@maxim_mazurok/gapi.client.containeranalysis-v1alpha1 0.1.20260313 → 0.2.20260521

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/index.d.ts +707 -161
  2. package/package.json +1 -1
  3. package/readme.md +17 -0
package/index.d.ts CHANGED
@@ -9,7 +9,7 @@
9
9
  // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
10
10
  // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
11
11
  // Generated from: https://containeranalysis.googleapis.com/$discovery/rest?version=v1alpha1
12
- // Revision: 20260313
12
+ // Revision: 20260521
13
13
 
14
14
  /// <reference types="gapi.client" />
15
15
 
@@ -28,6 +28,15 @@ declare namespace gapi.client {
28
28
  ): void;
29
29
 
30
30
  namespace containeranalysis {
31
+ interface AISkillAnalysisNote {}
32
+ interface AISkillAnalysisOccurrence {
33
+ /** Optional. Findings produced by the analysis. */
34
+ findings?: Finding[];
35
+ /** Optional. Maximum severity found among findings. */
36
+ maxSeverity?: string;
37
+ /** Optional. Name of the skill that produced this analysis. */
38
+ skillName?: string;
39
+ }
31
40
  interface AnalysisCompleted {
32
41
  /** type of analysis that were completed on a resource. */
33
42
  analysisType?: string[];
@@ -58,7 +67,12 @@ declare namespace gapi.client {
58
67
  /** A one sentence description of this Vex. */
59
68
  shortDescription?: string;
60
69
  /** Provides the state of this Vulnerability assessment. */
61
- state?: string;
70
+ state?:
71
+ | 'STATE_UNSPECIFIED'
72
+ | 'AFFECTED'
73
+ | 'NOT_AFFECTED'
74
+ | 'FIXED'
75
+ | 'UNDER_INVESTIGATION';
62
76
  /** The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc. */
63
77
  vulnerabilityId?: string;
64
78
  }
@@ -154,7 +168,7 @@ declare namespace gapi.client {
154
168
  /** An Id for the key used to sign. This could be either an Id for the key stored in `public_key` (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service). */
155
169
  keyId?: string;
156
170
  /** The type of the key, either stored in `public_key` or referenced in `key_id` */
157
- keyType?: string;
171
+ keyType?: 'KEY_TYPE_UNSPECIFIED' | 'PGP_ASCII_ARMORED' | 'PKIX_PEM';
158
172
  /** Public key of the builder which can be used to verify that the related findings are valid and unchanged. If `key_type` is empty, this defaults to PEM encoded public keys. This field may be empty if `key_id` references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from `BuildDetails` are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: `openssl sha256 -verify public.pem -signature signature.bin signed.bin` */
159
173
  publicKey?: string;
160
174
  /** Signature of the related `BuildProvenance`, encoded in a base64 string. */
@@ -191,7 +205,18 @@ declare namespace gapi.client {
191
205
  /** A list of environment variables which are encrypted using a Cloud Key Management Service crypto key. These values must be specified in the build's `Secret`. */
192
206
  secretEnv?: string[];
193
207
  /** Output only. Status of the build step. At this time, build step status is only updated on build completion; step status is not updated in real-time as the build progresses. */
194
- status?: string;
208
+ status?:
209
+ | 'STATUS_UNKNOWN'
210
+ | 'PENDING'
211
+ | 'QUEUING'
212
+ | 'QUEUED'
213
+ | 'WORKING'
214
+ | 'SUCCESS'
215
+ | 'FAILURE'
216
+ | 'INTERNAL_ERROR'
217
+ | 'TIMEOUT'
218
+ | 'CANCELLED'
219
+ | 'EXPIRED';
195
220
  /** Time limit for executing this build step. If not defined, the step has no time limit and will be allowed to continue to run until either it completes or the build itself times out. */
196
221
  timeout?: string;
197
222
  /** Output only. Stores timing information for executing this build step. */
@@ -215,7 +240,13 @@ declare namespace gapi.client {
215
240
  /** The profile level of this CIS benchmark check. */
216
241
  profileLevel?: number;
217
242
  /** The severity level of this CIS benchmark check. */
218
- severity?: string;
243
+ severity?:
244
+ | 'SEVERITY_UNSPECIFIED'
245
+ | 'MINIMAL'
246
+ | 'LOW'
247
+ | 'MEDIUM'
248
+ | 'HIGH'
249
+ | 'CRITICAL';
219
250
  }
220
251
  interface Command {
