grafeas-v1 1.9.0 → 1.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.yardopts +1 -1
- data/README.md +2 -3
- data/lib/grafeas/v1/cvss_pb.rb +3 -1
- data/lib/grafeas/v1/grafeas/client.rb +1 -1
- data/lib/grafeas/v1/grafeas/paths.rb +1 -1
- data/lib/grafeas/v1/grafeas.rb +1 -1
- data/lib/grafeas/v1/version.rb +1 -1
- data/lib/grafeas/v1/vulnerability_pb.rb +1 -1
- data/lib/grafeas/v1.rb +1 -1
- data/lib/grafeas-v1.rb +1 -1
- data/proto_docs/README.md +1 -1
- data/proto_docs/google/api/client.rb +1 -1
- data/proto_docs/google/api/field_behavior.rb +1 -1
- data/proto_docs/google/api/launch_stage.rb +1 -1
- data/proto_docs/google/api/resource.rb +1 -1
- data/proto_docs/google/protobuf/any.rb +1 -1
- data/proto_docs/google/protobuf/duration.rb +1 -1
- data/proto_docs/google/protobuf/empty.rb +1 -1
- data/proto_docs/google/protobuf/field_mask.rb +1 -1
- data/proto_docs/google/protobuf/struct.rb +1 -1
- data/proto_docs/google/protobuf/timestamp.rb +8 -7
- data/proto_docs/google/rpc/status.rb +1 -1
- data/proto_docs/grafeas/v1/attestation.rb +1 -1
- data/proto_docs/grafeas/v1/build.rb +1 -1
- data/proto_docs/grafeas/v1/common.rb +1 -1
- data/proto_docs/grafeas/v1/compliance.rb +1 -1
- data/proto_docs/grafeas/v1/cvss.rb +112 -4
- data/proto_docs/grafeas/v1/deployment.rb +1 -1
- data/proto_docs/grafeas/v1/discovery.rb +1 -1
- data/proto_docs/grafeas/v1/dsse_attestation.rb +1 -1
- data/proto_docs/grafeas/v1/grafeas.rb +1 -1
- data/proto_docs/grafeas/v1/image.rb +1 -1
- data/proto_docs/grafeas/v1/intoto_provenance.rb +1 -1
- data/proto_docs/grafeas/v1/intoto_statement.rb +1 -1
- data/proto_docs/grafeas/v1/package.rb +1 -1
- data/proto_docs/grafeas/v1/provenance.rb +1 -1
- data/proto_docs/grafeas/v1/sbom.rb +1 -1
- data/proto_docs/grafeas/v1/secret.rb +1 -1
- data/proto_docs/grafeas/v1/severity.rb +1 -1
- data/proto_docs/grafeas/v1/slsa_provenance.rb +1 -1
- data/proto_docs/grafeas/v1/slsa_provenance_zero_two.rb +1 -1
- data/proto_docs/grafeas/v1/upgrade.rb +1 -1
- data/proto_docs/grafeas/v1/vex.rb +1 -1
- data/proto_docs/grafeas/v1/vulnerability.rb +7 -1
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: cf137b5773803241394a1b8f39e36a7f1f2277d140f9762870adbe740f373f12
|
|
4
|
+
data.tar.gz: fed949650be63b4eac32a09d209fd9aedfedda8b7e35623d2709e8fb19e3f1e3
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 23314e07898f3326850fc0aa6e54c7416a4fdaabb65a7f8fa9e5845c0ebd163b070cf1605d6c9cf6f17504c954293bc751d33b925da8b11b9def5d4f80c66bc4
|
|
7
|
+
data.tar.gz: 8d9143a0dbda1803dfc2c5c7510d0fceb5b8b05e1149cd3b74cc681ca9cd5d4145da9d64d5f6e5729cbafc0418925fd6299c2aacec7207d15ed0013f6df7a3ba
|
data/.yardopts
CHANGED
data/README.md
CHANGED
|
@@ -1,13 +1,12 @@
|
|
|
1
|
-
# Ruby Client for the
|
|
1
|
+
# Ruby Client for the Container Analysis V1 API
|
|
2
2
|
|
|
3
3
|
An implementation of the Grafeas API, which stores, and enables querying and retrieval of critical metadata about all of your software artifacts.
|
|
4
4
|
|
|
5
|
-
The Grafeas API stores, and enables querying and retrieval of, critical metadata about all of your software artifacts.
|
|
6
5
|
|
|
7
6
|
https://github.com/googleapis/google-cloud-ruby
|
|
8
7
|
|
|
9
8
|
This gem is a _versioned_ client. It provides basic client classes for a
|
|
10
|
-
specific version of the
|
|
9
|
+
specific version of the Container Analysis V1 API. Most users should consider using
|
|
11
10
|
the main client gem,
|
|
12
11
|
[grafeas](https://rubygems.org/gems/grafeas).
|
|
13
12
|
See the section below titled *Which client should I use?* for more information.
