@googleapis/securitycenter 17.2.0 → 17.4.0

package/v1beta1.ts

@@ -215,6 +215,37 @@ export namespace securitycenter_v1beta1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Represents an ADC application associated with the finding.
+   */
+  export interface Schema$AdcApplication {
+    /**
+     * Consumer provided attributes for the AppHub application.
+     */
+    attributes?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributes;
+    /**
+     * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC template associated with the finding.
+   */
+  export interface Schema$AdcApplicationTemplateRevision {
+    /**
+     * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC shared template associated with the finding.
+   */
+  export interface Schema$AdcSharedTemplateRevision {
+    /**
+     * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
   /**
    * Details about resources affected by this finding.
    */
@@ -283,6 +314,36 @@ export namespace securitycenter_v1beta1 {
      */
     fullUri?: string | null;
   }
+  /**
+   * Represents the result of evaluating artifact guard policies.
+   */
+  export interface Schema$ArtifactGuardPolicies {
+    /**
+     * A list of failing policies.
+     */
+    failingPolicies?: Schema$ArtifactGuardPolicy[];
+    /**
+     * The ID of the resource that has policies configured for it.
+     */
+    resourceId?: string | null;
+  }
+  /**
+   * Represents an artifact guard policy.
+   */
+  export interface Schema$ArtifactGuardPolicy {
+    /**
+     * The reason for the policy failure, for example, "severity=HIGH AND max_vuln_count=2".
+     */
+    failureReason?: string | null;
+    /**
+     * The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy".
+     */
+    policyId?: string | null;
+    /**
+     * The type of the policy evaluation.
+     */
+    type?: string | null;
+  }
   /**
    * Security Command Center representation of a Google Cloud resource. The Asset is a Security Command Center resource that captures information about a single Google Cloud resource. All modifications to an Asset are only within the context of Security Command Center and don't affect the referenced Google Cloud resource.
    */
@@ -1208,6 +1269,10 @@ export namespace securitycenter_v1beta1 {
      * Path of the file in terms of underlying disk/partition identifiers.
      */
     diskPath?: Schema$DiskPath;
+    /**
+     * The load state of the file.
+     */
+    fileLoadState?: string | null;
     /**
      * The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file.
      */
@@ -1262,6 +1327,10 @@ export namespace securitycenter_v1beta1 {
      * Represents an application associated with the finding.
      */
     application?: Schema$Application;
+    /**
+     * ArtifactGuardPolicies associated with the finding.
+     */
+    artifactGuardPolicies?: Schema$ArtifactGuardPolicies;
     /**
      * The results of an attack path simulation relevant to this finding.
      */
@@ -1464,6 +1533,10 @@ export namespace securitycenter_v1beta1 {
      * For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.
      */
     resourceName?: string | null;
+    /**
+     * Secret associated with the finding.
+     */
+    secret?: Schema$Secret;
     /**
      * Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
      */
@@ -2053,6 +2126,18 @@ export namespace securitycenter_v1beta1 {
    * Information related to the Google Cloud resource.
    */
   export interface Schema$GoogleCloudSecuritycenterV1Resource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$AdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$AdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$AdcSharedTemplateRevision;
     /**
      * The App Hub application this resource belongs to.
      */
@@ -2399,6 +2484,37 @@ export namespace securitycenter_v1beta1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Represents an ADC application associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AdcApplication {
+    /**
+     * Consumer provided attributes for the AppHub application.
+     */
+    attributes?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributes;
+    /**
+     * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AdcApplicationTemplateRevision {
+    /**
+     * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC shared template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AdcSharedTemplateRevision {
+    /**
+     * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
   /**
    * Details about resources affected by this finding.
    */
@@ -2467,6 +2583,36 @@ export namespace securitycenter_v1beta1 {
      */
     fullUri?: string | null;
   }
+  /**
+   * Represents the result of evaluating artifact guard policies.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicies {
+    /**
+     * A list of failing policies.
+     */
+    failingPolicies?: Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicy[];
+    /**
+     * The ID of the resource that has policies configured for it.
+     */
+    resourceId?: string | null;
+  }
+  /**
+   * Represents an artifact guard policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicy {
+    /**
+     * The reason for the policy failure, for example, "severity=HIGH AND max_vuln_count=2".
+     */
+    failureReason?: string | null;
+    /**
+     * The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy".