221
252
  /** Command-line arguments used when executing this Command. */
@@ -285,11 +316,13 @@ declare namespace gapi.client {
285
316
  /** Optional. An optional comment for this manual approval result. */
286
317
  comment?: string;
287
318
  /** Required. The decision of this manual approval. */
288
- decision?: string;
319
+ decision?: 'DECISION_UNSPECIFIED' | 'APPROVED' | 'REJECTED';
289
320
  /** Optional. An optional URL tied to this manual approval result. This field is essentially the same as comment, except that it will be rendered by the UI differently. An example use case is a link to an external job that approved this Build. */
290
321
  url?: string;
291
322
  }
292
323
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1Artifacts {
324
+ /** Optional. A list of generic artifacts to be uploaded to Artifact Registry upon successful completion of all build steps. If any artifacts fail to be pushed, the build is marked FAILURE. */
325
+ genericArtifacts?: ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsGenericArtifact[];
293
326
  /** Optional. A list of Go modules to be uploaded to Artifact Registry upon successful completion of all build steps. If any objects fail to be pushed, the build is marked FAILURE. */
294
327
  goModules?: ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsGoModule[];
295
328
  /** A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE. */
@@ -313,6 +346,12 @@ declare namespace gapi.client {
313
346
  /** Output only. Stores timing information for pushing all artifact objects. */
314
347
  timing?: ContaineranalysisGoogleDevtoolsCloudbuildV1TimeSpan;
315
348
  }
349
+ interface ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsGenericArtifact {
350
+ /** Required. Path to the generic artifact in the build's workspace to be uploaded to Artifact Registry. */
351
+ folder?: string;
352
+ /** Required. Registry path to upload the generic artifact to, in the form projects/$PROJECT/locations/$LOCATION/repositories/$REPO/packages/$PACKAGE/versions/$VERSION */
353
+ registryPath?: string;
354
+ }
316
355
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsGoModule {
317
356
  /** Optional. The Go module's "module path". e.g. example.com/foo/v2 */
318
357
  modulePath?: string;
@@ -409,7 +448,17 @@ declare namespace gapi.client {
409
448
  /** Output only. Time at which execution of the build was started. */
410
449
  startTime?: string;
411
450
  /** Output only. Status of the build. */
412
- status?: string;
451
+ status?:
452
+ | 'STATUS_UNKNOWN'
453
+ | 'PENDING'
454
+ | 'QUEUED'
455
+ | 'WORKING'
456
+ | 'SUCCESS'
457
+ | 'FAILURE'
458
+ | 'INTERNAL_ERROR'
459
+ | 'TIMEOUT'
460
+ | 'CANCELLED'
461
+ | 'EXPIRED';
413
462
  /** Output only. Customer-readable message about the current status. */
414
463
  statusDetail?: string;
415
464
  /** Required. The operations to be performed on the workspace. */
@@ -433,19 +482,34 @@ declare namespace gapi.client {
433
482
  /** Output only. Result of manual approval for this Build. */
434
483
  result?: ContaineranalysisGoogleDevtoolsCloudbuildV1ApprovalResult;
435
484
  /** Output only. The state of this build's approval. */
436
- state?: string;
485
+ state?:
486
+ | 'STATE_UNSPECIFIED'
487
+ | 'PENDING'
488
+ | 'APPROVED'
489
+ | 'REJECTED'
490
+ | 'CANCELLED';
437
491
  }
438
492
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1BuildFailureInfo {
439
493
  /** Explains the failure issue in more detail using hard-coded text. */
440
494
  detail?: string;
441
495
  /** The name of the failure. */
442
- type?: string;
496
+ type?:
497
+ | 'FAILURE_TYPE_UNSPECIFIED'
498
+ | 'PUSH_FAILED'
499
+ | 'PUSH_IMAGE_NOT_FOUND'
500
+ | 'PUSH_NOT_AUTHORIZED'
501
+ | 'LOGGING_FAILURE'
502
+ | 'USER_BUILD_STEP'
503
+ | 'FETCH_SOURCE_FAILED';
443
504
  }
444
505
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1BuildOptions {
445
506
  /** Option to include built-in and custom substitutions as env variables for all build steps. */
446
507
  automapSubstitutions?: boolean;
447
508
  /** Optional. Option to specify how default logs buckets are setup. */
