grafeas-v1 1.9.0 → 1.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/grafeas/v1/cvss_pb.rb +3 -1
- data/lib/grafeas/v1/version.rb +1 -1
- data/lib/grafeas/v1/vulnerability_pb.rb +1 -1
- data/proto_docs/grafeas/v1/cvss.rb +111 -3
- data/proto_docs/grafeas/v1/vulnerability.rb +6 -0
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: b5fcb64b6bd2c31684ae59843ce7d641a8d41db94a35fbc2ca04fc7f9d482df3
|
|
4
|
+
data.tar.gz: 790e0182c4784c9730d8b335a34f43bce342b61f08ef0f0639a686ab29b55f61
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c8d7c0426c53403402ca57df4f336dbcce8d397760ed840c0f61ce158accfbf7f13dbd8ded55ef255f76307557ff22467502166c4727db9d7717acd844762460
|
|
7
|
+
data.tar.gz: eb58214d8734cda46aaf977c8d3285173d164be5c2de08962e25667becc712cc708fd26c73e5dc9b6eff06b1934949c4e429ffe422b2a2f45177c1029eba3387
|
data/lib/grafeas/v1/cvss_pb.rb
CHANGED
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
require 'google/protobuf'
|
|
6
6
|
|
|
7
7
|
|
|
8
|
-
descriptor_data = "\n\x15grafeas/v1/cvss.proto\x12\ngrafeas.v1\"\xc5\t\n\x06\x43VSSv3\x12\x12\n\nbase_score\x18\x01 \x01(\x02\x12\x1c\n\x14\x65xploitability_score\x18\x02 \x01(\x02\x12\x14\n\x0cimpact_score\x18\x03 \x01(\x02\x12\x36\n\rattack_vector\x18\x05 \x01(\x0e\x32\x1f.grafeas.v1.CVSSv3.AttackVector\x12>\n\x11\x61ttack_complexity\x18\x06 \x01(\x0e\x32#.grafeas.v1.CVSSv3.AttackComplexity\x12\x42\n\x13privileges_required\x18\x07 \x01(\x0e\x32%.grafeas.v1.CVSSv3.PrivilegesRequired\x12<\n\x10user_interaction\x18\x08 \x01(\x0e\x32\".grafeas.v1.CVSSv3.UserInteraction\x12\'\n\x05scope\x18\t \x01(\x0e\x32\x18.grafeas.v1.CVSSv3.Scope\x12\x39\n\x16\x63onfidentiality_impact\x18\n \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x33\n\x10integrity_impact\x18\x0b \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x36\n\x13\x61vailability_impact\x18\x0c \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\"\x99\x01\n\x0c\x41ttackVector\x12\x1d\n\x19\x41TTACK_VECTOR_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_VECTOR_NETWORK\x10\x01\x12\x1a\n\x16\x41TTACK_VECTOR_ADJACENT\x10\x02\x12\x17\n\x13\x41TTACK_VECTOR_LOCAL\x10\x03\x12\x1a\n\x16\x41TTACK_VECTOR_PHYSICAL\x10\x04\"l\n\x10\x41ttackComplexity\x12!\n\x1d\x41TTACK_COMPLEXITY_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_COMPLEXITY_LOW\x10\x01\x12\x1a\n\x16\x41TTACK_COMPLEXITY_HIGH\x10\x02\"\x92\x01\n\x12PrivilegesRequired\x12#\n\x1fPRIVILEGES_REQUIRED_UNSPECIFIED\x10\x00\x12\x1c\n\x18PRIVILEGES_REQUIRED_NONE\x10\x01\x12\x1b\n\x17PRIVILEGES_REQUIRED_LOW\x10\x02\x12\x1c\n\x18PRIVILEGES_REQUIRED_HIGH\x10\x03\"m\n\x0fUserInteraction\x12 \n\x1cUSER_INTERACTION_UNSPECIFIED\x10\x00\x12\x19\n\x15USER_INTERACTION_NONE\x10\x01\x12\x1d\n\x19USER_INTERACTION_REQUIRED\x10\x02\"F\n\x05Scope\x12\x15\n\x11SCOPE_UNSPECIFIED\x10\x00\x12\x13\n\x0fSCOPE_UNCHANGED\x10\x01\x12\x11\n\rSCOPE_CHANGED\x10\x02\"R\n\x06Impact\x12\x16\n\x12IMPACT_UNSPECIFIED\x10\x00\x12\x0f\n\x0bIMPACT_HIGH\x10\x01\x12\x0e\n\nIMPACT_LOW\x10\x02\x12\x0f\n\x0bIMPACT_NONE\x10\x03\"\
|
|
8
|
+