+     */
+    policyId?: string | null;
+    /**
+     * The type of the policy evaluation.
+     */
+    type?: string | null;
+  }
   /**
    * Information about DDoS attack volume and classification.
    */
@@ -3367,6 +3513,10 @@ export namespace securitycenter_v1beta1 {
      * Path of the file in terms of underlying disk/partition identifiers.
      */
     diskPath?: Schema$GoogleCloudSecuritycenterV2DiskPath;
+    /**
+     * The load state of the file.
+     */
+    fileLoadState?: string | null;
     /**
      * The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file.
      */
@@ -3421,6 +3571,10 @@ export namespace securitycenter_v1beta1 {
      * Represents an application associated with the finding.
      */
     application?: Schema$GoogleCloudSecuritycenterV2Application;
+    /**
+     * ArtifactGuardPolicies associated with the finding.
+     */
+    artifactGuardPolicies?: Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicies;
     /**
      * The results of an attack path simulation relevant to this finding.
      */
@@ -3629,6 +3783,10 @@ export namespace securitycenter_v1beta1 {
      * Immutable. For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string.
      */
     resourceName?: string | null;
+    /**
+     * Secret associated with the finding.
+     */
+    secret?: Schema$GoogleCloudSecuritycenterV2Secret;
     /**
      * Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
      */
@@ -3961,6 +4119,18 @@ export namespace securitycenter_v1beta1 {
    * A resource associated with the an issue.
    */
   export interface Schema$GoogleCloudSecuritycenterV2IssueResource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcSharedTemplateRevision;
     /**
      * The AppHub application associated with the resource, if any. Only populated for the primary resource.
      */
@@ -3994,6 +4164,37 @@ export namespace securitycenter_v1beta1 {
      */
     type?: string | null;
   }
+  /**
+   * Represents an ADC application associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplication {
+    /**
+     * Consumer provided attributes for the AppHub application.
+     */
+    attributes?: Schema$GoogleCloudSecuritycenterV2IssueResourceApplicationAttributes;
+    /**
+     * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplicationTemplateRevision {
+    /**
+     * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC shared template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcSharedTemplateRevision {
+    /**
+     * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
   /**
    * The AppHub application associated with the resource, if any.
    */
@@ -4661,6 +4862,18 @@ export namespace securitycenter_v1beta1 {
    * Information related to the Google Cloud resource.
    */
   export interface Schema$GoogleCloudSecuritycenterV2Resource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$GoogleCloudSecuritycenterV2AdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$GoogleCloudSecuritycenterV2AdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$GoogleCloudSecuritycenterV2AdcSharedTemplateRevision;
     /**
      * The App Hub application this resource belongs to.
      */
@@ -4867,6 +5080,58 @@ export namespace securitycenter_v1beta1 {
      */
     ns?: string | null;
   }
+  /**
+   * Details about a secret or credential associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Secret {
+    /**
+     * The environment variable containing the secret.
+     */
+    environmentVariable?: Schema$GoogleCloudSecuritycenterV2SecretEnvironmentVariable;
+    /**
+     * The file containing the secret.
+     */
+    filePath?: Schema$GoogleCloudSecuritycenterV2SecretFilePath;
+    /**
+     * The status of the secret.
+     */
+    status?: Schema$GoogleCloudSecuritycenterV2SecretStatus;
+    /**
+     * The type of secret, for example, GCP_API_KEY.
+     */
+    type?: string | null;
+  }
+  /**
+   * Environment variable containing the secret.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2SecretEnvironmentVariable {
+    /**
+     * Environment variable name as a JSON encoded string. Note that value is not included since the value contains the secret data, which is sensitive core content.
+     */
+    key?: string | null;
+  }
+  /**
+   * File path containing the secret.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2SecretFilePath {
+    /**
+     * Path to the file.
+     */
+    path?: string | null;
+  }
+  /**
+   * The status of the secret.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2SecretStatus {
+    /**
+     * Time that the secret was found.
+     */
+    lastUpdatedTime?: string | null;
+    /**
+     * The validity of the secret.
+     */
+    validity?: string | null;
+  }
   /**
    * SecurityBulletin are notifications of vulnerabilities of Google products.
    */
@@ -5971,6 +6236,58 @@ export namespace securitycenter_v1beta1 {
    * Request message for running asset discovery for an organization.
