@google-cloud/containeranalysis 6.3.0 → 6.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +67 -90
- package/build/protos/grafeas/v1/discovery.proto +8 -0
- package/build/protos/grafeas/v1/grafeas.proto +26 -0
- package/build/protos/grafeas/v1/risk.proto +46 -0
- package/build/protos/grafeas/v1/secret.proto +52 -1
- package/build/protos/grafeas/v1/vulnerability.proto +5 -1
- package/build/protos/protos.d.ts +476 -2
- package/build/protos/protos.js +1338 -5
- package/build/protos/protos.json +107 -1
- package/build/src/v1/container_analysis_client.js +1 -1
- package/build/src/v1/container_analysis_proto_list.json +1 -0
- package/build/src/v1/grafeas_proto_list.json +1 -0
- package/build/src/v1beta1/container_analysis_v1_beta1_client.d.ts +1 -1
- package/build/src/v1beta1/container_analysis_v1_beta1_client.js +2 -2
- package/build/src/v1beta1/grafeas_v1_beta1_client.js +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,24 +1,25 @@
|
|
|
1
1
|
[//]: # "This README.md file is auto-generated, all changes to this file will be lost."
|
|
2
|
-
[//]: # "
|
|
2
|
+
[//]: # "The comments you see below are used to generate those parts of the template in later states."
|
|
3
3
|
<img src="https://avatars2.githubusercontent.com/u/2810941?v=3&s=96" alt="Google Cloud Platform logo" title="Google Cloud Platform" align="right" height="96" width="96"/>
|
|
4
4
|
|
|
5
|
-
# [
|
|
6
|
-
|
|
7
|
-
[](https://cloud.google.com/terms/launch-stages)
|
|
8
|
-
[](https://www.npmjs.org/package/@google-cloud/containeranalysis)
|
|
9
|
-
|
|
5
|
+
# [Container Analysis API: Nodejs Client][homepage]
|
|
10
6
|
|
|
7
|
+
This library is considered to be **stable**. The code surface will not change in backwards-incompatible ways
|
|
8
|
+
unless absolutely necessary (e.g. because of critical security issues) or with
|
|
9
|
+
an extensive deprecation period. Issues and requests against **stable** libraries
|
|
10
|
+
are addressed with the highest priority
|
|
11
11
|
|
|
12
|
+
[](https://www.npmjs.org/package/@google-cloud/containeranalysis)
|
|
12
13
|
|
|
13
|
-
|
|
14
|
+
Container Analysis API client for Node.js
|
|
14
15
|
|
|
16
|
+
[//]: # "partials.introduction"
|
|
15
17
|
|
|
16
18
|
A comprehensive list of changes in each version may be found in
|
|
17
|
-
[the CHANGELOG]
|
|
19
|
+
[the CHANGELOG][homepage_changelog].
|
|
20
|
+
|
|
21
|
+
* [Container Analysis API Nodejs Client API Reference](https://cloud.google.com/nodejs/docs/reference/containeranalysis/latest)
|
|
18
22
|
|
|
19
|
-
* [Google Container Analysis Node.js Client API Reference][client-docs]
|
|
20
|
-
* [Google Container Analysis Documentation][product-docs]
|
|
21
|
-
* [github.com/googleapis/google-cloud-node/packages/google-devtools-containeranalysis](https://github.com/googleapis/google-cloud-node/tree/main/packages/google-devtools-containeranalysis)
|
|
22
23
|
|
|
23
24
|
Read more about the client libraries for Cloud APIs, including the older
|
|
24
25
|
Google APIs Client Libraries, in [Client Libraries Explained][explained].
|
|
@@ -27,89 +28,78 @@ Google APIs Client Libraries, in [Client Libraries Explained][explained].
|
|
|
27
28
|
|
|
28
29
|
**Table of contents:**
|
|
29
30
|
|
|
30
|
-
|
|
31
31
|
* [Quickstart](#quickstart)
|
|
32
32
|
* [Before you begin](#before-you-begin)
|
|
33
33
|
* [Installing the client library](#installing-the-client-library)
|
|
34
34
|
|
|
35
|
-
* [Samples](#samples)
|
|
36
35
|
* [Versioning](#versioning)
|
|
37
36
|
* [Contributing](#contributing)
|
|
38
37
|
* [License](#license)
|
|
39
38
|
|
|
40
39
|
## Quickstart
|
|
41
|
-
|
|
42
40
|
### Before you begin
|
|
43
41
|
|
|
44
42
|
1. [Select or create a Cloud Platform project][projects].
