x1bVULNERABLE_CODE_NOT_PRESENT\x10\x02\x12\'\n#VULNERABLE_CODE_NOT_IN_EXECUTE_PATH\x10\x03\x12\x35\n1VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY\x10\x04\x12$\n INLINE_MITIGATIONS_ALREADY_EXIST\x10\x05\x1a\xc7\x02\n\x0bRemediation\x12h\n\x10remediation_type\x18\x01 \x01(\x0e\x32N.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Remediation.RemediationType\x12\x0f\n\x07\x64\x65tails\x18\x02 \x01(\t\x12/\n\x0fremediation_uri\x18\x03 \x01(\x0b\x32\x16.grafeas.v1.RelatedUrl\"\x8b\x01\n\x0fRemediationType\x12 \n\x1cREMEDIATION_TYPE_UNSPECIFIED\x10\x00\x12\x0e\n\nMITIGATION\x10\x01\x12\x12\n\x0eNO_FIX_PLANNED\x10\x02\x12\x12\n\x0eNONE_AVAILABLE\x10\x03\x12\x0e\n\nVENDOR_FIX\x10\x04\x12\x0e\n\nWORKAROUND\x10\x05\"b\n\x05State\x12\x15\n\x11STATE_UNSPECIFIED\x10\x00\x12\x0c\n\x08\x41\x46\x46\x45\x43TED\x10\x01\x12\x10\n\x0cNOT_AFFECTED\x10\x02\x12\t\n\x05\x46IXED\x10\x03\x12\x17\n\x13UNDER_INVESTIGATION\x10\x04\x42Q\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
11
11
|
|
|
12
12
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
13
13
|
|
|
@@ -13,7 +13,7 @@ require 'grafeas/v1/severity_pb'
|
|
|
13
13
|
require 'grafeas/v1/vex_pb'
|
|
14
14
|
|
|
15
15
|
|
|
16
|
-
descriptor_data = "\n\x1egrafeas/v1/vulnerability.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17grafeas/v1/common.proto\x1a\x15grafeas/v1/cvss.proto\x1a\x18grafeas/v1/package.proto\x1a\x19grafeas/v1/severity.proto\x1a\x14grafeas/v1/vex.proto\"\xec\x07\n\x11VulnerabilityNote\x12\x12\n\ncvss_score\x18\x01 \x01(\x02\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x35\n\x07\x64\x65tails\x18\x03 \x03(\x0b\x32$.grafeas.v1.VulnerabilityNote.Detail\x12#\n\x07\x63vss_v3\x18\x04 \x01(\x0b\x32\x12.grafeas.v1.CVSSv3\x12\x44\n\x0fwindows_details\x18\x05 \x03(\x0b\x32+.grafeas.v1.VulnerabilityNote.WindowsDetail\x12\x36\n\x12source_update_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12-\n\x0c\x63vss_version\x18\x07 \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x08 \x01(\x0b\x32\x10.grafeas.v1.CVSS\x1a\xad\x03\n\x06\x44\x65tail\x12\x15\n\rseverity_name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x14\n\x0cpackage_type\x18\x03 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x04 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x05 \x01(\t\x12\x33\n\x16\x61\x66\x66\x65\x63ted_version_start\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x31\n\x14\x61\x66\x66\x65\x63ted_version_end\x18\x07 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x08 \x01(\t\x12\x15\n\rfixed_package\x18\t \x01(\t\x12*\n\rfixed_version\x18\n \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x13\n\x0bis_obsolete\x18\x0b \x01(\x08\x12\x36\n\x12source_update_time\x18\x0c \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06source\x18\r \x01(\t\x12\x0e\n\x06vendor\x18\x0e \x01(\t\x1a\xbe\x01\n\rWindowsDetail\x12\x0f\n\x07\x63pe_uri\x18\x01 \x01(\t\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12M\n\nfixing_kbs\x18\x04 \x03(\x0b\x32\x39.grafeas.v1.VulnerabilityNote.WindowsDetail.KnowledgeBase\x1a*\n\rKnowledgeBase\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x0b\n\x03url\x18\x02 \x01(\t\"\
|
|
16
|
+
