@google-cloud/containeranalysis 3.4.0 → 4.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (28) hide show
  1. package/CHANGELOG.md +41 -0
  2. package/build/protos/google/devtools/containeranalysis/v1/containeranalysis.proto +0 -3
  3. package/build/protos/grafeas/v1/common.proto +29 -0
  4. package/build/protos/grafeas/v1/compliance.proto +3 -0
  5. package/build/protos/grafeas/v1/cvss.proto +3 -5
  6. package/build/protos/grafeas/v1/dsse_attestation.proto +1 -1
  7. package/build/protos/grafeas/v1/intoto_statement.proto +2 -0
  8. package/build/protos/grafeas/v1/package.proto +72 -12
  9. package/build/protos/grafeas/v1/slsa_provenance.proto +2 -1
  10. package/build/protos/grafeas/v1/slsa_provenance_zero_two.proto +82 -0
  11. package/build/protos/grafeas/v1/vulnerability.proto +3 -0
  12. package/build/protos/protos.d.ts +7365 -5723
  13. package/build/protos/protos.js +21525 -17206
  14. package/build/protos/protos.json +1848 -1484
  15. package/build/src/v1/container_analysis_client.d.ts +25 -10
  16. package/build/src/v1/container_analysis_client.js +5 -6
  17. package/build/src/v1/container_analysis_client.js.map +1 -1
  18. package/build/src/v1/index.js +1 -0
  19. package/build/src/v1/index.js.map +1 -1
  20. package/build/src/v1beta1/container_analysis_v1_beta1_client.d.ts +35 -12
  21. package/build/src/v1beta1/container_analysis_v1_beta1_client.js +5 -6
  22. package/build/src/v1beta1/container_analysis_v1_beta1_client.js.map +1 -1
  23. package/build/src/v1beta1/grafeas_v1_beta1_client.d.ts +80 -21
  24. package/build/src/v1beta1/grafeas_v1_beta1_client.js +5 -6
  25. package/build/src/v1beta1/grafeas_v1_beta1_client.js.map +1 -1
  26. package/build/src/v1beta1/index.js +1 -0
  27. package/build/src/v1beta1/index.js.map +1 -1
  28. package/package.json +11 -11
package/build/protos/protos.json CHANGED
@@ -8,11 +8,65 @@
8
8
  "java_multiple_files": true,
9
9
  "java_package": "io.grafeas.v1",
10
10
  "objc_class_prefix": "GRA",
11
+ "java_outer_classname": "CVSSProto",
11
12
  "(google.api.resource_definition).type": "grafeas.io/Project",
12
- "(google.api.resource_definition).pattern": "projects/{project}",
13
- "java_outer_classname": "CvssProto"
13
+ "(google.api.resource_definition).pattern": "projects/{project}"
14
14
  },
15
15
  "nested": {
16
+ "Severity": {
17
+ "values": {
18
+ "SEVERITY_UNSPECIFIED": 0,
19
+ "MINIMAL": 1,
20
+ "LOW": 2,
21
+ "MEDIUM": 3,
22
+ "HIGH": 4,
23
+ "CRITICAL": 5
24
+ }
25
+ },
26
+ "AttestationNote": {
27
+ "fields": {
28
+ "hint": {
29
+ "type": "Hint",
30
+ "id": 1
31
+ }
32
+ },
33
+ "nested": {
34
+ "Hint": {
35
+ "fields": {
36
+ "humanReadableName": {
37
+ "type": "string",
38
+ "id": 1
39
+ }
40
+ }
41
+ }
42
+ }
43
+ },
44
+ "Jwt": {
45
+ "fields": {
46
+ "compactJwt": {
47
+ "type": "string",
48
+ "id": 1
49
+ }
50
+ }
51
+ },
52
+ "AttestationOccurrence": {
53
+ "fields": {
54
+ "serializedPayload": {
55
+ "type": "bytes",
56
+ "id": 1
57
+ },
58
+ "signatures": {
59
+ "rule": "repeated",
60
+ "type": "Signature",
61
+ "id": 2
62
+ },
63
+ "jwts": {
64
+ "rule": "repeated",
65
+ "type": "Jwt",
66
+ "id": 3
67
+ }
68
+ }
69
+ },
16
70
  "NoteKind": {
17
71
  "values": {
18
72
  "NOTE_KIND_UNSPECIFIED": 0,
@@ -81,1666 +135,1982 @@
81
135
  }
82
136
  }
83
137
  },
84
- "Grafeas": {
85
- "options": {
86
- "(google.api.default_host)": "containeranalysis.googleapis.com"
87
- },
88
- "methods": {
89
- "GetOccurrence": {
90
- "requestType": "GetOccurrenceRequest",
91
- "responseType": "Occurrence",
92
- "options": {
93
- "(google.api.http).get": "/v1/{name=projects/*/occurrences/*}",
94
- "(google.api.method_signature)": "name"
95
- },
96
- "parsedOptions": [
97
- {
98
- "(google.api.http)": {
99
- "get": "/v1/{name=projects/*/occurrences/*}"
100
- }
101
- },
102
- {
103
- "(google.api.method_signature)": "name"
104
- }
105
- ]
138
+ "FileLocation": {
139
+ "fields": {
140
+ "filePath": {
141
+ "type": "string",
142
+ "id": 1
143
+ }
144
+ }
145
+ },
146
+ "License": {
147
+ "fields": {
148
+ "expression": {
149
+ "type": "string",
150
+ "id": 1
106
151
  },
107
- "ListOccurrences": {
108
- "requestType": "ListOccurrencesRequest",
109
- "responseType": "ListOccurrencesResponse",
110
- "options": {
111
- "(google.api.http).get": "/v1/{parent=projects/*}/occurrences",
112
- "(google.api.method_signature)": "parent,filter"
113
- },
114
- "parsedOptions": [
115
- {
116
- "(google.api.http)": {
117
- "get": "/v1/{parent=projects/*}/occurrences"
118
- }
119
- },
120
- {
121
- "(google.api.method_signature)": "parent,filter"
122
- }
123
- ]
152
+ "comments": {
153
+ "type": "string",
154
+ "id": 2
155
+ }
156
+ }
157
+ },
158
+ "Digest": {
159
+ "fields": {
160
+ "algo": {
161
+ "type": "string",
162
+ "id": 1
124
163
  },
125
- "DeleteOccurrence": {
126
- "requestType": "DeleteOccurrenceRequest",
127
- "responseType": "google.protobuf.Empty",
128
- "options": {
129
- "(google.api.http).delete": "/v1/{name=projects/*/occurrences/*}",
130
- "(google.api.method_signature)": "name"
131
- },
132
- "parsedOptions": [
133
- {
134
- "(google.api.http)": {
135
- "delete": "/v1/{name=projects/*/occurrences/*}"
136
- }
137
- },
138
- {
139
- "(google.api.method_signature)": "name"
140
- }
141
- ]
164
+ "digestBytes": {
165
+ "type": "bytes",
166
+ "id": 2
167
+ }
168
+ }
169
+ },
170
+ "BuildNote": {
171
+ "fields": {
172
+ "builderVersion": {
173
+ "type": "string",
174
+ "id": 1
175
+ }
176
+ }
177
+ },
178
+ "BuildOccurrence": {
179
+ "fields": {
180
+ "provenance": {
181
+ "type": "grafeas.v1.BuildProvenance",
182
+ "id": 1
142
183
  },
143
- "CreateOccurrence": {
144
- "requestType": "CreateOccurrenceRequest",
145
- "responseType": "Occurrence",
146
- "options": {
147
- "(google.api.http).post": "/v1/{parent=projects/*}/occurrences",
148
- "(google.api.http).body": "occurrence",
149
- "(google.api.method_signature)": "parent,occurrence"
150
- },
151
- "parsedOptions": [
152
- {
153
- "(google.api.http)": {
154
- "post": "/v1/{parent=projects/*}/occurrences",
155
- "body": "occurrence"
156
- }
157
- },
158
- {
159
- "(google.api.method_signature)": "parent,occurrence"
160
- }
161
- ]
184
+ "provenanceBytes": {
185
+ "type": "string",
186
+ "id": 2
162
187
  },
163
- "BatchCreateOccurrences": {
164
- "requestType": "BatchCreateOccurrencesRequest",
165
- "responseType": "BatchCreateOccurrencesResponse",
166
- "options": {
167
- "(google.api.http).post": "/v1/{parent=projects/*}/occurrences:batchCreate",
168
- "(google.api.http).body": "*",
169
- "(google.api.method_signature)": "parent,occurrences"
170
- },
171
- "parsedOptions": [
172
- {
173
- "(google.api.http)": {
174
- "post": "/v1/{parent=projects/*}/occurrences:batchCreate",
175
- "body": "*"
176
- }
177
- },
178
- {
179
- "(google.api.method_signature)": "parent,occurrences"
180
- }
181
- ]
188
+ "intotoProvenance": {
189
+ "type": "InTotoProvenance",
190
+ "id": 3
182
191
  },
183
- "UpdateOccurrence": {
184
- "requestType": "UpdateOccurrenceRequest",
185
- "responseType": "Occurrence",
186
- "options": {
187
- "(google.api.http).patch": "/v1/{name=projects/*/occurrences/*}",
188
- "(google.api.http).body": "occurrence",
189
- "(google.api.method_signature)": "name,occurrence,update_mask"
190
- },
191
- "parsedOptions": [
192
- {
193
- "(google.api.http)": {
194
- "patch": "/v1/{name=projects/*/occurrences/*}",
195
- "body": "occurrence"
196
- }
197
- },
198
- {
199
- "(google.api.method_signature)": "name,occurrence,update_mask"
200
- }
201
- ]
192
+ "intotoStatement": {
193
+ "type": "InTotoStatement",
194
+ "id": 4
195
+ }
196
+ }
197
+ },
198
+ "Recipe": {
199
+ "fields": {
200
+ "type": {
201
+ "type": "string",
202
+ "id": 1
202
203
  },
203
- "GetOccurrenceNote": {
204
- "requestType": "GetOccurrenceNoteRequest",
205
- "responseType": "Note",
206
- "options": {
207
- "(google.api.http).get": "/v1/{name=projects/*/occurrences/*}/notes",
208
- "(google.api.method_signature)": "name"
209
- },
210
- "parsedOptions": [
211
- {
212
- "(google.api.http)": {
213
- "get": "/v1/{name=projects/*/occurrences/*}/notes"
214
- }
215
- },
216
- {
217
- "(google.api.method_signature)": "name"
218
- }
219
- ]
204
+ "definedInMaterial": {
205
+ "type": "int64",
206
+ "id": 2
220
207
  },
221
- "GetNote": {
222
- "requestType": "GetNoteRequest",
223
- "responseType": "Note",
224
- "options": {
225
- "(google.api.http).get": "/v1/{name=projects/*/notes/*}",
226
- "(google.api.method_signature)": "name"
227
- },
228
- "parsedOptions": [
229
- {
230
- "(google.api.http)": {
231
- "get": "/v1/{name=projects/*/notes/*}"
232
- }
233
- },
234
- {
235
- "(google.api.method_signature)": "name"
236
- }
237
- ]
208
+ "entryPoint": {
209
+ "type": "string",
210
+ "id": 3
238
211
  },
239
- "ListNotes": {
240
- "requestType": "ListNotesRequest",
241
- "responseType": "ListNotesResponse",
242
- "options": {
243
- "(google.api.http).get": "/v1/{parent=projects/*}/notes",
244
- "(google.api.method_signature)": "parent,filter"
245
- },
246
- "parsedOptions": [
247
- {
248
- "(google.api.http)": {
249
- "get": "/v1/{parent=projects/*}/notes"
250
- }
251
- },
252
- {
253
- "(google.api.method_signature)": "parent,filter"
254
- }
255
- ]
212
+ "arguments": {
213
+ "rule": "repeated",
214
+ "type": "google.protobuf.Any",
215
+ "id": 4
256
216
  },
257
- "DeleteNote": {
258
- "requestType": "DeleteNoteRequest",
259
- "responseType": "google.protobuf.Empty",
260
- "options": {
261
- "(google.api.http).delete": "/v1/{name=projects/*/notes/*}",
262
- "(google.api.method_signature)": "name"
263
- },
264
- "parsedOptions": [
265
- {
266
- "(google.api.http)": {
267
- "delete": "/v1/{name=projects/*/notes/*}"
268
- }
269
- },
270
- {
271
- "(google.api.method_signature)": "name"
272
- }
273
- ]
217
+ "environment": {
218
+ "rule": "repeated",
219
+ "type": "google.protobuf.Any",
220
+ "id": 5
221
+ }
222
+ }
223
+ },
224
+ "Completeness": {
225
+ "fields": {
226
+ "arguments": {
227
+ "type": "bool",
228
+ "id": 1
274
229
  },
275
- "CreateNote": {
276
- "requestType": "CreateNoteRequest",
277
- "responseType": "Note",
278
- "options": {
279
- "(google.api.http).post": "/v1/{parent=projects/*}/notes",
280
- "(google.api.http).body": "note",
281
- "(google.api.method_signature)": "parent,note_id,note"
282
- },
283
- "parsedOptions": [
284
- {
285
- "(google.api.http)": {
286
- "post": "/v1/{parent=projects/*}/notes",
287
- "body": "note"
288
- }
289
- },
290
- {
291
- "(google.api.method_signature)": "parent,note_id,note"
292
- }
293
- ]
230
+ "environment": {
231
+ "type": "bool",
232
+ "id": 2
294
233
  },
295
- "BatchCreateNotes": {
296
- "requestType": "BatchCreateNotesRequest",
297
- "responseType": "BatchCreateNotesResponse",
298
- "options": {
299
- "(google.api.http).post": "/v1/{parent=projects/*}/notes:batchCreate",
300
- "(google.api.http).body": "*",
301
- "(google.api.method_signature)": "parent,notes"
302
- },
303
- "parsedOptions": [
304
- {
305
- "(google.api.http)": {
306
- "post": "/v1/{parent=projects/*}/notes:batchCreate",
307
- "body": "*"
308
- }
309
- },
310
- {
311
- "(google.api.method_signature)": "parent,notes"
312
- }
313