|
|
45
43
|
1. [Enable billing for your project][billing].
|
|
46
|
-
1. [Enable the
|
|
44
|
+
1. [Enable the Container Analysis API API][enable_api].
|
|
47
45
|
1. [Set up authentication][auth] so you can access the
|
|
48
46
|
API from your local workstation.
|
|
49
|
-
|
|
50
47
|
### Installing the client library
|
|
51
48
|
|
|
52
49
|
```bash
|
|
53
50
|
npm install @google-cloud/containeranalysis
|
|
54
51
|
```
|
|
55
52
|
|
|
56
|
-
|
|
57
|
-
|
|
53
|
+
[//]: # "partials.body"
|
|
58
54
|
|
|
59
55
|
## Samples
|
|
60
56
|
|
|
61
|
-
Samples are in the [`samples/`]
|
|
62
|
-
|
|
63
|
-
| Sample | Source Code |
|
|
64
|
-
| --------------------------- | --------------------------------- |
|
|
65
|
-
|
|
|
66
|
-
|
|
|
67
|
-
|
|
|
68
|
-
|
|
|
69
|
-
|
|
|
70
|
-
|
|
|
71
|
-
|
|
|
72
|
-
|
|
|
73
|
-
|
|
|
74
|
-
|
|
|
75
|
-
|
|
|
76
|
-
|
|
|
77
|
-
|
|
|
78
|
-
|
|
|
79
|
-
|
|
|
80
|
-
|
|
|
81
|
-
|
|
|
82
|
-
|
|
|
83
|
-
|
|
|
84
|
-
|
|
|
85
|
-
|
|
|
86
|
-
|
|
|
87
|
-
|
|
|
88
|
-
|
|
|
89
|
-
|
|
|
90
|
-
|
|
|
91
|
-
|
|
|
92
|
-
|
|
|
93
|
-
|
|
|
94
|
-
|
|
|
95
|
-
|
|
|
96
|
-
|
|
|
97
|
-
|
|
|
98
|
-
|
|
|
99
|
-
|
|
|
100
|
-
|
|
|
101
|
-
|
|
|
102
|
-
|
|
|
103
|
-
|
|
|
104
|
-
|
|
|
105
|
-
|
|
|
106
|
-
|
|
107
|
-
| Quickstart | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/quickstart.js) | [![Open in Cloud Shell][shell_img]](https://console.cloud.google.com/cloudshell/open?git_repo=https://github.com/googleapis/google-cloud-node&page=editor&open_in_editor=packages/google-devtools-containeranalysis/samples/quickstart.js,packages/google-devtools-containeranalysis/samples/README.md) |
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
The [Google Container Analysis Node.js Client API Reference][client-docs] documentation
|
|
112
|
-
also contains samples.
|
|
57
|
+
Samples are in the [`samples/`][homepage_samples] directory. Each sample's `README.md` has instructions for running its sample.
|
|
58
|
+
|
|
59
|
+
| Sample | Source Code |
|
|
60
|
+
| --------------------------- | --------------------------------- |
|
|
61
|
+
| export s b o m | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/container_analysis.export_s_b_o_m.js) |
|
|
62
|
+
| get iam policy | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/container_analysis.get_iam_policy.js) |
|
|
63
|
+
| get vulnerability occurrences summary | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/container_analysis.get_vulnerability_occurrences_summary.js) |
|
|
64
|
+
| set iam policy | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/container_analysis.set_iam_policy.js) |
|
|
65
|
+
| test iam permissions | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/container_analysis.test_iam_permissions.js) |
|
|
66
|
+
| batch create notes | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.batch_create_notes.js) |
|
|
67
|
+
| batch create occurrences | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.batch_create_occurrences.js) |
|
|
68
|
+
| create note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.create_note.js) |
|
|
69
|
+
| create occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.create_occurrence.js) |
|
|
70
|
+
| delete note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.delete_note.js) |
|
|
71
|
+
| delete occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.delete_occurrence.js) |
|
|
72
|
+
| get note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.get_note.js) |
|
|
73
|
+
| get occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.get_occurrence.js) |
|
|
74
|
+
| get occurrence note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.get_occurrence_note.js) |
|
|
75
|
+
| list note occurrences | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.list_note_occurrences.js) |
|
|
76
|
+
| list notes | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.list_notes.js) |
|
|
77
|
+
| list occurrences | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.list_occurrences.js) |
|
|
78
|
+
| update note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.update_note.js) |
|
|
79
|
+
| update occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/grafeas.update_occurrence.js) |
|
|
80
|
+