|
data/lib/grafeas/v1/cvss_pb.rb
CHANGED
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
require 'google/protobuf'
|
|
6
6
|
|
|
7
7
|
|
|
8
|
-
descriptor_data = "\n\x15grafeas/v1/cvss.proto\x12\ngrafeas.v1\"\xc5\t\n\x06\x43VSSv3\x12\x12\n\nbase_score\x18\x01 \x01(\x02\x12\x1c\n\x14\x65xploitability_score\x18\x02 \x01(\x02\x12\x14\n\x0cimpact_score\x18\x03 \x01(\x02\x12\x36\n\rattack_vector\x18\x05 \x01(\x0e\x32\x1f.grafeas.v1.CVSSv3.AttackVector\x12>\n\x11\x61ttack_complexity\x18\x06 \x01(\x0e\x32#.grafeas.v1.CVSSv3.AttackComplexity\x12\x42\n\x13privileges_required\x18\x07 \x01(\x0e\x32%.grafeas.v1.CVSSv3.PrivilegesRequired\x12<\n\x10user_interaction\x18\x08 \x01(\x0e\x32\".grafeas.v1.CVSSv3.UserInteraction\x12\'\n\x05scope\x18\t \x01(\x0e\x32\x18.grafeas.v1.CVSSv3.Scope\x12\x39\n\x16\x63onfidentiality_impact\x18\n \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x33\n\x10integrity_impact\x18\x0b \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x36\n\x13\x61vailability_impact\x18\x0c \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\"\x99\x01\n\x0c\x41ttackVector\x12\x1d\n\x19\x41TTACK_VECTOR_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_VECTOR_NETWORK\x10\x01\x12\x1a\n\x16\x41TTACK_VECTOR_ADJACENT\x10\x02\x12\x17\n\x13\x41TTACK_VECTOR_LOCAL\x10\x03\x12\x1a\n\x16\x41TTACK_VECTOR_PHYSICAL\x10\x04\"l\n\x10\x41ttackComplexity\x12!\n\x1d\x41TTACK_COMPLEXITY_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_COMPLEXITY_LOW\x10\x01\x12\x1a\n\x16\x41TTACK_COMPLEXITY_HIGH\x10\x02\"\x92\x01\n\x12PrivilegesRequired\x12#\n\x1fPRIVILEGES_REQUIRED_UNSPECIFIED\x10\x00\x12\x1c\n\x18PRIVILEGES_REQUIRED_NONE\x10\x01\x12\x1b\n\x17PRIVILEGES_REQUIRED_LOW\x10\x02\x12\x1c\n\x18PRIVILEGES_REQUIRED_HIGH\x10\x03\"m\n\x0fUserInteraction\x12 \n\x1cUSER_INTERACTION_UNSPECIFIED\x10\x00\x12\x19\n\x15USER_INTERACTION_NONE\x10\x01\x12\x1d\n\x19USER_INTERACTION_REQUIRED\x10\x02\"F\n\x05Scope\x12\x15\n\x11SCOPE_UNSPECIFIED\x10\x00\x12\x13\n\x0fSCOPE_UNCHANGED\x10\x01\x12\x11\n\rSCOPE_CHANGED\x10\x02\"R\n\x06Impact\x12\x16\n\x12IMPACT_UNSPECIFIED\x10\x00\x12\x0f\n\x0bIMPACT_HIGH\x10\x01\x12\x0e\n\nIMPACT_LOW\x10\x02\x12\x0f\n\x0bIMPACT_NONE\x10\x03\"\
|
|
8
|
+
descriptor_data = "\n\x15grafeas/v1/cvss.proto\x12\ngrafeas.v1\"\xc5\t\n\x06\x43VSSv3\x12\x12\n\nbase_score\x18\x01 \x01(\x02\x12\x1c\n\x14\x65xploitability_score\x18\x02 \x01(\x02\x12\x14\n\x0cimpact_score\x18\x03 \x01(\x02\x12\x36\n\rattack_vector\x18\x05 \x01(\x0e\x32\x1f.grafeas.v1.CVSSv3.AttackVector\x12>\n\x11\x61ttack_complexity\x18\x06 \x01(\x0e\x32#.grafeas.v1.CVSSv3.AttackComplexity\x12\x42\n\x13privileges_required\x18\x07 \x01(\x0e\x32%.grafeas.v1.CVSSv3.PrivilegesRequired\x12<\n\x10user_interaction\x18\x08 \x01(\x0e\x32\".grafeas.v1.CVSSv3.UserInteraction\x12\'\n\x05scope\x18\t \x01(\x0e\x32\x18.grafeas.v1.CVSSv3.Scope\x12\x39\n\x16\x63onfidentiality_impact\x18\n \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x33\n\x10integrity_impact\x18\x0b \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x36\n\x13\x61vailability_impact\x18\x0c \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\"\x99\x01\n\x0c\x41ttackVector\x12\x1d\n\x19\x41TTACK_VECTOR_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_VECTOR_NETWORK\x10\x01\x12\x1a\n\x16\x41TTACK_VECTOR_ADJACENT\x10\x02\x12\x17\n\x13\x41TTACK_VECTOR_LOCAL\x10\x03\x12\x1a\n\x16\x41TTACK_VECTOR_PHYSICAL\x10\x04\"l\n\x10\x41ttackComplexity\x12!\n\x1d\x41TTACK_COMPLEXITY_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_COMPLEXITY_LOW\x10\x01\x12\x1a\n\x16\x41TTACK_COMPLEXITY_HIGH\x10\x02\"\x92\x01\n\x12PrivilegesRequired\x12#\n\x1fPRIVILEGES_REQUIRED_UNSPECIFIED\x10\x00\x12\x1c\n\x18PRIVILEGES_REQUIRED_NONE\x10\x01\x12\x1b\n\x17PRIVILEGES_REQUIRED_LOW\x10\x02\x12\x1c\n\x18PRIVILEGES_REQUIRED_HIGH\x10\x03\"m\n\x0fUserInteraction\x12 \n\x1cUSER_INTERACTION_UNSPECIFIED\x10\x00\x12\x19\n\x15USER_INTERACTION_NONE\x10\x01\x12\x1d\n\x19USER_INTERACTION_REQUIRED\x10\x02\"F\n\x05Scope\x12\x15\n\x11SCOPE_UNSPECIFIED\x10\x00\x12\x13\n\x0fSCOPE_UNCHANGED\x10\x01\x12\x11\n\rSCOPE_CHANGED\x10\x02\"R\n\x06Impact\x12\x16\n\x12IMPACT_UNSPECIFIED\x10\x00\x12\x0f\n\x0bIMPACT_HIGH\x10\x01\x12\x0e\n\nIMPACT_LOW\x10\x02\x12\x0f\n\x0bIMPACT_NONE\x10\x03\"\xce\x12\n\x04\x43VSS\x12\x12\n\nbase_score\x18\x01 \x01(\x02\x12\x1c\n\x14\x65xploitability_score\x18\x02 \x01(\x02\x12\x14\n\x0cimpact_score\x18\x03 \x01(\x02\x12\x34\n\rattack_vector\x18\x04 \x01(\x0e\x32\x1d.grafeas.v1.CVSS.AttackVector\x12<\n\x11\x61ttack_complexity\x18\x05 \x01(\x0e\x32!.grafeas.v1.CVSS.AttackComplexity\x12\x37\n\x0e\x61uthentication\x18\x06 \x01(\x0e\x32\x1f.grafeas.v1.CVSS.Authentication\x12@\n\x13privileges_required\x18\x07 \x01(\x0e\x32#.grafeas.v1.CVSS.PrivilegesRequired\x12:\n\x10user_interaction\x18\x08 \x01(\x0e\x32 .grafeas.v1.CVSS.UserInteraction\x12%\n\x05scope\x18\t \x01(\x0e\x32\x16.grafeas.v1.CVSS.Scope\x12\x37\n\x16\x63onfidentiality_impact\x18\n \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x31\n\x10integrity_impact\x18\x0b \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x34\n\x13\x61vailability_impact\x18\x0c \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12@\n\x13\x61ttack_requirements\x18\r \x01(\x0e\x32#.grafeas.v1.CVSS.AttackRequirements\x12I\n(vulnerable_system_confidentiality_impact\x18\x0e \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x43\n\"vulnerable_system_integrity_impact\x18\x0f \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x46\n%vulnerable_system_availability_impact\x18\x10 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12I\n(subsequent_system_confidentiality_impact\x18\x11 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x43\n\"subsequent_system_integrity_impact\x18\x12 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x46\n%subsequent_system_availability_impact\x18\x13 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12:\n\x10\x65xploit_maturity\x18\x14 \x01(\x0e\x32 .grafeas.v1.CVSS.ExploitMaturity\"\x99\x01\n\x0c\x41ttackVector\x12\x1d\n\x19\x41TTACK_VECTOR_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_VECTOR_NETWORK\x10\x01\x12\x1a\n\x16\x41TTACK_VECTOR_ADJACENT\x10\x02\x12\x17\n\x13\x41TTACK_VECTOR_LOCAL\x10\x03\x12\x1a\n\x16\x41TTACK_VECTOR_PHYSICAL\x10\x04\"\x8a\x01\n\x10\x41ttackComplexity\x12!\n\x1d\x41TTACK_COMPLEXITY_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_COMPLEXITY_LOW\x10\x01\x12\x1a\n\x16\x41TTACK_COMPLEXITY_HIGH\x10\x02\x12\x1c\n\x18\x41TTACK_COMPLEXITY_MEDIUM\x10\x03\"\x81\x01\n\x0e\x41uthentication\x12\x1e\n\x1a\x41UTHENTICATION_UNSPECIFIED\x10\x00\x12\x1b\n\x17\x41UTHENTICATION_MULTIPLE\x10\x01\x12\x19\n\x15\x41UTHENTICATION_SINGLE\x10\x02\x12\x17\n\x13\x41UTHENTICATION_NONE\x10\x03\"\x92\x01\n\x12PrivilegesRequired\x12#\n\x1fPRIVILEGES_REQUIRED_UNSPECIFIED\x10\x00\x12\x1c\n\x18PRIVILEGES_REQUIRED_NONE\x10\x01\x12\x1b\n\x17PRIVILEGES_REQUIRED_LOW\x10\x02\x12\x1c\n\x18PRIVILEGES_REQUIRED_HIGH\x10\x03\"\xa8\x01\n\x0fUserInteraction\x12 \n\x1cUSER_INTERACTION_UNSPECIFIED\x10\x00\x12\x19\n\x15USER_INTERACTION_NONE\x10\x01\x12\x1d\n\x19USER_INTERACTION_REQUIRED\x10\x02\x12\x1c\n\x18USER_INTERACTION_PASSIVE\x10\x03\x12\x1b\n\x17USER_INTERACTION_ACTIVE\x10\x04\"F\n\x05Scope\x12\x15\n\x11SCOPE_UNSPECIFIED\x10\x00\x12\x13\n\x0fSCOPE_UNCHANGED\x10\x01\x12\x11\n\rSCOPE_CHANGED\x10\x02\"{\n\x06Impact\x12\x16\n\x12IMPACT_UNSPECIFIED\x10\x00\x12\x0f\n\x0bIMPACT_HIGH\x10\x01\x12\x0e\n\nIMPACT_LOW\x10\x02\x12\x0f\n\x0bIMPACT_NONE\x10\x03\x12\x12\n\x0eIMPACT_PARTIAL\x10\x04\x12\x13\n\x0fIMPACT_COMPLETE\x10\x05\"x\n\x12\x41ttackRequirements\x12#\n\x1f\x41TTACK_REQUIREMENTS_UNSPECIFIED\x10\x00\x12\x1c\n\x18\x41TTACK_REQUIREMENTS_NONE\x10\x01\x12\x1f\n\x1b\x41TTACK_REQUIREMENTS_PRESENT\x10\x02\"\xaf\x01\n\x0f\x45xploitMaturity\x12 \n\x1c\x45XPLOIT_MATURITY_UNSPECIFIED\x10\x00\x12 \n\x1c\x45XPLOIT_MATURITY_NOT_DEFINED\x10\x01\x12\x1d\n\x19\x45XPLOIT_MATURITY_ATTACKED\x10\x02\x12\x18\n\x14\x45XPLOIT_MATURITY_POC\x10\x03\x12\x1f\n\x1b\x45XPLOIT_MATURITY_UNREPORTED\x10\x04*g\n\x0b\x43VSSVersion\x12\x1c\n\x18\x43VSS_VERSION_UNSPECIFIED\x10\x00\x12\x12\n\x0e\x43VSS_VERSION_2\x10\x01\x12\x12\n\x0e\x43VSS_VERSION_3\x10\x02\x12\x12\n\x0e\x43VSS_VERSION_4\x10\x03\x42\\\n\rio.grafeas.v1B\tCVSSProtoP\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
9
9
|
|
|
10
10
|
pool = ::Google::Protobuf::DescriptorPool.generated_pool
|
|
11
11
|
pool.add_serialized_file(descriptor_data)
|
|
@@ -27,6 +27,8 @@ module Grafeas
|
|
|
27
27
|
CVSS::UserInteraction = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.UserInteraction").enummodule
|
|
28
28
|
CVSS::Scope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.Scope").enummodule
|
|
29
29
|
CVSS::Impact = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.Impact").enummodule
|
|
30
|
+
CVSS::AttackRequirements = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.AttackRequirements").enummodule
|
|
31
|
+
CVSS::ExploitMaturity = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.ExploitMaturity").enummodule
|
|
30
32
|
CVSSVersion = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSSVersion").enummodule
|
|
31
33
|
end
|
|
32
34
|
end
|
data/lib/grafeas/v1/grafeas.rb
CHANGED
data/lib/grafeas/v1/version.rb
CHANGED
|
@@ -14,7 +14,7 @@ require 'grafeas/v1/severity_pb'
|
|
|
14
14
|
require 'grafeas/v1/vex_pb'
|
|
15
15
|
|
|
16
16
|
|
|
17
|
-
descriptor_data = "\n\x1egrafeas/v1/vulnerability.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17grafeas/v1/common.proto\x1a\x15grafeas/v1/cvss.proto\x1a\x18grafeas/v1/package.proto\x1a\x15grafeas/v1/risk.proto\x1a\x19grafeas/v1/severity.proto\x1a\x14grafeas/v1/vex.proto\"\
