@googleapis/securitycenter 17.1.0 → 17.3.0

package/build/v1beta2.d.ts

@@ -204,6 +204,10 @@ export declare namespace securitycenter_v1beta2 {
          * The publisher of the model, for example, “google” or “nvidia”.
          */
         publisher?: string | null;
+        /**
+         * The purpose of the model, for example, "Inteference" or "Training".
+         */
+        usageCategory?: string | null;
     }
     /**
      * Allowed IP rule.
@@ -227,6 +231,36 @@ export declare namespace securitycenter_v1beta2 {
          */
         fullUri?: string | null;
     }
+    /**
+     * Represents the result of evaluating artifact guard policies.
+     */
+    export interface Schema$ArtifactGuardPolicies {
+        /**
+         * A list of failing policies.
+         */
+        failingPolicies?: Schema$ArtifactGuardPolicy[];
+        /**
+         * The ID of the resource that has policies configured for it.
+         */
+        resourceId?: string | null;
+    }
+    /**
+     * Represents an artifact guard policy.
+     */
+    export interface Schema$ArtifactGuardPolicy {
+        /**
+         * The reason for the policy failure, for example, "severity=HIGH AND max_vuln_count=2".
+         */
+        failureReason?: string | null;
+        /**
+         * The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy".
+         */
+        policyId?: string | null;
+        /**
+         * The type of the policy evaluation.
+         */
+        type?: string | null;
+    }
     /**
      * Information about DDoS attack volume and classification.
      */
@@ -1142,6 +1176,10 @@ export declare namespace securitycenter_v1beta2 {
          * Path of the file in terms of underlying disk/partition identifiers.
          */
         diskPath?: Schema$DiskPath;
+        /**
+         * The load state of the file.
+         */
+        fileLoadState?: string | null;
         /**
          * The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file.
          */
@@ -1196,6 +1234,10 @@ export declare namespace securitycenter_v1beta2 {
          * Represents an application associated with the finding.
          */
         application?: Schema$Application;
+        /**
+         * ArtifactGuardPolicies associated with the finding.
+         */
+        artifactGuardPolicies?: Schema$ArtifactGuardPolicies;
         /**
          * The results of an attack path simulation relevant to this finding.
          */
@@ -1400,6 +1442,10 @@ export declare namespace securitycenter_v1beta2 {
          * For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.
          */
         resourceName?: string | null;
+        /**
+         * Secret associated with the finding.
+         */
+        secret?: Schema$Secret;
         /**
          * Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
          */
@@ -1920,6 +1966,10 @@ export declare namespace securitycenter_v1beta2 {
      * Information related to the Google Cloud resource.
      */
     export interface Schema$GoogleCloudSecuritycenterV1Resource {
+        /**
+         * The App Hub application this resource belongs to.
+         */
+        application?: Schema$GoogleCloudSecuritycenterV1ResourceApplication;
         /**
          * The AWS metadata associated with the finding.
          */
@@ -1985,6 +2035,71 @@ export declare namespace securitycenter_v1beta2 {
          */
         type?: string | null;
     }
+    /**
+     * The App Hub Application associated with the finding's resource.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV1ResourceApplication {
+        /**
+         * Consumer provided attributes for the application
+         */
+        attributes?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributes;
+        /**
+         * The resource name of an Application. Format: `projects/{host-project-id\}/locations/{location\}/applications/{application-id\}`
+         */
+        name?: string | null;
+    }
+    /**
+     * Consumer provided attributes for the application
+     */
+    export interface Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributes {
+        /**
+         * Business team that ensures user needs are met and value is delivered
+         */
+        businessOwners?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesContactInfo[];
+        /**
+         * User-defined criticality information.
+         */
+        criticality?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesCriticality;
+        /**
+         * Developer team that owns development and coding.
+         */
+        developerOwners?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesContactInfo[];
+        /**
+         * User-defined environment information.
+         */
+        environment?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesEnvironment;
+        /**
+         * Operator team that ensures runtime and operations.