| devtools | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1/snippet_metadata_google.devtools.containeranalysis.v1.json) |
|
|
81
|
+
| export s b o m | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/container_analysis_v1_beta1.export_s_b_o_m.js) |
|
|
82
|
+
| generate packages summary | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/container_analysis_v1_beta1.generate_packages_summary.js) |
|
|
83
|
+
| get iam policy | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/container_analysis_v1_beta1.get_iam_policy.js) |
|
|
84
|
+
| set iam policy | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/container_analysis_v1_beta1.set_iam_policy.js) |
|
|
85
|
+
| test iam permissions | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/container_analysis_v1_beta1.test_iam_permissions.js) |
|
|
86
|
+
| batch create notes | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.batch_create_notes.js) |
|
|
87
|
+
| batch create occurrences | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.batch_create_occurrences.js) |
|
|
88
|
+
| create note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.create_note.js) |
|
|
89
|
+
| create occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.create_occurrence.js) |
|
|
90
|
+
| delete note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.delete_note.js) |
|
|
91
|
+
| delete occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.delete_occurrence.js) |
|
|
92
|
+
| get note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.get_note.js) |
|
|
93
|
+
| get occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.get_occurrence.js) |
|
|
94
|
+
| get occurrence note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.get_occurrence_note.js) |
|
|
95
|
+
| get vulnerability occurrences summary | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.get_vulnerability_occurrences_summary.js) |
|
|
96
|
+
| list note occurrences | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.list_note_occurrences.js) |
|
|
97
|
+
| list notes | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.list_notes.js) |
|
|
98
|
+
| list occurrences | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.list_occurrences.js) |
|
|
99
|
+
| update note | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.update_note.js) |
|
|
100
|
+
| update occurrence | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/grafeas_v1_beta1.update_occurrence.js) |
|
|
101
|
+
| devtools | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples/generated/v1beta1/snippet_metadata_google.devtools.containeranalysis.v1beta1.json) |
|
|
102
|
+
|
|
113
103
|
|
|
114
104
|
## Supported Node.js Versions
|
|
115
105
|
|
|
@@ -136,42 +126,29 @@ for versions compatible with Node.js 8.
|
|
|
136
126
|
|
|
137
127
|
This library follows [Semantic Versioning](http://semver.org/).
|
|
138
128
|
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
This library is considered to be **stable**. The code surface will not change in backwards-incompatible ways
|
|
142
|
-
unless absolutely necessary (e.g. because of critical security issues) or with
|
|
143
|
-
an extensive deprecation period. Issues and requests against **stable** libraries
|
|
144
|
-
are addressed with the highest priority.
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
129
|
More Information: [Google Cloud Platform Launch Stages][launch_stages]
|
|
152
130
|
|
|
153
131
|
[launch_stages]: https://cloud.google.com/terms/launch-stages
|
|
154
132
|
|
|
155
133
|
## Contributing
|
|
156
134
|
|
|
157
|
-
Contributions welcome! See the [Contributing Guide](https://github.com/googleapis/google-cloud-node/blob/main/CONTRIBUTING.md).
|
|
135
|
+
Contributions welcome! See the [Contributing Guide](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/CONTRIBUTING.md).
|
|
158
136
|
|
|
159
|
-
Please note that this `README.md
|
|
137
|
+
Please note that this `README.md`
|
|
160
138
|
and a variety of configuration files in this repository (including `.nycrc` and `tsconfig.json`)
|
|
161
|
-
are generated from a central template.
|
|
162
|
-
to its templates in
|
|
163
|
-
[directory](https://github.com/googleapis/synthtool).
|
|
139
|
+
are generated from a central template.