|
|
17
|
+
descriptor_data = "\n\x1egrafeas/v1/vulnerability.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17grafeas/v1/common.proto\x1a\x15grafeas/v1/cvss.proto\x1a\x18grafeas/v1/package.proto\x1a\x15grafeas/v1/risk.proto\x1a\x19grafeas/v1/severity.proto\x1a\x14grafeas/v1/vex.proto\"\xca\x08\n\x11VulnerabilityNote\x12\x12\n\ncvss_score\x18\x01 \x01(\x02\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x35\n\x07\x64\x65tails\x18\x03 \x03(\x0b\x32$.grafeas.v1.VulnerabilityNote.Detail\x12#\n\x07\x63vss_v3\x18\x04 \x01(\x0b\x32\x12.grafeas.v1.CVSSv3\x12\x44\n\x0fwindows_details\x18\x05 \x03(\x0b\x32+.grafeas.v1.VulnerabilityNote.WindowsDetail\x12\x36\n\x12source_update_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12-\n\x0c\x63vss_version\x18\x07 \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x08 \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12\x39\n\x15\x61\x64visory_publish_time\x18\t \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12!\n\x07\x63vss_v4\x18\n \x01(\x0b\x32\x10.grafeas.v1.CVSS\x1a\xad\x03\n\x06\x44\x65tail\x12\x15\n\rseverity_name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x14\n\x0cpackage_type\x18\x03 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x04 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x05 \x01(\t\x12\x33\n\x16\x61\x66\x66\x65\x63ted_version_start\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x31\n\x14\x61\x66\x66\x65\x63ted_version_end\x18\x07 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x08 \x01(\t\x12\x15\n\rfixed_package\x18\t \x01(\t\x12*\n\rfixed_version\x18\n \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x13\n\x0bis_obsolete\x18\x0b \x01(\x08\x12\x36\n\x12source_update_time\x18\x0c \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06source\x18\r \x01(\t\x12\x0e\n\x06vendor\x18\x0e \x01(\t\x1a\xbe\x01\n\rWindowsDetail\x12\x0f\n\x07\x63pe_uri\x18\x01 \x01(\t\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12M\n\nfixing_kbs\x18\x04 \x03(\x0b\x32\x39.grafeas.v1.VulnerabilityNote.WindowsDetail.KnowledgeBase\x1a*\n\rKnowledgeBase\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x0b\n\x03url\x18\x02 \x01(\t\"\xdb\n\n\x17VulnerabilityOccurrence\x12\x0c\n\x04type\x18\x01 \x01(\t\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x12\n\ncvss_score\x18\x03 \x01(\x02\x12 \n\x06\x63vssv3\x18\n \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12G\n\rpackage_issue\x18\x04 \x03(\x0b\x32\x30.grafeas.v1.VulnerabilityOccurrence.PackageIssue\x12\x19\n\x11short_description\x18\x05 \x01(\t\x12\x18\n\x10long_description\x18\x06 \x01(\t\x12,\n\x0crelated_urls\x18\x07 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x30\n\x12\x65\x66\x66\x65\x63tive_severity\x18\x08 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x15\n\rfix_available\x18\t \x01(\x08\x12-\n\x0c\x63vss_version\x18\x0b \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x0c \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12I\n\x0evex_assessment\x18\r \x01(\x0b\x32\x31.grafeas.v1.VulnerabilityOccurrence.VexAssessment\x12\x15\n\rextra_details\x18\x0e \x01(\t\x12\x1e\n\x04risk\x18\x0f \x01(\x0b\x32\x10.grafeas.v1.Risk\x12!\n\x07\x63vss_v4\x18\x10 \x01(\x0b\x32\x10.grafeas.v1.CVSS\x1a\xe0\x02\n\x0cPackageIssue\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x01 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x02 \x01(\t\x12-\n\x10\x61\x66\x66\x65\x63ted_version\x18\x03 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x04 \x01(\t\x12\x15\n\rfixed_package\x18\x05 \x01(\t\x12*\n\rfixed_version\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfix_available\x18\x07 \x01(\x08\x12\x14\n\x0cpackage_type\x18\x08 \x01(\t\x12\x35\n\x12\x65\x66\x66\x65\x63tive_severity\x18\t \x01(\x0e\x32\x14.grafeas.v1.SeverityB\x03\xe0\x41\x03\x12/\n\rfile_location\x18\n \x03(\x0b\x32\x18.grafeas.v1.FileLocation\x1a\x84\x03\n\rVexAssessment\x12\x0f\n\x03\x63ve\x18\x01 \x01(\tB\x02\x18\x01\x12\x18\n\x10vulnerability_id\x18\x08 \x01(\t\x12,\n\x0crelated_uris\x18\x02 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x11\n\tnote_name\x18\x03 \x01(\t\x12G\n\x05state\x18\x04 \x01(\x0e\x32\x38.grafeas.v1.VulnerabilityAssessmentNote.Assessment.State\x12\x0f\n\x07impacts\x18\x05 \x03(\t\x12T\n\x0cremediations\x18\x06 \x03(\x0b\x32>.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Remediation\x12W\n\rjustification\x18\x07 \x01(\x0b\x32@.grafeas.v1.VulnerabilityAssessmentNote.Assessment.JustificationBQ\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
18
18
|
|
|
19
19
|
pool = ::Google::Protobuf::DescriptorPool.generated_pool
|
|
20
20
|
pool.add_serialized_file(descriptor_data)
|
data/lib/grafeas/v1.rb
CHANGED
data/lib/grafeas-v1.rb
CHANGED
data/proto_docs/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -110,14 +110,15 @@ module Google