448
- defaultLogsBucketBehavior?: string;
509
+ defaultLogsBucketBehavior?:
510
+ | 'DEFAULT_LOGS_BUCKET_BEHAVIOR_UNSPECIFIED'
511
+ | 'REGIONAL_USER_OWNED_BUCKET'
512
+ | 'LEGACY_BUCKET';
449
513
  /** Requested disk size for the VM that runs the build. Note that this is *NOT* "disk free"; some of the space will be used by the operating system and build utilities. Also note that this is the minimum disk size that will be allocated for the build -- the build may run with a larger disk than requested. At present, the maximum disk size is 4000GB; builds that request more than the maximum are rejected with an error. */
450
514
  diskSizeGb?: string;
451
515
  /** Option to specify whether or not to apply bash style string operations to the substitutions. NOTE: this is always enabled for triggered builds and cannot be overridden in the build configuration file. */
@@ -455,23 +519,41 @@ declare namespace gapi.client {
455
519
  /** A list of global environment variable definitions that will exist for all build steps in this build. If a variable is defined in both globally and in a build step, the variable will use the build step value. The elements are of the form "KEY=VALUE" for the environment variable "KEY" being given the value "VALUE". */
456
520
  env?: string[];
457
521
  /** Option to specify the logging mode, which determines if and where build logs are stored. */
458
- logging?: string;
522
+ logging?:
523
+ | 'LOGGING_UNSPECIFIED'
524
+ | 'LEGACY'
525
+ | 'GCS_ONLY'
526
+ | 'STACKDRIVER_ONLY'
527
+ | 'CLOUD_LOGGING_ONLY'
528
+ | 'NONE';
459
529
  /** Option to define build log streaming behavior to Cloud Storage. */
460
- logStreamingOption?: string;
530
+ logStreamingOption?: 'STREAM_DEFAULT' | 'STREAM_ON' | 'STREAM_OFF';
461
531
  /** Compute Engine machine type on which to run the build. */
462
- machineType?: string;
532
+ machineType?:
533
+ | 'UNSPECIFIED'
534
+ | 'N1_HIGHCPU_8'
535
+ | 'N1_HIGHCPU_32'
536
+ | 'E2_HIGHCPU_8'
537
+ | 'E2_HIGHCPU_32'
538
+ | 'E2_MEDIUM';
463
539
  /** Optional. Specification for execution on a `WorkerPool`. See [running builds in a private pool](https://cloud.google.com/build/docs/private-pools/run-builds-in-private-pool) for more information. */
464
540
  pool?: ContaineranalysisGoogleDevtoolsCloudbuildV1BuildOptionsPoolOption;
465
541
  /** Optional. Option to specify the Pub/Sub topic to receive build status updates. */
466
542
  pubsubTopic?: string;
467
543
  /** Requested verifiability options. */
468
- requestedVerifyOption?: string;
544
+ requestedVerifyOption?: 'NOT_VERIFIED' | 'VERIFIED';
469
545
  /** A list of global environment variables, which are encrypted using a Cloud Key Management Service crypto key. These values must be specified in the build's `Secret`. These variables will be available to all build steps in this build. */
470
546
  secretEnv?: string[];
471
547
  /** Requested hash for SourceProvenance. */
472
- sourceProvenanceHash?: string[];
548
+ sourceProvenanceHash?:
549
+ | 'NONE'
550
+ | 'SHA256'
551
+ | 'MD5'
552
+ | 'GO_MODULE_H1'
553
+ | 'SHA512'
554
+ | 'DIRSUM_SHA256'[];
473
555
  /** Option to specify behavior when there is an error in the substitution checks. NOTE: this is always set to ALLOW_LOOSE for triggered builds and cannot be overridden in the build configuration file. */
474
- substitutionOption?: string;
556
+ substitutionOption?: 'MUST_MATCH' | 'ALLOW_LOOSE';
475
557
  /** Global list of volumes to mount for ALL build steps Each volume is created as an empty volume prior to starting the build process. Upon completion of the build, volumes and their contents are discarded. Global volume names and paths cannot conflict with the volumes defined a build step. Using a global volume in a build with only one step is not valid as it is indicative of a build request with an incorrect configuration. */
476
558
  volumes?: ContaineranalysisGoogleDevtoolsCloudbuildV1Volume[];
477
559
  /** This field deprecated; please use `pool.name` instead. */
@@ -504,12 +586,24 @@ declare namespace gapi.client {
504
586
  name?: string;
505
587