|
|
164
140
|
|
|
165
141
|
## License
|
|
166
142
|
|
|
167
143
|
Apache Version 2.0
|
|
168
144
|
|
|
169
|
-
See [LICENSE](https://github.com/googleapis/google-cloud-node/blob/main/LICENSE)
|
|
145
|
+
See [LICENSE](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/LICENSE)
|
|
170
146
|
|
|
171
|
-
[client-docs]: https://cloud.google.com/nodejs/docs/reference/containeranalysis/latest
|
|
172
|
-
[product-docs]: https://cloud.google.com/container-registry/docs/container-analysis
|
|
173
147
|
[shell_img]: https://gstatic.com/cloudssh/images/open-btn.png
|
|
174
148
|
[projects]: https://console.cloud.google.com/project
|
|
175
149
|
[billing]: https://support.google.com/cloud/answer/6293499#enable-billing
|
|
176
150
|
[enable_api]: https://console.cloud.google.com/flows/enableapi?apiid=containeranalysis.googleapis.com
|
|
177
151
|
[auth]: https://cloud.google.com/docs/authentication/external/set-up-adc-local
|
|
152
|
+
[homepage_samples]: https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/samples
|
|
153
|
+
[homepage_changelog]: https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis/CHANGELOG.md
|
|
154
|
+
[homepage]: https://github.com/googleapis/google-cloud-node/blob/main/packages/google-devtools-containeranalysis
|
|
@@ -148,4 +148,12 @@ message DiscoveryOccurrence {
|
|
|
148
148
|
|
|
149
149
|
// The status of an vulnerability attestation generation.
|
|
150
150
|
VulnerabilityAttestation vulnerability_attestation = 10;
|
|
151
|
+
|
|
152
|
+
message File {
|
|
153
|
+
string name = 1;
|
|
154
|
+
map<string, string> digest = 2;
|
|
155
|
+
}
|
|
156
|
+
|
|
157
|
+
// Files that make up the resource described by the occurrence.
|
|
158
|
+
repeated File files = 11;
|
|
151
159
|
}
|
|
@@ -402,6 +402,13 @@ message ListOccurrencesRequest {
|
|
|
402
402
|
|
|
403
403
|
// Token to provide to skip to a particular spot in the list.
|
|
404
404
|
string page_token = 4;
|
|
405
|
+
|
|
406
|
+
// If set, the request will return all reachable Occurrences
|
|
407
|
+
// and report all unreachable regions in the `unreachable` field in
|
|
408
|
+
// the response.
|
|
409
|
+
//
|
|
410
|
+
// Only applicable for requests in the global region.
|
|
411
|
+
bool return_partial_success = 5;
|
|
405
412
|
}
|
|
406
413
|
|
|
407
414
|
// Response for listing occurrences.
|
|
@@ -412,6 +419,12 @@ message ListOccurrencesResponse {
|
|
|
412
419
|
// `page_token` for the following request. An empty value means no more
|
|
413
420
|
// results.
|
|
414
421
|
string next_page_token = 2;
|
|
422
|
+
// Unreachable regions. Populated for requests from the global region
|
|
423
|
+
// when `return_partial_success` is set.
|
|
424
|
+
//
|
|
425
|
+
// Format: `projects/[PROJECT_ID]/locations/[LOCATION]`
|
|
426
|
+
repeated string unreachable = 3
|
|
427
|
+
[(google.api.field_behavior) = UNORDERED_LIST];
|
|
415
428
|
}
|
|
416
429
|
|
|
417
430
|
// Request to delete an occurrence.
|
|
@@ -488,6 +501,13 @@ message ListNotesRequest {
|
|
|
488
501
|
|
|
489
502
|
// Token to provide to skip to a particular spot in the list.
|
|
490
503
|
string page_token = 4;
|
|
504
|
+
|
|
505
|
+
// If set, the request will return all reachable Notes
|
|
506
|
+
// and report all unreachable regions in the `unreachable` field in
|
|
507
|
+
// the response.
|
|
508
|
+
//
|
|
509
|
+
// Only applicable for requests in the global region.
|
|
510
|
+
bool return_partial_success = 5;
|
|
491
511
|
}
|
|
492
512
|
|
|
493
513
|
// Response for listing notes.
|
|
@@ -498,6 +518,12 @@ message ListNotesResponse {
|
|
|
498
518
|
// `page_token` for the following request. An empty value means no more
|
|
499
519
|
// results.
|
|
500
520
|
string next_page_token = 2;
|
|
521
|
+
// Unreachable regions. Populated for requests from the global region
|
|
522
|
+
// when `return_partial_success` is set.
|
|
523
|
+
//
|
|
524
|
+
// Format: `projects/[PROJECT_ID]/locations/[LOCATION]`
|
|
525
|
+
repeated string unreachable = 3
|
|
526
|
+
[(google.api.field_behavior) = UNORDERED_LIST];
|
|
501
527
|
}
|
|
502
528
|
|
|
503
529
|
// Request to delete a note.
