@harnessio/react-ssca-manager-client 0.84.9 → 0.84.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/ssca-manager/src/services/hooks/useArtifactListV2Query.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useCodeRepositoriesListQuery.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useFetchComplianceResultsByArtifactQuery.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useFetchComplianceResultsByComplianceIdQuery.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useFetchComplianceResultsGroupByIdMutation.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useGetArtifactV2DetailComponentViewQuery.d.ts +2 -1
- package/dist/ssca-manager/src/services/hooks/useGetCicdWorkflowsListQuery.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useGetComplianceEvaluationTrendsQuery.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useGetComplianceResultStatsByComplianceChecksMutation.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useGetComponentsQuery.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useGetLicenseFamilyConfigQuery.d.ts +20 -0
- package/dist/ssca-manager/src/services/hooks/useGetLicenseFamilyConfigQuery.js +14 -0
- package/dist/ssca-manager/src/services/hooks/useImportLicenseFamilyConfigMutation.d.ts +23 -0
- package/dist/ssca-manager/src/services/hooks/useImportLicenseFamilyConfigMutation.js +14 -0
- package/dist/ssca-manager/src/services/hooks/usePostComplianceResultStatsOverviewMutation.d.ts +1 -0
- package/dist/ssca-manager/src/services/hooks/useResetLicenseFamilyConfigMutation.d.ts +24 -0
- package/dist/ssca-manager/src/services/hooks/useResetLicenseFamilyConfigMutation.js +14 -0
- package/dist/ssca-manager/src/services/index.d.ts +42 -0
- package/dist/ssca-manager/src/services/index.js +3 -0
- package/dist/ssca-manager/src/services/requestBodies/BatchComponentRemediationRequestBodyRequestBody.d.ts +2 -0
- package/dist/ssca-manager/src/services/requestBodies/BatchComponentRemediationRequestBodyRequestBody.js +1 -0
- package/dist/ssca-manager/src/services/requestBodies/ClosePrsRequestBodyRequestBody.d.ts +2 -0
- package/dist/ssca-manager/src/services/requestBodies/ClosePrsRequestBodyRequestBody.js +1 -0
- package/dist/ssca-manager/src/services/requestBodies/OidcIdTokenRequestBodyRequestBody.d.ts +2 -0
- package/dist/ssca-manager/src/services/requestBodies/OidcIdTokenRequestBodyRequestBody.js +1 -0
- package/dist/ssca-manager/src/services/responses/ComponentSearchResponseBodyResponse.d.ts +2 -0
- package/dist/ssca-manager/src/services/responses/ComponentSearchResponseBodyResponse.js +1 -0
- package/dist/ssca-manager/src/services/responses/OidcTokenResponseBodyResponse.d.ts +2 -0
- package/dist/ssca-manager/src/services/responses/OidcTokenResponseBodyResponse.js +1 -0
- package/dist/ssca-manager/src/services/schemas/ActivityDetails.d.ts +1 -1
- package/dist/ssca-manager/src/services/schemas/ArtifactComponentViewRequestBody.d.ts +5 -0
- package/dist/ssca-manager/src/services/schemas/ArtifactComponentViewResponse.d.ts +24 -0
- package/dist/ssca-manager/src/services/schemas/ArtifactListingRequestBody.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/ArtifactOssRisksSummary.d.ts +19 -0
- package/dist/ssca-manager/src/services/schemas/ArtifactOssRisksSummary.js +1 -0
- package/dist/ssca-manager/src/services/schemas/AttestationActivity.d.ts +21 -0
- package/dist/ssca-manager/src/services/schemas/AttestationActivity.js +1 -0
- package/dist/ssca-manager/src/services/schemas/AttestationSource.d.ts +5 -0
- package/dist/ssca-manager/src/services/schemas/AttestationSource.js +4 -0
- package/dist/ssca-manager/src/services/schemas/AttestationType.d.ts +5 -0
- package/dist/ssca-manager/src/services/schemas/AttestationType.js +4 -0
- package/dist/ssca-manager/src/services/schemas/AttestationUploadRequest.d.ts +5 -1