descriptor_data = "\n\x15grafeas/v1/cvss.proto\x12\ngrafeas.v1\"\xc5\t\n\x06\x43VSSv3\x12\x12\n\nbase_score\x18\x01 \x01(\x02\x12\x1c\n\x14\x65xploitability_score\x18\x02 \x01(\x02\x12\x14\n\x0cimpact_score\x18\x03 \x01(\x02\x12\x36\n\rattack_vector\x18\x05 \x01(\x0e\x32\x1f.grafeas.v1.CVSSv3.AttackVector\x12>\n\x11\x61ttack_complexity\x18\x06 \x01(\x0e\x32#.grafeas.v1.CVSSv3.AttackComplexity\x12\x42\n\x13privileges_required\x18\x07 \x01(\x0e\x32%.grafeas.v1.CVSSv3.PrivilegesRequired\x12<\n\x10user_interaction\x18\x08 \x01(\x0e\x32\".grafeas.v1.CVSSv3.UserInteraction\x12\'\n\x05scope\x18\t \x01(\x0e\x32\x18.grafeas.v1.CVSSv3.Scope\x12\x39\n\x16\x63onfidentiality_impact\x18\n \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x33\n\x10integrity_impact\x18\x0b \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\x12\x36\n\x13\x61vailability_impact\x18\x0c \x01(\x0e\x32\x19.grafeas.v1.CVSSv3.Impact\"\x99\x01\n\x0c\x41ttackVector\x12\x1d\n\x19\x41TTACK_VECTOR_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_VECTOR_NETWORK\x10\x01\x12\x1a\n\x16\x41TTACK_VECTOR_ADJACENT\x10\x02\x12\x17\n\x13\x41TTACK_VECTOR_LOCAL\x10\x03\x12\x1a\n\x16\x41TTACK_VECTOR_PHYSICAL\x10\x04\"l\n\x10\x41ttackComplexity\x12!\n\x1d\x41TTACK_COMPLEXITY_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_COMPLEXITY_LOW\x10\x01\x12\x1a\n\x16\x41TTACK_COMPLEXITY_HIGH\x10\x02\"\x92\x01\n\x12PrivilegesRequired\x12#\n\x1fPRIVILEGES_REQUIRED_UNSPECIFIED\x10\x00\x12\x1c\n\x18PRIVILEGES_REQUIRED_NONE\x10\x01\x12\x1b\n\x17PRIVILEGES_REQUIRED_LOW\x10\x02\x12\x1c\n\x18PRIVILEGES_REQUIRED_HIGH\x10\x03\"m\n\x0fUserInteraction\x12 \n\x1cUSER_INTERACTION_UNSPECIFIED\x10\x00\x12\x19\n\x15USER_INTERACTION_NONE\x10\x01\x12\x1d\n\x19USER_INTERACTION_REQUIRED\x10\x02\"F\n\x05Scope\x12\x15\n\x11SCOPE_UNSPECIFIED\x10\x00\x12\x13\n\x0fSCOPE_UNCHANGED\x10\x01\x12\x11\n\rSCOPE_CHANGED\x10\x02\"R\n\x06Impact\x12\x16\n\x12IMPACT_UNSPECIFIED\x10\x00\x12\x0f\n\x0bIMPACT_HIGH\x10\x01\x12\x0e\n\nIMPACT_LOW\x10\x02\x12\x0f\n\x0bIMPACT_NONE\x10\x03\"\xce\x12\n\x04\x43VSS\x12\x12\n\nbase_score\x18\x01 \x01(\x02\x12\x1c\n\x14\x65xploitability_score\x18\x02 \x01(\x02\x12\x14\n\x0cimpact_score\x18\x03 \x01(\x02\x12\x34\n\rattack_vector\x18\x04 \x01(\x0e\x32\x1d.grafeas.v1.CVSS.AttackVector\x12<\n\x11\x61ttack_complexity\x18\x05 \x01(\x0e\x32!.grafeas.v1.CVSS.AttackComplexity\x12\x37\n\x0e\x61uthentication\x18\x06 \x01(\x0e\x32\x1f.grafeas.v1.CVSS.Authentication\x12@\n\x13privileges_required\x18\x07 \x01(\x0e\x32#.grafeas.v1.CVSS.PrivilegesRequired\x12:\n\x10user_interaction\x18\x08 \x01(\x0e\x32 .grafeas.v1.CVSS.UserInteraction\x12%\n\x05scope\x18\t \x01(\x0e\x32\x16.grafeas.v1.CVSS.Scope\x12\x37\n\x16\x63onfidentiality_impact\x18\n \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x31\n\x10integrity_impact\x18\x0b \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x34\n\x13\x61vailability_impact\x18\x0c \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12@\n\x13\x61ttack_requirements\x18\r \x01(\x0e\x32#.grafeas.v1.CVSS.AttackRequirements\x12I\n(vulnerable_system_confidentiality_impact\x18\x0e \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x43\n\"vulnerable_system_integrity_impact\x18\x0f \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x46\n%vulnerable_system_availability_impact\x18\x10 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12I\n(subsequent_system_confidentiality_impact\x18\x11 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x43\n\"subsequent_system_integrity_impact\x18\x12 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12\x46\n%subsequent_system_availability_impact\x18\x13 \x01(\x0e\x32\x17.grafeas.v1.CVSS.Impact\x12:\n\x10\x65xploit_maturity\x18\x14 \x01(\x0e\x32 .grafeas.v1.CVSS.ExploitMaturity\"\x99\x01\n\x0c\x41ttackVector\x12\x1d\n\x19\x41TTACK_VECTOR_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_VECTOR_NETWORK\x10\x01\x12\x1a\n\x16\x41TTACK_VECTOR_ADJACENT\x10\x02\x12\x17\n\x13\x41TTACK_VECTOR_LOCAL\x10\x03\x12\x1a\n\x16\x41TTACK_VECTOR_PHYSICAL\x10\x04\"\x8a\x01\n\x10\x41ttackComplexity\x12!\n\x1d\x41TTACK_COMPLEXITY_UNSPECIFIED\x10\x00\x12\x19\n\x15\x41TTACK_COMPLEXITY_LOW\x10\x01\x12\x1a\n\x16\x41TTACK_COMPLEXITY_HIGH\x10\x02\x12\x1c\n\x18\x41TTACK_COMPLEXITY_MEDIUM\x10\x03\"\x81\x01\n\x0e\x41uthentication\x12\x1e\n\x1a\x41UTHENTICATION_UNSPECIFIED\x10\x00\x12\x1b\n\x17\x41UTHENTICATION_MULTIPLE\x10\x01\x12\x19\n\x15\x41UTHENTICATION_SINGLE\x10\x02\x12\x17\n\x13\x41UTHENTICATION_NONE\x10\x03\"\x92\x01\n\x12PrivilegesRequired\x12#\n\x1fPRIVILEGES_REQUIRED_UNSPECIFIED\x10\x00\x12\x1c\n\x18PRIVILEGES_REQUIRED_NONE\x10\x01\x12\x1b\n\x17PRIVILEGES_REQUIRED_LOW\x10\x02\x12\x1c\n\x18PRIVILEGES_REQUIRED_HIGH\x10\x03\"\xa8\x01\n\x0fUserInteraction\x12 \n\x1cUSER_INTERACTION_UNSPECIFIED\x10\x00\x12\x19\n\x15USER_INTERACTION_NONE\x10\x01\x12\x1d\n\x19USER_INTERACTION_REQUIRED\x10\x02\x12\x1c\n\x18USER_INTERACTION_PASSIVE\x10\x03\x12\x1b\n\x17USER_INTERACTION_ACTIVE\x10\x04\"F\n\x05Scope\x12\x15\n\x11SCOPE_UNSPECIFIED\x10\x00\x12\x13\n\x0fSCOPE_UNCHANGED\x10\x01\x12\x11\n\rSCOPE_CHANGED\x10\x02\"{\n\x06Impact\x12\x16\n\x12IMPACT_UNSPECIFIED\x10\x00\x12\x0f\n\x0bIMPACT_HIGH\x10\x01\x12\x0e\n\nIMPACT_LOW\x10\x02\x12\x0f\n\x0bIMPACT_NONE\x10\x03\x12\x12\n\x0eIMPACT_PARTIAL\x10\x04\x12\x13\n\x0fIMPACT_COMPLETE\x10\x05\"x\n\x12\x41ttackRequirements\x12#\n\x1f\x41TTACK_REQUIREMENTS_UNSPECIFIED\x10\x00\x12\x1c\n\x18\x41TTACK_REQUIREMENTS_NONE\x10\x01\x12\x1f\n\x1b\x41TTACK_REQUIREMENTS_PRESENT\x10\x02\"\xaf\x01\n\x0f\x45xploitMaturity\x12 \n\x1c\x45XPLOIT_MATURITY_UNSPECIFIED\x10\x00\x12 \n\x1c\x45XPLOIT_MATURITY_NOT_DEFINED\x10\x01\x12\x1d\n\x19\x45XPLOIT_MATURITY_ATTACKED\x10\x02\x12\x18\n\x14\x45XPLOIT_MATURITY_POC\x10\x03\x12\x1f\n\x1b\x45XPLOIT_MATURITY_UNREPORTED\x10\x04*g\n\x0b\x43VSSVersion\x12\x1c\n\x18\x43VSS_VERSION_UNSPECIFIED\x10\x00\x12\x12\n\x0e\x43VSS_VERSION_2\x10\x01\x12\x12\n\x0e\x43VSS_VERSION_3\x10\x02\x12\x12\n\x0e\x43VSS_VERSION_4\x10\x03\x42\\\n\rio.grafeas.v1B\tCVSSProtoP\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
9
9
|
|
|
10
10
|
pool = ::Google::Protobuf::DescriptorPool.generated_pool
