@google-cloud/containeranalysis 5.5.0 → 5.6.0

package/CHANGELOG.md

@@ -4,6 +4,13 @@
 
 [1]: https://www.npmjs.com/package/@google-cloud/containeranalysis?activeTab=versions
 
+## [5.6.0](https://github.com/googleapis/google-cloud-node/compare/containeranalysis-v5.5.0...containeranalysis-v5.6.0) (2024-08-09)
+
+
+### Features
+
+* [containeranalysis] A new field `version` is added to message `.grafeas.v1.ComplianceOccurrence` ([#5586](https://github.com/googleapis/google-cloud-node/issues/5586)) ([f60f2f9](https://github.com/googleapis/google-cloud-node/commit/f60f2f901ce9aa4e51237246f359a6acf7f3d5b1))
+
 ## [5.5.0](https://github.com/googleapis/google-cloud-node/compare/containeranalysis-v5.4.0...containeranalysis-v5.5.0) (2024-05-21)
 
 

package/build/protos/google/devtools/containeranalysis/v1/containeranalysis.proto

@@ -25,7 +25,7 @@ import "google/iam/v1/policy.proto";
 import "grafeas/v1/severity.proto";
 
 option csharp_namespace = "Google.Cloud.DevTools.ContainerAnalysis.V1";
-option go_package = "google.golang.org/genproto/googleapis/devtools/containeranalysis/v1;containeranalysis";
+option go_package = "cloud.google.com/go/containeranalysis/apiv1/containeranalysispb;containeranalysispb";
 option java_multiple_files = true;
 option java_package = "com.google.containeranalysis.v1";
 option objc_class_prefix = "GCA";

package/build/protos/grafeas/v1/compliance.proto

@@ -69,6 +69,8 @@ message ComplianceVersion {
 message ComplianceOccurrence {
   repeated NonCompliantFile non_compliant_files = 2;
   string non_compliance_reason = 3;
+  // The OS and config version the benchmark was run on.
+  grafeas.v1.ComplianceVersion version = 4;
 }
 
 // Details about files that caused a compliance check to fail.

package/build/protos/grafeas/v1/discovery.proto

@@ -123,4 +123,29 @@ message DiscoveryOccurrence {
 
   // The status of an SBOM generation.
   SBOMStatus sbom_status = 9;
+
+  // The status of an vulnerability attestation generation.
+  message VulnerabilityAttestation {
+    // An enum indicating the state of the attestation generation.
+    enum VulnerabilityAttestationState {
+      // Default unknown state.
+      VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED = 0;
+      // Attestation was successfully generated and stored.
+      SUCCESS = 1;
+      // Attestation was unsuccessfully generated and stored.
+      FAILURE = 2;
+    }
+
+    // The last time we attempted to generate an attestation.
+    google.protobuf.Timestamp last_attempt_time = 1;
+
+    // The success/failure state of the latest attestation attempt.
+    VulnerabilityAttestationState state = 2;
+
+    // If failure, the error reason for why the attestation generation failed.
+    string error = 3;
+  }
+
+  // The status of an vulnerability attestation generation.
+  VulnerabilityAttestation vulnerability_attestation = 10;
 }

package/build/protos/grafeas/v1/grafeas.proto

@@ -93,6 +93,9 @@ service Grafeas {
       returns (google.protobuf.Empty) {
     option (google.api.http) = {
       delete: "/v1/{name=projects/*/occurrences/*}"
+      additional_bindings {
+        delete: "/v1/{name=projects/*/locations/*/occurrences/*}"
+      }
     };
     option (google.api.method_signature) = "name";
   }
@@ -102,6 +105,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/occurrences"
       body: "occurrence"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/occurrences"
+        body: "occurrence"
+      }
     };
     option (google.api.method_signature) = "parent,occurrence";
   }
@@ -112,6 +119,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/occurrences:batchCreate"
       body: "*"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/occurrences:batchCreate"
+        body: "*"
+      }
     };
     option (google.api.method_signature) = "parent,occurrences";
   }
@@ -121,6 +132,10 @@ service Grafeas {
     option (google.api.http) = {
       patch: "/v1/{name=projects/*/occurrences/*}"
       body: "occurrence"
+      additional_bindings {
+        patch: "/v1/{name=projects/*/locations/*/occurrences/*}"
+        body: "occurrence"
+      }
     };
     option (google.api.method_signature) = "name,occurrence,update_mask";
   }
@@ -159,6 +174,9 @@ service Grafeas {
   rpc DeleteNote(DeleteNoteRequest) returns (google.protobuf.Empty) {
     option (google.api.http) = {
       delete: "/v1/{name=projects/*/notes/*}"
+      additional_bindings {
+        delete: "/v1/{name=projects/*/locations/*/notes/*}"
+      }
     };
     option (google.api.method_signature) = "name";
   }
@@ -168,6 +186,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/notes"
       body: "note"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/notes"
+        body: "note"
+      }
     };
     option (google.api.method_signature) = "parent,note_id,note";
   }
@@ -178,6 +200,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/notes:batchCreate"
       body: "*"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/notes:batchCreate"
+        body: "*"
+      }
     };
     option (google.api.method_signature) = "parent,notes";
   }
@@ -187,6 +213,10 @@ service Grafeas {
     option (google.api.http) = {
       patch: "/v1/{name=projects/*/notes/*}"
       body: "note"
+      additional_bindings {
+        patch: "/v1/{name=projects/*/locations/*/notes/*}"
+        body: "note"
+      }
     };
     option (google.api.method_signature) = "name,note,update_mask";
   }