- ]
234
+ "materials": {
235
+ "type": "bool",
236
+ "id": 3
237
+ }
238
+ }
239
+ },
240
+ "Metadata": {
241
+ "fields": {
242
+ "buildInvocationId": {
243
+ "type": "string",
244
+ "id": 1
314
245
  },
315
- "UpdateNote": {
316
- "requestType": "UpdateNoteRequest",
317
- "responseType": "Note",
318
- "options": {
319
- "(google.api.http).patch": "/v1/{name=projects/*/notes/*}",
320
- "(google.api.http).body": "note",
321
- "(google.api.method_signature)": "name,note,update_mask"
322
- },
323
- "parsedOptions": [
324
- {
325
- "(google.api.http)": {
326
- "patch": "/v1/{name=projects/*/notes/*}",
327
- "body": "note"
328
- }
329
- },
330
- {
331
- "(google.api.method_signature)": "name,note,update_mask"
332
- }
333
- ]
246
+ "buildStartedOn": {
247
+ "type": "google.protobuf.Timestamp",
248
+ "id": 2
334
249
  },
335
- "ListNoteOccurrences": {
336
- "requestType": "ListNoteOccurrencesRequest",
337
- "responseType": "ListNoteOccurrencesResponse",
338
- "options": {
339
- "(google.api.http).get": "/v1/{name=projects/*/notes/*}/occurrences",
340
- "(google.api.method_signature)": "name,filter"
341
- },
342
- "parsedOptions": [
343
- {
344
- "(google.api.http)": {
345
- "get": "/v1/{name=projects/*/notes/*}/occurrences"
346
- }
347
- },
348
- {
349
- "(google.api.method_signature)": "name,filter"
350
- }
351
- ]
250
+ "buildFinishedOn": {
251
+ "type": "google.protobuf.Timestamp",
252
+ "id": 3
253
+ },
254
+ "completeness": {
255
+ "type": "Completeness",
256
+ "id": 4
257
+ },
258
+ "reproducible": {
259
+ "type": "bool",
260
+ "id": 5
352
261
  }
353
262
  }
354
263
  },
355
- "Occurrence": {
356
- "options": {
357
- "(google.api.resource).type": "grafeas.io/Occurrence",
358
- "(google.api.resource).pattern": "projects/{project}/occurrences/{occurrence}"
359
- },
264
+ "BuilderConfig": {
265
+ "fields": {
266
+ "id": {
267
+ "type": "string",
268
+ "id": 1
269
+ }
270
+ }
271
+ },
272
+ "InTotoProvenance": {
273
+ "fields": {
274
+ "builderConfig": {
275
+ "type": "BuilderConfig",
276
+ "id": 1
277
+ },
278
+ "recipe": {
279
+ "type": "Recipe",
280
+ "id": 2
281
+ },
282
+ "metadata": {
283
+ "type": "Metadata",
284
+ "id": 3
285
+ },
286
+ "materials": {
287
+ "rule": "repeated",
288
+ "type": "string",
289
+ "id": 4
290
+ }
291
+ }
292
+ },
293
+ "InTotoStatement": {
360
294
  "oneofs": {
361
- "details": {
295
+ "predicate": {
362
296
  "oneof": [
363
- "vulnerability",
364
- "build",
365
- "image",
366
- "package",
367
- "deployment",
368
- "discovery",
369
- "attestation",
370
- "upgrade",
371
- "compliance",
372
- "dsseAttestation"
297
+ "provenance",
298
+ "slsaProvenance",
299
+ "slsaProvenanceZeroTwo"
373
300
  ]
374
301
  }
375
302
  },
376
303
  "fields": {
377
- "name": {
304
+ "type": {
378
305
  "type": "string",
379
- "id": 1
306
+ "id": 1,
307
+ "options": {
308
+ "json_name": "_type"
309
+ }
380
310
  },
381
- "resourceUri": {
382
- "type": "string",
311
+ "subject": {
312
+ "rule": "repeated",
313
+ "type": "Subject",
383
314
  "id": 2
384
315
  },
385
- "noteName": {
316
+ "predicateType": {
386
317
  "type": "string",
387
318
  "id": 3
388
319
  },
389
- "kind": {
390
- "type": "grafeas.v1.NoteKind",
320
+ "provenance": {
321
+ "type": "InTotoProvenance",
391
322
  "id": 4
392
323
  },
393
- "remediation": {
394
- "type": "string",
324
+ "slsaProvenance": {
325
+ "type": "SlsaProvenance",
395
326
  "id": 5
396
327
  },
397
- "createTime": {
398
- "type": "google.protobuf.Timestamp",
328
+ "slsaProvenanceZeroTwo": {
329
+ "type": "SlsaProvenanceZeroTwo",
399
330
  "id": 6
331
+ }
332
+ }
333
+ },
334
+ "Subject": {
335
+ "fields": {
336
+ "name": {
337
+ "type": "string",
338
+ "id": 1
400
339
  },
401
- "updateTime": {
402
- "type": "google.protobuf.Timestamp",
403
- "id": 7
404
- },
405
- "vulnerability": {
406
- "type": "grafeas.v1.VulnerabilityOccurrence",
407
- "id": 8
340
+ "digest": {
341
+ "keyType": "string",
342
+ "type": "string",
343
+ "id": 2
344
+ }
345
+ }
346
+ },
347
+ "SlsaProvenance": {
348
+ "fields": {
349
+ "builder": {
350
+ "type": "SlsaBuilder",
351
+ "id": 1
408
352
  },
409
- "build": {
410
- "type": "grafeas.v1.BuildOccurrence",
411
- "id": 9
412
- },
413
- "image": {
414
- "type": "grafeas.v1.ImageOccurrence",
415
- "id": 10
416
- },
417
- "package": {
418
- "type": "grafeas.v1.PackageOccurrence",
419
- "id": 11
420
- },
421
- "deployment": {
422
- "type": "grafeas.v1.DeploymentOccurrence",
423
- "id": 12
353
+ "recipe": {
354
+ "type": "SlsaRecipe",
355
+ "id": 2
424
356
  },
425
- "discovery": {
426
- "type": "grafeas.v1.DiscoveryOccurrence",
427
- "id": 13
357
+ "metadata": {
358
+ "type": "SlsaMetadata",
359
+ "id": 3
428
360
  },
429
- "attestation": {
430
- "type": "grafeas.v1.AttestationOccurrence",
431
- "id": 14
361
+ "materials": {
362
+ "rule": "repeated",
363
+ "type": "Material",
364
+ "id": 4
365
+ }
366
+ },
367
+ "nested": {
368
+ "SlsaRecipe": {
369
+ "fields": {
370
+ "type": {
371
+ "type": "string",
372
+ "id": 1
373
+ },
374
+ "definedInMaterial": {
375
+ "type": "int64",
376
+ "id": 2
377
+ },
378
+ "entryPoint": {
379
+ "type": "string",
380
+ "id": 3
381
+ },
382
+ "arguments": {
383
+ "type": "google.protobuf.Any",
384
+ "id": 4
385
+ },
386
+ "environment": {
387
+ "type": "google.protobuf.Any",
388
+ "id": 5
389
+ }
390
+ }
432
391
  },
433
- "upgrade": {
434
- "type": "grafeas.v1.UpgradeOccurrence",
435
- "id": 15
392
+ "SlsaCompleteness": {
393
+ "fields": {
394
+ "arguments": {
395
+ "type": "bool",
396
+ "id": 1
397
+ },
398
+ "environment": {
399
+ "type": "bool",
400
+ "id": 2
401
+ },
402
+ "materials": {
403
+ "type": "bool",
404
+ "id": 3
405
+ }
406
+ }
436
407
  },
437
- "compliance": {
438
- "type": "grafeas.v1.ComplianceOccurrence",
439
- "id": 16
408
+ "SlsaMetadata": {
409
+ "fields": {
410
+ "buildInvocationId": {
411
+ "type": "string",
412
+ "id": 1
413
+ },
414
+ "buildStartedOn": {
415
+ "type": "google.protobuf.Timestamp",
416
+ "id": 2
417
+ },
418
+ "buildFinishedOn": {
419
+ "type": "google.protobuf.Timestamp",
420
+ "id": 3
421
+ },
422
+ "completeness": {
423
+ "type": "SlsaCompleteness",
424
+ "id": 4
425
+ },
426
+ "reproducible": {
427
+ "type": "bool",
428
+ "id": 5
429
+ }
430
+ }
440
431
  },
441
- "dsseAttestation": {
442
- "type": "grafeas.v1.DSSEAttestationOccurrence",
443
- "id": 17
432
+ "SlsaBuilder": {
433
+ "fields": {
434
+ "id": {
435
+ "type": "string",
436
+ "id": 1
437
+ }
438
+ }
444
439
  },
445
- "envelope": {
446
- "type": "grafeas.v1.Envelope",
447
- "id": 18
440
+ "Material": {
441
+ "fields": {
442
+ "uri": {
443
+ "type": "string",
444
+ "id": 1
445
+ },
446
+ "digest": {
447
+ "keyType": "string",
448
+ "type": "string",
449
+ "id": 2
450
+ }
451
+ }
448
452
  }
449
453
  }
450
454
  },
451
- "Note": {
452
- "options": {
453
- "(google.api.resource).type": "grafeas.io/Note",
454
- "(google.api.resource).pattern": "projects/{project}/notes/{note}"
455
- },
456
- "oneofs": {
457
- "type": {
458
- "oneof": [
459
- "vulnerability",
460
- "build",
461
- "image",
462
- "package",
463
- "deployment",
464
- "discovery",
465
- "attestation",
466
- "upgrade",
467
- "compliance",
468
- "dsseAttestation"
469
- ]
470
- }
471
- },
455
+ "SlsaProvenanceZeroTwo": {
472
456
  "fields": {
473
- "name": {
474
- "type": "string",
457
+ "builder": {
458
+ "type": "SlsaBuilder",
475
459
  "id": 1
476
460
  },
477
- "shortDescription": {
461
+ "buildType": {
478
462
  "type": "string",
479
463
  "id": 2
480
464
  },
481
- "longDescription": {
482
- "type": "string",
465
+ "invocation": {
466
+ "type": "SlsaInvocation",
483
467
  "id": 3
484
468
  },
485
- "kind": {
486
- "type": "grafeas.v1.NoteKind",
469
+ "buildConfig": {
470
+ "type": "google.protobuf.Struct",
487
471
  "id": 4
488
472
  },
489
- "relatedUrl": {
490
- "rule": "repeated",
491
- "type": "grafeas.v1.RelatedUrl",
473
+ "metadata": {
474
+ "type": "SlsaMetadata",
492
475
  "id": 5
493
476
  },
494
- "expirationTime": {
495
- "type": "google.protobuf.Timestamp",
477
+ "materials": {
478
+ "rule": "repeated",
479
+ "type": "SlsaMaterial",
496
480
  "id": 6
481
+ }
482
+ },
483
+ "nested": {
484
+ "SlsaBuilder": {
485
+ "fields": {
486
+ "id": {
487
+ "type": "string",
488
+ "id": 1
489
+ }
490
+ }
497
491
  },
498
- "createTime": {
499
- "type": "google.protobuf.Timestamp",
500
- "id": 7
501
- },
502
- "updateTime": {
503
- "type": "google.protobuf.Timestamp",
504
- "id": 8
505
- },
506
- "relatedNoteNames": {
507
- "rule": "repeated",
508
- "type": "string",
509
- "id": 9
492
+ "SlsaMaterial": {
493
+ "fields": {
494
+ "uri": {
495
+ "type": "string",
496
+ "id": 1
497
+ },
498
+ "digest": {
499
+ "keyType": "string",
500
+ "type": "string",
501
+ "id": 2
502
+ }
503
+ }
510
504
  },
511
- "vulnerability": {
512
- "type": "grafeas.v1.VulnerabilityNote",
513
- "id": 10
505
+ "SlsaInvocation": {
506
+ "fields": {
507
+ "configSource": {
508
+ "type": "SlsaConfigSource",
509
+ "id": 1
510
+ },
511
+ "parameters": {
512
+ "type": "google.protobuf.Struct",
513
+ "id": 2
514
+ },
515
+ "environment": {
516
+ "type": "google.protobuf.Struct",
517
+ "id": 3
518
+ }
519
+ }
514
520
  },
515
- "build": {
516
- "type": "grafeas.v1.BuildNote",
517
- "id": 11
521
+ "SlsaConfigSource": {
522
+ "fields": {
523
+ "uri": {
524
+ "type": "string",
525
+ "id": 1
526
+ },
527
+ "digest": {
528
+ "keyType": "string",
529
+ "type": "string",
530
+ "id": 2
531
+ },
532
+ "entryPoint": {
533
+ "type": "string",
534
+ "id": 3
535
+ }
536
+ }
518
537
  },
519
- "image": {
520
- "type": "grafeas.v1.ImageNote",
521
- "id": 12
538
+ "SlsaMetadata": {
539
+ "fields": {
540
+ "buildInvocationId": {
541
+ "type": "string",
542
+ "id": 1
543
+ },
544
+ "buildStartedOn": {
545
+ "type": "google.protobuf.Timestamp",
546
+ "id": 2
547
+ },
548
+ "buildFinishedOn": {
549
+ "type": "google.protobuf.Timestamp",
550
+ "id": 3
551
+ },
552
+ "completeness": {
553
+ "type": "SlsaCompleteness",
554
+ "id": 4
555
+ },
556
+ "reproducible": {
557
+ "type": "bool",
558
+ "id": 5
559
+ }
560
+ }
522
561
  },
523
- "package": {
524
- "type": "grafeas.v1.PackageNote",
525
- "id": 13
526
- },
527
- "deployment": {
528
- "type": "grafeas.v1.DeploymentNote",
529
- "id": 14
530
- },
531
- "discovery": {
532
- "type": "grafeas.v1.DiscoveryNote",
533
- "id": 15
534
- },
535
- "attestation": {
536
- "type": "grafeas.v1.AttestationNote",
537
- "id": 16
538
- },
539
- "upgrade": {
540
- "type": "grafeas.v1.UpgradeNote",
541
- "id": 17
542
- },
543
- "compliance": {
544
- "type": "grafeas.v1.ComplianceNote",
545
- "id": 18
546
- },
547
- "dsseAttestation": {
548
- "type": "grafeas.v1.DSSEAttestationNote",
549
- "id": 19
550
- }
551
- }
552
- },
553
- "GetOccurrenceRequest": {
554
- "fields": {
555
- "name": {
556
- "type": "string",
557
- "id": 1,
558
- "options": {
559
- "(google.api.field_behavior)": "REQUIRED",
560
- "(google.api.resource_reference).type": "grafeas.io/Occurrence"
562
+ "SlsaCompleteness": {
563
+ "fields": {
564
+ "parameters": {
565
+ "type": "bool",
566
+ "id": 1
567
+ },
568
+ "environment": {
569
+ "type": "bool",
570
+ "id": 2
571
+ },
572
+ "materials": {
573
+ "type": "bool",