|
|
11
11
|
pool.add_serialized_file(descriptor_data)
|
|
@@ -27,6 +27,8 @@ module Grafeas
|
|
|
27
27
|
CVSS::UserInteraction = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.UserInteraction").enummodule
|
|
28
28
|
CVSS::Scope = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.Scope").enummodule
|
|
29
29
|
CVSS::Impact = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.Impact").enummodule
|
|
30
|
+
CVSS::AttackRequirements = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.AttackRequirements").enummodule
|
|
31
|
+
CVSS::ExploitMaturity = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSS.ExploitMaturity").enummodule
|
|
30
32
|
CVSSVersion = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("grafeas.v1.CVSSVersion").enummodule
|
|
31
33
|
end
|
|
32
34
|
end
|
data/lib/grafeas/v1/version.rb
CHANGED
|
@@ -14,7 +14,7 @@ require 'grafeas/v1/severity_pb'
|
|
|
14
14
|
require 'grafeas/v1/vex_pb'
|
|
15
15
|
|
|
16
16
|
|
|
17
|
-
descriptor_data = "\n\x1egrafeas/v1/vulnerability.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17grafeas/v1/common.proto\x1a\x15grafeas/v1/cvss.proto\x1a\x18grafeas/v1/package.proto\x1a\x15grafeas/v1/risk.proto\x1a\x19grafeas/v1/severity.proto\x1a\x14grafeas/v1/vex.proto\"\
|
|
17
|
+
descriptor_data = "\n\x1egrafeas/v1/vulnerability.proto\x12\ngrafeas.v1\x1a\x1fgoogle/api/field_behavior.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17grafeas/v1/common.proto\x1a\x15grafeas/v1/cvss.proto\x1a\x18grafeas/v1/package.proto\x1a\x15grafeas/v1/risk.proto\x1a\x19grafeas/v1/severity.proto\x1a\x14grafeas/v1/vex.proto\"\xca\x08\n\x11VulnerabilityNote\x12\x12\n\ncvss_score\x18\x01 \x01(\x02\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x35\n\x07\x64\x65tails\x18\x03 \x03(\x0b\x32$.grafeas.v1.VulnerabilityNote.Detail\x12#\n\x07\x63vss_v3\x18\x04 \x01(\x0b\x32\x12.grafeas.v1.CVSSv3\x12\x44\n\x0fwindows_details\x18\x05 \x03(\x0b\x32+.grafeas.v1.VulnerabilityNote.WindowsDetail\x12\x36\n\x12source_update_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12-\n\x0c\x63vss_version\x18\x07 \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x08 \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12\x39\n\x15\x61\x64visory_publish_time\x18\t \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12!\n\x07\x63vss_v4\x18\n \x01(\x0b\x32\x10.grafeas.v1.CVSS\x1a\xad\x03\n\x06\x44\x65tail\x12\x15\n\rseverity_name\x18\x01 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x02 \x01(\t\x12\x14\n\x0cpackage_type\x18\x03 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x04 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x05 \x01(\t\x12\x33\n\x16\x61\x66\x66\x65\x63ted_version_start\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x31\n\x14\x61\x66\x66\x65\x63ted_version_end\x18\x07 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x08 \x01(\t\x12\x15\n\rfixed_package\x18\t \x01(\t\x12*\n\rfixed_version\x18\n \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x13\n\x0bis_obsolete\x18\x0b \x01(\x08\x12\x36\n\x12source_update_time\x18\x0c \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x0e\n\x06source\x18\r \x01(\t\x12\x0e\n\x06vendor\x18\x0e \x01(\t\x1a\xbe\x01\n\rWindowsDetail\x12\x0f\n\x07\x63pe_uri\x18\x01 \x01(\t\x12\x0c\n\x04name\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12M\n\nfixing_kbs\x18\x04 \x03(\x0b\x32\x39.grafeas.v1.VulnerabilityNote.WindowsDetail.KnowledgeBase\x1a*\n\rKnowledgeBase\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x0b\n\x03url\x18\x02 \x01(\t\"\xdb\n\n\x17VulnerabilityOccurrence\x12\x0c\n\x04type\x18\x01 \x01(\t\x12&\n\x08severity\x18\x02 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x12\n\ncvss_score\x18\x03 \x01(\x02\x12 \n\x06\x63vssv3\x18\n \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12G\n\rpackage_issue\x18\x04 \x03(\x0b\x32\x30.grafeas.v1.VulnerabilityOccurrence.PackageIssue\x12\x19\n\x11short_description\x18\x05 \x01(\t\x12\x18\n\x10long_description\x18\x06 \x01(\t\x12,\n\x0crelated_urls\x18\x07 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x30\n\x12\x65\x66\x66\x65\x63tive_severity\x18\x08 \x01(\x0e\x32\x14.grafeas.v1.Severity\x12\x15\n\rfix_available\x18\t \x01(\x08\x12-\n\x0c\x63vss_version\x18\x0b \x01(\x0e\x32\x17.grafeas.v1.CVSSVersion\x12!\n\x07\x63vss_v2\x18\x0c \x01(\x0b\x32\x10.grafeas.v1.CVSS\x12I\n\x0evex_assessment\x18\r \x01(\x0b\x32\x31.grafeas.v1.VulnerabilityOccurrence.VexAssessment\x12\x15\n\rextra_details\x18\x0e \x01(\t\x12\x1e\n\x04risk\x18\x0f \x01(\x0b\x32\x10.grafeas.v1.Risk\x12!\n\x07\x63vss_v4\x18\x10 \x01(\x0b\x32\x10.grafeas.v1.CVSS\x1a\xe0\x02\n\x0cPackageIssue\x12\x18\n\x10\x61\x66\x66\x65\x63ted_cpe_uri\x18\x01 \x01(\t\x12\x18\n\x10\x61\x66\x66\x65\x63ted_package\x18\x02 \x01(\t\x12-\n\x10\x61\x66\x66\x65\x63ted_version\x18\x03 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfixed_cpe_uri\x18\x04 \x01(\t\x12\x15\n\rfixed_package\x18\x05 \x01(\t\x12*\n\rfixed_version\x18\x06 \x01(\x0b\x32\x13.grafeas.v1.Version\x12\x15\n\rfix_available\x18\x07 \x01(\x08\x12\x14\n\x0cpackage_type\x18\x08 \x01(\t\x12\x35\n\x12\x65\x66\x66\x65\x63tive_severity\x18\t \x01(\x0e\x32\x14.grafeas.v1.SeverityB\x03\xe0\x41\x03\x12/\n\rfile_location\x18\n \x03(\x0b\x32\x18.grafeas.v1.FileLocation\x1a\x84\x03\n\rVexAssessment\x12\x0f\n\x03\x63ve\x18\x01 \x01(\tB\x02\x18\x01\x12\x18\n\x10vulnerability_id\x18\x08 \x01(\t\x12,\n\x0crelated_uris\x18\x02 \x03(\x0b\x32\x16.grafeas.v1.RelatedUrl\x12\x11\n\tnote_name\x18\x03 \x01(\t\x12G\n\x05state\x18\x04 \x01(\x0e\x32\x38.grafeas.v1.VulnerabilityAssessmentNote.Assessment.State\x12\x0f\n\x07impacts\x18\x05 \x03(\t\x12T\n\x0cremediations\x18\x06 \x03(\x0b\x32>.grafeas.v1.VulnerabilityAssessmentNote.Assessment.Remediation\x12W\n\rjustification\x18\x07 \x01(\x0b\x32@.grafeas.v1.VulnerabilityAssessmentNote.Assessment.JustificationBQ\n\rio.grafeas.v1P\x01Z8google.golang.org/genproto/googleapis/grafeas/v1;grafeas\xa2\x02\x03GRAb\x06proto3"
|
|
18
18
|
|
|
19
19
|
pool = ::Google::Protobuf::DescriptorPool.generated_pool
|
|
20
20
|
pool.add_serialized_file(descriptor_data)