descriptor_data = "\n\x1egrafeas/v1/vulnerability.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17grafeas/v1/common.proto\x1a\x15grafeas/v1/cvss.proto\x1a\x18grafeas/v1/package.proto\x1a\x19grafeas/v1/severity.proto\x1a\x14grafeas/v1/vex.proto\"\xec\x07\n\x11VulnerabilityNote\x12\x12\n\ncvss_score\x18\x01 \x01(\x02\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x35\n\x07\x64\x65tails\x18\x03 \x03(\x0b\x32$.grafeas.v1.VulnerabilityNote.Detail\x12#\n\x07\x63vss_v3\x18\x04 \x01(\x0b\x32\x12.grafeas.v1.CVSSv3\x12\x44\n\x0fwindows_details\x18\x05 \x03(\x0b\x32+.grafeas.v1.VulnerabilityNote.WindowsDetail\x12\x36\n\x12source_update_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12-\n\x0c\x63vss_version\x18\x07 \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x08 \x01(\x0b\x32\x10.grafeas.v1.CVSS\x1a\xad\x03\n\x06\x44\x65tail\x12\x15\n\rseverity_name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x14\n\x0cpackage_type\x18\x03 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x04 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x05 \x01(\t\x12\x33\n\x16\x61\x66\x66\x65\x63ted_version_start\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x31\n\x14\x61\x66\x66\x65\x63ted_version_end\x18\x07 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x08 \x01(\t\x12\x15\n\rfixed_package\x18\t \x01(\t\x12*\n\rfixed_version\x18\n \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x13\n\x0bis_obsolete\x18\x0b \x01(\x08\x12\x36\n\x12source_update_time\x18\x0c \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06source\x18\r \x01(\t\x12\x0e\n\x06vendor\x18\x0e \x01(\t\x1a\xbe\x01\n\rWindowsDetail\x12\x0f\n\x07\x63pe_uri\x18\x01 \x01(\t\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12M\n\nfixing_kbs\x18\x04 \x03(\x0b\x32\x39.grafeas.v1.VulnerabilityNote.WindowsDetail.KnowledgeBase\x1a*\n\rKnowledgeBase\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x0b\n\x03url\x18\x02 \x01(\t\"\x98\n\n\x17VulnerabilityOccurrence\x12\x0c\n\x04type\x18\x01 \x01(\t\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x12\n\ncvss_score\x18\x03 \x01(\x02\x12 \n\x06\x63vssv3\x18\n \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12G\n\rpackage_issue\x18\x04 \x03(\x0b\x32\x30.grafeas.v1.VulnerabilityOccurrence.PackageIssue\x12\x19\n\x11short_description\x18\x05 \x01(\t\x12\x18\n\x10long_description\x18\x06 \x01(\t\x12,\n\x0crelated_urls\x18\x07 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x30\n\x12\x65\x66\x66\x65\x63tive_severity\x18\x08 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x15\n\rfix_available\x18\t \x01(\x08\x12-\n\x0c\x63vss_version\x18\x0b \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x0c \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12I\n\x0evex_assessment\x18\r \x01(\x0b\x32\x31.grafeas.v1.VulnerabilityOccurrence.VexAssessment\x12\x15\n\rextra_details\x18\x0e \x01(\t\x1a\xe0\x02\n\x0cPackageIssue\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x01 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x02 \x01(\t\x12-\n\x10\x61\x66\x66\x65\x63ted_version\x18\x03 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x04 \x01(\t\x12\x15\n\rfixed_package\x18\x05 \x01(\t\x12*\n\rfixed_version\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfix_available\x18\x07 \x01(\x08\x12\x14\n\x0cpackage_type\x18\x08 \x01(\t\x12\x35\n\x12\x65\x66\x66\x65\x63tive_severity\x18\t \x01(\x0e\x32\x14.grafeas.v1.SeverityB\x03\xe0\x41\x03\x12/\n\rfile_location\x18\n \x03(\x0b\x32\x18.grafeas.v1.FileLocation\x1a\x84\x03\n\rVexAssessment\x12\x0f\n\x03\x63ve\x18\x01 \x01(\tB\x02\x18\x01\x12\x18\n\x10vulnerability_id\x18\x08 \x01(\t\x12,\n\x0crelated_uris\x18\x02 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x11\n\tnote_name\x18\x03 \x01(\t\x12G\n\x05state\x18\x04 \x01(\x0e\x32\x38.grafeas.v1.VulnerabilityAssessmentNote.Assessment.State\x12\x0f\n\x07impacts\x18\x05 \x03(\t\x12T\n\x0cremediations\x18\x06 \x03(\x0b\x32>.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Remediation\x12W\n\rjustification\x18\x07 \x01(\x0b\x32@.grafeas.v1.VulnerabilityAssessmentNote.Assessment.JustificationBQ\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
17
17
|
|
|
18
18
|
pool = Google::Protobuf::DescriptorPool.generated_pool
|
|
19
19
|
|
|
@@ -118,6 +118,10 @@ module Google
|
|
|
118
118
|
# @return [::String]
|
|
119
119
|
# Optional link to proto reference documentation. Example:
|
|
120
120
|
# https://cloud.google.com/pubsub/lite/docs/reference/rpc
|
|
121
|
+
# @!attribute [rw] rest_reference_documentation_uri
|
|
122
|
+
# @return [::String]
|
|
123
|
+
# Optional link to REST reference documentation. Example:
|
|
124
|
+
# https://cloud.google.com/pubsub/lite/docs/reference/rest
|
|
121
125
|
class Publishing
|
|
122
126
|
include ::Google::Protobuf::MessageExts
|
|
123
127
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -56,6 +56,12 @@ module Grafeas
|
|
|
56
56
|
# The intoto_statement can contain any type of provenance. The serialized
|
|
57
57
|
# payload of the statement can be stored and signed in the Occurrence's
|
|
58
58
|
# envelope.
|
|
59
|
+
# @!attribute [rw] in_toto_slsa_provenance_v1
|
|
60
|
+
# @return [::Grafeas::V1::InTotoSlsaProvenanceV1]
|
|
61
|
+
# In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa
|
|
62
|
+
# spec, wrapped in an in-toto statement. This allows for direct
|
|
63
|
+
# jsonification of a to-spec in-toto slsa statement with a to-spec
|
|
64
|
+
# slsa provenance.
|
|
59
65
|
class BuildOccurrence
|
|
60
66
|
include ::Google::Protobuf::MessageExts
|
|
61
67
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -39,6 +39,8 @@ module Grafeas
|
|
|
39
39
|
# @!attribute [rw] scan_instructions
|
|
40
40
|
# @return [::String]
|
|
41
41
|
# Serialized scan instructions with a predefined format.
|
|
42
|
+
# @!attribute [rw] impact
|
|
43
|
+
# @return [::String]
|
|
42
44
|
class ComplianceNote
|
|
43
45
|
include ::Google::Protobuf::MessageExts
|
|
44
46
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -58,6 +58,9 @@ module Grafeas
|
|
|
58
58
|
# @!attribute [r] archive_time
|
|
59
59
|
# @return [::Google::Protobuf::Timestamp]
|
|
60
60
|
# The time occurrences related to this discovery occurrence were archived.
|
|
61
|
+
# @!attribute [rw] sbom_status
|
|
62
|
+
# @return [::Grafeas::V1::DiscoveryOccurrence::SBOMStatus]
|
|
63
|
+
# The status of an SBOM generation.
|
|
61
64
|
class DiscoveryOccurrence
|
|
62
65
|
include ::Google::Protobuf::MessageExts
|
|
63
66
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -71,6 +74,31 @@ module Grafeas