574
+ "id": 3
575
+ }
561
576
  }
562
577
  }
563
578
  }
564
579
  },
565
- "ListOccurrencesRequest": {
580
+ "BuildProvenance": {
566
581
  "fields": {
567
- "parent": {
582
+ "id": {
568
583
  "type": "string",
569
- "id": 1,
570
- "options": {
571
- "(google.api.field_behavior)": "REQUIRED",
572
- "(google.api.resource_reference).type": "grafeas.io/Project"
573
- }
584
+ "id": 1
574
585
  },
575
- "filter": {
586
+ "projectId": {
576
587
  "type": "string",
577
588
  "id": 2
578
589
  },
579
- "pageSize": {
580
- "type": "int32",
590
+ "commands": {
591
+ "rule": "repeated",
592
+ "type": "Command",
581
593
  "id": 3
582
594
  },
583
- "pageToken": {
584
- "type": "string",
585
- "id": 4
586
- }
587
- }
588
- },
589
- "ListOccurrencesResponse": {
590
- "fields": {
591
- "occurrences": {
595
+ "builtArtifacts": {
592
596
  "rule": "repeated",
593
- "type": "Occurrence",
594
- "id": 1
597
+ "type": "Artifact",
598
+ "id": 4
595
599
  },
596
- "nextPageToken": {
600
+ "createTime": {
601
+ "type": "google.protobuf.Timestamp",
602
+ "id": 5
603
+ },
604
+ "startTime": {
605
+ "type": "google.protobuf.Timestamp",
606
+ "id": 6
607
+ },
608
+ "endTime": {
609
+ "type": "google.protobuf.Timestamp",
610
+ "id": 7
611
+ },
612
+ "creator": {
597
613
  "type": "string",
598
- "id": 2
599
- }
600
- }
601
- },
602
- "DeleteOccurrenceRequest": {
603
- "fields": {
604
- "name": {
614
+ "id": 8
615
+ },
616
+ "logsUri": {
605
617
  "type": "string",
606
- "id": 1,
607
- "options": {
608
- "(google.api.field_behavior)": "REQUIRED",
609
- "(google.api.resource_reference).type": "grafeas.io/Occurrence"
610
- }
611
- }
612
- }
613
- },
614
- "CreateOccurrenceRequest": {
615
- "fields": {
616
- "parent": {
618
+ "id": 9
619
+ },
620
+ "sourceProvenance": {
621
+ "type": "Source",
622
+ "id": 10
623
+ },
624
+ "triggerId": {
617
625
  "type": "string",
618
- "id": 1,
619
- "options": {
620
- "(google.api.field_behavior)": "REQUIRED",
621
- "(google.api.resource_reference).type": "grafeas.io/Project"
622
- }
626
+ "id": 11
623
627
  },
624
- "occurrence": {
625
- "type": "Occurrence",
626
- "id": 2,
627
- "options": {
628
- "(google.api.field_behavior)": "REQUIRED"
629
- }
628
+ "buildOptions": {
629
+ "keyType": "string",
630
+ "type": "string",
631
+ "id": 12
632
+ },
633
+ "builderVersion": {
634
+ "type": "string",
635
+ "id": 13
630
636
  }
631
637
  }
632
638
  },
633
- "UpdateOccurrenceRequest": {
639
+ "Source": {
634
640
  "fields": {
635
- "name": {
641
+ "artifactStorageSourceUri": {
636
642
  "type": "string",
637
- "id": 1,
638
- "options": {
639
- "(google.api.field_behavior)": "REQUIRED",
640
- "(google.api.resource_reference).type": "grafeas.io/Occurrence"
641
- }
643
+ "id": 1
642
644
  },
643
- "occurrence": {
644
- "type": "Occurrence",
645
- "id": 2,
646
- "options": {
647
- "(google.api.field_behavior)": "REQUIRED"
648
- }
645
+ "fileHashes": {
646
+ "keyType": "string",
647
+ "type": "FileHashes",
648
+ "id": 2
649
649
  },
650
- "updateMask": {
651
- "type": "google.protobuf.FieldMask",
650
+ "context": {
651
+ "type": "SourceContext",
652
652
  "id": 3
653
+ },
654
+ "additionalContexts": {
655
+ "rule": "repeated",
656
+ "type": "SourceContext",
657
+ "id": 4
653
658
  }
654
659
  }
655
660
  },
656
- "GetNoteRequest": {
661
+ "FileHashes": {
657
662
  "fields": {
658
- "name": {
659
- "type": "string",
660
- "id": 1,
661
- "options": {
662
- "(google.api.field_behavior)": "REQUIRED",
663
- "(google.api.resource_reference).type": "grafeas.io/Note"
664
- }
663
+ "fileHash": {
664
+ "rule": "repeated",
665
+ "type": "Hash",
666
+ "id": 1
665
667
  }
666
668
  }
667
669
  },
668
- "GetOccurrenceNoteRequest": {
670
+ "Hash": {
669
671
  "fields": {
670
- "name": {
672
+ "type": {
671
673
  "type": "string",
672
- "id": 1,
673
- "options": {
674
- "(google.api.field_behavior)": "REQUIRED",
675
- "(google.api.resource_reference).type": "grafeas.io/Occurrence"
676
- }
674
+ "id": 1
675
+ },
676
+ "value": {
677
+ "type": "bytes",
678
+ "id": 2
677
679
  }
678
680
  }
679
681
  },
680
- "ListNotesRequest": {
682
+ "Command": {
681
683
  "fields": {
682
- "parent": {
684
+ "name": {
683
685
  "type": "string",
684
- "id": 1,
685
- "options": {
686
- "(google.api.field_behavior)": "REQUIRED",
687
- "(google.api.resource_reference).type": "grafeas.io/Project"
688
- }
686
+ "id": 1
689
687
  },
690
- "filter": {
688
+ "env": {
689
+ "rule": "repeated",
691
690
  "type": "string",
692
691
  "id": 2
693
692
  },
694
- "pageSize": {
695
- "type": "int32",
693
+ "args": {
694
+ "rule": "repeated",
695
+ "type": "string",
696
696
  "id": 3
697
697
  },
698
- "pageToken": {
698
+ "dir": {
699
699
  "type": "string",
700
700
  "id": 4
701
+ },
702
+ "id": {
703
+ "type": "string",
704
+ "id": 5
705
+ },
706
+ "waitFor": {
707
+ "rule": "repeated",
708
+ "type": "string",
709
+ "id": 6
701
710
  }
702
711
  }
703
712
  },
704
- "ListNotesResponse": {
713
+ "Artifact": {
705
714
  "fields": {
706
- "notes": {
707
- "rule": "repeated",
708
- "type": "Note",
715
+ "checksum": {
716
+ "type": "string",
709
717
  "id": 1
710
718
  },
711
- "nextPageToken": {
719
+ "id": {
712
720
  "type": "string",
713
721
  "id": 2
714
- }
715
- }
716
- },
717
- "DeleteNoteRequest": {
718
- "fields": {
719
- "name": {
722
+ },
723
+ "names": {
724
+ "rule": "repeated",
720
725
  "type": "string",
721
- "id": 1,
722
- "options": {
723
- "(google.api.field_behavior)": "REQUIRED",
724
- "(google.api.resource_reference).type": "grafeas.io/Note"
725
- }
726
+ "id": 3
726
727
  }
727
728
  }
728
729
  },
729
- "CreateNoteRequest": {
730
- "fields": {
731
- "parent": {
732
- "type": "string",
733
- "id": 1,
734
- "options": {
735
- "(google.api.field_behavior)": "REQUIRED",
736
- "(google.api.resource_reference).type": "grafeas.io/Project"
737
- }
730
+ "SourceContext": {
731
+ "oneofs": {
732
+ "context": {
733
+ "oneof": [
734
+ "cloudRepo",
735
+ "gerrit",
736
+ "git"
737
+ ]
738
+ }
739
+ },
740
+ "fields": {
741
+ "cloudRepo": {
742
+ "type": "CloudRepoSourceContext",
743
+ "id": 1
738
744
  },
739
- "noteId": {
740
- "type": "string",
741
- "id": 2,
742
- "options": {
743
- "(google.api.field_behavior)": "REQUIRED"
744
- }
745
+ "gerrit": {
746
+ "type": "GerritSourceContext",
747
+ "id": 2
745
748
  },
746
- "note": {
747
- "type": "Note",
748
- "id": 3,
749
- "options": {
750
- "(google.api.field_behavior)": "REQUIRED"
751
- }
749
+ "git": {
750
+ "type": "GitSourceContext",
751
+ "id": 3
752
+ },
753
+ "labels": {
754
+ "keyType": "string",
755
+ "type": "string",
756
+ "id": 4
752
757
  }
753
758
  }
754
759
  },
755
- "UpdateNoteRequest": {
760
+ "AliasContext": {
756
761
  "fields": {
762
+ "kind": {
763
+ "type": "Kind",
764
+ "id": 1
765
+ },
757
766
  "name": {
758
767
  "type": "string",
759
- "id": 1,
760
- "options": {
761
- "(google.api.field_behavior)": "REQUIRED",
762
- "(google.api.resource_reference).type": "grafeas.io/Note"
768
+ "id": 2
769
+ }
770
+ },
771
+ "nested": {
772
+ "Kind": {
773
+ "values": {
774
+ "KIND_UNSPECIFIED": 0,
775
+ "FIXED": 1,
776
+ "MOVABLE": 2,
777
+ "OTHER": 4
763
778
  }
779
+ }
780
+ }
781
+ },
782
+ "CloudRepoSourceContext": {
783
+ "oneofs": {
784
+ "revision": {
785
+ "oneof": [
786
+ "revisionId",
787
+ "aliasContext"
788
+ ]
789
+ }
790
+ },
791
+ "fields": {
792
+ "repoId": {
793
+ "type": "RepoId",
794
+ "id": 1
764
795
  },
765
- "note": {
766
- "type": "Note",
767
- "id": 2,
768
- "options": {
769
- "(google.api.field_behavior)": "REQUIRED"
770
- }
796
+ "revisionId": {
797
+ "type": "string",
798
+ "id": 2
771
799
  },
772
- "updateMask": {
773
- "type": "google.protobuf.FieldMask",
800
+ "aliasContext": {
801
+ "type": "AliasContext",
774
802
  "id": 3
775
803
  }
776
804
  }
777
805
  },
778
- "ListNoteOccurrencesRequest": {
806
+ "GerritSourceContext": {
807
+ "oneofs": {
808
+ "revision": {
809
+ "oneof": [
810
+ "revisionId",
811
+ "aliasContext"
812
+ ]
813
+ }
814
+ },
779
815
  "fields": {
780
- "name": {
816
+ "hostUri": {
781
817
  "type": "string",
782
- "id": 1,
783
- "options": {
784
- "(google.api.field_behavior)": "REQUIRED",
785
- "(google.api.resource_reference).type": "grafeas.io/Note"
786
- }
818
+ "id": 1
787
819
  },
788
- "filter": {
820
+ "gerritProject": {
789
821
  "type": "string",
790
822
  "id": 2
791
823
  },
792
- "pageSize": {
793
- "type": "int32",
824
+ "revisionId": {
825
+ "type": "string",
794
826
  "id": 3
795
827
  },
796
- "pageToken": {
797
- "type": "string",
828
+ "aliasContext": {
829
+ "type": "AliasContext",
798
830
  "id": 4
799
831
  }
800
832
  }
801
833
  },
802
- "ListNoteOccurrencesResponse": {
834
+ "GitSourceContext": {
803
835
  "fields": {
804
- "occurrences": {
805
- "rule": "repeated",
806
- "type": "Occurrence",
836
+ "url": {
837
+ "type": "string",
807
838
  "id": 1
808
839
  },
809
- "nextPageToken": {
840
+ "revisionId": {
810
841
  "type": "string",
811
842
  "id": 2
812
843
  }
813
844
  }
814
845
  },
815
- "BatchCreateNotesRequest": {
816
- "fields": {
817
- "parent": {
818
- "type": "string",
819
- "id": 1,
820
- "options": {
821
- "(google.api.field_behavior)": "REQUIRED",
822
- "(google.api.resource_reference).type": "grafeas.io/Project"
823
- }
824
- },
825
- "notes": {
826
- "keyType": "string",
827
- "type": "Note",
828
- "id": 2,
829
- "options": {
830
- "(google.api.field_behavior)": "REQUIRED"
831
- }
846
+ "RepoId": {
847
+ "oneofs": {
848
+ "id": {
849
+ "oneof": [
850
+ "projectRepoId",
851
+ "uid"
852
+ ]
832
853
  }
833
- }
834
- },
835
- "BatchCreateNotesResponse": {
854
+ },
836
855
  "fields": {
837
- "notes": {
838
- "rule": "repeated",
839
- "type": "Note",
856
+ "projectRepoId": {
857
+ "type": "ProjectRepoId",
840
858
  "id": 1
859
+ },
860
+ "uid": {
861
+ "type": "string",
862
+ "id": 2
841
863
  }
842
864
  }
843
865
  },
844
- "BatchCreateOccurrencesRequest": {
866
+ "ProjectRepoId": {
845
867
  "fields": {
846
- "parent": {
868
+ "projectId": {
847
869
  "type": "string",
848
- "id": 1,
849
- "options": {
850
- "(google.api.field_behavior)": "REQUIRED",
851
- "(google.api.resource_reference).type": "grafeas.io/Project"
852
- }
870
+ "id": 1
853
871
  },
854
- "occurrences": {
855
- "rule": "repeated",
856
- "type": "Occurrence",
857
- "id": 2,
858
- "options": {
859
- "(google.api.field_behavior)": "REQUIRED"
860
- }
872
+ "repoName": {
873
+ "type": "string",
874
+ "id": 2
861
875
  }
862
876
  }
863
877
  },
864
- "BatchCreateOccurrencesResponse": {
865
- "fields": {
866
- "occurrences": {
867
- "rule": "repeated",
868
- "type": "Occurrence",
869
- "id": 1
878
+ "ComplianceNote": {
879
+ "oneofs": {
880
+ "complianceType": {
881
+ "oneof": [
882
+ "cisBenchmark"
883
+ ]
870
884
  }
871
- }
872
- },
873
- "AttestationNote": {
885
+ },
874
886
  "fields": {
875
- "hint": {
876
- "type": "Hint",
887
+ "title": {
888
+ "type": "string",
877
889
  "id": 1
890
+ },
891
+ "description": {
892
+ "type": "string",
893
+ "id": 2
894
+ },
895
+ "version": {
896
+ "rule": "repeated",
897
+ "type": "grafeas.v1.ComplianceVersion",
898
+ "id": 3
899
+ },
900
+ "rationale": {
901
+ "type": "string",
902
+ "id": 4