  /** Output only. Stores timing information for pulling this build step's builder image only. */
506
588
  pullTiming?: ContaineranalysisGoogleDevtoolsCloudbuildV1TimeSpan;
589
+ /** Declaration of results for this build step. */
590
+ results?: ContaineranalysisGoogleDevtoolsCloudbuildV1StepResult[];
507
591
  /** A shell script to be executed in the step. When script is provided, the user cannot specify the entrypoint or args. */
508
592
  script?: string;
509
593
  /** A list of environment variables which are encrypted using a Cloud Key Management Service crypto key. These values must be specified in the build's `Secret`. */
510
594
  secretEnv?: string[];
511
595
  /** Output only. Status of the build step. At this time, build step status is only updated on build completion; step status is not updated in real-time as the build progresses. */
512
- status?: string;
596
+ status?:
597
+ | 'STATUS_UNKNOWN'
598
+ | 'PENDING'
599
+ | 'QUEUED'
600
+ | 'WORKING'
601
+ | 'SUCCESS'
602
+ | 'FAILURE'
603
+ | 'INTERNAL_ERROR'
604
+ | 'TIMEOUT'
605
+ | 'CANCELLED'
606
+ | 'EXPIRED';
513
607
  /** Time limit for executing this build step. If not defined, the step has no time limit and will be allowed to continue to run until either it completes or the build itself times out. */
514
608
  timeout?: string;
515
609
  /** Output only. Stores timing information for executing this build step. */
@@ -519,9 +613,13 @@ declare namespace gapi.client {
519
613
  /** The ID(s) of the step(s) that this build step depends on. This build step will not start until all the build steps in `wait_for` have completed successfully. If `wait_for` is empty, this build step will start when all previous build steps in the `Build.Steps` list have completed successfully. */
520
614
  waitFor?: string[];
521
615
  }
616
+ interface ContaineranalysisGoogleDevtoolsCloudbuildV1BuildStepResults {
617
+ /** Results for a build step. */
618
+ results?: {[P in string]: string};
619
+ }
522
620
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1BuildWarning {
523
621
  /** The priority for this warning. */
524
- priority?: string;
622
+ priority?: 'PRIORITY_UNSPECIFIED' | 'INFO' | 'WARNING' | 'ALERT';
525
623
  /** Explanation of the warning generated. */
526
624
  text?: string;
527
625
  }
@@ -533,7 +631,10 @@ declare namespace gapi.client {
533
631
  /** Name used to push the container image to Google Container Registry, as presented to `docker push`. */
534
632
  name?: string;
535
633
  /** Output only. The OCI media type of the artifact. Non-OCI images, such as Docker images, will have an unspecified value. */
536
- ociMediaType?: string;
634
+ ociMediaType?:
635
+ | 'OCI_MEDIA_TYPE_UNSPECIFIED'
636
+ | 'IMAGE_MANIFEST'
637
+ | 'IMAGE_INDEX';
537
638
  /** Output only. Stores timing information for pushing the specified image. */
538
639
  pushTiming?: ContaineranalysisGoogleDevtoolsCloudbuildV1TimeSpan;
539
640
  }
@@ -548,9 +649,17 @@ declare namespace gapi.client {
548
649
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1Dependency {
549
650
  /** If set to true disable all dependency fetching (ignoring the default source as well). */
550
651
  empty?: boolean;
652
+ /** Represents a generic artifact as a build dependency. */
653
+ genericArtifact?: ContaineranalysisGoogleDevtoolsCloudbuildV1DependencyGenericArtifactDependency;
551
654
  /** Represents a git repository as a build dependency. */
552
655
  gitSource?: ContaineranalysisGoogleDevtoolsCloudbuildV1DependencyGitSourceDependency;
553
656
  }
657
+ interface ContaineranalysisGoogleDevtoolsCloudbuildV1DependencyGenericArtifactDependency {
658
+ /** Required. Where the artifact files should be placed on the worker. */
659
+ destPath?: string;
660
+ /** Required. The location to download the artifact files from. Ex: projects/p1/locations/us/repositories/r1/packages/p1/versions/v1 */
661
+ resource?: string;
662
+ }
554
663
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1DependencyGitSourceDependency {
555
664
  /** Optional. How much history should be fetched for the build (default 1, -1 for all history). */