- package/dist/ssca-manager/src/services/schemas/AttestationUploadResponseBody.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/AutoPrAdvancedRule.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/BatchComponentRemediationItem.d.ts +16 -0
- package/dist/ssca-manager/src/services/schemas/BatchComponentRemediationItem.js +1 -0
- package/dist/ssca-manager/src/services/schemas/BatchComponentRemediationRequest.d.ts +10 -0
- package/dist/ssca-manager/src/services/schemas/BatchComponentRemediationRequest.js +4 -0
- package/dist/ssca-manager/src/services/schemas/BatchComponentRemediationResponse.d.ts +16 -0
- package/dist/ssca-manager/src/services/schemas/BatchComponentRemediationResponse.js +1 -0
- package/dist/ssca-manager/src/services/schemas/ClosePrsRequest.d.ts +6 -0
- package/dist/ssca-manager/src/services/schemas/ClosePrsRequest.js +4 -0
- package/dist/ssca-manager/src/services/schemas/ClosePrsResponse.d.ts +10 -0
- package/dist/ssca-manager/src/services/schemas/ClosePrsResponse.js +4 -0
- package/dist/ssca-manager/src/services/schemas/CodeRepositoryListingRequest.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/ComplianceCheck.d.ts +2 -0
- package/dist/ssca-manager/src/services/schemas/ComplianceResult.d.ts +8 -0
- package/dist/ssca-manager/src/services/schemas/ComponentSearchResult.d.ts +33 -0
- package/dist/ssca-manager/src/services/schemas/ComponentSearchResult.js +4 -0
- package/dist/ssca-manager/src/services/schemas/CreatedBy.d.ts +14 -0
- package/dist/ssca-manager/src/services/schemas/CreatedBy.js +4 -0
- package/dist/ssca-manager/src/services/schemas/DownloadProvenanceResponseBody.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/DownloadProvenanceResponseBody.js +4 -0
- package/dist/ssca-manager/src/services/schemas/DownloadSbomAttestationResponseBody.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/DownloadSbomAttestationResponseBody.js +4 -0
- package/dist/ssca-manager/src/services/schemas/LicenseFamilyConfigResponse.d.ts +16 -0
- package/dist/ssca-manager/src/services/schemas/LicenseFamilyConfigResponse.js +4 -0
- package/dist/ssca-manager/src/services/schemas/LicenseFamilyImportRequest.d.ts +15 -0
- package/dist/ssca-manager/src/services/schemas/LicenseFamilyImportRequest.js +4 -0
- package/dist/ssca-manager/src/services/schemas/LicenseFamilyResponse.d.ts +10 -0
- package/dist/ssca-manager/src/services/schemas/LicenseFamilyResponse.js +4 -0
- package/dist/ssca-manager/src/services/schemas/OidcIdTokenRequest.d.ts +93 -0
- package/dist/ssca-manager/src/services/schemas/OidcIdTokenRequest.js +4 -0
- package/dist/ssca-manager/src/services/schemas/OidcTokenResponseBody.d.ts +9 -0
- package/dist/ssca-manager/src/services/schemas/OidcTokenResponseBody.js +4 -0
- package/dist/ssca-manager/src/services/schemas/OssRiskFilter.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/OssRiskFilter.js +4 -0
- package/dist/ssca-manager/src/services/schemas/OverrideSource.d.ts +17 -0
- package/dist/ssca-manager/src/services/schemas/OverrideSource.js +4 -0
- package/dist/ssca-manager/src/services/schemas/OwaspFilter.d.ts +1 -1
- package/dist/ssca-manager/src/services/schemas/ProjectOssRisksSummary.d.ts +28 -0
- package/dist/ssca-manager/src/services/schemas/ProjectOssRisksSummary.js +1 -0
- package/dist/ssca-manager/src/services/schemas/ProjectSecurityOverview.d.ts +17 -0
- package/dist/ssca-manager/src/services/schemas/ProjectSecurityOverview.js +1 -0
- package/dist/ssca-manager/src/services/schemas/RemediationPrListItem.d.ts +51 -0
- package/dist/ssca-manager/src/services/schemas/RemediationPrListItem.js +1 -0