903
+ },
904
+ "remediation": {
905
+ "type": "string",
906
+ "id": 5
907
+ },
908
+ "cisBenchmark": {
909
+ "type": "CisBenchmark",
910
+ "id": 6
911
+ },
912
+ "scanInstructions": {
913
+ "type": "bytes",
914
+ "id": 7
878
915
  }
879
916
  },
880
917
  "nested": {
881
- "Hint": {
918
+ "CisBenchmark": {
882
919
  "fields": {
883
- "humanReadableName": {
884
- "type": "string",
920
+ "profileLevel": {
921
+ "type": "int32",
885
922
  "id": 1
923
+ },
924
+ "severity": {
925
+ "type": "grafeas.v1.Severity",
926
+ "id": 2
886
927
  }
887
928
  }
888
929
  }
889
930
  }
890
931
  },
891
- "Jwt": {
932
+ "ComplianceVersion": {
892
933
  "fields": {
893
- "compactJwt": {
934
+ "cpeUri": {
894
935
  "type": "string",
895
936
  "id": 1
937
+ },
938
+ "benchmarkDocument": {
939
+ "type": "string",
940
+ "id": 3
941
+ },
942
+ "version": {
943
+ "type": "string",
944
+ "id": 2
896
945
  }
897
946
  }
898
947
  },
899
- "AttestationOccurrence": {
948
+ "ComplianceOccurrence": {
900
949
  "fields": {
901
- "serializedPayload": {
902
- "type": "bytes",
903
- "id": 1
904
- },
905
- "signatures": {
950
+ "nonCompliantFiles": {
906
951
  "rule": "repeated",
907
- "type": "Signature",
952
+ "type": "NonCompliantFile",
908
953
  "id": 2
909
954
  },
910
- "jwts": {
911
- "rule": "repeated",
912
- "type": "Jwt",
955
+ "nonComplianceReason": {
956
+ "type": "string",
913
957
  "id": 3
914
958
  }
915
959
  }
916
960
  },
917
- "BuildNote": {
961
+ "NonCompliantFile": {
918
962
  "fields": {
919
- "builderVersion": {
963
+ "path": {
920
964
  "type": "string",
921
965
  "id": 1
966
+ },
967
+ "displayCommand": {
968
+ "type": "string",
969
+ "id": 2
970
+ },
971
+ "reason": {
972
+ "type": "string",
973
+ "id": 3
922
974
  }
923
975
  }
924
976
  },
925
- "BuildOccurrence": {
977
+ "CVSSv3": {
926
978
  "fields": {
927
- "provenance": {
928
- "type": "grafeas.v1.BuildProvenance",
979
+ "baseScore": {
980
+ "type": "float",
929
981
  "id": 1
930
982
  },
931
- "provenanceBytes": {
932
- "type": "string",
983
+ "exploitabilityScore": {
984
+ "type": "float",
933
985
  "id": 2
934
986
  },
935
- "intotoProvenance": {
936
- "type": "InTotoProvenance",
987
+ "impactScore": {
988
+ "type": "float",
937
989
  "id": 3
938
990
  },
939
- "intotoStatement": {
940
- "type": "InTotoStatement",
941
- "id": 4
991
+ "attackVector": {
992
+ "type": "AttackVector",
993
+ "id": 5
994
+ },
995
+ "attackComplexity": {
996
+ "type": "AttackComplexity",
997
+ "id": 6
998
+ },
999
+ "privilegesRequired": {
1000
+ "type": "PrivilegesRequired",
1001
+ "id": 7
1002
+ },
1003
+ "userInteraction": {
1004
+ "type": "UserInteraction",
1005
+ "id": 8
1006
+ },
1007
+ "scope": {
1008
+ "type": "Scope",
1009
+ "id": 9
1010
+ },
1011
+ "confidentialityImpact": {
1012
+ "type": "Impact",
1013
+ "id": 10
1014
+ },
1015
+ "integrityImpact": {
1016
+ "type": "Impact",
1017
+ "id": 11
1018
+ },
1019
+ "availabilityImpact": {
1020
+ "type": "Impact",
1021
+ "id": 12
1022
+ }
1023
+ },
1024
+ "nested": {
1025
+ "AttackVector": {
1026
+ "values": {
1027
+ "ATTACK_VECTOR_UNSPECIFIED": 0,
1028
+ "ATTACK_VECTOR_NETWORK": 1,
1029
+ "ATTACK_VECTOR_ADJACENT": 2,
1030
+ "ATTACK_VECTOR_LOCAL": 3,
1031
+ "ATTACK_VECTOR_PHYSICAL": 4
1032
+ }
1033
+ },
1034
+ "AttackComplexity": {
1035
+ "values": {
1036
+ "ATTACK_COMPLEXITY_UNSPECIFIED": 0,
1037
+ "ATTACK_COMPLEXITY_LOW": 1,
1038
+ "ATTACK_COMPLEXITY_HIGH": 2
1039
+ }
1040
+ },
1041
+ "PrivilegesRequired": {
1042
+ "values": {
1043
+ "PRIVILEGES_REQUIRED_UNSPECIFIED": 0,
1044
+ "PRIVILEGES_REQUIRED_NONE": 1,
1045
+ "PRIVILEGES_REQUIRED_LOW": 2,
1046
+ "PRIVILEGES_REQUIRED_HIGH": 3
1047
+ }
1048
+ },
1049
+ "UserInteraction": {
1050
+ "values": {
1051
+ "USER_INTERACTION_UNSPECIFIED": 0,
1052
+ "USER_INTERACTION_NONE": 1,
1053
+ "USER_INTERACTION_REQUIRED": 2
1054
+ }
1055
+ },
1056
+ "Scope": {
1057
+ "values": {
1058
+ "SCOPE_UNSPECIFIED": 0,
1059
+ "SCOPE_UNCHANGED": 1,
1060
+ "SCOPE_CHANGED": 2
1061
+ }
1062
+ },
1063
+ "Impact": {
1064
+ "values": {
1065
+ "IMPACT_UNSPECIFIED": 0,
1066
+ "IMPACT_HIGH": 1,
1067
+ "IMPACT_LOW": 2,
1068
+ "IMPACT_NONE": 3
1069
+ }
942
1070
  }
943
1071
  }
944
1072
  },
945
- "Recipe": {
1073
+ "CVSS": {
946
1074
  "fields": {
947
- "type": {
948
- "type": "string",
1075
+ "baseScore": {
1076
+ "type": "float",
949
1077
  "id": 1
950
1078
  },
951
- "definedInMaterial": {
952
- "type": "int64",
1079
+ "exploitabilityScore": {
1080
+ "type": "float",
953
1081
  "id": 2
954
1082
  },
955
- "entryPoint": {
956
- "type": "string",
1083
+ "impactScore": {
1084
+ "type": "float",
957
1085
  "id": 3
958
1086
  },
959
- "arguments": {
960
- "rule": "repeated",
961
- "type": "google.protobuf.Any",
1087
+ "attackVector": {
1088
+ "type": "AttackVector",
962
1089
  "id": 4
963
1090
  },
964
- "environment": {
965
- "rule": "repeated",
966
- "type": "google.protobuf.Any",
1091
+ "attackComplexity": {
1092
+ "type": "AttackComplexity",
967
1093
  "id": 5
1094
+ },
1095
+ "authentication": {
1096
+ "type": "Authentication",
1097
+ "id": 6
1098
+ },
1099
+ "privilegesRequired": {
1100
+ "type": "PrivilegesRequired",
1101
+ "id": 7
1102
+ },
1103
+ "userInteraction": {
1104
+ "type": "UserInteraction",
1105
+ "id": 8
1106
+ },
1107
+ "scope": {
1108
+ "type": "Scope",
1109
+ "id": 9
1110
+ },
1111
+ "confidentialityImpact": {
1112
+ "type": "Impact",
1113
+ "id": 10
1114
+ },
1115
+ "integrityImpact": {
1116
+ "type": "Impact",
1117
+ "id": 11
1118
+ },
1119
+ "availabilityImpact": {
1120
+ "type": "Impact",
1121
+ "id": 12
1122
+ }
1123
+ },
1124
+ "nested": {
1125
+ "AttackVector": {
1126
+ "values": {
1127
+ "ATTACK_VECTOR_UNSPECIFIED": 0,
1128
+ "ATTACK_VECTOR_NETWORK": 1,
1129
+ "ATTACK_VECTOR_ADJACENT": 2,
1130
+ "ATTACK_VECTOR_LOCAL": 3,
1131
+ "ATTACK_VECTOR_PHYSICAL": 4
1132
+ }
1133
+ },
1134
+ "AttackComplexity": {
1135
+ "values": {
1136
+ "ATTACK_COMPLEXITY_UNSPECIFIED": 0,
1137
+ "ATTACK_COMPLEXITY_LOW": 1,
1138
+ "ATTACK_COMPLEXITY_HIGH": 2
1139
+ }
1140
+ },
1141
+ "Authentication": {
1142
+ "values": {
1143
+ "AUTHENTICATION_UNSPECIFIED": 0,
1144
+ "AUTHENTICATION_MULTIPLE": 1,
1145
+ "AUTHENTICATION_SINGLE": 2,
1146
+ "AUTHENTICATION_NONE": 3
1147
+ }
1148
+ },
1149
+ "PrivilegesRequired": {
1150
+ "values": {
1151
+ "PRIVILEGES_REQUIRED_UNSPECIFIED": 0,
1152
+ "PRIVILEGES_REQUIRED_NONE": 1,
1153
+ "PRIVILEGES_REQUIRED_LOW": 2,
1154
+ "PRIVILEGES_REQUIRED_HIGH": 3
1155
+ }
1156
+ },
1157
+ "UserInteraction": {
1158
+ "values": {
1159
+ "USER_INTERACTION_UNSPECIFIED": 0,
1160
+ "USER_INTERACTION_NONE": 1,
1161
+ "USER_INTERACTION_REQUIRED": 2
1162
+ }
1163
+ },
1164
+ "Scope": {
1165
+ "values": {
1166
+ "SCOPE_UNSPECIFIED": 0,
1167
+ "SCOPE_UNCHANGED": 1,
1168
+ "SCOPE_CHANGED": 2
1169
+ }
1170
+ },
1171
+ "Impact": {
1172
+ "values": {
1173
+ "IMPACT_UNSPECIFIED": 0,
1174
+ "IMPACT_HIGH": 1,
1175
+ "IMPACT_LOW": 2,
1176
+ "IMPACT_NONE": 3
1177
+ }
968
1178
  }
969
1179
  }
970
1180
  },
971
- "Completeness": {
1181
+ "DeploymentNote": {
972
1182
  "fields": {
973
- "arguments": {
974
- "type": "bool",
1183
+ "resourceUri": {
1184
+ "rule": "repeated",
1185
+ "type": "string",
975
1186
  "id": 1
976
- },
977
- "environment": {
978
- "type": "bool",
979
- "id": 2
980
- },
981
- "materials": {
982
- "type": "bool",
983
- "id": 3
984
1187
  }
985
1188
  }
986
1189
  },
987
- "Metadata": {
1190
+ "DeploymentOccurrence": {
988
1191
  "fields": {
989
- "buildInvocationId": {
1192
+ "userEmail": {
990
1193
  "type": "string",
991
1194
  "id": 1
992
1195
  },
993
- "buildStartedOn": {
1196
+ "deployTime": {
994
1197
  "type": "google.protobuf.Timestamp",
995
1198
  "id": 2
996
1199
  },
997
- "buildFinishedOn": {
1200
+ "undeployTime": {
998
1201
  "type": "google.protobuf.Timestamp",
999
1202
  "id": 3
1000
1203
  },
1001
- "completeness": {
1002
- "type": "Completeness",
1204
+ "config": {
1205
+ "type": "string",
1003
1206
  "id": 4
1004
1207
  },
1005
- "reproducible": {
1006
- "type": "bool",
1208
+ "address": {
1209
+ "type": "string",
1007
1210
  "id": 5
1008
- }
1211
+ },
1212
+ "resourceUri": {
1213
+ "rule": "repeated",
1214
+ "type": "string",
1215
+ "id": 6
1216
+ },
1217
+ "platform": {
1218
+ "type": "Platform",
1219
+ "id": 7
1220
+ }
1221
+ },
1222
+ "nested": {
1223
+ "Platform": {
1224
+ "values": {
1225
+ "PLATFORM_UNSPECIFIED": 0,
1226
+ "GKE": 1,
1227
+ "FLEX": 2,
1228
+ "CUSTOM": 3
1229
+ }
1230
+ }
1009
1231
  }
1010
1232
  },
1011
- "BuilderConfig": {
1233
+ "DiscoveryNote": {
1012
1234
  "fields": {
1013
- "id": {
1014
- "type": "string",
1235
+ "analysisKind": {
1236
+ "type": "grafeas.v1.NoteKind",
1015
1237
  "id": 1
1016
1238
  }
1017
1239
  }
1018
1240
  },
1019
- "InTotoProvenance": {
1241
+ "DiscoveryOccurrence": {
1020
1242
  "fields": {
1021
- "builderConfig": {
1022
- "type": "BuilderConfig",
1243
+ "continuousAnalysis": {
1244
+ "type": "ContinuousAnalysis",
1023
1245
  "id": 1
1024
1246
  },
1025
- "recipe": {
1026
- "type": "Recipe",
1247
+ "analysisStatus": {
1248
+ "type": "AnalysisStatus",
1027
1249
  "id": 2
1028
1250
  },
1029
- "metadata": {
1030
- "type": "Metadata",
1251
+ "analysisStatusError": {
1252
+ "type": "google.rpc.Status",
1031
1253
  "id": 3
1032
1254
  },
1033
- "materials": {
1034
- "rule": "repeated",
1255
+ "cpe": {
1035
1256
  "type": "string",
1036
1257
  "id": 4
1037
- }
1038
- }
1039
- },
1040
- "InTotoStatement": {
1041
- "oneofs": {
1042
- "predicate": {
1043
- "oneof": [
1044
- "provenance",
1045
- "slsaProvenance"
1046
- ]
1258
+ },
1259
+ "lastScanTime": {
1260
+ "type": "google.protobuf.Timestamp",
1261
+ "id": 5
1262
+ },
1263
+ "archiveTime": {
1264
+ "type": "google.protobuf.Timestamp",
1265
+ "id": 6,
1266
+ "options": {
1267
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
1268
+ }
1047
1269
  }
1048
1270
  },
1049
- "fields": {
1050
- "type": {
1051
- "type": "string",
1052
- "id": 1,
1053
- "options": {
1054
- "json_name": "_type"
1271
+ "nested": {
1272
+ "ContinuousAnalysis": {
1273
+ "values": {
1274
+ "CONTINUOUS_ANALYSIS_UNSPECIFIED": 0,
1275
+ "ACTIVE": 1,
1276
+ "INACTIVE": 2
1055
1277
  }
1056
1278
  },
1057
- "subject": {
1058
- "rule": "repeated",
1059
- "type": "Subject",
1060
- "id": 2
1061
- },
1062
- "predicateType": {
1063
- "type": "string",
1064
- "id": 3
1065
- },
1066
- "provenance": {
1067
- "type": "InTotoProvenance",
1068
- "id": 4
1069
- },
1070
- "slsaProvenance": {
1071
- "type": "SlsaProvenance",
1072
- "id": 5
1279
+ "AnalysisStatus": {
1280
+ "values": {
1281
+ "ANALYSIS_STATUS_UNSPECIFIED": 0,
1282
+ "PENDING": 1,
1283
+ "SCANNING": 2,
1284
+ "FINISHED_SUCCESS": 3,
1285
+ "FINISHED_FAILED": 4,
1286
+ "FINISHED_UNSUPPORTED": 5
1287
+ }
1073
1288
  }
1074
1289
  }
1075
1290
  },
1076
- "Subject": {
1291
+ "DSSEAttestationNote": {
1077
1292
  "fields": {
1078
- "name": {
1079
- "type": "string",
1293
+ "hint": {
1294
+ "type": "DSSEHint",
1080
1295
  "id": 1
1081
- },
1082
- "digest": {
1083
- "keyType": "string",
1084
- "type": "string",
1085
- "id": 2
1296
+ }
1297
+ },
1298
+ "nested": {
1299
+ "DSSEHint": {
1300
+ "fields": {
1301
+ "humanReadableName": {
1302
+ "type": "string",
1303