package/build/protos/protos.d.ts

@@ -6290,6 +6290,9 @@ export namespace grafeas {
 
             /** ComplianceOccurrence nonComplianceReason */
             nonComplianceReason?: (string|null);
+
+            /** ComplianceOccurrence version */
+            version?: (grafeas.v1.IComplianceVersion|null);
         }
 
         /** Represents a ComplianceOccurrence. */
@@ -6307,6 +6310,9 @@ export namespace grafeas {
             /** ComplianceOccurrence nonComplianceReason. */
             public nonComplianceReason: string;
 
+            /** ComplianceOccurrence version. */
+            public version?: (grafeas.v1.IComplianceVersion|null);
+
             /**
              * Creates a new ComplianceOccurrence instance using the specified properties.
              * @param [properties] Properties to set
@@ -7297,6 +7303,9 @@ export namespace grafeas {
 
             /** DiscoveryOccurrence sbomStatus */
             sbomStatus?: (grafeas.v1.DiscoveryOccurrence.ISBOMStatus|null);
+
+            /** DiscoveryOccurrence vulnerabilityAttestation */
+            vulnerabilityAttestation?: (grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation|null);
         }
 
         /** Represents a DiscoveryOccurrence. */
@@ -7335,6 +7344,9 @@ export namespace grafeas {
             /** DiscoveryOccurrence sbomStatus. */
             public sbomStatus?: (grafeas.v1.DiscoveryOccurrence.ISBOMStatus|null);
 
+            /** DiscoveryOccurrence vulnerabilityAttestation. */
+            public vulnerabilityAttestation?: (grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation|null);
+
             /**
              * Creates a new DiscoveryOccurrence instance using the specified properties.
              * @param [properties] Properties to set
@@ -7642,6 +7654,125 @@ export namespace grafeas {
                     COMPLETE = 2
                 }
             }
+
+            /** Properties of a VulnerabilityAttestation. */
+            interface IVulnerabilityAttestation {
+
+                /** VulnerabilityAttestation lastAttemptTime */
+                lastAttemptTime?: (google.protobuf.ITimestamp|null);
+
+                /** VulnerabilityAttestation state */
+                state?: (grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState|keyof typeof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState|null);
+
+                /** VulnerabilityAttestation error */
+                error?: (string|null);
+            }
+
+            /** Represents a VulnerabilityAttestation. */
+            class VulnerabilityAttestation implements IVulnerabilityAttestation {
+
+                /**
+                 * Constructs a new VulnerabilityAttestation.
+                 * @param [properties] Properties to set
+                 */
+                constructor(properties?: grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation);
+
+                /** VulnerabilityAttestation lastAttemptTime. */
+                public lastAttemptTime?: (google.protobuf.ITimestamp|null);
+
+                /** VulnerabilityAttestation state. */
+                public state: (grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState|keyof typeof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState);
+
+                /** VulnerabilityAttestation error. */
+                public error: string;
+
+                /**
+                 * Creates a new VulnerabilityAttestation instance using the specified properties.
+                 * @param [properties] Properties to set
+                 * @returns VulnerabilityAttestation instance
+                 */
+                public static create(properties?: grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation): grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation;
+
+                /**
+                 * Encodes the specified VulnerabilityAttestation message. Does not implicitly {@link grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.verify|verify} messages.
+                 * @param message VulnerabilityAttestation message or plain object to encode
+                 * @param [writer] Writer to encode to
+                 * @returns Writer
+                 */
+                public static encode(message: grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                /**
+                 * Encodes the specified VulnerabilityAttestation message, length delimited. Does not implicitly {@link grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.verify|verify} messages.
+                 * @param message VulnerabilityAttestation message or plain object to encode
+                 * @param [writer] Writer to encode to
+                 * @returns Writer
+                 */
+                public static encodeDelimited(message: grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                /**
+                 * Decodes a VulnerabilityAttestation message from the specified reader or buffer.
+                 * @param reader Reader or buffer to decode from
+                 * @param [length] Message length if known beforehand
+                 * @returns VulnerabilityAttestation
+                 * @throws {Error} If the payload is not a reader or valid buffer
+                 * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                 */
+                public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation;
+
+                /**
+                 * Decodes a VulnerabilityAttestation message from the specified reader or buffer, length delimited.
+                 * @param reader Reader or buffer to decode from
+                 * @returns VulnerabilityAttestation
+                 * @throws {Error} If the payload is not a reader or valid buffer
+                 * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                 */
+                public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation;
+
+                /**
+                 * Verifies a VulnerabilityAttestation message.
+                 * @param message Plain object to verify
+                 * @returns `null` if valid, otherwise the reason why it is not
+                 */
+                public static verify(message: { [k: string]: any }): (string|null);
+
+                /**
+                 * Creates a VulnerabilityAttestation message from a plain object. Also converts values to their respective internal types.
+                 * @param object Plain object
+                 * @returns VulnerabilityAttestation
+                 */
+                public static fromObject(object: { [k: string]: any }): grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation;
+
+                /**
+                 * Creates a plain object from a VulnerabilityAttestation message. Also converts values to other types if specified.
+                 * @param message VulnerabilityAttestation
+                 * @param [options] Conversion options
+                 * @returns Plain object
+                 */
+                public static toObject(message: grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                /**
+                 * Converts this VulnerabilityAttestation to JSON.
+                 * @returns JSON object
+                 */
+                public toJSON(): { [k: string]: any };
+
+                /**
+                 * Gets the default type url for VulnerabilityAttestation
+                 * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                 * @returns The default type url
+                 */
+                public static getTypeUrl(typeUrlPrefix?: string): string;
+            }
+
+            namespace VulnerabilityAttestation {
+
+                /** VulnerabilityAttestationState enum. */
+                enum VulnerabilityAttestationState {
+                    VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED = 0,
+                    SUCCESS = 1,
+                    FAILURE = 2
+                }
+            }
         }
 