|
|
|
71
74
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
72
75
|
end
|
|
73
76
|
|
|
77
|
+
# The status of an SBOM generation.
|
|
78
|
+
# @!attribute [rw] sbom_state
|
|
79
|
+
# @return [::Grafeas::V1::DiscoveryOccurrence::SBOMStatus::SBOMState]
|
|
80
|
+
# The progress of the SBOM generation.
|
|
81
|
+
# @!attribute [rw] error
|
|
82
|
+
# @return [::String]
|
|
83
|
+
# If there was an error generating an SBOM, this will indicate what that
|
|
84
|
+
# error was.
|
|
85
|
+
class SBOMStatus
|
|
86
|
+
include ::Google::Protobuf::MessageExts
|
|
87
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
88
|
+
|
|
89
|
+
# An enum indicating the progress of the SBOM generation.
|
|
90
|
+
module SBOMState
|
|
91
|
+
# Default unknown state.
|
|
92
|
+
SBOM_STATE_UNSPECIFIED = 0
|
|
93
|
+
|
|
94
|
+
# SBOM scanning is pending.
|
|
95
|
+
PENDING = 1
|
|
96
|
+
|
|
97
|
+
# SBOM scanning has completed.
|
|
98
|
+
COMPLETE = 2
|
|
99
|
+
end
|
|
100
|
+
end
|
|
101
|
+
|
|
74
102
|
# Whether the resource is continuously analyzed.
|
|
75
103
|
module ContinuousAnalysis
|
|
76
104
|
# Unknown.
|
|
@@ -78,6 +78,9 @@ module Grafeas
|
|
|
78
78
|
# @!attribute [rw] dsse_attestation
|
|
79
79
|
# @return [::Grafeas::V1::DSSEAttestationOccurrence]
|
|
80
80
|
# Describes an attestation of an artifact using dsse.
|
|
81
|
+
# @!attribute [rw] sbom_reference
|
|
82
|
+
# @return [::Grafeas::V1::SBOMReferenceOccurrence]
|
|
83
|
+
# Describes a specific SBOM reference occurrences.
|
|
81
84
|
# @!attribute [rw] envelope
|
|
82
85
|
# @return [::Grafeas::V1::Envelope]
|
|
83
86
|
# https://github.com/secure-systems-lab/dsse
|
|
@@ -151,6 +154,9 @@ module Grafeas
|
|
|
151
154
|
# @!attribute [rw] vulnerability_assessment
|
|
152
155
|
# @return [::Grafeas::V1::VulnerabilityAssessmentNote]
|
|
153
156
|
# A note describing a vulnerability assessment.
|
|
157
|
+
# @!attribute [rw] sbom_reference
|
|
158
|
+
# @return [::Grafeas::V1::SBOMReferenceNote]
|
|
159
|
+
# A note describing an SBOM reference.
|
|
154
160
|
class Note
|
|
155
161
|
include ::Google::Protobuf::MessageExts
|
|
156
162
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -63,5 +63,124 @@ module Grafeas
|
|
|
63
63
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
64
64
|
end
|
|
65
65
|
end
|
|
66
|
+
|
|
67
|
+
# @!attribute [rw] type
|
|
68
|
+
# @return [::String]
|
|
69
|
+
# InToto spec defined at
|
|
70
|
+
# https://github.com/in-toto/attestation/tree/main/spec#statement
|
|
71
|
+
# @!attribute [rw] subject
|
|
72
|
+
# @return [::Array<::Grafeas::V1::Subject>]
|
|
73
|
+
# @!attribute [rw] predicate_type
|
|
74
|
+
# @return [::String]
|
|
75
|
+
# @!attribute [rw] predicate
|
|
76
|
+
# @return [::Grafeas::V1::InTotoSlsaProvenanceV1::SlsaProvenanceV1]
|
|
77
|
+
class InTotoSlsaProvenanceV1
|
|
78
|
+
include ::Google::Protobuf::MessageExts
|
|
79
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
80
|
+
|
|
81
|
+
# Keep in sync with schema at
|
|
82
|
+
# https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto
|
|
83
|
+
# Builder renamed to ProvenanceBuilder because of Java conflicts.
|
|
84
|
+
# @!attribute [rw] build_definition
|
|
85
|
+
# @return [::Grafeas::V1::InTotoSlsaProvenanceV1::BuildDefinition]
|
|
86
|
+
# @!attribute [rw] run_details
|
|
87
|
+
# @return [::Grafeas::V1::InTotoSlsaProvenanceV1::RunDetails]
|
|
88
|
+
class SlsaProvenanceV1
|
|
89
|
+
include ::Google::Protobuf::MessageExts
|
|
90
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
91
|
+
end
|
|
92
|
+
|
|
93
|
+
# @!attribute [rw] build_type
|
|
94
|
+
# @return [::String]
|
|
95
|
+
# @!attribute [rw] external_parameters
|
|
96
|
+
# @return [::Google::Protobuf::Struct]
|
|
97
|
+