+ "id": 1
1304
+ }
1305
+ }
1086
1306
  }
1087
1307
  }
1088
1308
  },
1089
- "SlsaProvenance": {
1309
+ "DSSEAttestationOccurrence": {
1310
+ "oneofs": {
1311
+ "decodedPayload": {
1312
+ "oneof": [
1313
+ "statement"
1314
+ ]
1315
+ }
1316
+ },
1090
1317
  "fields": {
1091
- "builder": {
1092
- "type": "SlsaBuilder",
1318
+ "envelope": {
1319
+ "type": "Envelope",
1093
1320
  "id": 1
1094
1321
  },
1095
- "recipe": {
1096
- "type": "SlsaRecipe",
1322
+ "statement": {
1323
+ "type": "InTotoStatement",
1097
1324
  "id": 2
1098
- },
1099
- "metadata": {
1100
- "type": "SlsaMetadata",
1101
- "id": 3
1102
- },
1103
- "materials": {
1104
- "rule": "repeated",
1105
- "type": "Material",
1106
- "id": 4
1107
1325
  }
1326
+ }
1327
+ },
1328
+ "Grafeas": {
1329
+ "options": {
1330
+ "(google.api.default_host)": "containeranalysis.googleapis.com"
1108
1331
  },
1109
- "nested": {
1110
- "SlsaRecipe": {
1111
- "fields": {
1112
- "type": {
1113
- "type": "string",
1114
- "id": 1
1332
+ "methods": {
1333
+ "GetOccurrence": {
1334
+ "requestType": "GetOccurrenceRequest",
1335
+ "responseType": "Occurrence",
1336
+ "options": {
1337
+ "(google.api.http).get": "/v1/{name=projects/*/occurrences/*}",
1338
+ "(google.api.method_signature)": "name"
1339
+ },
1340
+ "parsedOptions": [
1341
+ {
1342
+ "(google.api.http)": {
1343
+ "get": "/v1/{name=projects/*/occurrences/*}"
1344
+ }
1115
1345
  },
1116
- "definedInMaterial": {
1117
- "type": "int64",
1118
- "id": 2
1346
+ {
1347
+ "(google.api.method_signature)": "name"
1348
+ }
1349
+ ]
1350
+ },
1351
+ "ListOccurrences": {
1352
+ "requestType": "ListOccurrencesRequest",
1353
+ "responseType": "ListOccurrencesResponse",
1354
+ "options": {
1355
+ "(google.api.http).get": "/v1/{parent=projects/*}/occurrences",
1356
+ "(google.api.method_signature)": "parent,filter"
1357
+ },
1358
+ "parsedOptions": [
1359
+ {
1360
+ "(google.api.http)": {
1361
+ "get": "/v1/{parent=projects/*}/occurrences"
1362
+ }
1119
1363
  },
1120
- "entryPoint": {
1121
- "type": "string",
1122
- "id": 3
1364
+ {
1365
+ "(google.api.method_signature)": "parent,filter"
1366
+ }
1367
+ ]
1368
+ },
1369
+ "DeleteOccurrence": {
1370
+ "requestType": "DeleteOccurrenceRequest",
1371
+ "responseType": "google.protobuf.Empty",
1372
+ "options": {
1373
+ "(google.api.http).delete": "/v1/{name=projects/*/occurrences/*}",
1374
+ "(google.api.method_signature)": "name"
1375
+ },
1376
+ "parsedOptions": [
1377
+ {
1378
+ "(google.api.http)": {
1379
+ "delete": "/v1/{name=projects/*/occurrences/*}"
1380
+ }
1123
1381
  },
1124
- "arguments": {
1125
- "type": "google.protobuf.Any",
1126
- "id": 4
1382
+ {
1383
+ "(google.api.method_signature)": "name"
1384
+ }
1385
+ ]
1386
+ },
1387
+ "CreateOccurrence": {
1388
+ "requestType": "CreateOccurrenceRequest",
1389
+ "responseType": "Occurrence",
1390
+ "options": {
1391
+ "(google.api.http).post": "/v1/{parent=projects/*}/occurrences",
1392
+ "(google.api.http).body": "occurrence",
1393
+ "(google.api.method_signature)": "parent,occurrence"
1394
+ },
1395
+ "parsedOptions": [
1396
+ {
1397
+ "(google.api.http)": {
1398
+ "post": "/v1/{parent=projects/*}/occurrences",
1399
+ "body": "occurrence"
1400
+ }
1127
1401
  },
1128
- "environment": {
1129
- "type": "google.protobuf.Any",
1130
- "id": 5
1402
+ {
1403
+ "(google.api.method_signature)": "parent,occurrence"
1131
1404
  }
1132
- }
1405
+ ]
1133
1406
  },
1134
- "SlsaCompleteness": {
1135
- "fields": {
1136
- "arguments": {
1137
- "type": "bool",
1138
- "id": 1
1407
+ "BatchCreateOccurrences": {
1408
+ "requestType": "BatchCreateOccurrencesRequest",
1409
+ "responseType": "BatchCreateOccurrencesResponse",
1410
+ "options": {
1411
+ "(google.api.http).post": "/v1/{parent=projects/*}/occurrences:batchCreate",
1412
+ "(google.api.http).body": "*",
1413
+ "(google.api.method_signature)": "parent,occurrences"
1414
+ },
1415
+ "parsedOptions": [
1416
+ {
1417
+ "(google.api.http)": {
1418
+ "post": "/v1/{parent=projects/*}/occurrences:batchCreate",
1419
+ "body": "*"
1420
+ }
1139
1421
  },
1140
- "environment": {
1141
- "type": "bool",
1142
- "id": 2
1422
+ {
1423
+ "(google.api.method_signature)": "parent,occurrences"
1424
+ }
1425
+ ]
1426
+ },
1427
+ "UpdateOccurrence": {
1428
+ "requestType": "UpdateOccurrenceRequest",
1429
+ "responseType": "Occurrence",
1430
+ "options": {
1431
+ "(google.api.http).patch": "/v1/{name=projects/*/occurrences/*}",
1432
+ "(google.api.http).body": "occurrence",
1433
+ "(google.api.method_signature)": "name,occurrence,update_mask"
1434
+ },
1435
+ "parsedOptions": [
1436
+ {
1437
+ "(google.api.http)": {
1438
+ "patch": "/v1/{name=projects/*/occurrences/*}",
1439
+ "body": "occurrence"
1440
+ }
1143
1441
  },
1144
- "materials": {
1145
- "type": "bool",
1146
- "id": 3
1442
+ {
1443
+ "(google.api.method_signature)": "name,occurrence,update_mask"
1147
1444
  }
1148
- }
1445
+ ]
1149
1446
  },
1150
- "SlsaMetadata": {
1151
- "fields": {
1152
- "buildInvocationId": {
1153
- "type": "string",
1154
- "id": 1
1447
+ "GetOccurrenceNote": {
1448
+ "requestType": "GetOccurrenceNoteRequest",
1449
+ "responseType": "Note",
1450
+ "options": {
1451
+ "(google.api.http).get": "/v1/{name=projects/*/occurrences/*}/notes",
1452
+ "(google.api.method_signature)": "name"
1453
+ },
1454
+ "parsedOptions": [
1455
+ {
1456
+ "(google.api.http)": {
1457
+ "get": "/v1/{name=projects/*/occurrences/*}/notes"
1458
+ }
1155
1459
  },
1156
- "buildStartedOn": {
1157
- "type": "google.protobuf.Timestamp",
1158
- "id": 2
1460
+ {
1461
+ "(google.api.method_signature)": "name"
1462
+ }
1463
+ ]
1464
+ },
1465
+ "GetNote": {
1466
+ "requestType": "GetNoteRequest",
1467
+ "responseType": "Note",
1468
+ "options": {
1469
+ "(google.api.http).get": "/v1/{name=projects/*/notes/*}",
1470
+ "(google.api.method_signature)": "name"
1471
+ },
1472
+ "parsedOptions": [
1473
+ {
1474
+ "(google.api.http)": {
1475
+ "get": "/v1/{name=projects/*/notes/*}"
1476
+ }
1159
1477
  },
1160
- "buildFinishedOn": {
1161
- "type": "google.protobuf.Timestamp",
1162
- "id": 3
1478
+ {
1479
+ "(google.api.method_signature)": "name"
1480
+ }
1481
+ ]
1482
+ },
1483
+ "ListNotes": {
1484
+ "requestType": "ListNotesRequest",
1485
+ "responseType": "ListNotesResponse",
1486
+ "options": {
1487
+ "(google.api.http).get": "/v1/{parent=projects/*}/notes",
1488
+ "(google.api.method_signature)": "parent,filter"
1489
+ },
1490
+ "parsedOptions": [
1491
+ {
1492
+ "(google.api.http)": {
1493
+ "get": "/v1/{parent=projects/*}/notes"
1494
+ }
1163
1495
  },
1164
- "completeness": {
1165
- "type": "SlsaCompleteness",
1166
- "id": 4
1496
+ {
1497
+ "(google.api.method_signature)": "parent,filter"
1498
+ }
1499
+ ]
1500
+ },
1501
+ "DeleteNote": {
1502
+ "requestType": "DeleteNoteRequest",
1503
+ "responseType": "google.protobuf.Empty",
1504
+ "options": {
1505
+ "(google.api.http).delete": "/v1/{name=projects/*/notes/*}",
1506
+ "(google.api.method_signature)": "name"
1507
+ },
1508
+ "parsedOptions": [
1509
+ {
1510
+ "(google.api.http)": {
1511
+ "delete": "/v1/{name=projects/*/notes/*}"
1512
+ }
1167
1513
  },
1168
- "reproducible": {
1169
- "type": "bool",
1170
- "id": 5
1514
+ {
1515
+ "(google.api.method_signature)": "name"
1171
1516
  }
1172
- }
1517
+ ]
1173
1518
  },
1174
- "SlsaBuilder": {
1175
- "fields": {
1176
- "id": {
1177
- "type": "string",
1178
- "id": 1
1519
+ "CreateNote": {
1520
+ "requestType": "CreateNoteRequest",
1521
+ "responseType": "Note",
1522
+ "options": {
1523
+ "(google.api.http).post": "/v1/{parent=projects/*}/notes",
1524
+ "(google.api.http).body": "note",
1525
+ "(google.api.method_signature)": "parent,note_id,note"
1526
+ },
1527
+ "parsedOptions": [
1528
+ {
1529
+ "(google.api.http)": {
1530
+ "post": "/v1/{parent=projects/*}/notes",
1531
+ "body": "note"
1532
+ }
1533
+ },
1534
+ {
1535
+ "(google.api.method_signature)": "parent,note_id,note"
1536
+ }
1537
+ ]
1538
+ },
1539
+ "BatchCreateNotes": {
1540
+ "requestType": "BatchCreateNotesRequest",
1541
+ "responseType": "BatchCreateNotesResponse",
1542
+ "options": {
1543
+ "(google.api.http).post": "/v1/{parent=projects/*}/notes:batchCreate",
1544
+ "(google.api.http).body": "*",
1545
+ "(google.api.method_signature)": "parent,notes"
1546
+ },
1547
+ "parsedOptions": [
1548
+ {
1549
+ "(google.api.http)": {
1550
+ "post": "/v1/{parent=projects/*}/notes:batchCreate",
1551
+ "body": "*"
1552
+ }
1553
+ },
1554
+ {
1555
+ "(google.api.method_signature)": "parent,notes"
1556
+ }
1557
+ ]
1558
+ },
1559
+ "UpdateNote": {
1560
+ "requestType": "UpdateNoteRequest",
1561
+ "responseType": "Note",
1562
+ "options": {
1563
+ "(google.api.http).patch": "/v1/{name=projects/*/notes/*}",
1564
+ "(google.api.http).body": "note",
1565
+ "(google.api.method_signature)": "name,note,update_mask"
1566
+ },
1567
+ "parsedOptions": [
1568
+ {
1569
+ "(google.api.http)": {
1570
+ "patch": "/v1/{name=projects/*/notes/*}",
1571
+ "body": "note"
1572
+ }
1573
+ },
1574
+ {
1575
+ "(google.api.method_signature)": "name,note,update_mask"
1179
1576
  }
1180
- }
1577
+ ]
1181
1578
  },
1182
- "Material": {
1183
- "fields": {
1184
- "uri": {
1185
- "type": "string",
1186
- "id": 1
1579
+ "ListNoteOccurrences": {
1580
+ "requestType": "ListNoteOccurrencesRequest",
1581
+ "responseType": "ListNoteOccurrencesResponse",
1582
+ "options": {
1583
+ "(google.api.http).get": "/v1/{name=projects/*/notes/*}/occurrences",
1584
+ "(google.api.method_signature)": "name,filter"
1585
+ },
1586
+ "parsedOptions": [
1587
+ {
1588
+ "(google.api.http)": {
1589
+ "get": "/v1/{name=projects/*/notes/*}/occurrences"
1590
+ }
1187
1591
  },
1188
- "digest": {
1189
- "keyType": "string",
1190
- "type": "string",
1191
- "id": 2
1592
+ {
1593
+ "(google.api.method_signature)": "name,filter"
1192
1594
  }
1193
- }
1595
+ ]
1194
1596
  }
1195
1597
  }
1196
1598
  },
1197
- "BuildProvenance": {
1599
+ "Occurrence": {
1600
+ "options": {
1601
+ "(google.api.resource).type": "grafeas.io/Occurrence",
1602
+ "(google.api.resource).pattern": "projects/{project}/occurrences/{occurrence}"
1603
+ },
1604
+ "oneofs": {
1605
+ "details": {
1606
+ "oneof": [
1607
+ "vulnerability",
1608
+ "build",
1609
+ "image",
1610
+ "package",
1611
+ "deployment",
1612
+ "discovery",
1613
+ "attestation",
1614
+ "upgrade",
1615
+ "compliance",
1616
+ "dsseAttestation"
1617
+ ]
1618
+ }
1619
+ },
1198
1620
  "fields": {
1199
- "id": {
1621
+ "name": {
1200
1622
  "type": "string",
1201
1623
  "id": 1
1202
1624
  },
1203
- "projectId": {
1625
+ "resourceUri": {
1204
1626
  "type": "string",
1205
1627
  "id": 2
1206
1628
  },
1207
- "commands": {
1208
- "rule": "repeated",
1209
- "type": "Command",
1629
+ "noteName": {
1630
+ "type": "string",
1210
1631
  "id": 3
1211
1632
  },
1212
- "builtArtifacts": {
1213
- "rule": "repeated",
1214
- "type": "Artifact",
1633
+ "kind": {
1634
+ "type": "grafeas.v1.NoteKind",
1215
1635
  "id": 4
1216
1636
  },
1217
- "createTime": {
1218
- "type": "google.protobuf.Timestamp",
1637
+ "remediation": {
1638
+ "type": "string",
1219
1639
  "id": 5
1220
1640
  },
1221
- "startTime": {
1641
+ "createTime": {
1222
1642