556
665
  depth?: string;
@@ -599,7 +708,13 @@ declare namespace gapi.client {
599
708
  }
600
709
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1Hash {
601
710
  /** The type of hash that was performed. */
602
- type?: string;
711
+ type?:
712
+ | 'NONE'
713
+ | 'SHA256'
714
+ | 'MD5'
715
+ | 'GO_MODULE_H1'
716
+ | 'SHA512'
717
+ | 'DIRSUM_SHA256';
603
718
  /** The hash value. */
604
719
  value?: string;
605
720
  }
@@ -636,6 +751,12 @@ declare namespace gapi.client {
636
751
  buildStepImages?: string[];
637
752
  /** List of build step outputs, produced by builder images, in the order corresponding to build step indices. [Cloud Builders](https://cloud.google.com/cloud-build/docs/cloud-builders) can produce this output by writing to `$BUILDER_OUTPUT/output`. Only the first 50KB of data is stored. Note that the `$BUILDER_OUTPUT` variable is read-only and can't be substituted. */
638
753
  buildStepOutputs?: string[];
754
+ /** Results for build steps. step_id -> */
755
+ buildStepResults?: {
756
+ [P in string]: ContaineranalysisGoogleDevtoolsCloudbuildV1BuildStepResults;
757
+ };
758
+ /** Output only. Generic artifacts uploaded to Artifact Registry at the end of the build. */
759
+ genericArtifacts?: ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedGenericArtifact[];
639
760
  /** Optional. Go module artifacts uploaded to Artifact Registry at the end of the build. */
640
761
  goModules?: ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedGoModule[];
641
762
  /** Container images that were built as a part of the build. */
@@ -697,6 +818,14 @@ declare namespace gapi.client {
697
818
  /** A copy of the build's `source.storage_source_manifest`, if exists, with any revisions resolved. This feature is in Preview. */
698
819
  resolvedStorageSourceManifest?: ContaineranalysisGoogleDevtoolsCloudbuildV1StorageSourceManifest;
699
820
  }
821
+ interface ContaineranalysisGoogleDevtoolsCloudbuildV1StepResult {
822
+ /** Optional. The content of the attestation to be generated. */
823
+ attestationContent?: string;
824
+ /** Optional. The type of attestation to be generated. */
825
+ attestationType?: string;
826
+ /** Required. The name of the result. */
827
+ name?: string;
828
+ }
700
829
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1StorageSource {
701
830
  /** Cloud Storage bucket containing the source (see [Bucket Name Requirements](https://cloud.google.com/storage/docs/bucket-naming#requirements)). */
702
831
  bucket?: string;
@@ -705,7 +834,7 @@ declare namespace gapi.client {
705
834
  /** Required. Cloud Storage object containing the source. This object must be a zipped (`.zip`) or gzipped archive file (`.tar.gz`) containing source to build. */
706
835
  object?: string;
707
836
  /** Optional. Option to specify the tool to fetch the source file for the build. */
708
- sourceFetcher?: string;
837
+ sourceFetcher?: 'SOURCE_FETCHER_UNSPECIFIED' | 'GSUTIL' | 'GCS_FETCHER';
709
838
  }
710
839
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1StorageSourceManifest {
711
840
  /** Required. Cloud Storage bucket containing the source manifest (see [Bucket Name Requirements](https://cloud.google.com/storage/docs/bucket-naming#requirements)). */
@@ -721,6 +850,20 @@ declare namespace gapi.client {
721
850
  /** Start of time span. */
722
851
  startTime?: string;
723
852
  }
853
+ interface ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedGenericArtifact {
854
+ /** Output only. The hash of the whole artifact. */
855
+ artifactFingerprint?: ContaineranalysisGoogleDevtoolsCloudbuildV1FileHashes;
856
+ /** Output only. Path to the artifact in Artifact Registry. */
857
+ artifactRegistryPackage?: string;
858
+ /** Output only. The file hashes that make up the generic artifact. */
859
+ fileHashes?: {
860
+ [P in string]: ContaineranalysisGoogleDevtoolsCloudbuildV1FileHashes;
861
+ };
862
+ /** Output only. Stores timing information for pushing the specified artifact. */
863
+ pushTiming?: ContaineranalysisGoogleDevtoolsCloudbuildV1TimeSpan;
864
+ /** Output only. URI of the uploaded artifact. Ex: projects/p1/locations/us/repositories/r1/packages/p1/versions/v1 */