# @!attribute [rw] internal_parameters
|
|
98
|
+
# @return [::Google::Protobuf::Struct]
|
|
99
|
+
# @!attribute [rw] resolved_dependencies
|
|
100
|
+
# @return [::Array<::Grafeas::V1::InTotoSlsaProvenanceV1::ResourceDescriptor>]
|
|
101
|
+
class BuildDefinition
|
|
102
|
+
include ::Google::Protobuf::MessageExts
|
|
103
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
104
|
+
end
|
|
105
|
+
|
|
106
|
+
# @!attribute [rw] name
|
|
107
|
+
# @return [::String]
|
|
108
|
+
# @!attribute [rw] uri
|
|
109
|
+
# @return [::String]
|
|
110
|
+
# @!attribute [rw] digest
|
|
111
|
+
# @return [::Google::Protobuf::Map{::String => ::String}]
|
|
112
|
+
# @!attribute [rw] content
|
|
113
|
+
# @return [::String]
|
|
114
|
+
# @!attribute [rw] download_location
|
|
115
|
+
# @return [::String]
|
|
116
|
+
# @!attribute [rw] media_type
|
|
117
|
+
# @return [::String]
|
|
118
|
+
# @!attribute [rw] annotations
|
|
119
|
+
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
|
120
|
+
class ResourceDescriptor
|
|
121
|
+
include ::Google::Protobuf::MessageExts
|
|
122
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
123
|
+
|
|
124
|
+
# @!attribute [rw] key
|
|
125
|
+
# @return [::String]
|
|
126
|
+
# @!attribute [rw] value
|
|
127
|
+
# @return [::String]
|
|
128
|
+
class DigestEntry
|
|
129
|
+
include ::Google::Protobuf::MessageExts
|
|
130
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
131
|
+
end
|
|
132
|
+
|
|
133
|
+
# @!attribute [rw] key
|
|
134
|
+
# @return [::String]
|
|
135
|
+
# @!attribute [rw] value
|
|
136
|
+
# @return [::Google::Protobuf::Value]
|
|
137
|
+
class AnnotationsEntry
|
|
138
|
+
include ::Google::Protobuf::MessageExts
|
|
139
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
140
|
+
end
|
|
141
|
+
end
|
|
142
|
+
|
|
143
|
+
# @!attribute [rw] builder
|
|
144
|
+
# @return [::Grafeas::V1::InTotoSlsaProvenanceV1::ProvenanceBuilder]
|
|
145
|
+
# @!attribute [rw] metadata
|
|
146
|
+
# @return [::Grafeas::V1::InTotoSlsaProvenanceV1::BuildMetadata]
|
|
147
|
+
# @!attribute [rw] byproducts
|
|
148
|
+
# @return [::Array<::Grafeas::V1::InTotoSlsaProvenanceV1::ResourceDescriptor>]
|
|
149
|
+
class RunDetails
|
|
150
|
+
include ::Google::Protobuf::MessageExts
|
|
151
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
152
|
+
end
|
|
153
|
+
|
|
154
|
+
# @!attribute [rw] id
|
|
155
|
+
# @return [::String]
|
|
156
|
+
# @!attribute [rw] version
|
|
157
|
+
# @return [::Google::Protobuf::Map{::String => ::String}]
|
|
158
|
+
# @!attribute [rw] builder_dependencies
|
|
159
|
+
# @return [::Array<::Grafeas::V1::InTotoSlsaProvenanceV1::ResourceDescriptor>]
|
|
160
|
+
class ProvenanceBuilder
|
|
161
|
+
include ::Google::Protobuf::MessageExts
|
|
162
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
163
|
+
|
|
164
|
+
# @!attribute [rw] key
|
|
165
|
+
# @return [::String]
|
|
166
|
+
# @!attribute [rw] value
|
|
167
|
+
# @return [::String]
|
|
168
|
+
class VersionEntry
|
|
169
|
+
include ::Google::Protobuf::MessageExts
|
|
170
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
171
|
+
end
|
|
172
|
+
end
|
|
173
|
+
|
|
174
|
+
# @!attribute [rw] invocation_id
|
|
175
|
+
# @return [::String]
|
|
176
|
+
# @!attribute [rw] started_on
|
|
177
|
+
# @return [::Google::Protobuf::Timestamp]
|
|
178
|
+
# @!attribute [rw] finished_on
|
|
179
|
+
# @return [::Google::Protobuf::Timestamp]
|
|
180
|
+
class BuildMetadata
|
|
181
|
+
include ::Google::Protobuf::MessageExts
|
|
182
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
183
|
+
end
|
|
184
|
+
end
|
|
66
185
|
end
|
|
67
186
|
end
|
|
@@ -0,0 +1,105 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2024 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Grafeas