  "type": "google.protobuf.Timestamp",
1223
1643
  "id": 6
1224
1644
  },
1225
- "endTime": {
1645
+ "updateTime": {
1226
1646
  "type": "google.protobuf.Timestamp",
1227
1647
  "id": 7
1228
1648
  },
1229
- "creator": {
1230
- "type": "string",
1649
+ "vulnerability": {
1650
+ "type": "grafeas.v1.VulnerabilityOccurrence",
1231
1651
  "id": 8
1232
1652
  },
1233
- "logsUri": {
1234
- "type": "string",
1653
+ "build": {
1654
+ "type": "grafeas.v1.BuildOccurrence",
1235
1655
  "id": 9
1236
1656
  },
1237
- "sourceProvenance": {
1238
- "type": "Source",
1657
+ "image": {
1658
+ "type": "grafeas.v1.ImageOccurrence",
1239
1659
  "id": 10
1240
1660
  },
1241
- "triggerId": {
1242
- "type": "string",
1661
+ "package": {
1662
+ "type": "grafeas.v1.PackageOccurrence",
1243
1663
  "id": 11
1244
1664
  },
1245
- "buildOptions": {
1246
- "keyType": "string",
1247
- "type": "string",
1665
+ "deployment": {
1666
+ "type": "grafeas.v1.DeploymentOccurrence",
1248
1667
  "id": 12
1249
1668
  },
1250
- "builderVersion": {
1251
- "type": "string",
1669
+ "discovery": {
1670
+ "type": "grafeas.v1.DiscoveryOccurrence",
1252
1671
  "id": 13
1253
- }
1254
- }
1255
- },
1256
- "Source": {
1257
- "fields": {
1258
- "artifactStorageSourceUri": {
1259
- "type": "string",
1260
- "id": 1
1261
1672
  },
1262
- "fileHashes": {
1263
- "keyType": "string",
1264
- "type": "FileHashes",
1265
- "id": 2
1673
+ "attestation": {
1674
+ "type": "grafeas.v1.AttestationOccurrence",
1675
+ "id": 14
1266
1676
  },
1267
- "context": {
1268
- "type": "SourceContext",
1269
- "id": 3
1677
+ "upgrade": {
1678
+ "type": "grafeas.v1.UpgradeOccurrence",
1679
+ "id": 15
1270
1680
  },
1271
- "additionalContexts": {
1272
- "rule": "repeated",
1273
- "type": "SourceContext",
1274
- "id": 4
1275
- }
1276
- }
1277
- },
1278
- "FileHashes": {
1279
- "fields": {
1280
- "fileHash": {
1281
- "rule": "repeated",
1282
- "type": "Hash",
1283
- "id": 1
1681
+ "compliance": {
1682
+ "type": "grafeas.v1.ComplianceOccurrence",
1683
+ "id": 16
1684
+ },
1685
+ "dsseAttestation": {
1686
+ "type": "grafeas.v1.DSSEAttestationOccurrence",
1687
+ "id": 17
1688
+ },
1689
+ "envelope": {
1690
+ "type": "grafeas.v1.Envelope",
1691
+ "id": 18
1284
1692
  }
1285
1693
  }
1286
1694
  },
1287
- "Hash": {
1288
- "fields": {
1695
+ "Note": {
1696
+ "options": {
1697
+ "(google.api.resource).type": "grafeas.io/Note",
1698
+ "(google.api.resource).pattern": "projects/{project}/notes/{note}"
1699
+ },
1700
+ "oneofs": {
1289
1701
  "type": {
1290
- "type": "string",
1291
- "id": 1
1292
- },
1293
- "value": {
1294
- "type": "bytes",
1295
- "id": 2
1702
+ "oneof": [
1703
+ "vulnerability",
1704
+ "build",
1705
+ "image",
1706
+ "package",
1707
+ "deployment",
1708
+ "discovery",
1709
+ "attestation",
1710
+ "upgrade",
1711
+ "compliance",
1712
+ "dsseAttestation"
1713
+ ]
1296
1714
  }
1297
- }
1298
- },
1299
- "Command": {
1715
+ },
1300
1716
  "fields": {
1301
1717
  "name": {
1302
1718
  "type": "string",
1303
1719
  "id": 1
1304
1720
  },
1305
- "env": {
1306
- "rule": "repeated",
1721
+ "shortDescription": {
1307
1722
  "type": "string",
1308
1723
  "id": 2
1309
1724
  },
1310
- "args": {
1311
- "rule": "repeated",
1725
+ "longDescription": {
1312
1726
  "type": "string",
1313
1727
  "id": 3
1314
1728
  },
1315
- "dir": {
1316
- "type": "string",
1729
+ "kind": {
1730
+ "type": "grafeas.v1.NoteKind",
1317
1731
  "id": 4
1318
1732
  },
1319
- "id": {
1320
- "type": "string",
1733
+ "relatedUrl": {
1734
+ "rule": "repeated",
1735
+ "type": "grafeas.v1.RelatedUrl",
1321
1736
  "id": 5
1322
1737
  },
1323
- "waitFor": {
1738
+ "expirationTime": {
1739
+ "type": "google.protobuf.Timestamp",
1740
+ "id": 6
1741
+ },
1742
+ "createTime": {
1743
+ "type": "google.protobuf.Timestamp",
1744
+ "id": 7
1745
+ },
1746
+ "updateTime": {
1747
+ "type": "google.protobuf.Timestamp",
1748
+ "id": 8
1749
+ },
1750
+ "relatedNoteNames": {
1324
1751
  "rule": "repeated",
1325
1752
  "type": "string",
1326
- "id": 6
1753
+ "id": 9
1754
+ },
1755
+ "vulnerability": {
1756
+ "type": "grafeas.v1.VulnerabilityNote",
1757
+ "id": 10
1758
+ },
1759
+ "build": {
1760
+ "type": "grafeas.v1.BuildNote",
1761
+ "id": 11
1762
+ },
1763
+ "image": {
1764
+ "type": "grafeas.v1.ImageNote",
1765
+ "id": 12
1766
+ },
1767
+ "package": {
1768
+ "type": "grafeas.v1.PackageNote",
1769
+ "id": 13
1770
+ },
1771
+ "deployment": {
1772
+ "type": "grafeas.v1.DeploymentNote",
1773
+ "id": 14
1774
+ },
1775
+ "discovery": {
1776
+ "type": "grafeas.v1.DiscoveryNote",
1777
+ "id": 15
1778
+ },
1779
+ "attestation": {
1780
+ "type": "grafeas.v1.AttestationNote",
1781
+ "id": 16
1782
+ },
1783
+ "upgrade": {
1784
+ "type": "grafeas.v1.UpgradeNote",
1785
+ "id": 17
1786
+ },
1787
+ "compliance": {
1788
+ "type": "grafeas.v1.ComplianceNote",
1789
+ "id": 18
1790
+ },
1791
+ "dsseAttestation": {
1792
+ "type": "grafeas.v1.DSSEAttestationNote",
1793
+ "id": 19
1794
+ }
1795
+ }
1796
+ },
1797
+ "GetOccurrenceRequest": {
1798
+ "fields": {
1799
+ "name": {
1800
+ "type": "string",
1801
+ "id": 1,
1802
+ "options": {
1803
+ "(google.api.field_behavior)": "REQUIRED",
1804
+ "(google.api.resource_reference).type": "grafeas.io/Occurrence"
1805
+ }
1327
1806
  }
1328
1807
  }
1329
1808
  },
1330
- "Artifact": {
1809
+ "ListOccurrencesRequest": {
1331
1810
  "fields": {
1332
- "checksum": {
1333
- "type": "string",
1334
- "id": 1
1335
- },
1336
- "id": {
1811
+ "parent": {
1337
1812
  "type": "string",
1338
- "id": 2
1813
+ "id": 1,
1814
+ "options": {
1815
+ "(google.api.field_behavior)": "REQUIRED",
1816
+ "(google.api.resource_reference).type": "grafeas.io/Project"
1817
+ }
1339
1818
  },
1340
- "names": {
1341
- "rule": "repeated",
1819
+ "filter": {
1342
1820
  "type": "string",
1343
- "id": 3
1344
- }
1345
- }
1346
- },
1347
- "SourceContext": {
1348
- "oneofs": {
1349
- "context": {
1350
- "oneof": [
1351
- "cloudRepo",
1352
- "gerrit",
1353
- "git"
1354
- ]
1355
- }
1356
- },
1357
- "fields": {
1358
- "cloudRepo": {
1359
- "type": "CloudRepoSourceContext",
1360
- "id": 1
1361
- },
1362
- "gerrit": {
1363
- "type": "GerritSourceContext",
1364
1821
  "id": 2
1365
1822
  },
1366
- "git": {
1367
- "type": "GitSourceContext",
1823
+ "pageSize": {
1824
+ "type": "int32",
1368
1825
  "id": 3
1369
1826
  },
1370
- "labels": {
1371
- "keyType": "string",
1827
+ "pageToken": {
1372
1828
  "type": "string",
1373
1829
  "id": 4
1374
1830
  }
1375
1831
  }
1376
1832
  },
1377
- "AliasContext": {
1833
+ "ListOccurrencesResponse": {
1378
1834
  "fields": {
1379
- "kind": {
1380
- "type": "Kind",
1835
+ "occurrences": {
1836
+ "rule": "repeated",
1837
+ "type": "Occurrence",
1381
1838
  "id": 1
1382
1839
  },
1383
- "name": {
1840
+ "nextPageToken": {
1384
1841
  "type": "string",
1385
1842
  "id": 2
1386
1843
  }
1387
- },
1388
- "nested": {
1389
- "Kind": {
1390
- "values": {
1391
- "KIND_UNSPECIFIED": 0,
1392
- "FIXED": 1,
1393
- "MOVABLE": 2,
1394
- "OTHER": 4
1395
- }
1396
- }
1397
1844
  }
1398
1845
  },
1399
- "CloudRepoSourceContext": {
1400
- "oneofs": {
1401
- "revision": {
1402
- "oneof": [
1403
- "revisionId",
1404
- "aliasContext"
1405
- ]
1406
- }
1407
- },
1846
+ "DeleteOccurrenceRequest": {
1408
1847
  "fields": {
1409
- "repoId": {
1410
- "type": "RepoId",
1411
- "id": 1
1412
- },
1413
- "revisionId": {
1848
+ "name": {
1414
1849
  "type": "string",
1415
- "id": 2
1416
- },
1417
- "aliasContext": {
1418
- "type": "AliasContext",
1419
- "id": 3
1850
+ "id": 1,
1851
+ "options": {
1852
+ "(google.api.field_behavior)": "REQUIRED",
1853
+ "(google.api.resource_reference).type": "grafeas.io/Occurrence"
1854
+ }
1420
1855
  }
1421
1856
  }
1422
1857
  },
1423
- "GerritSourceContext": {
1424
- "oneofs": {
1425
- "revision": {
1426
- "oneof": [
1427
- "revisionId",
1428
- "aliasContext"
1429
- ]
1430
- }
1431
- },
1858
+ "CreateOccurrenceRequest": {
1432
1859
  "fields": {
1433
- "hostUri": {
1434
- "type": "string",
1435
- "id": 1
1436
- },
1437
- "gerritProject": {
1438
- "type": "string",
1439
- "id": 2
1440
- },
1441
- "revisionId": {
1860
+ "parent": {
1442
1861
  "type": "string",
1443
- "id": 3
1862
+ "id": 1,
1863
+ "options": {
1864
+ "(google.api.field_behavior)": "REQUIRED",
1865
+ "(google.api.resource_reference).type": "grafeas.io/Project"
1866
+ }
1444
1867
  },
1445
- "aliasContext": {
1446
- "type": "AliasContext",
1447
- "id": 4
1868
+ "occurrence": {
1869
+ "type": "Occurrence",
1870
+ "id": 2,
1871
+ "options": {
1872
+ "(google.api.field_behavior)": "REQUIRED"
1873
+ }
1448
1874
  }
1449
1875
  }
1450
1876
  },
1451
- "GitSourceContext": {
1877
+ "UpdateOccurrenceRequest": {
1452
1878
  "fields": {
1453
- "url": {
1879
+ "name": {
1454
1880
  "type": "string",
1455
- "id": 1
1881
+ "id": 1,
1882
+ "options": {
1883
+ "(google.api.field_behavior)": "REQUIRED",
1884
+ "(google.api.resource_reference).type": "grafeas.io/Occurrence"
1885
+ }
1456
1886
  },
1457
- "revisionId": {
1458
- "type": "string",
1459
- "id": 2
1887
+ "occurrence": {
1888
+ "type": "Occurrence",
1889
+ "id": 2,
1890
+ "options": {
1891
+ "(google.api.field_behavior)": "REQUIRED"
1892
+ }
1893
+ },
1894
+ "updateMask": {
1895
+ "type": "google.protobuf.FieldMask",
1896
+ "id": 3
1460
1897
  }
1461
1898
  }
1462
1899
  },
1463
- "RepoId": {
1464
- "oneofs": {
1465
- "id": {
1466
- "oneof": [
1467
- "projectRepoId",
1468
- "uid"
1469
- ]
1470
- }
1471
- },
1900
+ "GetNoteRequest": {
1472
1901
  "fields": {
1473
- "projectRepoId": {
1474
- "type": "ProjectRepoId",
1475
- "id": 1
1476
- },
1477
- "uid": {
1902
+ "name": {
1478
1903
  "type": "string",
1479
- "id": 2
1904
+ "id": 1,
1905
+ "options": {
1906
+ "(google.api.field_behavior)": "REQUIRED",
1907
+ "(google.api.resource_reference).type": "grafeas.io/Note"
1908
+ }
1480
1909
  }
1481
1910
  }
1482
1911
  },
1483
- "ProjectRepoId": {
1912
+ "GetOccurrenceNoteRequest": {
1484
1913
  "fields": {
1485
- "projectId": {
1486
- "type": "string",
1487
- "id": 1
1488
- },
1489
- "repoName": {
1914
+ "name": {
1490
1915
  "type": "string",
1491
- "id": 2
1916
+ "id": 1,
1917
+ "options": {
1918
+ "(google.api.field_behavior)": "REQUIRED",
1919
+ "(google.api.resource_reference).type": "grafeas.io/Occurrence"
1920
+ }
1492
1921
  }
1493
1922
  }
1494
1923
  },
1495
- "ComplianceNote": {
1496
- "oneofs": {
1497
- "complianceType": {
1498
- "oneof": [
1499
- "cisBenchmark"
1500
- ]
1501
- }
1502
- },
1924
+ "ListNotesRequest": {
1503
1925
  "fields": {
1504
- "title": {
1926
+ "parent": {
1505
1927
  "type": "string",
1506
- "id": 1
1928
+ "id": 1,
1929
+ "options": {
1930
+ "(google.api.field_behavior)": "REQUIRED",
1931
+ "(google.api.resource_reference).type": "grafeas.io/Project"
1932
+ }
1507
1933
  },
1508
- "description": {
1934
+ "filter": {
1509
1935
  "type": "string",
1510
1936
  "id": 2
1511
1937
  },
1512
- "version": {
1513
- "rule": "repeated",
1514
- "type": "grafeas.v1.ComplianceVersion",
1938
+ "pageSize": {
1939
+ "type": "int32",
1515
1940
  "id": 3
1516
1941
  },
1517
- "rationale": {
1942
+ "pageToken": {
1518
1943
  "type": "string",
1519
1944
  "id": 4
1520
- },
1521
- "remediation": {
1522
- "type": "string",
1523