|
|
@@ -121,109 +121,217 @@ module Grafeas
|
|
|
121
121
|
# @return [::Float]
|
|
122
122
|
# @!attribute [rw] attack_vector
|
|
123
123
|
# @return [::Grafeas::V1::CVSS::AttackVector]
|
|
124
|
-
#
|
|
125
|
-
# Represents the intrinsic characteristics of a vulnerability that are
|
|
126
|
-
# constant over time and across user environments.
|
|
124
|
+
# Attack Vector (AV). Defined in CVSS v2, v3, v4.
|
|
127
125
|
# @!attribute [rw] attack_complexity
|
|
128
126
|
# @return [::Grafeas::V1::CVSS::AttackComplexity]
|
|
127
|
+
# Attack Complexity (AC). Defined in CVSS v2, v3, v4.
|
|
129
128
|
# @!attribute [rw] authentication
|
|
130
129
|
# @return [::Grafeas::V1::CVSS::Authentication]
|
|
130
|
+
# Authentication (Au). Defined in CVSS v2.
|
|
131
131
|
# @!attribute [rw] privileges_required
|
|
132
132
|
# @return [::Grafeas::V1::CVSS::PrivilegesRequired]
|
|
133
|
+
# Privileges Required (PR). Defined in CVSS v3, v4.
|
|
133
134
|
# @!attribute [rw] user_interaction
|
|
134
135
|
# @return [::Grafeas::V1::CVSS::UserInteraction]
|
|
136
|
+
# User Interaction (UI). Defined in CVSS v3, v4.
|
|
135
137
|
# @!attribute [rw] scope
|
|
136
138
|
# @return [::Grafeas::V1::CVSS::Scope]
|
|
139
|
+
# Scope (S). Defined in CVSS v3.
|
|
137
140
|
# @!attribute [rw] confidentiality_impact
|
|
138
141
|
# @return [::Grafeas::V1::CVSS::Impact]
|
|
142
|
+
# Confidentiality Impact (C). Defined in CVSS v2, v3.
|
|
139
143
|
# @!attribute [rw] integrity_impact
|
|
140
144
|
# @return [::Grafeas::V1::CVSS::Impact]
|
|
145
|
+
# Integrity Impact (I). Defined in CVSS v2, v3.
|
|
141
146
|
# @!attribute [rw] availability_impact
|
|
142
147
|
# @return [::Grafeas::V1::CVSS::Impact]
|
|
148
|
+
# Availability Impact (A). Defined in CVSS v2, v3.
|
|
149
|
+
# @!attribute [rw] attack_requirements
|
|
150
|
+
# @return [::Grafeas::V1::CVSS::AttackRequirements]
|
|
151
|
+
# Attack Requirements (AT). Defined in CVSS v4.
|
|
152
|
+
# @!attribute [rw] vulnerable_system_confidentiality_impact
|
|
153
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
154
|
+
# Vulnerable System Confidentiality Impact (VC). Defined in CVSS v4.
|
|
155
|
+
# @!attribute [rw] vulnerable_system_integrity_impact
|
|
156
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
157
|
+
# Vulnerable System Integrity Impact (VI). Defined in CVSS v4.
|
|
158
|
+
# @!attribute [rw] vulnerable_system_availability_impact
|
|
159
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
160
|
+
# Vulnerable System Availability Impact (VA). Defined in CVSS v4.
|
|
161
|
+
# @!attribute [rw] subsequent_system_confidentiality_impact
|
|
162
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
163
|
+
# Subsequent System Confidentiality Impact (SC). Defined in CVSS v4.
|
|
164
|
+
# @!attribute [rw] subsequent_system_integrity_impact
|
|
165
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
166
|
+
# Subsequent System Integrity Impact (SI). Defined in CVSS v4.
|
|
167
|
+
# @!attribute [rw] subsequent_system_availability_impact
|
|
168
|
+
# @return [::Grafeas::V1::CVSS::Impact]
|
|
169
|
+
# Subsequent System Availability Impact (SA). Defined in CVSS v4.
|
|
170
|
+
# @!attribute [rw] exploit_maturity
|
|
171
|
+
# @return [::Grafeas::V1::CVSS::ExploitMaturity]
|
|
172
|
+
# Exploit Maturity (E). Defined in CVSS v4.
|
|
143
173
|
class CVSS