|
|
|
110
110
|
# ) to obtain a formatter capable of generating timestamps in this format.
|
|
111
111
|
# @!attribute [rw] seconds
|
|
112
112
|
# @return [::Integer]
|
|
113
|
-
# Represents seconds of UTC time since Unix epoch
|
|
114
|
-
#
|
|
115
|
-
# 9999-12-31T23:59:59Z
|
|
113
|
+
# Represents seconds of UTC time since Unix epoch 1970-01-01T00:00:00Z. Must
|
|
114
|
+
# be between -315576000000 and 315576000000 inclusive (which corresponds to
|
|
115
|
+
# 0001-01-01T00:00:00Z to 9999-12-31T23:59:59Z).
|
|
116
116
|
# @!attribute [rw] nanos
|
|
117
117
|
# @return [::Integer]
|
|
118
|
-
# Non-negative fractions of a second at nanosecond resolution.
|
|
119
|
-
#
|
|
120
|
-
#
|
|
118
|
+
# Non-negative fractions of a second at nanosecond resolution. This field is
|
|
119
|
+
# the nanosecond portion of the duration, not an alternative to seconds.
|
|
120
|
+
# Negative second values with fractions must still have non-negative nanos
|
|
121
|
+
# values that count forward in time. Must be between 0 and 999,999,999
|
|
121
122
|
# inclusive.
|
|
122
123
|
class Timestamp
|
|
123
124
|
include ::Google::Protobuf::MessageExts
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -121,109 +121,217 @@ module Grafeas