- package/dist/ssca-manager/src/services/schemas/RemediationPrListResponse.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/RemediationPrListResponse.js +1 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewArtifactCount.d.ts +17 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewArtifactCount.js +4 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewComplianceSummary.d.ts +33 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewComplianceSummary.js +4 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewDeploymentSummary.d.ts +13 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewDeploymentSummary.js +4 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewEnforcementSummary.d.ts +17 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewEnforcementSummary.js +4 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewSbomCoverage.d.ts +17 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewSbomCoverage.js +4 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewVulnerabilitySummary.d.ts +29 -0
- package/dist/ssca-manager/src/services/schemas/SecurityOverviewVulnerabilitySummary.js +4 -0
- package/dist/ssca-manager/src/services/schemas/TriggerType.d.ts +4 -0
- package/dist/ssca-manager/src/services/schemas/TriggerType.js +4 -0
- package/package.json +1 -1
|
@@ -1,8 +1,12 @@
|
|
|
1
1
|
import type { Artifact } from '../schemas/Artifact';
|
|
2
2
|
import type { DsseEnvelope } from '../schemas/DsseEnvelope';
|
|
3
3
|
import type { ExecutionDetail } from '../schemas/ExecutionDetail';
|
|
4
|
+
import type { AttestationSource } from '../schemas/AttestationSource';
|
|
5
|
+
import type { AttestationType } from '../schemas/AttestationType';
|
|
4
6
|
export interface AttestationUploadRequest {
|
|
5
|
-
artifact
|
|
7
|
+
artifact?: Artifact;
|
|
6
8
|
envelope: DsseEnvelope;
|
|
7
9
|
executionContext?: ExecutionDetail;
|
|
10
|
+
source?: AttestationSource;
|
|
11
|
+
type?: AttestationType;
|
|
8
12
|
}
|
|
@@ -1,4 +1,6 @@
|
|
|
1
1
|
import type { AttestationLinks } from '../schemas/AttestationLinks';
|
|
2
|
+
import type { AttestationSource } from '../schemas/AttestationSource';
|
|
3
|
+
import type { AttestationType } from '../schemas/AttestationType';
|
|
2
4
|
export interface AttestationUploadResponseBody {
|
|
3
5
|
/**
|
|
4
6
|
* Associated artifact identifier
|
|
@@ -18,11 +20,13 @@ export interface AttestationUploadResponseBody {
|
|
|
18
20
|
* Orchestration identifier for this attestation
|
|
19
21
|
*/
|
|
20
22
|
orchestrationId?: string;
|
|
23
|
+
source?: AttestationSource;
|
|
21
24
|
/**
|
|
22
25
|
* Ingestion status
|
|
23
26
|
* @example "ingested"
|
|
24
27
|
*/
|
|
25
28
|
status?: string;
|
|
29
|
+
type?: AttestationType;
|
|
26
30
|
/**
|
|
27
31
|
* Whether the signature was verified
|
|
28
32
|
* @example true
|
|
@@ -4,6 +4,10 @@ export interface AutoPrAdvancedRule {
|
|
|
4
4
|
* List of components to exclude (PURL format)
|
|
5
5
|
*/
|
|
6
6
|
exclude_components?: string[];
|
|
7
|
+
/**
|
|
8
|
+
* List of repository names to exclude from auto PR creation. Supports glob patterns (e.g. "test-*").
|
|
9
|
+
*/
|
|
10
|
+
exclude_repositories?: string[];
|
|
7
11
|
/**
|
|
8
12
|
* Maximum number of PRs to create
|
|
9
13
|
*/
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import type { ComponentRemediationResponse } from '../schemas/ComponentRemediationResponse';
|
|
2
|
+
export interface BatchComponentRemediationItem {
|
|
3
|
+
/**
|
|
4
|
+
* Error message if remediation failed for this purl
|
|
5
|
+
*/
|
|
6
|
+
error_message?: string;
|
|
7
|
+
/**
|
|
8
|
+
* Package URL of the component
|
|
9
|
+
*/
|
|
10
|
+
purl: string;
|
|
11
|
+
remediation?: ComponentRemediationResponse;
|
|
12
|
+
/**
|
|
13
|
+
* Status of the remediation for this purl
|
|
14
|
+
*/
|
|
15
|
+
status: 'ERROR' | 'SUCCESS';
|
|
16
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
export interface BatchComponentRemediationRequest {
|
|
2
|
+
/**
|
|
3
|
+
* List of Package URLs to get remediation for
|
|
4
|
+
*/
|
|
5
|
+
purls: string[];
|
|
6
|
+
/**
|
|
7
|
+
* Optional target version applied uniformly to all PURLs. Typically omitted so each component uses its auto-recommended version. Only useful when all PURLs refer to the same package at different locations.