    */
   export interface Schema$RunAssetDiscoveryRequest {}
+  /**
+   * Details about a secret or credential associated with the finding.
+   */
+  export interface Schema$Secret {
+    /**
+     * The environment variable containing the secret.
+     */
+    environmentVariable?: Schema$SecretEnvironmentVariable;
+    /**
+     * The file containing the secret.
+     */
+    filePath?: Schema$SecretFilePath;
+    /**
+     * The status of the secret.
+     */
+    status?: Schema$SecretStatus;
+    /**
+     * The type of secret, for example, GCP_API_KEY.
+     */
+    type?: string | null;
+  }
+  /**
+   * Environment variable containing the secret.
+   */
+  export interface Schema$SecretEnvironmentVariable {
+    /**
+     * Environment variable name as a JSON encoded string. Note that value is not included since the value contains the secret data, which is sensitive core content.
+     */
+    key?: string | null;
+  }
+  /**
+   * File path containing the secret.
+   */
+  export interface Schema$SecretFilePath {
+    /**
+     * Path to the file.
+     */
+    path?: string | null;
+  }
+  /**
+   * The status of the secret.
+   */
+  export interface Schema$SecretStatus {
+    /**
+     * Time that the secret was found.
+     */
+    lastUpdatedTime?: string | null;
+    /**
+     * The validity of the secret.
+     */
+    validity?: string | null;
+  }
   /**
    * SecurityBulletin are notifications of vulnerabilities of Google products.
    */

package/v1beta2.ts

@@ -287,6 +287,36 @@ export namespace securitycenter_v1beta2 {
      */
     fullUri?: string | null;
   }
+  /**
+   * Represents the result of evaluating artifact guard policies.
+   */
+  export interface Schema$ArtifactGuardPolicies {
+    /**
+     * A list of failing policies.
+     */
+    failingPolicies?: Schema$ArtifactGuardPolicy[];
+    /**
+     * The ID of the resource that has policies configured for it.
+     */
+    resourceId?: string | null;
+  }
+  /**
+   * Represents an artifact guard policy.
+   */
+  export interface Schema$ArtifactGuardPolicy {
+    /**
+     * The reason for the policy failure, for example, "severity=HIGH AND max_vuln_count=2".
+     */
+    failureReason?: string | null;
+    /**
+     * The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy".
+     */
+    policyId?: string | null;
+    /**
+     * The type of the policy evaluation.
+     */
+    type?: string | null;
+  }
   /**
    * Information about DDoS attack volume and classification.
    */
@@ -1195,6 +1225,10 @@ export namespace securitycenter_v1beta2 {
      * Path of the file in terms of underlying disk/partition identifiers.
      */
     diskPath?: Schema$DiskPath;
+    /**
+     * The load state of the file.
+     */
+    fileLoadState?: string | null;
     /**
      * The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file.
      */
@@ -1249,6 +1283,10 @@ export namespace securitycenter_v1beta2 {
      * Represents an application associated with the finding.
      */
     application?: Schema$Application;
+    /**
+     * ArtifactGuardPolicies associated with the finding.
+     */
+    artifactGuardPolicies?: Schema$ArtifactGuardPolicies;
     /**
      * The results of an attack path simulation relevant to this finding.
      */
@@ -1451,6 +1489,10 @@ export namespace securitycenter_v1beta2 {
      * For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.
      */
     resourceName?: string | null;
+    /**
+     * Secret associated with the finding.
+     */
+    secret?: Schema$Secret;
     /**
      * Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
      */
@@ -2378,6 +2420,36 @@ export namespace securitycenter_v1beta2 {
      */
     fullUri?: string | null;
   }
+  /**
+   * Represents the result of evaluating artifact guard policies.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicies {
+    /**
+     * A list of failing policies.
+     */
+    failingPolicies?: Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicy[];
+    /**
+     * The ID of the resource that has policies configured for it.
+     */
+    resourceId?: string | null;
+  }
+  /**
+   * Represents an artifact guard policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicy {
+    /**
+     * The reason for the policy failure, for example, "severity=HIGH AND max_vuln_count=2".
+     */
+    failureReason?: string | null;
+    /**
+     * The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy".
+     */
+    policyId?: string | null;
+    /**
+     * The type of the policy evaluation.