865
+ uri?: string;
866
+ }
724
867
  interface ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedGoModule {
725
868
  /** Output only. Path to the artifact in Artifact Registry. */
726
869
  artifactRegistryPackage?: string;
@@ -774,28 +917,121 @@ declare namespace gapi.client {
774
917
  operationId?: string;
775
918
  }
776
919
  interface CVSS {
777
- /** Defined in CVSS v3, CVSS v2 */
778
- attackComplexity?: string;
779
- /** Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2 */
780
- attackVector?: string;
781
- /** Defined in CVSS v2 */
782
- authentication?: string;
783
- /** Defined in CVSS v3, CVSS v2 */
784
- availabilityImpact?: string;
785
- /** The base score is a function of the base metric scores. */
920
+ /** Optional. Attack Complexity (AC). Defined in CVSS v2, v3, v4. */
921
+ attackComplexity?:
922
+ | 'ATTACK_COMPLEXITY_UNSPECIFIED'
923
+ | 'ATTACK_COMPLEXITY_LOW'
924
+ | 'ATTACK_COMPLEXITY_HIGH'
925
+ | 'ATTACK_COMPLEXITY_MEDIUM';
926
+ /** Optional. Attack Requirements (AT). Defined in CVSS v4. */
927
+ attackRequirements?:
928
+ | 'ATTACK_REQUIREMENTS_UNSPECIFIED'
929
+ | 'ATTACK_REQUIREMENTS_NONE'
930
+ | 'ATTACK_REQUIREMENTS_PRESENT';
931
+ /** Optional. Attack Vector (AV). Defined in CVSS v2, v3, v4. */
932
+ attackVector?:
933
+ | 'ATTACK_VECTOR_UNSPECIFIED'
934
+ | 'ATTACK_VECTOR_NETWORK'
935
+ | 'ATTACK_VECTOR_ADJACENT'
936
+ | 'ATTACK_VECTOR_LOCAL'
937
+ | 'ATTACK_VECTOR_PHYSICAL';
938
+ /** Optional. Authentication (Au). Defined in CVSS v2. */
939
+ authentication?:
940
+ | 'AUTHENTICATION_UNSPECIFIED'
941
+ | 'AUTHENTICATION_MULTIPLE'
942
+ | 'AUTHENTICATION_SINGLE'
943
+ | 'AUTHENTICATION_NONE';
944
+ /** Optional. Availability Impact (A). Defined in CVSS v2, v3. */
945
+ availabilityImpact?:
946
+ | 'IMPACT_UNSPECIFIED'
947
+ | 'IMPACT_HIGH'
948
+ | 'IMPACT_LOW'
949
+ | 'IMPACT_NONE'
950
+ | 'IMPACT_PARTIAL'
951
+ | 'IMPACT_COMPLETE';
952
+ /** Optional. The base score is a function of the base metric scores. */
786
953
  baseScore?: number;
787
- /** Defined in CVSS v3, CVSS v2 */
788
- confidentialityImpact?: string;
954
+ /** Optional. Confidentiality Impact (C). Defined in CVSS v2, v3. */
955
+ confidentialityImpact?:
956
+ | 'IMPACT_UNSPECIFIED'
957
+ | 'IMPACT_HIGH'
958
+ | 'IMPACT_LOW'
959
+ | 'IMPACT_NONE'
960
+ | 'IMPACT_PARTIAL'
961
+ | 'IMPACT_COMPLETE';
789
962
  exploitabilityScore?: number;
790
963
  impactScore?: number;
791
- /** Defined in CVSS v3, CVSS v2 */
792
- integrityImpact?: string;
793
- /** Defined in CVSS v3 */
794
- privilegesRequired?: string;
795
- /** Defined in CVSS v3 */
796
- scope?: string;
797
- /** Defined in CVSS v3 */
798
- userInteraction?: string;
964
+ /** Optional. Integrity Impact (I). Defined in CVSS v2, v3. */
965
+ integrityImpact?:
966
+ | 'IMPACT_UNSPECIFIED'
967
+ | 'IMPACT_HIGH'
968
+ | 'IMPACT_LOW'
969
+ | 'IMPACT_NONE'
970
+ | 'IMPACT_PARTIAL'
971
+ | 'IMPACT_COMPLETE';
972
+ /** Optional. Privileges Required (PR). Defined in CVSS v3, v4. */
973
+ privilegesRequired?:
974
+ | 'PRIVILEGES_REQUIRED_UNSPECIFIED'
975
+ | 'PRIVILEGES_REQUIRED_NONE'
976
+ | 'PRIVILEGES_REQUIRED_LOW'
977
+ | 'PRIVILEGES_REQUIRED_HIGH';
978
+ /** Optional. Scope (S). Defined in CVSS v3. */
979
+ scope?: 'SCOPE_UNSPECIFIED' | 'SCOPE_UNCHANGED' | 'SCOPE_CHANGED';
980
+ /** Optional. Subsequent System Availability Impact (SA). Defined in CVSS v4. */
981
+ subsequentSystemAvailabilityImpact?:
982
+ | 'IMPACT_UNSPECIFIED'
983
+ | 'IMPACT_HIGH'
984
+ | 'IMPACT_LOW'
985
+ | 'IMPACT_NONE'
986
+ | 'IMPACT_PARTIAL'
987
+ | 'IMPACT_COMPLETE';
988
+ /** Optional. Subsequent System Confidentiality Impact (SC). Defined in CVSS v4. */
989
+ subsequentSystemConfidentialityImpact?:
990
+ | 'IMPACT_UNSPECIFIED'
991
+ | 'IMPACT_HIGH'
992
+ | 'IMPACT_LOW'
993
+ | 'IMPACT_NONE'
994
+ | 'IMPACT_PARTIAL'
995
+ | 'IMPACT_COMPLETE';
996
+ /** Optional. Subsequent System Integrity Impact (SI). Defined in CVSS v4. */
997
+ subsequentSystemIntegrityImpact?:
998
+ | 'IMPACT_UNSPECIFIED'
999
+ | 'IMPACT_HIGH'
1000
+ | 'IMPACT_LOW'