|
|
8
|
+
*/
|
|
9
|
+
target_version?: string;
|
|
10
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import type { BatchComponentRemediationItem } from '../schemas/BatchComponentRemediationItem';
|
|
2
|
+
export interface BatchComponentRemediationResponse {
|
|
3
|
+
/**
|
|
4
|
+
* Number of purls that failed
|
|
5
|
+
*/
|
|
6
|
+
failed?: number;
|
|
7
|
+
results: BatchComponentRemediationItem[];
|
|
8
|
+
/**
|
|
9
|
+
* Number of purls that succeeded
|
|
10
|
+
*/
|
|
11
|
+
succeeded?: number;
|
|
12
|
+
/**
|
|
13
|
+
* Total number of purls processed
|
|
14
|
+
*/
|
|
15
|
+
total?: number;
|
|
16
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -6,4 +6,8 @@ export interface CodeRepositoryListingRequest {
|
|
|
6
6
|
license_filter?: LicenseFilter;
|
|
7
7
|
license_filter_list?: LicenseFilter[];
|
|
8
8
|
search_term?: string;
|
|
9
|
+
/**
|
|
10
|
+
* When true, returns only repositories where componentCount equals uniqueComponentCount (no deduplication difference).
|
|
11
|
+
*/
|
|
12
|
+
unique_components?: boolean;
|
|
9
13
|
}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import type { ComplianceCheckEntityType } from '../schemas/ComplianceCheckEntityType';
|
|
2
|
+
import type { OverrideSource } from '../schemas/OverrideSource';
|
|
2
3
|
import type { ComplianceScanType } from '../schemas/ComplianceScanType';
|
|
3
4
|
import type { ComplianceCheckSeverity } from '../schemas/ComplianceCheckSeverity';
|
|
4
5
|
import type { ComplianceStandardType } from '../schemas/ComplianceStandardType';
|
|
@@ -14,6 +15,7 @@ export interface ComplianceCheck {
|
|
|
14
15
|
description: string;
|
|
15
16
|
entity: ComplianceCheckEntityType;
|
|
16
17
|
integrations?: string[];
|
|
18
|
+
override_source?: OverrideSource;
|
|
17
19
|
remediation?: string;
|
|
18
20
|
scan_type: ComplianceScanType;
|
|
19
21
|
severity: ComplianceCheckSeverity;
|
|
@@ -13,6 +13,14 @@ export interface ComplianceResult {
|
|
|
13
13
|
compliance_val: number;
|
|
14
14
|
description?: string;
|
|
15
15
|
entity: ComplianceCheckEntityType;
|
|
16
|
+
/**
|
|
17
|
+
* Level where the compliance setting was evaluated/enforced
|
|
18
|
+
*/
|
|
19
|
+
evaluated_at?: 'ENTERPRISE' | 'ORGANIZATION' | 'REPOSITORY';
|
|
20
|
+
/**
|
|
21
|
+
* Name of the org/enterprise the setting was inherited from
|
|
22
|
+
*/
|
|
23
|
+
inherited_from?: string;
|
|
16
24
|
occurrences?: ComplianceOccurrenceDto[];
|
|
17
25
|
reason: string;
|
|
18
26
|
remediation: string;
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* A component match with its parent artifact context.
|
|
3
|
+
*/
|
|
4
|
+
export interface ComponentSearchResult {
|
|
5
|
+
/**
|
|
6
|
+
* ID of the artifact containing this component.
|
|
7
|
+
*/
|
|
8
|
+
artifactId?: string;
|
|
9
|
+
/**
|
|
10
|
+
* Name of the artifact (e.g. image name or repo name).
|
|
11
|
+
*/
|
|
12
|
+
artifactName?: string;
|
|
13
|
+
/**
|
|
14
|
+
* Licenses declared by this component.
|
|
15
|
+
*/
|
|
16
|
+
license?: string[];
|
|
17
|
+
/**
|
|
18
|
+
* Component package name.
|
|
19
|
+
*/
|
|
20
|
+
name?: string;
|
|
21
|
+
/**
|
|
22
|
+
* Package manager (e.g. npm, maven, apk).
|
|
23
|
+
*/
|
|
24
|
+
packageManager?: string;
|
|
25
|
+
/**
|
|
26
|
+
* Package URL (purl) uniquely identifying this component version.