         /** Properties of a DSSEAttestationNote. */

package/build/protos/protos.js

@@ -15884,6 +15884,7 @@
                  * @interface IComplianceOccurrence
                  * @property {Array.<grafeas.v1.INonCompliantFile>|null} [nonCompliantFiles] ComplianceOccurrence nonCompliantFiles
                  * @property {string|null} [nonComplianceReason] ComplianceOccurrence nonComplianceReason
+                 * @property {grafeas.v1.IComplianceVersion|null} [version] ComplianceOccurrence version
                  */
     
                 /**
@@ -15918,6 +15919,14 @@
                  */
                 ComplianceOccurrence.prototype.nonComplianceReason = "";
     
+                /**
+                 * ComplianceOccurrence version.
+                 * @member {grafeas.v1.IComplianceVersion|null|undefined} version
+                 * @memberof grafeas.v1.ComplianceOccurrence
+                 * @instance
+                 */
+                ComplianceOccurrence.prototype.version = null;
+    
                 /**
                  * Creates a new ComplianceOccurrence instance using the specified properties.
                  * @function create
@@ -15947,6 +15956,8 @@
                             $root.grafeas.v1.NonCompliantFile.encode(message.nonCompliantFiles[i], writer.uint32(/* id 2, wireType 2 =*/18).fork()).ldelim();
                     if (message.nonComplianceReason != null && Object.hasOwnProperty.call(message, "nonComplianceReason"))
                         writer.uint32(/* id 3, wireType 2 =*/26).string(message.nonComplianceReason);
+                    if (message.version != null && Object.hasOwnProperty.call(message, "version"))
+                        $root.grafeas.v1.ComplianceVersion.encode(message.version, writer.uint32(/* id 4, wireType 2 =*/34).fork()).ldelim();
                     return writer;
                 };
     
@@ -15991,6 +16002,10 @@
                                 message.nonComplianceReason = reader.string();
                                 break;
                             }
+                        case 4: {
+                                message.version = $root.grafeas.v1.ComplianceVersion.decode(reader, reader.uint32());
+                                break;
+                            }
                         default:
                             reader.skipType(tag & 7);
                             break;
@@ -16038,6 +16053,11 @@
                     if (message.nonComplianceReason != null && message.hasOwnProperty("nonComplianceReason"))
                         if (!$util.isString(message.nonComplianceReason))
                             return "nonComplianceReason: string expected";
+                    if (message.version != null && message.hasOwnProperty("version")) {
+                        var error = $root.grafeas.v1.ComplianceVersion.verify(message.version);
+                        if (error)
+                            return "version." + error;
+                    }
                     return null;
                 };
     
@@ -16065,6 +16085,11 @@
                     }
                     if (object.nonComplianceReason != null)
                         message.nonComplianceReason = String(object.nonComplianceReason);
+                    if (object.version != null) {
+                        if (typeof object.version !== "object")
+                            throw TypeError(".grafeas.v1.ComplianceOccurrence.version: object expected");
+                        message.version = $root.grafeas.v1.ComplianceVersion.fromObject(object.version);
+                    }
                     return message;
                 };
     