+     */
+    type?: string | null;
+  }
   /**
    * Information about DDoS attack volume and classification.
    */
@@ -3278,6 +3350,10 @@ export namespace securitycenter_v1beta2 {
      * Path of the file in terms of underlying disk/partition identifiers.
      */
     diskPath?: Schema$GoogleCloudSecuritycenterV2DiskPath;
+    /**
+     * The load state of the file.
+     */
+    fileLoadState?: string | null;
     /**
      * The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file.
      */
@@ -3332,6 +3408,10 @@ export namespace securitycenter_v1beta2 {
      * Represents an application associated with the finding.
      */
     application?: Schema$GoogleCloudSecuritycenterV2Application;
+    /**
+     * ArtifactGuardPolicies associated with the finding.
+     */
+    artifactGuardPolicies?: Schema$GoogleCloudSecuritycenterV2ArtifactGuardPolicies;
     /**
      * The results of an attack path simulation relevant to this finding.
      */
@@ -3540,6 +3620,10 @@ export namespace securitycenter_v1beta2 {
      * Immutable. For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string.
      */
     resourceName?: string | null;
+    /**
+     * Secret associated with the finding.
+     */
+    secret?: Schema$GoogleCloudSecuritycenterV2Secret;
     /**
      * Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
      */
@@ -4778,6 +4862,58 @@ export namespace securitycenter_v1beta2 {
      */
     ns?: string | null;
   }
+  /**
+   * Details about a secret or credential associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Secret {
+    /**
+     * The environment variable containing the secret.
+     */
+    environmentVariable?: Schema$GoogleCloudSecuritycenterV2SecretEnvironmentVariable;
+    /**
+     * The file containing the secret.
+     */
+    filePath?: Schema$GoogleCloudSecuritycenterV2SecretFilePath;
+    /**
+     * The status of the secret.
+     */
+    status?: Schema$GoogleCloudSecuritycenterV2SecretStatus;
+    /**
+     * The type of secret, for example, GCP_API_KEY.
+     */
+    type?: string | null;
+  }
+  /**
+   * Environment variable containing the secret.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2SecretEnvironmentVariable {
+    /**
+     * Environment variable name as a JSON encoded string. Note that value is not included since the value contains the secret data, which is sensitive core content.
+     */
+    key?: string | null;
+  }
+  /**
+   * File path containing the secret.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2SecretFilePath {
+    /**
+     * Path to the file.
+     */
+    path?: string | null;
+  }
+  /**
+   * The status of the secret.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2SecretStatus {
+    /**
+     * Time that the secret was found.
+     */
+    lastUpdatedTime?: string | null;
+    /**
+     * The validity of the secret.
+     */
+    validity?: string | null;
+  }
   /**
    * SecurityBulletin are notifications of vulnerabilities of Google products.
    */
@@ -5650,6 +5786,58 @@ export namespace securitycenter_v1beta2 {
      */
     ns?: string | null;
   }
+  /**
+   * Details about a secret or credential associated with the finding.
+   */
+  export interface Schema$Secret {
+    /**
+     * The environment variable containing the secret.
+     */
+    environmentVariable?: Schema$SecretEnvironmentVariable;
+    /**
+     * The file containing the secret.
+     */
+    filePath?: Schema$SecretFilePath;
+    /**
+     * The status of the secret.
+     */
+    status?: Schema$SecretStatus;
+    /**
+     * The type of secret, for example, GCP_API_KEY.
+     */
+    type?: string | null;
+  }
+  /**
+   * Environment variable containing the secret.
+   */
+  export interface Schema$SecretEnvironmentVariable {
+    /**
+     * Environment variable name as a JSON encoded string. Note that value is not included since the value contains the secret data, which is sensitive core content.
+     */
+    key?: string | null;
+  }
+  /**
+   * File path containing the secret.
+   */
+  export interface Schema$SecretFilePath {
+    /**
+     * Path to the file.
+     */
+    path?: string | null;
+  }
+  /**
+   * The status of the secret.
+   */
+  export interface Schema$SecretStatus {
+    /**
+     * Time that the secret was found.
+     */
+    lastUpdatedTime?: string | null;
+    /**
+     * The validity of the secret.
+     */
+    validity?: string | null;
+  }
   /**
    * SecurityBulletin are notifications of vulnerabilities of Google products.
    */