|
|
27
|
+
*/
|
|
28
|
+
purl?: string;
|
|
29
|
+
/**
|
|
30
|
+
* Component version.
|
|
31
|
+
*/
|
|
32
|
+
version?: string;
|
|
33
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
export interface LicenseFamilyConfigResponse {
|
|
2
|
+
/**
|
|
3
|
+
* List of family names that have been customized from Harness defaults
|
|
4
|
+
*/
|
|
5
|
+
customized_families?: string[];
|
|
6
|
+
/**
|
|
7
|
+
* Map of family name to list of SPDX license IDs
|
|
8
|
+
*/
|
|
9
|
+
family_mappings?: {
|
|
10
|
+
[key: string]: string[];
|
|
11
|
+
};
|
|
12
|
+
/**
|
|
13
|
+
* @format date-time
|
|
14
|
+
*/
|
|
15
|
+
last_modified_at?: string;
|
|
16
|
+
}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
export interface LicenseFamilyImportRequest {
|
|
2
|
+
/**
|
|
3
|
+
* License list in CSV, TSV, or newline-separated format
|
|
4
|
+
*/
|
|
5
|
+
data: string;
|
|
6
|
+
/**
|
|
7
|
+
* Target family to assign imported licenses to
|
|
8
|
+
*/
|
|
9
|
+
family: 'Copyleft' | 'Permissive' | 'Unknown/Proprietary' | 'Weak Copyleft';
|
|
10
|
+
/**
|
|
11
|
+
* Data format
|
|
12
|
+
* @default "csv"
|
|
13
|
+
*/
|
|
14
|
+
format?: 'csv' | 'newline' | 'tsv';
|
|
15
|
+
}
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Custom attributes for OIDC ID token generation
|
|
3
|
+
*/
|
|
4
|
+
export interface OidcIdTokenRequest {
|
|
5
|
+
/**
|
|
6
|
+
* Harness account identifier
|
|
7
|
+
*/
|
|
8
|
+
account_id: string;
|
|
9
|
+
/**
|
|
10
|
+
* Artifact digest
|
|
11
|
+
*/
|
|
12
|
+
artifact_digest?: string;
|
|
13
|
+
/**
|
|
14
|
+
* Artifact name
|
|
15
|
+
*/
|
|
16
|
+
artifact_name?: string;
|
|
17
|
+
/**
|
|
18
|
+
* Artifact type
|
|
19
|
+
*/
|
|
20
|
+
artifact_type?: string;
|
|
21
|
+
/**
|
|
22
|
+
* Audience claim for the ID token
|
|
23
|
+
*/
|
|
24
|
+
aud: string;
|
|
25
|
+
/**
|
|
26
|
+
* Connector identifier
|
|
27
|
+
*/
|
|
28
|
+
connector_id?: string;
|
|
29
|
+
/**
|
|
30
|
+
* Connector name
|
|
31
|
+
*/
|
|
32
|
+
connector_name?: string;
|
|
33
|
+
/**
|
|
34
|
+
* OIDC context
|
|
35
|
+
*/
|
|
36
|
+
context?: string;
|
|
37
|
+
/**
|
|
38
|
+
* Environment identifier
|
|
39
|
+
*/
|
|
40
|
+
environment_id?: string;
|
|
41
|
+
/**
|
|
42
|
+
* Environment type
|
|
43
|
+
*/
|
|
44
|
+
environment_type?: string;
|
|
45
|
+
/**
|
|
46
|
+
* Organization identifier
|
|
47
|
+
*/
|
|
48
|
+
organization_id?: string;
|
|
49
|
+
/**
|
|
50
|
+
* Pipeline identifier
|
|
51
|
+
*/
|
|
52
|
+
pipeline_id?: string;
|
|
53
|
+
/**
|
|
54
|
+
* Project identifier
|
|
55
|
+
*/
|
|
56
|
+
project_id?: string;
|
|
57
|
+
/**
|
|
58
|
+
* Service identifier
|
|
59
|
+
*/
|
|
60
|
+
service_id?: string;
|
|
61
|
+
/**
|
|
62
|
+
* Service name
|
|
63
|
+
*/
|
|
64
|
+
service_name?: string;
|
|
65
|
+
/**
|
|
66
|
+
* Stage type
|
|
67
|
+
*/
|
|
68
|
+
stage_type?: string;
|
|
69
|
+
/**
|
|
70
|
+
* Step execution identifier
|
|
71
|
+
*/
|
|
72
|
+
step_execution_id?: string;
|
|
73
|
+
/**
|
|
74
|
+
* Step type
|
|
75
|
+
*/
|
|
76
|
+