|
|
21
|
+
module V1
|
|
22
|
+
# The note representing an SBOM reference.
|
|
23
|
+
# @!attribute [rw] format
|
|
24
|
+
# @return [::String]
|
|
25
|
+
# The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
|
|
26
|
+
# @!attribute [rw] version
|
|
27
|
+
# @return [::String]
|
|
28
|
+
# The version of the format that the SBOM takes. E.g. if the format
|
|
29
|
+
# is spdx, the version may be 2.3.
|
|
30
|
+
class SBOMReferenceNote
|
|
31
|
+
include ::Google::Protobuf::MessageExts
|
|
32
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
33
|
+
end
|
|
34
|
+
|
|
35
|
+
# The occurrence representing an SBOM reference as applied to a specific
|
|
36
|
+
# resource. The occurrence follows the DSSE specification. See
|
|
37
|
+
# https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more
|
|
38
|
+
# details.
|
|
39
|
+
# @!attribute [rw] payload
|
|
40
|
+
# @return [::Grafeas::V1::SbomReferenceIntotoPayload]
|
|
41
|
+
# The actual payload that contains the SBOM reference data.
|
|
42
|
+
# @!attribute [rw] payload_type
|
|
43
|
+
# @return [::String]
|
|
44
|
+
# The kind of payload that SbomReferenceIntotoPayload takes. Since it's in
|
|
45
|
+
# the intoto format, this value is expected to be
|
|
46
|
+
# 'application/vnd.in-toto+json'.
|
|
47
|
+
# @!attribute [rw] signatures
|
|
48
|
+
# @return [::Array<::Grafeas::V1::EnvelopeSignature>]
|
|
49
|
+
# The signatures over the payload.
|
|
50
|
+
class SBOMReferenceOccurrence
|
|
51
|
+
include ::Google::Protobuf::MessageExts
|
|
52
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
53
|
+
end
|
|
54
|
+
|
|
55
|
+
# The actual payload that contains the SBOM Reference data.
|
|
56
|
+
# The payload follows the intoto statement specification. See
|
|
57
|
+
# https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md
|
|
58
|
+
# for more details.
|
|
59
|
+
# @!attribute [rw] type
|
|
60
|
+
# @return [::String]
|
|
61
|
+
# Identifier for the schema of the Statement.
|
|
62
|
+
# @!attribute [rw] predicate_type
|
|
63
|
+
# @return [::String]
|
|
64
|
+
# URI identifying the type of the Predicate.
|
|
65
|
+
# @!attribute [rw] subject
|
|
66
|
+
# @return [::Array<::Grafeas::V1::Subject>]
|
|
67
|
+
# Set of software artifacts that the attestation applies to. Each element
|
|
68
|
+
# represents a single software artifact.
|
|
69
|
+
# @!attribute [rw] predicate
|
|
70
|
+
# @return [::Grafeas::V1::SbomReferenceIntotoPredicate]
|
|
71
|
+
# Additional parameters of the Predicate. Includes the actual data about the
|
|
72
|
+
# SBOM.
|
|
73
|
+
class SbomReferenceIntotoPayload
|
|
74
|
+
include ::Google::Protobuf::MessageExts
|
|
75
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
76
|
+
end
|
|
77
|
+
|
|
78
|
+
# A predicate which describes the SBOM being referenced.
|
|
79
|
+
# @!attribute [rw] referrer_id
|
|
80
|
+
# @return [::String]
|
|
81
|
+
# The person or system referring this predicate to the consumer.
|
|
82
|
+
# @!attribute [rw] location
|
|
83
|
+
# @return [::String]
|
|
84
|
+
# The location of the SBOM.
|
|
85
|
+
# @!attribute [rw] mime_type
|
|
86
|
+
# @return [::String]
|
|
87
|
+
# The mime type of the SBOM.
|
|
88
|
+
# @!attribute [rw] digest
|
|
89
|
+
# @return [::Google::Protobuf::Map{::String => ::String}]
|
|
90
|
+
# A map of algorithm to digest of the contents of the SBOM.
|
|
91
|
+
class SbomReferenceIntotoPredicate
|
|
92
|
+
include ::Google::Protobuf::MessageExts
|
|
93
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
94
|
+
|
|
95
|
+
# @!attribute [rw] key
|
|
96
|
+
# @return [::String]
|
|
97
|
+
# @!attribute [rw] value
|
|
98
|
+
# @return [::String]
|