@@ -16083,8 +16108,10 @@
                     var object = {};
                     if (options.arrays || options.defaults)
                         object.nonCompliantFiles = [];
-                    if (options.defaults)
+                    if (options.defaults) {
                         object.nonComplianceReason = "";
+                        object.version = null;
+                    }
                     if (message.nonCompliantFiles && message.nonCompliantFiles.length) {
                         object.nonCompliantFiles = [];
                         for (var j = 0; j < message.nonCompliantFiles.length; ++j)
@@ -16092,6 +16119,8 @@
                     }
                     if (message.nonComplianceReason != null && message.hasOwnProperty("nonComplianceReason"))
                         object.nonComplianceReason = message.nonComplianceReason;
+                    if (message.version != null && message.hasOwnProperty("version"))
+                        object.version = $root.grafeas.v1.ComplianceVersion.toObject(message.version, options);
                     return object;
                 };
     
@@ -18948,6 +18977,7 @@
                  * @property {google.protobuf.ITimestamp|null} [lastScanTime] DiscoveryOccurrence lastScanTime
                  * @property {google.protobuf.ITimestamp|null} [archiveTime] DiscoveryOccurrence archiveTime
                  * @property {grafeas.v1.DiscoveryOccurrence.ISBOMStatus|null} [sbomStatus] DiscoveryOccurrence sbomStatus
+                 * @property {grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation|null} [vulnerabilityAttestation] DiscoveryOccurrence vulnerabilityAttestation
                  */
     
                 /**
@@ -19038,6 +19068,14 @@
                  */
                 DiscoveryOccurrence.prototype.sbomStatus = null;
     
+                /**
+                 * DiscoveryOccurrence vulnerabilityAttestation.
+                 * @member {grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation|null|undefined} vulnerabilityAttestation
+                 * @memberof grafeas.v1.DiscoveryOccurrence
+                 * @instance
+                 */
+                DiscoveryOccurrence.prototype.vulnerabilityAttestation = null;
+    
                 /**
                  * Creates a new DiscoveryOccurrence instance using the specified properties.
                  * @function create
@@ -19081,6 +19119,8 @@
                             $root.google.rpc.Status.encode(message.analysisError[i], writer.uint32(/* id 8, wireType 2 =*/66).fork()).ldelim();
                     if (message.sbomStatus != null && Object.hasOwnProperty.call(message, "sbomStatus"))
                         $root.grafeas.v1.DiscoveryOccurrence.SBOMStatus.encode(message.sbomStatus, writer.uint32(/* id 9, wireType 2 =*/74).fork()).ldelim();
+                    if (message.vulnerabilityAttestation != null && Object.hasOwnProperty.call(message, "vulnerabilityAttestation"))
+                        $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.encode(message.vulnerabilityAttestation, writer.uint32(/* id 10, wireType 2 =*/82).fork()).ldelim();
                     return writer;
                 };
     
@@ -19153,6 +19193,10 @@
                                 message.sbomStatus = $root.grafeas.v1.DiscoveryOccurrence.SBOMStatus.decode(reader, reader.uint32());
                                 break;
                             }
+                        case 10: {
+                                message.vulnerabilityAttestation = $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.decode(reader, reader.uint32());
+                                break;
+                            }
                         default:
                             reader.skipType(tag & 7);
                             break;
@@ -19247,6 +19291,11 @@
                         if (error)
                             return "sbomStatus." + error;
                     }
+                    if (message.vulnerabilityAttestation != null && message.hasOwnProperty("vulnerabilityAttestation")) {
+                        var error = $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.verify(message.vulnerabilityAttestation);
+                        if (error)
+                            return "vulnerabilityAttestation." + error;
+                    }
                     return null;
                 };
     
@@ -19355,6 +19404,11 @@
                             throw TypeError(".grafeas.v1.DiscoveryOccurrence.sbomStatus: object expected");
                         message.sbomStatus = $root.grafeas.v1.DiscoveryOccurrence.SBOMStatus.fromObject(object.sbomStatus);
                     }
+                    if (object.vulnerabilityAttestation != null) {
+                        if (typeof object.vulnerabilityAttestation !== "object")
+                            throw TypeError(".grafeas.v1.DiscoveryOccurrence.vulnerabilityAttestation: object expected");
+                        message.vulnerabilityAttestation = $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.fromObject(object.vulnerabilityAttestation);
+                    }
                     return message;
                 };
     
@@ -19382,6 +19436,7 @@
                         object.archiveTime = null;
                         object.analysisCompleted = null;
                         object.sbomStatus = null;
+                        object.vulnerabilityAttestation = null;
                     }
                     if (message.continuousAnalysis != null && message.hasOwnProperty("continuousAnalysis"))
                         object.continuousAnalysis = options.enums === String ? $root.grafeas.v1.DiscoveryOccurrence.ContinuousAnalysis[message.continuousAnalysis] === undefined ? message.continuousAnalysis : $root.grafeas.v1.DiscoveryOccurrence.ContinuousAnalysis[message.continuousAnalysis] : message.continuousAnalysis;
@@ -19404,6 +19459,8 @@
                     }
                     if (message.sbomStatus != null && message.hasOwnProperty("sbomStatus"))
                         object.sbomStatus = $root.grafeas.v1.DiscoveryOccurrence.SBOMStatus.toObject(message.sbomStatus, options);
+                    if (message.vulnerabilityAttestation != null && message.hasOwnProperty("vulnerabilityAttestation"))
+                        object.vulnerabilityAttestation = $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.toObject(message.vulnerabilityAttestation, options);
                     return object;
                 };
     