+         */
+        operatorOwners?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesContactInfo[];
+    }
+    /**
+     * Contact information of stakeholders.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesContactInfo {
+        /**
+         * Email address of the contacts.
+         */
+        email?: string | null;
+    }
+    /**
+     * Criticality of the Application, Service, or Workload
+     */
+    export interface Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesCriticality {
+        /**
+         * Criticality Type.
+         */
+        type?: string | null;
+    }
+    /**
+     * Environment of the Application, Service, or Workload
+     */
+    export interface Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributesEnvironment {
+        /**
+         * Environment Type.
+         */
+        type?: string | null;
+    }
     /**
      * Resource for selecting resource type.
      */
@@ -2240,6 +2355,10 @@ export declare namespace securitycenter_v1beta2 {
          * The publisher of the model, for example, “google” or “nvidia”.
          */
         publisher?: string | null;
+        /**
+         * The purpose of the model, for example, "Inteference" or "Training".
+         */
+        usageCategory?: string | null;
     }
     /**
      * Allowed IP rule.
@@ -2263,6 +2382,36 @@ export declare namespace securitycenter_v1beta2 {
          */
         fullUri?: string | null;
     }
+    /**
+     * Represents the result of evaluating artifact guard policies.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicies {
+        /**
+         * A list of failing policies.
+         */
+        failingPolicies?: Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicy[];
+        /**
+         * The ID of the resource that has policies configured for it.
+         */
+        resourceId?: string | null;
+    }
+    /**
+     * Represents an artifact guard policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicy {
+        /**
+         * The reason for the policy failure, for example, "severity=HIGH AND max_vuln_count=2".
+         */
+        failureReason?: string | null;
+        /**
+         * The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy".
+         */
+        policyId?: string | null;
+        /**
+         * The type of the policy evaluation.
+         */
+        type?: string | null;
+    }
     /**
      * Information about DDoS attack volume and classification.
      */
@@ -3164,6 +3313,10 @@ export declare namespace securitycenter_v1beta2 {
          * Path of the file in terms of underlying disk/partition identifiers.
          */
         diskPath?: Schema$GoogleCloudSecuritycenterV2DiskPath;
+        /**
+         * The load state of the file.
+         */
+        fileLoadState?: string | null;
         /**
          * The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file.
          */
@@ -3218,6 +3371,10 @@ export declare namespace securitycenter_v1beta2 {
          * Represents an application associated with the finding.
          */
         application?: Schema$GoogleCloudSecuritycenterV2Application;
+        /**
+         * ArtifactGuardPolicies associated with the finding.
+         */
+        artifactGuardPolicies?: Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicies;
         /**
          * The results of an attack path simulation relevant to this finding.
          */
@@ -3426,6 +3583,10 @@ export declare namespace securitycenter_v1beta2 {
          * Immutable. For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string.
          */
         resourceName?: string | null;
+        /**
+         * Secret associated with the finding.
+         */
+        secret?: Schema$GoogleCloudSecuritycenterV2Secret;
         /**
          * Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
          */
@@ -4460,6 +4621,10 @@ export declare namespace securitycenter_v1beta2 {
      * Information related to the Google Cloud resource.
      */
     export interface Schema$GoogleCloudSecuritycenterV2Resource {
+        /**
+         * The App Hub application this resource belongs to.
+         */
+        application?: Schema$GoogleCloudSecuritycenterV2ResourceApplication;
         /**
          * The AWS metadata associated with the finding.
          */
@@ -4505,6 +4670,71 @@ export declare namespace securitycenter_v1beta2 {
          */
         type?: string | null;
     }
+    /**
+     * The App Hub Application associated with the finding's resource.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourceApplication {
+        /**
+         * Consumer provided attributes for the application
+         */
+        attributes?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributes;
+        /**
+         * The resource name of an Application. Format: `projects/{host-project-id\}/locations/{location\}/applications/{application-id\}`
+         */
+        name?: string | null;
+    }
+    /**
+     * Consumer provided attributes for the application
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributes {
+        /**
+         * Business team that ensures user needs are met and value is delivered
+         */
+        businessOwners?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesContactInfo[];
+        /**
+         * User-defined criticality information.