step_type?: string;
|
|
77
|
+
/**
|
|
78
|
+
* Optional subject override for the ID token
|
|
79
|
+
*/
|
|
80
|
+
sub?: string;
|
|
81
|
+
/**
|
|
82
|
+
* Artifact tag
|
|
83
|
+
*/
|
|
84
|
+
tag?: string;
|
|
85
|
+
/**
|
|
86
|
+
* Email of the user who triggered the execution
|
|
87
|
+
*/
|
|
88
|
+
trigger_by_email?: string;
|
|
89
|
+
/**
|
|
90
|
+
* Name of the user who triggered the execution
|
|
91
|
+
*/
|
|
92
|
+
triggered_by_name?: string;
|
|
93
|
+
}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Declares how a rule's evaluatedAt/inheritedFrom is resolved
|
|
3
|
+
*/
|
|
4
|
+
export interface OverrideSource {
|
|
5
|
+
/**
|
|
6
|
+
* Data field to inspect (e.g. PullRequests, OrgWorkflowPermission)
|
|
7
|
+
*/
|
|
8
|
+
field: string;
|
|
9
|
+
/**
|
|
10
|
+
* Sub-parameter for most-restrictive selection (e.g. RequiredApprovingReviewCount)
|
|
11
|
+
*/
|
|
12
|
+
param?: string;
|
|
13
|
+
/**
|
|
14
|
+
* Resolver strategy name (e.g. branchProtection, orgData, enterpriseData)
|
|
15
|
+
*/
|
|
16
|
+
type: string;
|
|
17
|
+
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
export type OwaspFilter = 'CLOSE_TO_EOL_COMPONENT' | 'EOL_COMPONENT' | 'OUTDATED_COMPONENT' | 'UNMAINTAINED_COMPONENT' | 'VULNERABLE_COMPONENT';
|
|
1
|
+
export type OwaspFilter = 'CLOSE_TO_EOL_COMPONENT' | 'EOL_COMPONENT' | 'MALICIOUS_COMPONENT' | 'OUTDATED_COMPONENT' | 'SQUATTED_COMPONENT' | 'UNMAINTAINED_COMPONENT' | 'VULNERABLE_COMPONENT';
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import type { OrchestrationOssRisksSummary } from '../schemas/OrchestrationOssRisksSummary';
|
|
2
|
+
import type { ArtifactOssRisksSummary } from '../schemas/ArtifactOssRisksSummary';
|
|
3
|
+
/**
|
|
4
|
+
* Project-level OSS risk summary with aggregate counts and per-artifact breakdown
|
|
5
|
+
*/
|
|
6
|
+
export interface ProjectOssRisksSummary {
|
|
7
|
+
/**
|
|
8
|
+
* Sum of all risk counts across all artifacts in the project
|
|
9
|
+
*/
|
|
10
|
+
aggregate?: OrchestrationOssRisksSummary;
|
|
11
|
+
/**
|
|
12
|
+
* Per-artifact OSS risk breakdown sorted by total risk count descending
|
|
13
|
+
*/
|
|
14
|
+
artifacts?: ArtifactOssRisksSummary[];
|
|
15
|
+
/**
|
|
16
|
+
* Total number of artifacts with SBOM data in the project scope (may exceed total_artifacts_scanned if truncated)
|
|
17
|
+
* @format int64
|
|
18
|
+
*/
|
|
19
|
+
total_artifacts_in_scope?: number;
|
|
20
|
+
/**
|
|
21
|
+
* Number of artifacts actually processed for risk aggregation (capped at server limit)
|
|
22
|
+
*/
|
|
23
|
+
total_artifacts_scanned?: number;
|
|
24
|
+
/**
|
|
25
|
+
* Number of scanned artifacts that have at least one OSS risk
|
|
26
|
+
*/
|
|
27
|
+
total_artifacts_with_risks?: number;
|
|
28
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import type { SecurityOverviewArtifactCount } from '../schemas/SecurityOverviewArtifactCount';
|
|
2
|
+
import type { SecurityOverviewComplianceSummary } from '../schemas/SecurityOverviewComplianceSummary';
|
|
3
|
+