@@ -19959,6 +20016,301 @@
                     return SBOMStatus;
                 })();
     
+                DiscoveryOccurrence.VulnerabilityAttestation = (function() {
+    
+                    /**
+                     * Properties of a VulnerabilityAttestation.
+                     * @memberof grafeas.v1.DiscoveryOccurrence
+                     * @interface IVulnerabilityAttestation
+                     * @property {google.protobuf.ITimestamp|null} [lastAttemptTime] VulnerabilityAttestation lastAttemptTime
+                     * @property {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState|null} [state] VulnerabilityAttestation state
+                     * @property {string|null} [error] VulnerabilityAttestation error
+                     */
+    
+                    /**
+                     * Constructs a new VulnerabilityAttestation.
+                     * @memberof grafeas.v1.DiscoveryOccurrence
+                     * @classdesc Represents a VulnerabilityAttestation.
+                     * @implements IVulnerabilityAttestation
+                     * @constructor
+                     * @param {grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation=} [properties] Properties to set
+                     */
+                    function VulnerabilityAttestation(properties) {
+                        if (properties)
+                            for (var keys = Object.keys(properties), i = 0; i < keys.length; ++i)
+                                if (properties[keys[i]] != null)
+                                    this[keys[i]] = properties[keys[i]];
+                    }
+    
+                    /**
+                     * VulnerabilityAttestation lastAttemptTime.
+                     * @member {google.protobuf.ITimestamp|null|undefined} lastAttemptTime
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @instance
+                     */
+                    VulnerabilityAttestation.prototype.lastAttemptTime = null;
+    
+                    /**
+                     * VulnerabilityAttestation state.
+                     * @member {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState} state
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @instance
+                     */
+                    VulnerabilityAttestation.prototype.state = 0;
+    
+                    /**
+                     * VulnerabilityAttestation error.
+                     * @member {string} error
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @instance
+                     */
+                    VulnerabilityAttestation.prototype.error = "";
+    
+                    /**
+                     * Creates a new VulnerabilityAttestation instance using the specified properties.
+                     * @function create
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation=} [properties] Properties to set
+                     * @returns {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation} VulnerabilityAttestation instance
+                     */
+                    VulnerabilityAttestation.create = function create(properties) {
+                        return new VulnerabilityAttestation(properties);
+                    };
+    
+                    /**
+                     * Encodes the specified VulnerabilityAttestation message. Does not implicitly {@link grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.verify|verify} messages.
+                     * @function encode
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation} message VulnerabilityAttestation message or plain object to encode
+                     * @param {$protobuf.Writer} [writer] Writer to encode to
+                     * @returns {$protobuf.Writer} Writer
+                     */
+                    VulnerabilityAttestation.encode = function encode(message, writer) {
+                        if (!writer)
+                            writer = $Writer.create();
+                        if (message.lastAttemptTime != null && Object.hasOwnProperty.call(message, "lastAttemptTime"))
+                            $root.google.protobuf.Timestamp.encode(message.lastAttemptTime, writer.uint32(/* id 1, wireType 2 =*/10).fork()).ldelim();
+                        if (message.state != null && Object.hasOwnProperty.call(message, "state"))
+                            writer.uint32(/* id 2, wireType 0 =*/16).int32(message.state);
+                        if (message.error != null && Object.hasOwnProperty.call(message, "error"))
+                            writer.uint32(/* id 3, wireType 2 =*/26).string(message.error);
+                        return writer;
+                    };
+    
+                    /**
+                     * Encodes the specified VulnerabilityAttestation message, length delimited. Does not implicitly {@link grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.verify|verify} messages.
+                     * @function encodeDelimited
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {grafeas.v1.DiscoveryOccurrence.IVulnerabilityAttestation} message VulnerabilityAttestation message or plain object to encode
+                     * @param {$protobuf.Writer} [writer] Writer to encode to
+                     * @returns {$protobuf.Writer} Writer
+                     */
+                    VulnerabilityAttestation.encodeDelimited = function encodeDelimited(message, writer) {
+                        return this.encode(message, writer).ldelim();
+                    };
+    
+                    /**
+                     * Decodes a VulnerabilityAttestation message from the specified reader or buffer.
+                     * @function decode
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {$protobuf.Reader|Uint8Array} reader Reader or buffer to decode from
+                     * @param {number} [length] Message length if known beforehand
+                     * @returns {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation} VulnerabilityAttestation
+                     * @throws {Error} If the payload is not a reader or valid buffer
+                     * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                     */
+                    VulnerabilityAttestation.decode = function decode(reader, length) {
+                        if (!(reader instanceof $Reader))
+                            reader = $Reader.create(reader);
+                        var end = length === undefined ? reader.len : reader.pos + length, message = new $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation();
+                        while (reader.pos < end) {
+                            var tag = reader.uint32();
+                            switch (tag >>> 3) {
+                            case 1: {
+                                    message.lastAttemptTime = $root.google.protobuf.Timestamp.decode(reader, reader.uint32());
+                                    break;
+                                }
+                            case 2: {
+                                    message.state = reader.int32();
+                                    break;
+                                }
+                            case 3: {
+                                    message.error = reader.string();
+                                    break;
+                                }
+                            default:
+                                reader.skipType(tag & 7);
+                                break;
+                            }
+                        }
+                        return message;
+                    };
+    
+                    /**
+                     * Decodes a VulnerabilityAttestation message from the specified reader or buffer, length delimited.
+                     * @function decodeDelimited
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {$protobuf.Reader|Uint8Array} reader Reader or buffer to decode from
+                     * @returns {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation} VulnerabilityAttestation
+                     * @throws {Error} If the payload is not a reader or valid buffer
+                     * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                     */
+                    VulnerabilityAttestation.decodeDelimited = function decodeDelimited(reader) {
+                        if (!(reader instanceof $Reader))
+                            reader = new $Reader(reader);