+         */
+        criticality?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesCriticality;
+        /**
+         * Developer team that owns development and coding.
+         */
+        developerOwners?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesContactInfo[];
+        /**
+         * User-defined environment information.
+         */
+        environment?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesEnvironment;
+        /**
+         * Operator team that ensures runtime and operations.
+         */
+        operatorOwners?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesContactInfo[];
+    }
+    /**
+     * Contact information of stakeholders.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesContactInfo {
+        /**
+         * Email address of the contacts.
+         */
+        email?: string | null;
+    }
+    /**
+     * Criticality of the Application, Service, or Workload
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesCriticality {
+        /**
+         * Criticality Type.
+         */
+        type?: string | null;
+    }
+    /**
+     * Environment of the Application, Service, or Workload
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributesEnvironment {
+        /**
+         * Environment Type.
+         */
+        type?: string | null;
+    }
     /**
      * Represents the path of resources leading up to the resource this finding is about.
      */
@@ -4599,6 +4829,58 @@ export declare namespace securitycenter_v1beta2 {
          */
         ns?: string | null;
     }
+    /**
+     * Details about a secret or credential associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Secret {
+        /**
+         * The environment variable containing the secret.
+         */
+        environmentVariable?: Schema$GoogleCloudSecuritycenterV2SecretEnvironmentVariable;
+        /**
+         * The file containing the secret.
+         */
+        filePath?: Schema$GoogleCloudSecuritycenterV2SecretFilePath;
+        /**
+         * The status of the secret.
+         */
+        status?: Schema$GoogleCloudSecuritycenterV2SecretStatus;
+        /**
+         * The type of secret, for example, GCP_API_KEY.
+         */
+        type?: string | null;
+    }
+    /**
+     * Environment variable containing the secret.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2SecretEnvironmentVariable {
+        /**
+         * Environment variable name as a JSON encoded string. Note that value is not included since the value contains the secret data, which is sensitive core content.
+         */
+        key?: string | null;
+    }
+    /**
+     * File path containing the secret.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2SecretFilePath {
+        /**
+         * Path to the file.
+         */
+        path?: string | null;
+    }
+    /**
+     * The status of the secret.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2SecretStatus {
+        /**
+         * Time that the secret was found.
+         */
+        lastUpdatedTime?: string | null;
+        /**
+         * The validity of the secret.
+         */
+        validity?: string | null;
+    }
     /**
      * SecurityBulletin are notifications of vulnerabilities of Google products.
      */
@@ -5475,6 +5757,58 @@ export declare namespace securitycenter_v1beta2 {
          */
         ns?: string | null;
     }
+    /**
+     * Details about a secret or credential associated with the finding.
+     */
+    export interface Schema$Secret {
+        /**
+         * The environment variable containing the secret.
+         */
+        environmentVariable?: Schema$SecretEnvironmentVariable;
+        /**
+         * The file containing the secret.
+         */
+        filePath?: Schema$SecretFilePath;
+        /**
+         * The status of the secret.
+         */
+        status?: Schema$SecretStatus;
+        /**
+         * The type of secret, for example, GCP_API_KEY.
+         */
+        type?: string | null;
+    }
+    /**
+     * Environment variable containing the secret.
+     */
+    export interface Schema$SecretEnvironmentVariable {
+        /**
+         * Environment variable name as a JSON encoded string. Note that value is not included since the value contains the secret data, which is sensitive core content.
+         */
+        key?: string | null;
+    }
+    /**
+     * File path containing the secret.
+     */
+    export interface Schema$SecretFilePath {
+        /**
+         * Path to the file.
+         */
+        path?: string | null;
+    }
+    /**
+     * The status of the secret.
+     */
+    export interface Schema$SecretStatus {
+        /**
+         * Time that the secret was found.
+         */
+        lastUpdatedTime?: string | null;
+        /**
+         * The validity of the secret.
+         */
+        validity?: string | null;
+    }
     /**
      * SecurityBulletin are notifications of vulnerabilities of Google products.
      */