@google-cloud/containeranalysis 4.2.0 → 4.4.0

package/CHANGELOG.md

@@ -4,6 +4,29 @@
 
 [1]: https://www.npmjs.com/package/@google-cloud/containeranalysis?activeTab=versions
 
+## [4.4.0](https://github.com/googleapis/nodejs-containeranalysis/compare/v4.3.0...v4.4.0) (2022-10-06)
+
+
+### Features
+
+* Add new analysis status and cvss version fields ([#443](https://github.com/googleapis/nodejs-containeranalysis/issues/443)) ([2b4db8e](https://github.com/googleapis/nodejs-containeranalysis/commit/2b4db8ee9859823e32de8256853429adf88cf207))
+
+## [4.3.0](https://github.com/googleapis/nodejs-containeranalysis/compare/v4.2.0...v4.3.0) (2022-09-22)
+
+
+### Features
+
+* Accept google-gax instance as a parameter ([#433](https://github.com/googleapis/nodejs-containeranalysis/issues/433)) ([51e82fd](https://github.com/googleapis/nodejs-containeranalysis/commit/51e82fd484752113c48efba4ff42ac838b961056))
+
+
+### Bug Fixes
+
+* Better support for fallback mode ([#427](https://github.com/googleapis/nodejs-containeranalysis/issues/427)) ([c63417b](https://github.com/googleapis/nodejs-containeranalysis/commit/c63417b5728a83518ffd83602d94acc3d537328c))
+* Change import long to require ([#428](https://github.com/googleapis/nodejs-containeranalysis/issues/428)) ([4fd0750](https://github.com/googleapis/nodejs-containeranalysis/commit/4fd075018b8fc34cac0712aff3b15c61096016af))
+* Do not import the whole google-gax from proto JS ([#1553](https://github.com/googleapis/nodejs-containeranalysis/issues/1553)) ([#432](https://github.com/googleapis/nodejs-containeranalysis/issues/432)) ([ea51fef](https://github.com/googleapis/nodejs-containeranalysis/commit/ea51fef4bb638eb1e2da9de5817a44e5652e404e))
+* Remove pip install statements ([#1546](https://github.com/googleapis/nodejs-containeranalysis/issues/1546)) ([#431](https://github.com/googleapis/nodejs-containeranalysis/issues/431)) ([a0e674f](https://github.com/googleapis/nodejs-containeranalysis/commit/a0e674fcf24bac4a870ead8dfc9357609a868981))
+* use google-gax v3.3.0 ([ea51fef](https://github.com/googleapis/nodejs-containeranalysis/commit/ea51fef4bb638eb1e2da9de5817a44e5652e404e))
+
 ## [4.2.0](https://github.com/googleapis/nodejs-containeranalysis/compare/v4.1.0...v4.2.0) (2022-07-04)
 
 

package/build/protos/grafeas/v1/cvss.proto

@@ -157,3 +157,10 @@ message CVSS {
     IMPACT_NONE = 3;
   }
 }
+
+// CVSS Version.
+enum CVSSVersion {
+  CVSS_VERSION_UNSPECIFIED = 0;
+  CVSS_VERSION_2 = 1;
+  CVSS_VERSION_3 = 2;
+}

package/build/protos/grafeas/v1/discovery.proto

@@ -53,6 +53,8 @@ message DiscoveryOccurrence {
   // Analysis status for a resource. Currently for initial analysis only (not
   // updated in continuous analysis).
   enum AnalysisStatus {
+    option allow_alias = true;
+
     // Unknown.
     ANALYSIS_STATUS_UNSPECIFIED = 0;
     // Resource is known but no action has been taken yet.
@@ -61,16 +63,30 @@ message DiscoveryOccurrence {
     SCANNING = 2;
     // Analysis has finished successfully.
     FINISHED_SUCCESS = 3;
+    // Analysis has completed.
+    COMPLETE = 3;
     // Analysis has finished unsuccessfully, the analysis itself is in a bad
     // state.
     FINISHED_FAILED = 4;
-    // The resource is known not to be supported
+    // The resource is known not to be supported.
     FINISHED_UNSUPPORTED = 5;
   }
 
   // The status of discovery for the resource.
   AnalysisStatus analysis_status = 2;
 
+  // Indicates which analysis completed successfully. Multiple types of
+  // analysis can be performed on a single resource.
+  message AnalysisCompleted {
+    repeated string analysis_type = 1;
+  }
+
+  AnalysisCompleted analysis_completed = 7;
+
+  // Indicates any errors encountered during analysis of a resource. There
+  // could be 0 or more of these errors.
+  repeated google.rpc.Status analysis_error = 8;
+
   // When an error is encountered this will contain a LocalizedMessage under
   // details to show to the user. The LocalizedMessage is output only and
   // populated by the API.

package/build/protos/grafeas/v1/vulnerability.proto

@@ -148,6 +148,11 @@ message VulnerabilityNote {
   // upstream timestamp from the underlying information source - e.g. Ubuntu
   // security tracker.
   google.protobuf.Timestamp source_update_time = 6;
+
+  // CVSS version used to populate cvss_score and severity.
+  grafeas.v1.CVSSVersion cvss_version = 7;
+
+  // Next free ID is 8.
 }
 
 // An occurrence of a severity vulnerability on a resource.
@@ -238,4 +243,9 @@ message VulnerabilityOccurrence {
   // Output only. Whether at least one of the affected packages has a fix
   // available.
   bool fix_available = 9;
+
+  // Output only. CVSS version used to populate cvss_score and severity.
+  grafeas.v1.CVSSVersion cvss_version = 11;
+
+  // Next free ID is 12.
 }