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
// Copyright 2025 The Grafeas Authors. All rights reserved.
|
|
2
|
+
//
|
|
3
|
+
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
4
|
+
// you may not use this file except in compliance with the License.
|
|
5
|
+
// You may obtain a copy of the License at
|
|
6
|
+
//
|
|
7
|
+
// http://www.apache.org/licenses/LICENSE-2.0
|
|
8
|
+
//
|
|
9
|
+
// Unless required by applicable law or agreed to in writing, software
|
|
10
|
+
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
11
|
+
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
12
|
+
// See the License for the specific language governing permissions and
|
|
13
|
+
// limitations under the License.
|
|
14
|
+
|
|
15
|
+
syntax = "proto3";
|
|
16
|
+
|
|
17
|
+
package grafeas.v1;
|
|
18
|
+
|
|
19
|
+
option go_package = "google.golang.org/genproto/googleapis/grafeas/v1;grafeas";
|
|
20
|
+
option java_multiple_files = true;
|
|
21
|
+
option java_package = "io.grafeas.v1";
|
|
22
|
+
option objc_class_prefix = "GRA";
|
|
23
|
+
|
|
24
|
+
message Risk {
|
|
25
|
+
// CISA maintains the authoritative source of vulnerabilities that have been
|
|
26
|
+
// exploited in the wild.
|
|
27
|
+
CISAKnownExploitedVulnerabilities cisa_kev = 1;
|
|
28
|
+
// The Exploit Prediction Scoring System (EPSS) estimates the likelihood
|
|
29
|
+
// (probability) that a software vulnerability will be exploited in the wild.
|
|
30
|
+
ExploitPredictionScoringSystem epss = 2;
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
message CISAKnownExploitedVulnerabilities {
|
|
34
|
+
// Whether the vulnerability is known to have been leveraged as part of a
|
|
35
|
+
// ransomware campaign.
|
|
36
|
+
string known_ransomware_campaign_use = 1;
|
|
37
|
+
}
|
|
38
|
+
|
|
39
|
+
message ExploitPredictionScoringSystem {
|
|
40
|
+
// The percentile of the current score, the proportion of all scored
|
|
41
|
+
// vulnerabilities with the same or a lower EPSS score
|
|
42
|
+
double percentile = 1;
|
|
43
|
+
// The EPSS score representing the probability [0-1] of exploitation in the
|
|
44
|
+
// wild in the next 30 days
|
|
45
|
+
double score = 2;
|
|
46
|
+
}
|
|
@@ -17,6 +17,7 @@ syntax = "proto3";
|
|
|
17
17
|
package grafeas.v1;
|
|
18
18
|
|
|
19
19
|
import "google/api/field_behavior.proto";
|
|
20
|
+
import "google/protobuf/any.proto";
|
|
20
21
|
import "google/protobuf/timestamp.proto";
|
|
21
22
|
import "grafeas/v1/common.proto";
|
|
22
23
|
|
|
@@ -39,6 +40,13 @@ message SecretOccurrence {
|
|
|
39
40
|
|
|
40
41
|
// Status of the secret.
|
|
41
42
|
repeated SecretStatus statuses = 3 [(google.api.field_behavior) = OPTIONAL];
|
|
43
|
+
|
|
44
|
+
// Scan result of the secret.
|
|
45
|
+
google.protobuf.Any data = 4;
|
|
46
|
+
|
|
47
|
+
// Hash value, typically a digest for the secret data, that allows unique
|
|
48
|
+
// identification of a specific secret.
|
|
49
|
+
Digest digest = 5;
|
|
42
50
|
}
|
|
43
51
|
|
|
44
52
|
// The location of the secret.
|
|
@@ -84,7 +92,50 @@ enum SecretKind {
|
|
|
84
92
|
SECRET_KIND_UNSPECIFIED = 0;
|
|
85
93
|
// The secret kind is unknown.
|
|
86
94
|
SECRET_KIND_UNKNOWN = 1;
|
|
87
|
-
// A
|
|
95
|
+
// A Google Cloud service account key per:
|
|
88
96
|
// https://cloud.google.com/iam/docs/creating-managing-service-account-keys
|
|
89
97
|
SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY = 2;
|
|
98
|
+
// A Google Cloud API key per:
|
|
99
|
+
// https://cloud.google.com/docs/authentication/api-keys
|
|
100
|
+
SECRET_KIND_GCP_API_KEY = 3;
|
|
101
|
+
// A Google Cloud OAuth2 client credentials per:
|
|
102
|
+
// https://developers.google.com/identity/protocols/oauth2
|
|
103
|
+
SECRET_KIND_GCP_OAUTH2_CLIENT_CREDENTIALS = 4;
|
|
104
|
+
// A Google Cloud OAuth2 access token per:
|
|
105
|
+
// https://cloud.google.com/docs/authentication/token-types#access
|
|
106
|
+
SECRET_KIND_GCP_OAUTH2_ACCESS_TOKEN = 5;
|
|
107
|
+
// An Anthropic Admin API key.