+                        return this.decode(reader, reader.uint32());
+                    };
+    
+                    /**
+                     * Verifies a VulnerabilityAttestation message.
+                     * @function verify
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {Object.<string,*>} message Plain object to verify
+                     * @returns {string|null} `null` if valid, otherwise the reason why it is not
+                     */
+                    VulnerabilityAttestation.verify = function verify(message) {
+                        if (typeof message !== "object" || message === null)
+                            return "object expected";
+                        if (message.lastAttemptTime != null && message.hasOwnProperty("lastAttemptTime")) {
+                            var error = $root.google.protobuf.Timestamp.verify(message.lastAttemptTime);
+                            if (error)
+                                return "lastAttemptTime." + error;
+                        }
+                        if (message.state != null && message.hasOwnProperty("state"))
+                            switch (message.state) {
+                            default:
+                                return "state: enum value expected";
+                            case 0:
+                            case 1:
+                            case 2:
+                                break;
+                            }
+                        if (message.error != null && message.hasOwnProperty("error"))
+                            if (!$util.isString(message.error))
+                                return "error: string expected";
+                        return null;
+                    };
+    
+                    /**
+                     * Creates a VulnerabilityAttestation message from a plain object. Also converts values to their respective internal types.
+                     * @function fromObject
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {Object.<string,*>} object Plain object
+                     * @returns {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation} VulnerabilityAttestation
+                     */
+                    VulnerabilityAttestation.fromObject = function fromObject(object) {
+                        if (object instanceof $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation)
+                            return object;
+                        var message = new $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation();
+                        if (object.lastAttemptTime != null) {
+                            if (typeof object.lastAttemptTime !== "object")
+                                throw TypeError(".grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.lastAttemptTime: object expected");
+                            message.lastAttemptTime = $root.google.protobuf.Timestamp.fromObject(object.lastAttemptTime);
+                        }
+                        switch (object.state) {
+                        default:
+                            if (typeof object.state === "number") {
+                                message.state = object.state;
+                                break;
+                            }
+                            break;
+                        case "VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED":
+                        case 0:
+                            message.state = 0;
+                            break;
+                        case "SUCCESS":
+                        case 1:
+                            message.state = 1;
+                            break;
+                        case "FAILURE":
+                        case 2:
+                            message.state = 2;
+                            break;
+                        }
+                        if (object.error != null)
+                            message.error = String(object.error);
+                        return message;
+                    };
+    
+                    /**
+                     * Creates a plain object from a VulnerabilityAttestation message. Also converts values to other types if specified.
+                     * @function toObject
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation} message VulnerabilityAttestation
+                     * @param {$protobuf.IConversionOptions} [options] Conversion options
+                     * @returns {Object.<string,*>} Plain object
+                     */
+                    VulnerabilityAttestation.toObject = function toObject(message, options) {
+                        if (!options)
+                            options = {};
+                        var object = {};
+                        if (options.defaults) {
+                            object.lastAttemptTime = null;
+                            object.state = options.enums === String ? "VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED" : 0;
+                            object.error = "";
+                        }
+                        if (message.lastAttemptTime != null && message.hasOwnProperty("lastAttemptTime"))
+                            object.lastAttemptTime = $root.google.protobuf.Timestamp.toObject(message.lastAttemptTime, options);
+                        if (message.state != null && message.hasOwnProperty("state"))
+                            object.state = options.enums === String ? $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState[message.state] === undefined ? message.state : $root.grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState[message.state] : message.state;
+                        if (message.error != null && message.hasOwnProperty("error"))
+                            object.error = message.error;
+                        return object;
+                    };
+    
+                    /**
+                     * Converts this VulnerabilityAttestation to JSON.
+                     * @function toJSON
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @instance
+                     * @returns {Object.<string,*>} JSON object
+                     */
+                    VulnerabilityAttestation.prototype.toJSON = function toJSON() {
+                        return this.constructor.toObject(this, $protobuf.util.toJSONOptions);
+                    };
+    
+                    /**
+                     * Gets the default type url for VulnerabilityAttestation
+                     * @function getTypeUrl
+                     * @memberof grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation
+                     * @static
+                     * @param {string} [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                     * @returns {string} The default type url
+                     */
+                    VulnerabilityAttestation.getTypeUrl = function getTypeUrl(typeUrlPrefix) {
+                        if (typeUrlPrefix === undefined) {
+                            typeUrlPrefix = "type.googleapis.com";
+                        }
+                        return typeUrlPrefix + "/grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation";
+                    };
+    
+                    /**
+                     * VulnerabilityAttestationState enum.
+                     * @name grafeas.v1.DiscoveryOccurrence.VulnerabilityAttestation.VulnerabilityAttestationState
+                     * @enum {number}
+                     * @property {number} VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED=0 VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED value
+                     * @property {number} SUCCESS=1 SUCCESS value
+                     * @property {number} FAILURE=2 FAILURE value
+                     */
+                    VulnerabilityAttestation.VulnerabilityAttestationState = (function() {
+                        var valuesById = {}, values = Object.create(valuesById);
+                        values[valuesById[0] = "VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED"] = 0;
+                        values[valuesById[1] = "SUCCESS"] = 1;
+                        values[valuesById[2] = "FAILURE"] = 2;
+                        return values;
+                    })();
+    
+                    return VulnerabilityAttestation;
+                })();
+    
                 return DiscoveryOccurrence;
             })();
     