- "id": 5
1524
- },
1525
- "cisBenchmark": {
1526
- "type": "CisBenchmark",
1527
- "id": 6
1528
- },
1529
- "scanInstructions": {
1530
- "type": "bytes",
1531
- "id": 7
1532
- }
1533
- },
1534
- "nested": {
1535
- "CisBenchmark": {
1536
- "fields": {
1537
- "profileLevel": {
1538
- "type": "int32",
1539
- "id": 1
1540
- },
1541
- "severity": {
1542
- "type": "grafeas.v1.Severity",
1543
- "id": 2
1544
- }
1545
- }
1546
1945
  }
1547
1946
  }
1548
1947
  },
1549
- "ComplianceVersion": {
1948
+ "ListNotesResponse": {
1550
1949
  "fields": {
1551
- "cpeUri": {
1552
- "type": "string",
1950
+ "notes": {
1951
+ "rule": "repeated",
1952
+ "type": "Note",
1553
1953
  "id": 1
1554
1954
  },
1555
- "version": {
1955
+ "nextPageToken": {
1556
1956
  "type": "string",
1557
1957
  "id": 2
1558
1958
  }
1559
1959
  }
1560
1960
  },
1561
- "ComplianceOccurrence": {
1961
+ "DeleteNoteRequest": {
1562
1962
  "fields": {
1563
- "nonCompliantFiles": {
1564
- "rule": "repeated",
1565
- "type": "NonCompliantFile",
1566
- "id": 2
1567
- },
1568
- "nonComplianceReason": {
1963
+ "name": {
1569
1964
  "type": "string",
1570
- "id": 3
1965
+ "id": 1,
1966
+ "options": {
1967
+ "(google.api.field_behavior)": "REQUIRED",
1968
+ "(google.api.resource_reference).type": "grafeas.io/Note"
1969
+ }
1571
1970
  }
1572
1971
  }
1573
1972
  },
1574
- "NonCompliantFile": {
1973
+ "CreateNoteRequest": {
1575
1974
  "fields": {
1576
- "path": {
1975
+ "parent": {
1577
1976
  "type": "string",
1578
- "id": 1
1977
+ "id": 1,
1978
+ "options": {
1979
+ "(google.api.field_behavior)": "REQUIRED",
1980
+ "(google.api.resource_reference).type": "grafeas.io/Project"
1981
+ }
1579
1982
  },
1580
- "displayCommand": {
1983
+ "noteId": {
1581
1984
  "type": "string",
1582
- "id": 2
1985
+ "id": 2,
1986
+ "options": {
1987
+ "(google.api.field_behavior)": "REQUIRED"
1988
+ }
1583
1989
  },
1584
- "reason": {
1585
- "type": "string",
1586
- "id": 3
1990
+ "note": {
1991
+ "type": "Note",
1992
+ "id": 3,
1993
+ "options": {
1994
+ "(google.api.field_behavior)": "REQUIRED"
1995
+ }
1587
1996
  }
1588
1997
  }
1589
1998
  },
1590
- "Severity": {
1591
- "values": {
1592
- "SEVERITY_UNSPECIFIED": 0,
1593
- "MINIMAL": 1,
1594
- "LOW": 2,
1595
- "MEDIUM": 3,
1596
- "HIGH": 4,
1597
- "CRITICAL": 5
1598
- }
1599
- },
1600
- "DeploymentNote": {
1999
+ "UpdateNoteRequest": {
1601
2000
  "fields": {
1602
- "resourceUri": {
1603
- "rule": "repeated",
2001
+ "name": {
1604
2002
  "type": "string",
1605
- "id": 1
2003
+ "id": 1,
2004
+ "options": {
2005
+ "(google.api.field_behavior)": "REQUIRED",
2006
+ "(google.api.resource_reference).type": "grafeas.io/Note"
2007
+ }
2008
+ },
2009
+ "note": {
2010
+ "type": "Note",
2011
+ "id": 2,
2012
+ "options": {
2013
+ "(google.api.field_behavior)": "REQUIRED"
2014
+ }
2015
+ },
2016
+ "updateMask": {
2017
+ "type": "google.protobuf.FieldMask",
2018
+ "id": 3
1606
2019
  }
1607
2020
  }
1608
2021
  },
1609
- "DeploymentOccurrence": {
2022
+ "ListNoteOccurrencesRequest": {
1610
2023
  "fields": {
1611
- "userEmail": {
2024
+ "name": {
1612
2025
  "type": "string",
1613
- "id": 1
2026
+ "id": 1,
2027
+ "options": {
2028
+ "(google.api.field_behavior)": "REQUIRED",
2029
+ "(google.api.resource_reference).type": "grafeas.io/Note"
2030
+ }
1614
2031
  },
1615
- "deployTime": {
1616
- "type": "google.protobuf.Timestamp",
2032
+ "filter": {
2033
+ "type": "string",
1617
2034
  "id": 2
1618
2035
  },
1619
- "undeployTime": {
1620
- "type": "google.protobuf.Timestamp",
2036
+ "pageSize": {
2037
+ "type": "int32",
1621
2038
  "id": 3
1622
2039
  },
1623
- "config": {
2040
+ "pageToken": {
1624
2041
  "type": "string",
1625
2042
  "id": 4
1626
- },
1627
- "address": {
1628
- "type": "string",
1629
- "id": 5
1630
- },
1631
- "resourceUri": {
1632
- "rule": "repeated",
1633
- "type": "string",
1634
- "id": 6
1635
- },
1636
- "platform": {
1637
- "type": "Platform",
1638
- "id": 7
1639
- }
1640
- },
1641
- "nested": {
1642
- "Platform": {
1643
- "values": {
1644
- "PLATFORM_UNSPECIFIED": 0,
1645
- "GKE": 1,
1646
- "FLEX": 2,
1647
- "CUSTOM": 3
1648
- }
1649
2043
  }
1650
2044
  }
1651
2045
  },
1652
- "DiscoveryNote": {
2046
+ "ListNoteOccurrencesResponse": {
1653
2047
  "fields": {
1654
- "analysisKind": {
1655
- "type": "grafeas.v1.NoteKind",
2048
+ "occurrences": {
2049
+ "rule": "repeated",
2050
+ "type": "Occurrence",
1656
2051
  "id": 1
2052
+ },
2053
+ "nextPageToken": {
2054
+ "type": "string",
2055
+ "id": 2
1657
2056
  }
1658
2057
  }
1659
2058
  },
1660
- "DiscoveryOccurrence": {
2059
+ "BatchCreateNotesRequest": {
1661
2060
  "fields": {
1662
- "continuousAnalysis": {
1663
- "type": "ContinuousAnalysis",
1664
- "id": 1
1665
- },
1666
- "analysisStatus": {
1667
- "type": "AnalysisStatus",
1668
- "id": 2
1669
- },
1670
- "analysisStatusError": {
1671
- "type": "google.rpc.Status",
1672
- "id": 3
1673
- },
1674
- "cpe": {
2061
+ "parent": {
1675
2062
  "type": "string",
1676
- "id": 4
1677
- },
1678
- "lastScanTime": {
1679
- "type": "google.protobuf.Timestamp",
1680
- "id": 5
1681
- },
1682
- "archiveTime": {
1683
- "type": "google.protobuf.Timestamp",
1684
- "id": 6,
2063
+ "id": 1,
1685
2064
  "options": {
1686
- "(google.api.field_behavior)": "OUTPUT_ONLY"
1687
- }
1688
- }
1689
- },
1690
- "nested": {
1691
- "ContinuousAnalysis": {
1692
- "values": {
1693
- "CONTINUOUS_ANALYSIS_UNSPECIFIED": 0,
1694
- "ACTIVE": 1,
1695
- "INACTIVE": 2
2065
+ "(google.api.field_behavior)": "REQUIRED",
2066
+ "(google.api.resource_reference).type": "grafeas.io/Project"
1696
2067
  }
1697
2068
  },
1698
- "AnalysisStatus": {
1699
- "values": {
1700
- "ANALYSIS_STATUS_UNSPECIFIED": 0,
1701
- "PENDING": 1,
1702
- "SCANNING": 2,
1703
- "FINISHED_SUCCESS": 3,
1704
- "FINISHED_FAILED": 4,
1705
- "FINISHED_UNSUPPORTED": 5
2069
+ "notes": {
2070
+ "keyType": "string",
2071
+ "type": "Note",
2072
+ "id": 2,
2073
+ "options": {
2074
+ "(google.api.field_behavior)": "REQUIRED"
1706
2075
  }
1707
2076
  }
1708
2077
  }
1709
2078
  },
1710
- "DSSEAttestationNote": {
2079
+ "BatchCreateNotesResponse": {
1711
2080
  "fields": {
1712
- "hint": {
1713
- "type": "DSSEHint",
2081
+ "notes": {
2082
+ "rule": "repeated",
2083
+ "type": "Note",
1714
2084
  "id": 1
1715
2085
  }
1716
- },
1717
- "nested": {
1718
- "DSSEHint": {
1719
- "fields": {
1720
- "humanReadableName": {
1721
- "type": "string",
1722
- "id": 1
1723
- }
2086
+ }
2087
+ },
2088
+ "BatchCreateOccurrencesRequest": {
2089
+ "fields": {
2090
+ "parent": {
2091
+ "type": "string",
2092
+ "id": 1,
2093
+ "options": {
2094
+ "(google.api.field_behavior)": "REQUIRED",
2095
+ "(google.api.resource_reference).type": "grafeas.io/Project"
2096
+ }
2097
+ },
2098
+ "occurrences": {
2099
+ "rule": "repeated",
2100
+ "type": "Occurrence",
2101
+ "id": 2,
2102
+ "options": {
2103
+ "(google.api.field_behavior)": "REQUIRED"
1724
2104
  }
1725
2105
  }
1726
2106
  }
1727
2107
  },
1728
- "DSSEAttestationOccurrence": {
1729
- "oneofs": {
1730
- "decodedPayload": {
1731
- "oneof": [
1732
- "statement"
1733
- ]
1734
- }
1735
- },
2108
+ "BatchCreateOccurrencesResponse": {
1736
2109
  "fields": {
1737
- "envelope": {
1738
- "type": "Envelope",
2110
+ "occurrences": {
2111
+ "rule": "repeated",
2112
+ "type": "Occurrence",
1739
2113
  "id": 1
1740
- },
1741
- "statement": {
1742
- "type": "InTotoStatement",
1743
- "id": 2
1744
2114
  }
1745
2115
  }
1746
2116
  },
@@ -1817,7 +2187,10 @@
1817
2187
  "fields": {
1818
2188
  "cpeUri": {
1819
2189
  "type": "string",
1820
- "id": 1
2190
+ "id": 1,
2191
+ "options": {
2192
+ "(google.api.field_behavior)": "REQUIRED"
2193
+ }
1821
2194
  },
1822
2195
  "architecture": {
1823
2196
  "type": "Architecture",
@@ -1849,24 +2222,64 @@
1849
2222
  },
1850
2223
  "version": {
1851
2224
  "type": "Version",
1852
- "id": 2
2225
+ "id": 2
2226
+ },
2227
+ "path": {
2228
+ "type": "string",
2229
+ "id": 3
2230
+ }
2231
+ }
2232
+ },
2233
+ "PackageNote": {
2234
+ "fields": {
2235
+ "name": {
2236
+ "type": "string",
2237
+ "id": 1,
2238
+ "options": {
2239
+ "(google.api.field_behavior)": "IMMUTABLE"
2240
+ }
2241
+ },
2242
+ "distribution": {
2243
+ "rule": "repeated",
2244
+ "type": "Distribution",
2245
+ "id": 10
2246
+ },
2247
+ "packageType": {
2248
+ "type": "string",
2249
+ "id": 11
2250
+ },
2251
+ "cpeUri": {
2252
+ "type": "string",
2253
+ "id": 12
2254
+ },
2255
+ "architecture": {
2256
+ "type": "Architecture",
2257
+ "id": 13
2258
+ },
2259
+ "version": {
2260
+ "type": "Version",
2261
+ "id": 14
1853
2262
  },
1854
- "path": {
2263
+ "maintainer": {
1855
2264
  "type": "string",
1856
- "id": 3
1857
- }
1858
- }
1859
- },
1860
- "PackageNote": {
1861
- "fields": {
1862
- "name": {
2265
+ "id": 15
2266
+ },
2267
+ "url": {
1863
2268
  "type": "string",
1864
- "id": 1
2269
+ "id": 16
1865
2270
  },
1866
- "distribution": {
2271
+ "description": {
2272
+ "type": "string",
2273
+ "id": 17
2274
+ },
2275
+ "license": {
2276
+ "type": "License",
2277
+ "id": 18
2278
+ },
2279
+ "digest": {
1867
2280
  "rule": "repeated",
1868
- "type": "Distribution",
1869
- "id": 10
2281
+ "type": "Digest",
2282
+ "id": 19
1870
2283
  }
1871
2284
  }
1872
2285
  },
@@ -1874,12 +2287,47 @@
1874
2287
  "fields": {
1875
2288
  "name": {
1876
2289
  "type": "string",
1877
- "id": 1
2290
+ "id": 1,
2291
+ "options": {
2292
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
2293
+ }
1878
2294
  },
1879
2295
  "location": {
1880
2296
  "rule": "repeated",
1881
2297
  "type": "Location",
1882
2298
  "id": 2
2299
+ },
2300
+ "packageType": {
2301
+ "type": "string",
2302
+ "id": 3,
2303
+ "options": {
2304
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
2305
+ }
2306
+ },
2307
+ "cpeUri": {
2308
+ "type": "string",
2309
+ "id": 4,
2310
+ "options": {
2311
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
2312
+ }
2313
+ },
2314
+ "architecture": {
2315
+ "type": "Architecture",
2316
+ "id": 5,
2317
+ "options": {
2318
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
2319
+ }
2320
+ },
2321
+ "license": {
2322
+ "type": "License",
2323
+ "id": 6
2324
+ },
2325
+ "version": {
2326
+ "type": "Version",
2327
+ "id": 7,
2328
+ "options": {
2329
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
2330
+ }
1883
2331
  }
1884
2332
  }
1885
2333
  },
@@ -2159,308 +2607,109 @@
2159
2607
  "name": {
2160
2608
  "type": "string",
2161
2609
  "id": 1
2162
- },
2163
- "url": {
2164
- "type": "string",
2165
- "id": 2
2166
- }
2167
- }
2168
- }
2169
- }
2170
- }
2171
- }
2172
- },
2173
- "VulnerabilityOccurrence": {
2174
- "fields": {
2175
- "type": {
2176
- "type": "string",
2177
- "id": 1
2178
- },
2179
- "severity": {
2180
- "type": "grafeas.v1.Severity",
2181
- "id": 2
2182
- },
2183
- "cvssScore": {
2184
- "type": "float",
2185
- "id": 3
2186
- },
2187
- "cvssv3": {
2188
- "type": "CVSS",
2189
- "id": 10
2190
- },
2191
- "packageIssue": {
2192
- "rule": "repeated",
2193
- "type": "PackageIssue",
2194
- "id": 4
2195
- },
2196
- "shortDescription": {
2197
- "type": "string",
2198
- "id": 5
2199
- },
2200
- "longDescription": {
2201
- "type": "string",
2202
- "id": 6
2203
- },
2204
- "relatedUrls": {
2205