|
|
144
174
|
include ::Google::Protobuf::MessageExts
|
|
145
175
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
146
176
|
|
|
177
|
+
# Attack Vector.
|
|
147
178
|
module AttackVector
|
|
179
|
+
# Unspecified.
|
|
148
180
|
ATTACK_VECTOR_UNSPECIFIED = 0
|
|
149
181
|
|
|
182
|
+
# Attack Vector: Network (AV:N). Defined in CVSS v2, v3, v4.
|
|
150
183
|
ATTACK_VECTOR_NETWORK = 1
|
|
151
184
|
|
|
185
|
+
# Attack Vector: Adjacent (AV:A). Defined in CVSS v2, v3, v4.
|
|
152
186
|
ATTACK_VECTOR_ADJACENT = 2
|
|
153
187
|
|
|
188
|
+
# Attack Vector: Local (AV:L). Defined in CVSS v2, v3, v4.
|
|
154
189
|
ATTACK_VECTOR_LOCAL = 3
|
|
155
190
|
|
|
191
|
+
# Attack Vector: Physical (AV:P). Defined in CVSS v3, v4.
|
|
156
192
|
ATTACK_VECTOR_PHYSICAL = 4
|
|
157
193
|
end
|
|
158
194
|
|
|
195
|
+
# Attack Complexity.
|
|
159
196
|
module AttackComplexity
|
|
197
|
+
# Unspecified.
|
|
160
198
|
ATTACK_COMPLEXITY_UNSPECIFIED = 0
|
|
161
199
|
|
|
200
|
+
# Low attack complexity (AC:L). Defined in CVSS v2, v3, v4.
|
|
162
201
|
ATTACK_COMPLEXITY_LOW = 1
|
|
163
202
|
|
|
203
|
+
# High attack complexity (AC:H). Defined in CVSS v2, v3, v4.
|
|
164
204
|
ATTACK_COMPLEXITY_HIGH = 2
|
|
165
205
|
|
|
206
|
+
# Medium attack complexity (AC:M). Defined in CVSS v2.
|
|
166
207
|
ATTACK_COMPLEXITY_MEDIUM = 3
|
|
167
208
|
end
|
|
168
209
|
|
|
210
|
+
# Authentication.
|
|
169
211
|
module Authentication
|
|
212
|
+
# Unspecified.
|
|
170
213
|
AUTHENTICATION_UNSPECIFIED = 0
|
|
171
214
|
|
|
215
|
+
# Multiple authentication required (Au:M). Defined in CVSS v2.
|
|
172
216
|
AUTHENTICATION_MULTIPLE = 1
|
|
173
217
|
|
|
218
|
+
# Single authentication required (Au:S). Defined in CVSS v2.
|
|
174
219
|
AUTHENTICATION_SINGLE = 2
|
|
175
220
|
|
|
221
|
+
# No authentication required (Au:N). Defined in CVSS v2.
|
|
176
222
|
AUTHENTICATION_NONE = 3
|
|
177
223
|
end
|
|
178
224
|
|
|
225
|
+
# Privileges Required.
|
|
179
226
|
module PrivilegesRequired
|
|
227
|
+
# Unspecified.
|
|
180
228
|
PRIVILEGES_REQUIRED_UNSPECIFIED = 0
|
|
181
229
|
|
|
230
|
+
# No privileges required (PR:N). Defined in CVSS v3, v4.
|
|
182
231
|
PRIVILEGES_REQUIRED_NONE = 1
|
|
183
232
|
|
|
233
|
+
# Low privileges required (PR:L). Defined in CVSS v3, v4.
|
|
184
234
|
PRIVILEGES_REQUIRED_LOW = 2
|
|
185
235
|
|
|
236
|
+
# High privileges required (PR:H). Defined in CVSS v3, v4.
|
|
186
237
|
PRIVILEGES_REQUIRED_HIGH = 3
|
|
187
238
|
end
|
|
188
239
|
|
|
240
|
+
# User Interaction.
|
|
189
241
|
module UserInteraction
|
|
242
|
+
# Unspecified.
|
|
190
243
|
USER_INTERACTION_UNSPECIFIED = 0
|
|
191
244
|
|
|
245
|
+
# No user interaction required (UI:N). Defined in CVSS v3, v4.
|
|
192
246
|
USER_INTERACTION_NONE = 1
|
|
193
247
|
|
|
248
|
+
# User interaction required (UI:R). Defined in CVSS v3.
|
|
194
249
|
USER_INTERACTION_REQUIRED = 2
|
|
250
|
+
|
|
251
|
+
# Passive user interaction required (UI:P). Defined in CVSS v4.
|
|
252
|
+
USER_INTERACTION_PASSIVE = 3
|
|
253
|
+
|
|
254
|
+
# Active user interaction required (UI:A). Defined in CVSS v4.
|
|
255
|
+
USER_INTERACTION_ACTIVE = 4
|
|
195
256
|
end
|
|
196
257
|
|
|
258
|
+
# Scope.
|
|
197
259
|
module Scope
|
|
260
|
+
# Unspecified.
|
|
198
261
|
SCOPE_UNSPECIFIED = 0
|
|
199
262
|
|
|
263
|
+
# Scope: Unchanged (S:U). Defined in CVSS v3.
|
|
200
264