package/build/protos/protos.json

@@ -1114,6 +1114,10 @@
                 "nonComplianceReason": {
                   "type": "string",
                   "id": 3
+                },
+                "version": {
+                  "type": "grafeas.v1.ComplianceVersion",
+                  "id": 4
                 }
               }
             },
@@ -1448,6 +1452,10 @@
                 "sbomStatus": {
                   "type": "SBOMStatus",
                   "id": 9
+                },
+                "vulnerabilityAttestation": {
+                  "type": "VulnerabilityAttestation",
+                  "id": 10
                 }
               },
               "nested": {
@@ -1501,6 +1509,31 @@
                       }
                     }
                   }
+                },
+                "VulnerabilityAttestation": {
+                  "fields": {
+                    "lastAttemptTime": {
+                      "type": "google.protobuf.Timestamp",
+                      "id": 1
+                    },
+                    "state": {
+                      "type": "VulnerabilityAttestationState",
+                      "id": 2
+                    },
+                    "error": {
+                      "type": "string",
+                      "id": 3
+                    }
+                  },
+                  "nested": {
+                    "VulnerabilityAttestationState": {
+                      "values": {
+                        "VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED": 0,
+                        "SUCCESS": 1,
+                        "FAILURE": 2
+                      }
+                    }
+                  }
                 }
               }
             },
@@ -1595,12 +1628,16 @@
                   "responseType": "google.protobuf.Empty",
                   "options": {
                     "(google.api.http).delete": "/v1/{name=projects/*/occurrences/*}",
+                    "(google.api.http).additional_bindings.delete": "/v1/{name=projects/*/locations/*/occurrences/*}",
                     "(google.api.method_signature)": "name"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
-                        "delete": "/v1/{name=projects/*/occurrences/*}"
+                        "delete": "/v1/{name=projects/*/occurrences/*}",
+                        "additional_bindings": {
+                          "delete": "/v1/{name=projects/*/locations/*/occurrences/*}"
+                        }
                       }
                     },
                     {
@@ -1614,13 +1651,19 @@
                   "options": {
                     "(google.api.http).post": "/v1/{parent=projects/*}/occurrences",
                     "(google.api.http).body": "occurrence",
+                    "(google.api.http).additional_bindings.post": "/v1/{parent=projects/*/locations/*}/occurrences",
+                    "(google.api.http).additional_bindings.body": "occurrence",
                     "(google.api.method_signature)": "parent,occurrence"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
                         "post": "/v1/{parent=projects/*}/occurrences",
-                        "body": "occurrence"
+                        "body": "occurrence",
+                        "additional_bindings": {
+                          "post": "/v1/{parent=projects/*/locations/*}/occurrences",
+                          "body": "occurrence"
+                        }
                       }
                     },
                     {
@@ -1634,13 +1677,19 @@
                   "options": {
                     "(google.api.http).post": "/v1/{parent=projects/*}/occurrences:batchCreate",
                     "(google.api.http).body": "*",
+                    "(google.api.http).additional_bindings.post": "/v1/{parent=projects/*/locations/*}/occurrences:batchCreate",
+                    "(google.api.http).additional_bindings.body": "*",
                     "(google.api.method_signature)": "parent,occurrences"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
                         "post": "/v1/{parent=projects/*}/occurrences:batchCreate",
-                        "body": "*"
+                        "body": "*",
+                        "additional_bindings": {
+                          "post": "/v1/{parent=projects/*/locations/*}/occurrences:batchCreate",
+                          "body": "*"
+                        }
                       }
                     },
                     {
@@ -1654,13 +1703,19 @@
                   "options": {
                     "(google.api.http).patch": "/v1/{name=projects/*/occurrences/*}",
                     "(google.api.http).body": "occurrence",
+                    "(google.api.http).additional_bindings.patch": "/v1/{name=projects/*/locations/*/occurrences/*}",
+                    "(google.api.http).additional_bindings.body": "occurrence",
                     "(google.api.method_signature)": "name,occurrence,update_mask"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
                         "patch": "/v1/{name=projects/*/occurrences/*}",
-                        "body": "occurrence"
+                        "body": "occurrence",