|
|
|
121
121
|
# @return [::Float]
|
|
122
122
|
# @!attribute [rw] attack_vector
|
|
123
123
|
# @return [::Grafeas::V1::CVSS::AttackVector]
|
|
124
|
-
#
|
|
125
|
-
# Represents the intrinsic characteristics of a vulnerability that are
|
|
126
|
-
# constant over time and across user environments.
|
|
124
|
+
# Attack Vector (AV). Defined in CVSS v2, v3, v4.
|
|
127
125
|
# @!attribute [rw] attack_complexity
|
|
128
126
|
# @return [::Grafeas::V1::CVSS::AttackComplexity]
|
|
127
|
+
# Attack Complexity (AC). Defined in CVSS v2, v3, v4.
|
|
129
128
|
# @!attribute [rw] authentication
|
|
130
129
|
# @return [::Grafeas::V1::CVSS::Authentication]
|
|
130
|
+
# Authentication (Au). Defined in CVSS v2.
|
|
131
131
|
# @!attribute [rw] privileges_required
|
|
132
132
|
# @return [::Grafeas::V1::CVSS::PrivilegesRequired]
|
|
133
|
+
# Privileges Required (PR). Defined in CVSS v3, v4.
|
|
133
134
|
# @!attribute [rw] user_interaction
|
|
134
135
|
# @return [::Grafeas::V1::CVSS::UserInteraction]
|
|
136
|
+
# User Interaction (UI). Defined in CVSS v3, v4.
|
|
135
137
|
# @!attribute [rw] scope
|
|
136
138
|
# @return [::Grafeas::V1::CVSS::Scope]
|
|
139
|
+
# Scope (S). Defined in CVSS v3.
|
|
137
140
|
# @!attribute [rw] confidentiality_impact
|
|
138
141
|
# @return [::Grafeas::V1::CVSS::Impact]
|
|
142
|
+
# Confidentiality Impact (C). Defined in CVSS v2, v3.
|
|
139
143
|
# @!attribute [rw] integrity_impact
|
|
140
144
|
# @return [::Grafeas::V1::CVSS::Impact]
|
|
145
|
+
# Integrity Impact (I). Defined in CVSS v2, v3.
|
|
141
146
|
# @!attribute [rw] availability_impact
|
|
142
147
|
# @return [::Grafeas::V1::CVSS::Impact]
|
|
148
|
+
# Availability Impact (A). Defined in CVSS v2, v3.
|
|
149
|
+
# @!attribute [rw] attack_requirements
|
|
150
|
+
# @return [::Grafeas::V1::CVSS::AttackRequirements]
|
|
151
|
+
# Attack Requirements (AT). Defined in CVSS v4.
|
|
152
|
+
# @!attribute [rw] vulnerable_system_confidentiality_impact
|
|
153
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
154
|
+
# Vulnerable System Confidentiality Impact (VC). Defined in CVSS v4.
|
|
155
|
+
# @!attribute [rw] vulnerable_system_integrity_impact
|
|
156
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
157
|
+
# Vulnerable System Integrity Impact (VI). Defined in CVSS v4.
|
|
158
|
+
# @!attribute [rw] vulnerable_system_availability_impact
|
|
159
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
160
|
+
# Vulnerable System Availability Impact (VA). Defined in CVSS v4.
|
|
161
|
+
# @!attribute [rw] subsequent_system_confidentiality_impact
|
|
162
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
163
|
+
# Subsequent System Confidentiality Impact (SC). Defined in CVSS v4.
|
|
164
|
+
# @!attribute [rw] subsequent_system_integrity_impact
|
|
165
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
166
|
+
# Subsequent System Integrity Impact (SI). Defined in CVSS v4.
|
|
167
|
+
# @!attribute [rw] subsequent_system_availability_impact
|
|
168
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
169
|
+
# Subsequent System Availability Impact (SA). Defined in CVSS v4.
|
|
170
|
+
# @!attribute [rw] exploit_maturity
|
|
171
|
+
# @return [::Grafeas::V1::CVSS::ExploitMaturity]
|
|
172
|
+
# Exploit Maturity (E). Defined in CVSS v4.
|
|
143
173
|
class CVSS
|
|
144
174
|
include ::Google::Protobuf::MessageExts
|
|
145
175
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
146
176
|
|
|
177
|
+
# Attack Vector.
|
|
147
178
|
module AttackVector
|
|
179
|
+
# Unspecified.
|
|
148
180
|
ATTACK_VECTOR_UNSPECIFIED = 0
|
|
149
181
|
|
|
182
|
+
# Attack Vector: Network (AV:N). Defined in CVSS v2, v3, v4.
|
|
150
183
|
ATTACK_VECTOR_NETWORK = 1
|
|
151
184
|
|
|
185
|
+