|
99
|
+
class DigestEntry
|
|
100
|
+
include ::Google::Protobuf::MessageExts
|
|
101
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
102
|
+
end
|
|
103
|
+
end
|
|
104
|
+
end
|
|
105
|
+
end
|
|
@@ -95,9 +95,15 @@ module Grafeas
|
|
|
95
95
|
# Assessment provides all information that is related to a single
|
|
96
96
|
# vulnerability for this product.
|
|
97
97
|
# @!attribute [rw] cve
|
|
98
|
+
# @deprecated This field is deprecated and may be removed in the next major version update.
|
|
98
99
|
# @return [::String]
|
|
99
100
|
# Holds the MITRE standard Common Vulnerabilities and Exposures (CVE)
|
|
100
101
|
# tracking number for the vulnerability.
|
|
102
|
+
# Deprecated: Use vulnerability_id instead to denote CVEs.
|
|
103
|
+
# @!attribute [rw] vulnerability_id
|
|
104
|
+
# @return [::String]
|
|
105
|
+
# The vulnerability identifier for this Assessment. Will hold one of
|
|
106
|
+
# common identifiers e.g. CVE, GHSA etc.
|
|
101
107
|
# @!attribute [rw] short_description
|
|
102
108
|
# @return [::String]
|
|
103
109
|
# A one sentence description of this Vex.
|
|
@@ -213,6 +213,9 @@ module Grafeas
|
|
|
213
213
|
# The cvss v2 score for the vulnerability.
|
|
214
214
|
# @!attribute [rw] vex_assessment
|
|
215
215
|
# @return [::Grafeas::V1::VulnerabilityOccurrence::VexAssessment]
|
|
216
|
+
# @!attribute [rw] extra_details
|
|
217
|
+
# @return [::String]
|
|
218
|
+
# Occurrence-specific extra details about the vulnerability.
|
|
216
219
|
class VulnerabilityOccurrence
|
|
217
220
|
include ::Google::Protobuf::MessageExts
|
|
218
221
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -265,9 +268,15 @@ module Grafeas
|
|
|
265
268
|
# VexAssessment provides all publisher provided Vex information that is
|
|
266
269
|
# related to this vulnerability.
|
|
267
270
|
# @!attribute [rw] cve
|
|
271
|
+
# @deprecated This field is deprecated and may be removed in the next major version update.
|
|
268
272
|
# @return [::String]
|
|
269
273
|
# Holds the MITRE standard Common Vulnerabilities and Exposures (CVE)
|
|
270
274
|
# tracking number for the vulnerability.
|
|
275
|
+
# Deprecated: Use vulnerability_id instead to denote CVEs.
|
|
276
|
+
# @!attribute [rw] vulnerability_id
|
|
277
|
+
# @return [::String]
|
|
278
|
+
# The vulnerability identifier for this Assessment. Will hold one of
|
|
279
|
+
# common identifiers e.g. CVE, GHSA etc.
|
|
271
280
|
# @!attribute [rw] related_uris
|
|
272
281
|
# @return [::Array<::Grafeas::V1::RelatedUrl>]
|
|
273
282
|
# Holds a list of references associated with this vulnerability item and
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: grafeas-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.16.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2024-
|
|
11
|
+
date: 2024-04-19 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -76,6 +76,7 @@ files:
|
|
|
76
76
|
- lib/grafeas/v1/intoto_statement_pb.rb
|
|
77
77
|
- lib/grafeas/v1/package_pb.rb
|
|
78
78
|
- lib/grafeas/v1/provenance_pb.rb
|
|
79
|
+
- lib/grafeas/v1/sbom_pb.rb
|
|
79
80
|
- lib/grafeas/v1/severity_pb.rb
|
|
80
81
|
- lib/grafeas/v1/slsa_provenance_pb.rb
|
|
81
82
|
- lib/grafeas/v1/slsa_provenance_zero_two_pb.rb
|
|
@@ -109,6 +110,7 @@ files:
|
|
|
109
110
|
- proto_docs/grafeas/v1/intoto_statement.rb
|
|
110
111
|
- proto_docs/grafeas/v1/package.rb
|
|
111
112
|
- proto_docs/grafeas/v1/provenance.rb
|
|
113
|
+
- proto_docs/grafeas/v1/sbom.rb
|
|
112
114
|
- proto_docs/grafeas/v1/severity.rb
|
|
113
115
|
- proto_docs/grafeas/v1/slsa_provenance.rb
|
|
114
116
|
- proto_docs/grafeas/v1/slsa_provenance_zero_two.rb
|