+                        "additional_bindings": {
+                          "patch": "/v1/{name=projects/*/locations/*/occurrences/*}",
+                          "body": "occurrence"
+                        }
                       }
                     },
                     {
@@ -1739,12 +1794,16 @@
                   "responseType": "google.protobuf.Empty",
                   "options": {
                     "(google.api.http).delete": "/v1/{name=projects/*/notes/*}",
+                    "(google.api.http).additional_bindings.delete": "/v1/{name=projects/*/locations/*/notes/*}",
                     "(google.api.method_signature)": "name"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
-                        "delete": "/v1/{name=projects/*/notes/*}"
+                        "delete": "/v1/{name=projects/*/notes/*}",
+                        "additional_bindings": {
+                          "delete": "/v1/{name=projects/*/locations/*/notes/*}"
+                        }
                       }
                     },
                     {
@@ -1758,13 +1817,19 @@
                   "options": {
                     "(google.api.http).post": "/v1/{parent=projects/*}/notes",
                     "(google.api.http).body": "note",
+                    "(google.api.http).additional_bindings.post": "/v1/{parent=projects/*/locations/*}/notes",
+                    "(google.api.http).additional_bindings.body": "note",
                     "(google.api.method_signature)": "parent,note_id,note"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
                         "post": "/v1/{parent=projects/*}/notes",
-                        "body": "note"
+                        "body": "note",
+                        "additional_bindings": {
+                          "post": "/v1/{parent=projects/*/locations/*}/notes",
+                          "body": "note"
+                        }
                       }
                     },
                     {
@@ -1778,13 +1843,19 @@
                   "options": {
                     "(google.api.http).post": "/v1/{parent=projects/*}/notes:batchCreate",
                     "(google.api.http).body": "*",
+                    "(google.api.http).additional_bindings.post": "/v1/{parent=projects/*/locations/*}/notes:batchCreate",
+                    "(google.api.http).additional_bindings.body": "*",
                     "(google.api.method_signature)": "parent,notes"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
                         "post": "/v1/{parent=projects/*}/notes:batchCreate",
-                        "body": "*"
+                        "body": "*",
+                        "additional_bindings": {
+                          "post": "/v1/{parent=projects/*/locations/*}/notes:batchCreate",
+                          "body": "*"
+                        }
                       }
                     },
                     {
@@ -1798,13 +1869,19 @@
                   "options": {
                     "(google.api.http).patch": "/v1/{name=projects/*/notes/*}",
                     "(google.api.http).body": "note",
+                    "(google.api.http).additional_bindings.patch": "/v1/{name=projects/*/locations/*/notes/*}",
+                    "(google.api.http).additional_bindings.body": "note",
                     "(google.api.method_signature)": "name,note,update_mask"
                   },
                   "parsedOptions": [
                     {
                       "(google.api.http)": {
                         "patch": "/v1/{name=projects/*/notes/*}",
-                        "body": "note"
+                        "body": "note",
+                        "additional_bindings": {
+                          "patch": "/v1/{name=projects/*/locations/*/notes/*}",
+                          "body": "note"
+                        }
                       }
                     },
                     {
@@ -5200,7 +5277,7 @@
                 "v1": {
                   "options": {
                     "csharp_namespace": "Google.Cloud.DevTools.ContainerAnalysis.V1",
-                    "go_package": "google.golang.org/genproto/googleapis/devtools/containeranalysis/v1;containeranalysis",
+                    "go_package": "cloud.google.com/go/containeranalysis/apiv1/containeranalysispb;containeranalysispb",
                     "java_multiple_files": true,
                     "java_package": "com.google.containeranalysis.v1",
                     "objc_class_prefix": "GCA",

package/build/src/v1beta1/grafeas_v1_beta1_client.d.ts

@@ -1,4 +1,3 @@
-/// <reference types="node" />
 import type * as gax from 'google-gax';
 import type { Callback, CallOptions, Descriptors, ClientOptions, PaginationCallback } from 'google-gax';
 import { Transform } from 'stream';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@google-cloud/containeranalysis",
-  "version": "5.5.0",
+  "version": "5.6.0",
   "description": "Containeranalysis client for Node.js",
   "repository": {
     "type": "git",
@@ -64,7 +64,7 @@
     "long": "^5.2.3",
     "mocha": "^10.2.0",
     "pack-n-play": "^2.0.0",
-    "sinon": "^17.0.0",
+    "sinon": "^18.0.0",
     "typescript": "^5.1.6"
   },
   "engines": {