1001
+ | 'IMPACT_NONE'
1002
+ | 'IMPACT_PARTIAL'
1003
+ | 'IMPACT_COMPLETE';
1004
+ /** Optional. User Interaction (UI). Defined in CVSS v3, v4. */
1005
+ userInteraction?:
1006
+ | 'USER_INTERACTION_UNSPECIFIED'
1007
+ | 'USER_INTERACTION_NONE'
1008
+ | 'USER_INTERACTION_REQUIRED'
1009
+ | 'USER_INTERACTION_PASSIVE'
1010
+ | 'USER_INTERACTION_ACTIVE';
1011
+ /** Optional. Vulnerable System Availability Impact (VA). Defined in CVSS v4. */
1012
+ vulnerableSystemAvailabilityImpact?:
1013
+ | 'IMPACT_UNSPECIFIED'
1014
+ | 'IMPACT_HIGH'
1015
+ | 'IMPACT_LOW'
1016
+ | 'IMPACT_NONE'
1017
+ | 'IMPACT_PARTIAL'
1018
+ | 'IMPACT_COMPLETE';
1019
+ /** Optional. Vulnerable System Confidentiality Impact (VC). Defined in CVSS v4. */
1020
+ vulnerableSystemConfidentialityImpact?:
1021
+ | 'IMPACT_UNSPECIFIED'
1022
+ | 'IMPACT_HIGH'
1023
+ | 'IMPACT_LOW'
1024
+ | 'IMPACT_NONE'
1025
+ | 'IMPACT_PARTIAL'
1026
+ | 'IMPACT_COMPLETE';
1027
+ /** Optional. Vulnerable System Integrity Impact (VI). Defined in CVSS v4. */
1028
+ vulnerableSystemIntegrityImpact?:
1029
+ | 'IMPACT_UNSPECIFIED'
1030
+ | 'IMPACT_HIGH'
1031
+ | 'IMPACT_LOW'
1032
+ | 'IMPACT_NONE'
1033
+ | 'IMPACT_PARTIAL'
1034
+ | 'IMPACT_COMPLETE';
799
1035
  }
800
1036
  interface Deployable {
801
1037
  /** Resource URI for the artifact being deployed. */
@@ -809,7 +1045,7 @@ declare namespace gapi.client {
809
1045
  /** Beginning of the lifetime of this deployment. */
810
1046
  deployTime?: string;
811
1047
  /** Platform hosting this deployment. */
812
- platform?: string;
1048
+ platform?: 'PLATFORM_UNSPECIFIED' | 'GKE' | 'FLEX' | 'CUSTOM';
813
1049
  /** Resource URI for the artifact being deployed taken from the deployable field with the same name. */
814
1050
  resourceUri?: string[];
815
1051
  /** End of the lifetime of this deployment. */
@@ -863,13 +1099,23 @@ declare namespace gapi.client {
863
1099
  /** Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors. */
864
1100
  analysisError?: Status[];
865
1101
  /** The status of discovery for the resource. */
866
- analysisStatus?: string;
1102
+ analysisStatus?:
1103
+ | 'ANALYSIS_STATUS_UNSPECIFIED'
1104
+ | 'PENDING'
1105
+ | 'SCANNING'
1106
+ | 'COMPLETE'
1107
+ | 'FINISHED_SUCCESS'
1108
+ | 'FINISHED_FAILED'
1109
+ | 'FINISHED_UNSUPPORTED';
867
1110
  /** When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API. */
868
1111
  analysisStatusError?: Status;
869
1112
  /** The time occurrences related to this discovery occurrence were archived. */
870
1113
  archiveTime?: string;
871
1114
  /** Whether the resource is continuously analyzed. */
872
- continuousAnalysis?: string;
1115
+ continuousAnalysis?:
1116
+ | 'CONTINUOUS_ANALYSIS_UNSPECIFIED'
1117
+ | 'ACTIVE'
1118
+ | 'INACTIVE';
873
1119
  /** The CPE of the resource being scanned. */
874
1120
  cpe?: string;
875
1121
  /** Optional. Files that make up the resource described by the occurrence. */
@@ -887,11 +1133,30 @@ declare namespace gapi.client {
887
1133
  }
888
1134
  interface Discovery {
889
1135
  /** The kind of analysis that is handled by this discovery. */
890
- analysisKind?: string;
1136
+ analysisKind?:
1137
+ | 'KIND_UNSPECIFIED'
1138
+ | 'PACKAGE_VULNERABILITY'
1139
+ | 'BUILD_DETAILS'
1140
+ | 'IMAGE_BASIS'
1141
+ | 'PACKAGE_MANAGER'
1142
+ | 'DEPLOYABLE'
1143
+ | 'DISCOVERY'
1144
+ | 'ATTESTATION_AUTHORITY'
1145
+ | 'UPGRADE'
1146
+ | 'COMPLIANCE'
1147
+ | 'SBOM'
1148
+ | 'SPDX_PACKAGE'
1149
+ | 'SPDX_FILE'
1150
+ | 'SPDX_RELATIONSHIP'
1151
+ | 'DSSE_ATTESTATION'
1152
+ | 'VULNERABILITY_ASSESSMENT'
1153
+ | 'SBOM_REFERENCE'
1154
+ | 'SECRET'
1155
+ | 'AI_SKILL_ANALYSIS';
891
1156
  }
892
1157
  interface Distribution {
893
1158
  /** The CPU architecture for which packages in this distribution channel were built */
894
- architecture?: string;
1159
+ architecture?: 'ARCHITECTURE_UNSPECIFIED' | 'X86' | 'X64';
895
1160
  /** The cpe_uri in [cpe format](https://cpe.mitre.org/specification/) denoting the package manager version distributing a package. */
896
1161
  cpeUri?: string;
897
1162
  /** The distribution channel-specific description of this package. */