|
|
108
|
+
SECRET_KIND_ANTHROPIC_ADMIN_API_KEY = 6;
|
|
109
|
+
// An Anthropic API key.
|
|
110
|
+
SECRET_KIND_ANTHROPIC_API_KEY = 7;
|
|
111
|
+
// An Azure access token.
|
|
112
|
+
SECRET_KIND_AZURE_ACCESS_TOKEN = 8;
|
|
113
|
+
// An Azure Identity Platform ID token.
|
|
114
|
+
SECRET_KIND_AZURE_IDENTITY_TOKEN = 9;
|
|
115
|
+
// A Docker Hub personal access token.
|
|
116
|
+
SECRET_KIND_DOCKER_HUB_PERSONAL_ACCESS_TOKEN = 10;
|
|
117
|
+
// A GitHub App refresh token.
|
|
118
|
+
SECRET_KIND_GITHUB_APP_REFRESH_TOKEN = 11;
|
|
119
|
+
// A GitHub App server-to-server token.
|
|
120
|
+
SECRET_KIND_GITHUB_APP_SERVER_TO_SERVER_TOKEN = 12;
|
|
121
|
+
// A GitHub App user-to-server token.
|
|
122
|
+
SECRET_KIND_GITHUB_APP_USER_TO_SERVER_TOKEN = 13;
|
|
123
|
+
// A GitHub personal access token (classic).
|
|
124
|
+
SECRET_KIND_GITHUB_CLASSIC_PERSONAL_ACCESS_TOKEN = 14;
|
|
125
|
+
// A GitHub fine-grained personal access token.
|
|
126
|
+
SECRET_KIND_GITHUB_FINE_GRAINED_PERSONAL_ACCESS_TOKEN = 15;
|
|
127
|
+
// A GitHub OAuth token.
|
|
128
|
+
SECRET_KIND_GITHUB_OAUTH_TOKEN = 16;
|
|
129
|
+
// A Hugging Face API key.
|
|
130
|
+
SECRET_KIND_HUGGINGFACE_API_KEY = 17;
|
|
131
|
+
// An OpenAI API key.
|
|
132
|
+
SECRET_KIND_OPENAI_API_KEY = 18;
|
|
133
|
+
// A Perplexity API key.
|
|
134
|
+
SECRET_KIND_PERPLEXITY_API_KEY = 19;
|
|
135
|
+
// A Stripe secret key.
|
|
136
|
+
SECRET_KIND_STRIPE_SECRET_KEY = 20;
|
|
137
|
+
// A Stripe restricted key.
|
|
138
|
+
SECRET_KIND_STRIPE_RESTRICTED_KEY = 21;
|
|
139
|
+
// A Stripe webhook secret.
|
|
140
|
+
SECRET_KIND_STRIPE_WEBHOOK_SECRET = 22;
|
|
90
141
|
}
|
|
@@ -21,6 +21,7 @@ import "google/protobuf/timestamp.proto";
|
|
|
21
21
|
import "grafeas/v1/common.proto";
|
|
22
22
|
import "grafeas/v1/cvss.proto";
|
|
23
23
|
import "grafeas/v1/package.proto";
|
|
24
|
+
import "grafeas/v1/risk.proto";
|
|
24
25
|
import "grafeas/v1/severity.proto";
|
|
25
26
|
import "grafeas/v1/vex.proto";
|
|
26
27
|
|
|
@@ -301,5 +302,8 @@ message VulnerabilityOccurrence {
|
|
|
301
302
|
// Occurrence-specific extra details about the vulnerability.
|
|
302
303
|
string extra_details = 14;
|
|
303
304
|
|
|
304
|
-
//
|
|
305
|
+
// Risk information about the vulnerability, such as CISA, EPSS, etc.
|
|
306
|
+
Risk risk = 15;
|
|
307
|
+
|
|
308
|
+
// Next free ID is 16.
|
|
305
309
|
}
|