import type { SecurityOverviewDeploymentSummary } from '../schemas/SecurityOverviewDeploymentSummary';
|
|
4
|
+
import type { SecurityOverviewEnforcementSummary } from '../schemas/SecurityOverviewEnforcementSummary';
|
|
5
|
+
import type { SecurityOverviewSbomCoverage } from '../schemas/SecurityOverviewSbomCoverage';
|
|
6
|
+
import type { SecurityOverviewVulnerabilitySummary } from '../schemas/SecurityOverviewVulnerabilitySummary';
|
|
7
|
+
/**
|
|
8
|
+
* Comprehensive project-level security posture overview aggregated across all artifacts
|
|
9
|
+
*/
|
|
10
|
+
export interface ProjectSecurityOverview {
|
|
11
|
+
artifact_count: SecurityOverviewArtifactCount;
|
|
12
|
+
compliance_summary: SecurityOverviewComplianceSummary;
|
|
13
|
+
deployment_summary: SecurityOverviewDeploymentSummary;
|
|
14
|
+
enforcement_summary: SecurityOverviewEnforcementSummary;
|
|
15
|
+
sbom_coverage: SecurityOverviewSbomCoverage;
|
|
16
|
+
vulnerability_summary: SecurityOverviewVulnerabilitySummary;
|
|
17
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
import type { CreatedBy } from '../schemas/CreatedBy';
|
|
2
|
+
import type { TriggerType } from '../schemas/TriggerType';
|
|
3
|
+
export interface RemediationPrListItem {
|
|
4
|
+
/**
|
|
5
|
+
* Base branch of the pull request
|
|
6
|
+
*/
|
|
7
|
+
base_branch?: string;
|
|
8
|
+
/**
|
|
9
|
+
* Creation timestamp in epoch milliseconds
|
|
10
|
+
* @format int64
|
|
11
|
+
*/
|
|
12
|
+
created_at?: number;
|
|
13
|
+
created_by?: CreatedBy;
|
|
14
|
+
/**
|
|
15
|
+
* Current version of the component
|
|
16
|
+
*/
|
|
17
|
+
current_version?: string;
|
|
18
|
+
/**
|
|
19
|
+
* Unique identifier of the PR entity
|
|
20
|
+
*/
|
|
21
|
+
id?: string;
|
|
22
|
+
/**
|
|
23
|
+
* Pull request number
|
|
24
|
+
*/
|
|
25
|
+
pr_number?: number;
|
|
26
|
+
/**
|
|
27
|
+
* Status of the pull request
|
|
28
|
+
*/
|
|
29
|
+
pr_status?: 'CLOSED' | 'CREATED' | 'FAILED' | 'MERGED';
|
|
30
|
+
/**
|
|
31
|
+
* URL of the pull request
|
|
32
|
+
*/
|
|
33
|
+
pr_url?: string;
|
|
34
|
+
/**
|
|
35
|
+
* Package URL of the component
|
|
36
|
+
*/
|
|
37
|
+
purl?: string;
|
|
38
|
+
/**
|
|
39
|
+
* Remediation branch created for the pull request
|
|
40
|
+
*/
|
|
41
|
+
remediation_branch?: string;
|
|
42
|
+
/**
|
|
43
|
+
* Name of the repository
|
|
44
|
+
*/
|
|
45
|
+
repo_name?: string;
|
|
46
|
+
/**
|
|
47
|
+
* Target version of the component
|
|
48
|
+
*/
|
|
49
|
+
target_version?: string;
|
|
50
|
+
trigger_type?: TriggerType;
|
|
51
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Breakdown of artifacts in the project by type
|
|
3
|
+
*/
|
|
4
|
+
export interface SecurityOverviewArtifactCount {
|
|
5
|
+
/**
|
|
6
|
+
* Number of container image artifacts
|
|
7
|
+
*/
|
|
8
|
+
images: number;
|
|
9
|
+
/**
|
|
10
|
+
* Number of code repository artifacts
|
|
11
|
+
*/
|
|
12
|
+
repositories: number;
|
|
13
|
+
/**
|
|
14
|
+
* Total number of artifacts in the project
|
|
15
|
+
*/
|
|
16
|
+
total: number;
|
|
17
|
+
}
|