# Attack Vector: Adjacent (AV:A). Defined in CVSS v2, v3, v4.
|
|
152
186
|
ATTACK_VECTOR_ADJACENT = 2
|
|
153
187
|
|
|
188
|
+
# Attack Vector: Local (AV:L). Defined in CVSS v2, v3, v4.
|
|
154
189
|
ATTACK_VECTOR_LOCAL = 3
|
|
155
190
|
|
|
191
|
+
# Attack Vector: Physical (AV:P). Defined in CVSS v3, v4.
|
|
156
192
|
ATTACK_VECTOR_PHYSICAL = 4
|
|
157
193
|
end
|
|
158
194
|
|
|
195
|
+
# Attack Complexity.
|
|
159
196
|
module AttackComplexity
|
|
197
|
+
# Unspecified.
|
|
160
198
|
ATTACK_COMPLEXITY_UNSPECIFIED = 0
|
|
161
199
|
|
|
200
|
+
# Low attack complexity (AC:L). Defined in CVSS v2, v3, v4.
|
|
162
201
|
ATTACK_COMPLEXITY_LOW = 1
|
|
163
202
|
|
|
203
|
+
# High attack complexity (AC:H). Defined in CVSS v2, v3, v4.
|
|
164
204
|
ATTACK_COMPLEXITY_HIGH = 2
|
|
165
205
|
|
|
206
|
+
# Medium attack complexity (AC:M). Defined in CVSS v2.
|
|
166
207
|
ATTACK_COMPLEXITY_MEDIUM = 3
|
|
167
208
|
end
|
|
168
209
|
|
|
210
|
+
# Authentication.
|
|
169
211
|
module Authentication
|
|
212
|
+
# Unspecified.
|
|
170
213
|
AUTHENTICATION_UNSPECIFIED = 0
|
|
171
214
|
|
|
215
|
+
# Multiple authentication required (Au:M). Defined in CVSS v2.
|
|
172
216
|
AUTHENTICATION_MULTIPLE = 1
|
|
173
217
|
|
|
218
|
+
# Single authentication required (Au:S). Defined in CVSS v2.
|
|
174
219
|
AUTHENTICATION_SINGLE = 2
|
|
175
220
|
|
|
221
|
+
# No authentication required (Au:N). Defined in CVSS v2.
|
|
176
222
|
AUTHENTICATION_NONE = 3
|
|
177
223
|
end
|
|
178
224
|
|
|
225
|
+
# Privileges Required.
|
|
179
226
|
module PrivilegesRequired
|
|
227
|
+
# Unspecified.
|
|
180
228
|
PRIVILEGES_REQUIRED_UNSPECIFIED = 0
|
|
181
229
|
|
|
230
|
+
# No privileges required (PR:N). Defined in CVSS v3, v4.
|
|
182
231
|
PRIVILEGES_REQUIRED_NONE = 1
|
|
183
232
|
|
|
233
|
+
# Low privileges required (PR:L). Defined in CVSS v3, v4.
|
|
184
234
|
PRIVILEGES_REQUIRED_LOW = 2
|
|
185
235
|
|
|
236
|
+
# High privileges required (PR:H). Defined in CVSS v3, v4.
|
|
186
237
|
PRIVILEGES_REQUIRED_HIGH = 3
|
|
187
238
|
end
|
|
188
239
|
|
|
240
|
+
# User Interaction.
|
|
189
241
|
module UserInteraction
|
|
242
|
+
# Unspecified.
|
|
190
243
|
USER_INTERACTION_UNSPECIFIED = 0
|
|
191
244
|
|
|
245
|
+
# No user interaction required (UI:N). Defined in CVSS v3, v4.
|
|
192
246
|
USER_INTERACTION_NONE = 1
|
|
193
247
|
|
|
248
|
+
# User interaction required (UI:R). Defined in CVSS v3.
|
|
194
249
|
USER_INTERACTION_REQUIRED = 2
|
|
250
|
+
|
|
251
|
+
# Passive user interaction required (UI:P). Defined in CVSS v4.
|
|
252
|
+
USER_INTERACTION_PASSIVE = 3
|
|
253
|
+
|
|
254
|
+
# Active user interaction required (UI:A). Defined in CVSS v4.
|
|
255
|
+
USER_INTERACTION_ACTIVE = 4
|
|
195
256
|
end
|
|
196
257
|
|
|
258
|
+
# Scope.
|
|
197
259
|
module Scope
|
|
260
|
+
# Unspecified.
|
|
198
261
|
SCOPE_UNSPECIFIED = 0
|
|
199
262
|
|
|
263
|
+
# Scope: Unchanged (S:U). Defined in CVSS v3.
|
|
200
264
|
SCOPE_UNCHANGED = 1
|
|
201
265
|
|
|
266
|
+
# Scope: Changed (S:C). Defined in CVSS v3.
|
|
202
267
|
SCOPE_CHANGED = 2
|
|
203
268
|
end
|
|
204
269
|
|
|
270
|
+
# Impact.
|
|
205
271
|
module Impact
|
|
272
|
+
# Unspecified.
|
|
206
273
|
IMPACT_UNSPECIFIED = 0
|
|
207
274
|
|
|
275
|
+
# High impact (H). Defined in CVSS v3, v4.
|
|
208
276
|
IMPACT_HIGH = 1
|
|
209
277
|
|
|
278
|
+
# Low impact (L). Defined in CVSS v3, v4.
|
|
210
279
|
IMPACT_LOW = 2
|
|
211
280
|
|
|
281
|
+
# No impact (N). Defined in CVSS v2, v3, v4.
|
|
212
282
|
IMPACT_NONE = 3
|
|
213
283
|
|
|
284
|
+
# Partial impact (P). Defined in CVSS v2.
|
|
214
285
|
IMPACT_PARTIAL = 4
|
|
215
286
|
|
|
287
|
+
# Complete impact (C). Defined in CVSS v2.
|
|
216
288
|
IMPACT_COMPLETE = 5
|
|
217
289
|
end
|
|
290
|
+
|