|
SCOPE_UNCHANGED = 1
|
|
201
265
|
|
|
266
|
+
# Scope: Changed (S:C). Defined in CVSS v3.
|
|
202
267
|
SCOPE_CHANGED = 2
|
|
203
268
|
end
|
|
204
269
|
|
|
270
|
+
# Impact.
|
|
205
271
|
module Impact
|
|
272
|
+
# Unspecified.
|
|
206
273
|
IMPACT_UNSPECIFIED = 0
|
|
207
274
|
|
|
275
|
+
# High impact (H). Defined in CVSS v3, v4.
|
|
208
276
|
IMPACT_HIGH = 1
|
|
209
277
|
|
|
278
|
+
# Low impact (L). Defined in CVSS v3, v4.
|
|
210
279
|
IMPACT_LOW = 2
|
|
211
280
|
|
|
281
|
+
# No impact (N). Defined in CVSS v2, v3, v4.
|
|
212
282
|
IMPACT_NONE = 3
|
|
213
283
|
|
|
284
|
+
# Partial impact (P). Defined in CVSS v2.
|
|
214
285
|
IMPACT_PARTIAL = 4
|
|
215
286
|
|
|
287
|
+
# Complete impact (C). Defined in CVSS v2.
|
|
216
288
|
IMPACT_COMPLETE = 5
|
|
217
289
|
end
|
|
290
|
+
|
|
291
|
+
# Attack Requirements.
|
|
292
|
+
module AttackRequirements
|
|
293
|
+
# Unspecified.
|
|
294
|
+
ATTACK_REQUIREMENTS_UNSPECIFIED = 0
|
|
295
|
+
|
|
296
|
+
# No attack requirements (AT:N). Defined in CVSS v4.
|
|
297
|
+
ATTACK_REQUIREMENTS_NONE = 1
|
|
298
|
+
|
|
299
|
+
# Attack requirements: Present (AT:P). Defined in CVSS v4.
|
|
300
|
+
ATTACK_REQUIREMENTS_PRESENT = 2
|
|
301
|
+
end
|
|
302
|
+
|
|
303
|
+
# Exploit Maturity (E). Defined in CVSS v4.
|
|
304
|
+
module ExploitMaturity
|
|
305
|
+
# Unspecified.
|
|
306
|
+
EXPLOIT_MATURITY_UNSPECIFIED = 0
|
|
307
|
+
|
|
308
|
+
# Exploit maturity: Not defined (E:X). Defined in CVSS v4.
|
|
309
|
+
EXPLOIT_MATURITY_NOT_DEFINED = 1
|
|
310
|
+
|
|
311
|
+
# Exploit maturity: Attacked (E:A). Defined in CVSS v4.
|
|
312
|
+
EXPLOIT_MATURITY_ATTACKED = 2
|
|
313
|
+
|
|
314
|
+
# Exploit maturity: Proof-of-concept (E:P). Defined in CVSS v4.
|
|
315
|
+
EXPLOIT_MATURITY_POC = 3
|
|
316
|
+
|
|
317
|
+
# Exploit maturity: Unreported (E:U). Defined in CVSS v4.
|
|
318
|
+
EXPLOIT_MATURITY_UNREPORTED = 4
|
|
319
|
+
end
|
|
218
320
|
end
|
|
219
321
|
|
|
220
322
|
# CVSS Version.
|
|
221
323
|
module CVSSVersion
|
|
324
|
+
# Unspecified.
|
|
222
325
|
CVSS_VERSION_UNSPECIFIED = 0
|
|
223
326
|
|
|
327
|
+
# CVSS v2.
|
|
224
328
|
CVSS_VERSION_2 = 1
|
|
225
329
|
|
|
330
|
+
# CVSS v3.
|
|
226
331
|
CVSS_VERSION_3 = 2
|
|
332
|
+
|
|
333
|
+
# CVSS v4.
|
|
334
|
+
CVSS_VERSION_4 = 3
|
|
227
335
|
end
|
|
228
336
|
end
|
|
229
337
|
end
|
|
@@ -53,6 +53,9 @@ module Grafeas
|
|
|
53
53
|
# @!attribute [rw] advisory_publish_time
|
|
54
54
|
# @return [::Google::Protobuf::Timestamp]
|
|
55
55
|
# The time this advisory was published by the source.
|
|
56
|
+
# @!attribute [rw] cvss_v4
|
|
57
|
+
# @return [::Grafeas::V1::CVSS]
|
|
58
|
+
# The full description of the v4 CVSS for this vulnerability.
|
|
56
59
|
class VulnerabilityNote
|
|
57
60
|
include ::Google::Protobuf::MessageExts
|
|
58
61
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -222,6 +225,9 @@ module Grafeas
|
|
|
222
225
|
# @!attribute [rw] risk
|
|
223
226
|
# @return [::Grafeas::V1::Risk]
|
|
224
227
|
# Risk information about the vulnerability, such as CISA, EPSS, etc.
|
|
228
|
+
# @!attribute [rw] cvss_v4
|
|
229
|
+
# @return [::Grafeas::V1::CVSS]
|
|
230
|
+
# The cvss v4 score for the vulnerability.
|
|
225
231
|
class VulnerabilityOccurrence
|
|
226
232
|
include ::Google::Protobuf::MessageExts
|
|
227
233
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|