- "rule": "repeated",
2206
- "type": "grafeas.v1.RelatedUrl",
2207
- "id": 7
2208
- },
2209
- "effectiveSeverity": {
2210
- "type": "grafeas.v1.Severity",
2211
- "id": 8
2212
- },
2213
- "fixAvailable": {
2214
- "type": "bool",
2215
- "id": 9
2216
- }
2217
- },
2218
- "nested": {
2219
- "PackageIssue": {
2220
- "fields": {
2221
- "affectedCpeUri": {
2222
- "type": "string",
2223
- "id": 1
2224
- },
2225
- "affectedPackage": {
2226
- "type": "string",
2227
- "id": 2
2228
- },
2229
- "affectedVersion": {
2230
- "type": "grafeas.v1.Version",
2231
- "id": 3
2232
- },
2233
- "fixedCpeUri": {
2234
- "type": "string",
2235
- "id": 4
2236
- },
2237
- "fixedPackage": {
2238
- "type": "string",
2239
- "id": 5
2240
- },
2241
- "fixedVersion": {
2242
- "type": "grafeas.v1.Version",
2243
- "id": 6
2244
- },
2245
- "fixAvailable": {
2246
- "type": "bool",
2247
- "id": 7
2248
- },
2249
- "packageType": {
2250
- "type": "string",
2251
- "id": 8
2252
- },
2253
- "effectiveSeverity": {
2254
- "type": "grafeas.v1.Severity",
2255
- "id": 9,
2256
- "options": {
2257
- "(google.api.field_behavior)": "OUTPUT_ONLY"
2258
- }
2259
- }
2260
- }
2261
- }
2262
- }
2263
- },
2264
- "CVSSv3": {
2265
- "fields": {
2266
- "baseScore": {
2267
- "type": "float",
2268
- "id": 1
2269
- },
2270
- "exploitabilityScore": {
2271
- "type": "float",
2272
- "id": 2
2273
- },
2274
- "impactScore": {
2275
- "type": "float",
2276
- "id": 3
2277
- },
2278
- "attackVector": {
2279
- "type": "AttackVector",
2280
- "id": 5
2281
- },
2282
- "attackComplexity": {
2283
- "type": "AttackComplexity",
2284
- "id": 6
2285
- },
2286
- "privilegesRequired": {
2287
- "type": "PrivilegesRequired",
2288
- "id": 7
2289
- },
2290
- "userInteraction": {
2291
- "type": "UserInteraction",
2292
- "id": 8
2293
- },
2294
- "scope": {
2295
- "type": "Scope",
2296
- "id": 9
2297
- },
2298
- "confidentialityImpact": {
2299
- "type": "Impact",
2300
- "id": 10
2301
- },
2302
- "integrityImpact": {
2303
- "type": "Impact",
2304
- "id": 11
2305
- },
2306
- "availabilityImpact": {
2307
- "type": "Impact",
2308
- "id": 12
2309
- }
2310
- },
2311
- "nested": {
2312
- "AttackVector": {
2313
- "values": {
2314
- "ATTACK_VECTOR_UNSPECIFIED": 0,
2315
- "ATTACK_VECTOR_NETWORK": 1,
2316
- "ATTACK_VECTOR_ADJACENT": 2,
2317
- "ATTACK_VECTOR_LOCAL": 3,
2318
- "ATTACK_VECTOR_PHYSICAL": 4
2319
- }
2320
- },
2321
- "AttackComplexity": {
2322
- "values": {
2323
- "ATTACK_COMPLEXITY_UNSPECIFIED": 0,
2324
- "ATTACK_COMPLEXITY_LOW": 1,
2325
- "ATTACK_COMPLEXITY_HIGH": 2
2326
- }
2327
- },
2328
- "PrivilegesRequired": {
2329
- "values": {
2330
- "PRIVILEGES_REQUIRED_UNSPECIFIED": 0,
2331
- "PRIVILEGES_REQUIRED_NONE": 1,
2332
- "PRIVILEGES_REQUIRED_LOW": 2,
2333
- "PRIVILEGES_REQUIRED_HIGH": 3
2334
- }
2335
- },
2336
- "UserInteraction": {
2337
- "values": {
2338
- "USER_INTERACTION_UNSPECIFIED": 0,
2339
- "USER_INTERACTION_NONE": 1,
2340
- "USER_INTERACTION_REQUIRED": 2
2341
- }
2342
- },
2343
- "Scope": {
2344
- "values": {
2345
- "SCOPE_UNSPECIFIED": 0,
2346
- "SCOPE_UNCHANGED": 1,
2347
- "SCOPE_CHANGED": 2
2348
- }
2349
- },
2350
- "Impact": {
2351
- "values": {
2352
- "IMPACT_UNSPECIFIED": 0,
2353
- "IMPACT_HIGH": 1,
2354
- "IMPACT_LOW": 2,
2355
- "IMPACT_NONE": 3
2610
+ },
2611
+ "url": {
2612
+ "type": "string",
2613
+ "id": 2
2614
+ }
2615
+ }
2616
+ }
2356
2617
  }
2357
2618
  }
2358
2619
  }
2359
2620
  },
2360
- "CVSS": {
2621
+ "VulnerabilityOccurrence": {
2361
2622
  "fields": {
2362
- "baseScore": {
2363
- "type": "float",
2623
+ "type": {
2624
+ "type": "string",
2364
2625
  "id": 1
2365
2626
  },
2366
- "exploitabilityScore": {
2367
- "type": "float",
2627
+ "severity": {
2628
+ "type": "grafeas.v1.Severity",
2368
2629
  "id": 2
2369
2630
  },
2370
- "impactScore": {
2631
+ "cvssScore": {
2371
2632
  "type": "float",
2372
2633
  "id": 3
2373
2634
  },
2374
- "attackVector": {
2375
- "type": "AttackVector",
2635
+ "cvssv3": {
2636
+ "type": "CVSS",
2637
+ "id": 10
2638
+ },
2639
+ "packageIssue": {
2640
+ "rule": "repeated",
2641
+ "type": "PackageIssue",
2376
2642
  "id": 4
2377
2643
  },
2378
- "attackComplexity": {
2379
- "type": "AttackComplexity",
2644
+ "shortDescription": {
2645
+ "type": "string",
2380
2646
  "id": 5
2381
2647
  },
2382
- "authentication": {
2383
- "type": "Authentication",
2648
+ "longDescription": {
2649
+ "type": "string",
2384
2650
  "id": 6
2385
2651
  },
2386
- "privilegesRequired": {
2387
- "type": "PrivilegesRequired",
2652
+ "relatedUrls": {
2653
+ "rule": "repeated",
2654
+ "type": "grafeas.v1.RelatedUrl",
2388
2655
  "id": 7
2389
2656
  },
2390
- "userInteraction": {
2391
- "type": "UserInteraction",
2657
+ "effectiveSeverity": {
2658
+ "type": "grafeas.v1.Severity",
2392
2659
  "id": 8
2393
2660
  },
2394
- "scope": {
2395
- "type": "Scope",
2661
+ "fixAvailable": {
2662
+ "type": "bool",
2396
2663
  "id": 9
2397
- },
2398
- "confidentialityImpact": {
2399
- "type": "Impact",
2400
- "id": 10
2401
- },
2402
- "integrityImpact": {
2403
- "type": "Impact",
2404
- "id": 11
2405
- },
2406
- "availabilityImpact": {
2407
- "type": "Impact",
2408
- "id": 12
2409
2664
  }
2410
2665
  },
2411
2666
  "nested": {
2412
- "AttackVector": {
2413
- "values": {
2414
- "ATTACK_VECTOR_UNSPECIFIED": 0,
2415
- "ATTACK_VECTOR_NETWORK": 1,
2416
- "ATTACK_VECTOR_ADJACENT": 2,
2417
- "ATTACK_VECTOR_LOCAL": 3,
2418
- "ATTACK_VECTOR_PHYSICAL": 4
2419
- }
2420
- },
2421
- "AttackComplexity": {
2422
- "values": {
2423
- "ATTACK_COMPLEXITY_UNSPECIFIED": 0,
2424
- "ATTACK_COMPLEXITY_LOW": 1,
2425
- "ATTACK_COMPLEXITY_HIGH": 2
2426
- }
2427
- },
2428
- "Authentication": {
2429
- "values": {
2430
- "AUTHENTICATION_UNSPECIFIED": 0,
2431
- "AUTHENTICATION_MULTIPLE": 1,
2432
- "AUTHENTICATION_SINGLE": 2,
2433
- "AUTHENTICATION_NONE": 3
2434
- }
2435
- },
2436
- "PrivilegesRequired": {
2437
- "values": {
2438
- "PRIVILEGES_REQUIRED_UNSPECIFIED": 0,
2439
- "PRIVILEGES_REQUIRED_NONE": 1,
2440
- "PRIVILEGES_REQUIRED_LOW": 2,
2441
- "PRIVILEGES_REQUIRED_HIGH": 3
2442
- }
2443
- },
2444
- "UserInteraction": {
2445
- "values": {
2446
- "USER_INTERACTION_UNSPECIFIED": 0,
2447
- "USER_INTERACTION_NONE": 1,
2448
- "USER_INTERACTION_REQUIRED": 2
2449
- }
2450
- },
2451
- "Scope": {
2452
- "values": {
2453
- "SCOPE_UNSPECIFIED": 0,
2454
- "SCOPE_UNCHANGED": 1,
2455
- "SCOPE_CHANGED": 2
2456
- }
2457
- },
2458
- "Impact": {
2459
- "values": {
2460
- "IMPACT_UNSPECIFIED": 0,
2461
- "IMPACT_HIGH": 1,
2462
- "IMPACT_LOW": 2,
2463
- "IMPACT_NONE": 3
2667
+ "PackageIssue": {
2668
+ "fields": {
2669
+ "affectedCpeUri": {
2670
+ "type": "string",
2671
+ "id": 1
2672
+ },
2673
+ "affectedPackage": {
2674
+ "type": "string",
2675
+ "id": 2
2676
+ },
2677
+ "affectedVersion": {
2678
+ "type": "grafeas.v1.Version",
2679
+ "id": 3
2680
+ },
2681
+ "fixedCpeUri": {
2682
+ "type": "string",
2683
+ "id": 4
2684
+ },
2685
+ "fixedPackage": {
2686
+ "type": "string",
2687
+ "id": 5
2688
+ },
2689
+ "fixedVersion": {
2690
+ "type": "grafeas.v1.Version",
2691
+ "id": 6
2692
+ },
2693
+ "fixAvailable": {
2694
+ "type": "bool",
2695
+ "id": 7
2696
+ },
2697
+ "packageType": {
2698
+ "type": "string",
2699
+ "id": 8
2700
+ },
2701
+ "effectiveSeverity": {
2702
+ "type": "grafeas.v1.Severity",
2703
+ "id": 9,
2704
+ "options": {
2705
+ "(google.api.field_behavior)": "OUTPUT_ONLY"
2706
+ }
2707
+ },
2708
+ "fileLocation": {
2709
+ "rule": "repeated",
2710
+ "type": "FileLocation",
2711
+ "id": 10
2712
+ }
2464
2713
  }
2465
2714
  }
2466
2715
  }
@@ -5610,6 +5859,13 @@
5610
5859
  "default": false
5611
5860
  }
5612
5861
  },
5862
+ "unverifiedLazy": {
5863
+ "type": "bool",
5864
+ "id": 15,
5865
+ "options": {
5866
+ "default": false
5867
+ }
5868
+ },
5613
5869
  "deprecated": {
5614
5870
  "type": "bool",
5615
5871
  "id": 3,
@@ -5907,6 +6163,27 @@
5907
6163
  }
5908
6164
  }
5909
6165
  },
6166
+ "FieldMask": {
6167
+ "fields": {
6168
+ "paths": {
6169
+ "rule": "repeated",
6170
+ "type": "string",
6171
+ "id": 1
6172
+ }
6173
+ }
6174
+ },
6175
+ "Any": {
6176
+ "fields": {
6177
+ "type_url": {
6178
+ "type": "string",
6179
+ "id": 1
6180
+ },
6181
+ "value": {
6182
+ "type": "bytes",
6183
+ "id": 2
6184
+ }
6185
+ }
6186
+ },
5910
6187
  "Timestamp": {
5911
6188
  "fields": {
5912
6189
  "seconds": {
@@ -5919,29 +6196,71 @@
5919
6196
  }
5920
6197
  }
5921
6198
  },
5922
- "Empty": {
5923
- "fields": {}
5924
- },
5925
- "FieldMask": {
6199
+ "Struct": {
5926
6200
  "fields": {
5927
- "paths": {
5928
- "rule": "repeated",
5929
- "type": "string",
6201
+ "fields": {
6202
+ "keyType": "string",
6203
+ "type": "Value",
5930
6204
  "id": 1
5931
6205
  }
5932
6206
  }
5933
6207
  },
5934
- "Any": {
6208
+ "Value": {
6209
+ "oneofs": {
6210
+ "kind": {
6211
+ "oneof": [
6212
+ "nullValue",
6213
+ "numberValue",
6214
+ "stringValue",
6215
+ "boolValue",
6216
+ "structValue",
6217
+ "listValue"
6218
+ ]
6219
+ }
6220
+ },
5935
6221
  "fields": {
5936
- "type_url": {
5937
- "type": "string",
6222
+ "nullValue": {
6223
+ "type": "NullValue",
5938
6224
  "id": 1
5939
6225
  },
5940
- "value": {
5941
- "type": "bytes",
6226
+ "numberValue": {
6227
+ "type": "double",
5942
6228
  "id": 2
6229
+ },
6230
+ "stringValue": {
6231
+ "type": "string",
6232
+ "id": 3
6233
+ },
6234
+ "boolValue": {
6235
+ "type": "bool",
6236
+ "id": 4
6237
+ },
6238
+ "structValue": {
6239
+ "type": "Struct",
6240
+ "id": 5
6241
+ },
6242
+ "listValue": {
6243
+ "type": "ListValue",
6244
+ "id": 6
6245
+ }
6246
+ }
6247
+ },
6248
+ "NullValue": {
6249
+ "values": {
6250
+ "NULL_VALUE": 0
6251
+ }
6252
+ },
6253
+ "ListValue": {
6254
+ "fields": {
6255
+ "values": {
6256
+ "rule": "repeated",
6257
+ "type": "Value",
6258
+ "id": 1
5943
6259
  }
5944
6260
  }
6261
+ },
6262
+ "Empty": {
6263
+ "fields": {}
5945
6264
  }
5946
6265
  }
5947
6266
  },
@@ -6029,6 +6348,10 @@
6029
6348
  "options": {
6030
6349
  "(google.api.field_behavior)": "REQUIRED"
6031
6350
  }
6351
+ },
6352
+ "updateMask": {
6353
+ "type": "google.protobuf.FieldMask",
6354
+ "id": 3
6032
6355
  }
6033
6356
  }
6034
6357
  },
@@ -6096,6 +6419,11 @@
6096
6419
  "type": "Binding",
6097
6420
  "id": 4
6098
6421
  },
6422
+ "auditConfigs": {
6423
+ "rule": "repeated",
6424
+ "type": "AuditConfig",
6425
+ "id": 6
6426
+ },
6099
6427
  "etag": {
6100
6428
  "type": "bytes",
6101
6429
  "id": 3
@@ -6119,6 +6447,42 @@
6119
6447
  }
6120
6448
  }
6121
6449
  },
6450
+ "AuditConfig": {
6451
+ "fields": {
6452
+ "service": {
6453
+ "type": "string",
6454
+ "id": 1
6455
+ },
6456
+ "auditLogConfigs": {
6457
+ "rule": "repeated",
6458
+ "type": "AuditLogConfig",
6459
+ "id": 3
6460
+ }
6461
+ }
6462
+ },
6463
+ "AuditLogConfig": {
6464
+ "fields": {
6465
+ "logType": {
6466
+ "type": "LogType",
6467
+ "id": 1
6468
+ },
6469
+ "exemptedMembers": {
6470
+ "rule": "repeated",
6471
+ "type": "string",
6472
+ "id": 2
6473
+ }
6474
+ },
6475
+ "nested": {
6476
+ "LogType": {
6477
+ "values": {
6478
+ "LOG_TYPE_UNSPECIFIED": 0,
6479
+ "ADMIN_READ": 1,
6480
+ "DATA_WRITE": 2,
6481
+ "DATA_READ": 3
6482
+ }
6483
+ }
6484
+ }
6485
+ },
6122
6486
  "PolicyDelta": {
6123
6487
  "fields": {
6124
6488
  "bindingDeltas": {