|
291
|
+
# Attack Requirements.
|
|
292
|
+
module AttackRequirements
|
|
293
|
+
# Unspecified.
|
|
294
|
+
ATTACK_REQUIREMENTS_UNSPECIFIED = 0
|
|
295
|
+
|
|
296
|
+
# No attack requirements (AT:N). Defined in CVSS v4.
|
|
297
|
+
ATTACK_REQUIREMENTS_NONE = 1
|
|
298
|
+
|
|
299
|
+
# Attack requirements: Present (AT:P). Defined in CVSS v4.
|
|
300
|
+
ATTACK_REQUIREMENTS_PRESENT = 2
|
|
301
|
+
end
|
|
302
|
+
|
|
303
|
+
# Exploit Maturity (E). Defined in CVSS v4.
|
|
304
|
+
module ExploitMaturity
|
|
305
|
+
# Unspecified.
|
|
306
|
+
EXPLOIT_MATURITY_UNSPECIFIED = 0
|
|
307
|
+
|
|
308
|
+
# Exploit maturity: Not defined (E:X). Defined in CVSS v4.
|
|
309
|
+
EXPLOIT_MATURITY_NOT_DEFINED = 1
|
|
310
|
+
|
|
311
|
+
# Exploit maturity: Attacked (E:A). Defined in CVSS v4.
|
|
312
|
+
EXPLOIT_MATURITY_ATTACKED = 2
|
|
313
|
+
|
|
314
|
+
# Exploit maturity: Proof-of-concept (E:P). Defined in CVSS v4.
|
|
315
|
+
EXPLOIT_MATURITY_POC = 3
|
|
316
|
+
|
|
317
|
+
# Exploit maturity: Unreported (E:U). Defined in CVSS v4.
|
|
318
|
+
EXPLOIT_MATURITY_UNREPORTED = 4
|
|
319
|
+
end
|
|
218
320
|
end
|
|
219
321
|
|
|
220
322
|
# CVSS Version.
|
|
221
323
|
module CVSSVersion
|
|
324
|
+
# Unspecified.
|
|
222
325
|
CVSS_VERSION_UNSPECIFIED = 0
|
|
223
326
|
|
|
327
|
+
# CVSS v2.
|
|
224
328
|
CVSS_VERSION_2 = 1
|
|
225
329
|
|
|
330
|
+
# CVSS v3.
|
|
226
331
|
CVSS_VERSION_3 = 2
|
|
332
|
+
|
|
333
|
+
# CVSS v4.
|
|
334
|
+
CVSS_VERSION_4 = 3
|
|
227
335
|
end
|
|
228
336
|
end
|
|
229
337
|
end
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
-
# Copyright
|
|
3
|
+
# Copyright 2026 Google LLC
|
|
4
4
|
#
|
|
5
5
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
6
|
# you may not use this file except in compliance with the License.
|
|
@@ -53,6 +53,9 @@ module Grafeas
|
|
|
53
53
|
# @!attribute [rw] advisory_publish_time
|
|
54
54
|
# @return [::Google::Protobuf::Timestamp]
|
|
55
55
|
# The time this advisory was published by the source.
|
|
56
|
+
# @!attribute [rw] cvss_v4
|
|
57
|
+
# @return [::Grafeas::V1::CVSS]
|
|
58
|
+
# The full description of the v4 CVSS for this vulnerability.
|
|
56
59
|
class VulnerabilityNote
|
|
57
60
|
include ::Google::Protobuf::MessageExts
|
|
58
61
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -222,6 +225,9 @@ module Grafeas
|
|
|
222
225
|
# @!attribute [rw] risk
|
|
223
226
|
# @return [::Grafeas::V1::Risk]
|
|
224
227
|
# Risk information about the vulnerability, such as CISA, EPSS, etc.
|
|
228
|
+
# @!attribute [rw] cvss_v4
|
|
229
|
+
# @return [::Grafeas::V1::CVSS]
|
|
230
|
+
# The cvss v4 score for the vulnerability.
|
|
225
231
|
class VulnerabilityOccurrence
|
|
226
232
|
include ::Google::Protobuf::MessageExts
|
|
227
233
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: grafeas-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.10.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
@@ -37,10 +37,10 @@ dependencies:
|
|
|
37
37
|
- - "~>"
|
|
38
38
|
- !ruby/object:Gem::Version
|
|
39
39
|
version: '1.0'
|
|
40
|
-
description:
|
|
41
|
-
metadata about all of your software artifacts. Note that
|
|
42
|
-
client library. For most uses, we recommend installing
|
|
43
|
-
instead. See the readme for more details.
|
|
40
|
+
description: An implementation of the Grafeas API, which stores, and enables querying
|
|
41
|
+
and retrieval of critical metadata about all of your software artifacts. Note that
|
|
42
|
+
grafeas-v1 is a version-specific client library. For most uses, we recommend installing
|
|
43
|
+
the main client library grafeas instead. See the readme for more details.
|
|
44
44
|
email: googleapis-packages@google.com
|
|
45
45
|
executables: []
|
|
46
46
|
extensions: []
|