@@ -975,7 +1240,12 @@ declare namespace gapi.client {
975
1240
  }
976
1241
  interface ExternalRef {
977
1242
  /** An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package */
978
- category?: string;
1243
+ category?:
1244
+ | 'CATEGORY_UNSPECIFIED'
1245
+ | 'SECURITY'
1246
+ | 'PACKAGE_MANAGER'
1247
+ | 'PERSISTENT_ID'
1248
+ | 'OTHER';
979
1249
  /** Human-readable information about the purpose and target of the reference */
980
1250
  comment?: string;
981
1251
  /** The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location */
@@ -1005,7 +1275,19 @@ declare namespace gapi.client {
1005
1275
  /** Provide a unique identifier to match analysis information on each specific file in a package */
1006
1276
  checksum?: string[];
1007
1277
  /** This field provides information about the type of file identified */
1008
- fileType?: string;
1278
+ fileType?:
1279
+ | 'FILE_TYPE_UNSPECIFIED'
1280
+ | 'SOURCE'
1281
+ | 'BINARY'
1282
+ | 'ARCHIVE'
1283
+ | 'APPLICATION'
1284
+ | 'AUDIO'
1285
+ | 'IMAGE'
1286
+ | 'TEXT'
1287
+ | 'VIDEO'
1288
+ | 'DOCUMENTATION'
1289
+ | 'SPDX'
1290
+ | 'OTHER';
1009
1291
  /** Identify the full path and filename that corresponds to the file information in this section */
1010
1292
  title?: string;
1011
1293
  }
@@ -1027,6 +1309,22 @@ declare namespace gapi.client {
1027
1309
  /** This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file */
1028
1310
  notice?: string;
1029
1311
  }
1312
+ interface Finding {
1313
+ /** Optional. Category of the finding. */
1314
+ category?: string;
1315
+ /** Optional. Location (path and line) where the finding was detected. */
1316
+ location?: FindingLocation;
1317
+ /** Optional. Scanner determines which engine (e.g. static, llm) emitted the finding. */
1318
+ scanner?: string;
1319
+ /** Optional. Severity of the finding. */
1320
+ severity?: string;
1321
+ }
1322
+ interface FindingLocation {
1323
+ /** Optional. Relative path of the file containing the finding. */
1324
+ filePath?: string;
1325
+ /** Optional. Line number (1-based), or 0 if whole File / unknown. */
1326
+ lineNumber?: string;
1327
+ }
1030
1328
  interface Fingerprint {
1031
1329
  /** The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests. */
1032
1330
  v1Name?: string;
@@ -1049,7 +1347,7 @@ declare namespace gapi.client {
1049
1347
  }
1050
1348
  interface GoogleDevtoolsContaineranalysisV1alpha1AliasContext {
1051
1349
  /** The alias kind. */
1052
- kind?: string;
1350
+ kind?: 'KIND_UNSPECIFIED' | 'FIXED' | 'MOVABLE' | 'OTHER';
1053
1351
  /** The alias name. */
1054
1352
  name?: string;
1055
1353
  }
@@ -1153,19 +1451,19 @@ declare namespace gapi.client {
1153
1451
  }
1154
1452
  interface Hash {
1155
1453
  /** The type of hash that was performed. */
1156
- type?: string;
1454
+ type?: 'NONE' | 'SHA256' | 'GO_MODULE_H1' | 'DIRSUM_SHA256';
1157
1455
  /** The hash value. */
1158
1456
  value?: string;
1159
1457
  }
1160
1458
  interface IdentifierHelper {
1161
1459
  /** The field that is set in the API proto. */
1162
- field?: string;
1460
+ field?: 'IDENTIFIER_HELPER_FIELD_UNSPECIFIED' | 'GENERIC_URI';
1163
1461
  /** Contains a URI which is vendor-specific. Example: The artifact repository URL of an image. */
1164
1462
  genericUri?: string;
1165
1463
  }
1166
1464
  interface Installation {
1167
1465
  /** Output only. The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages. */
1168
- architecture?: string;
1466
+ architecture?: 'ARCHITECTURE_UNSPECIFIED' | 'X86' | 'X64';
1169
1467
  /** Output only. The cpe_uri in [CPE format](https://cpe.mitre.org/specification/) denoting the package manager version distributing a package. The cpe_uri will be blank for language packages. */
1170
1468
  cpeUri?: string;
1171
1469
  /** Licenses that have been declared by the authors of the package. */
@@ -1213,13 +1511,37 @@ declare namespace gapi.client {
1213
1511
  /** Additional details on why this justification was chosen. */
1214
1512
  details?: string;
1215
1513
  /** The justification type for this vulnerability. */
1216
- justificationType?: string;
1514
+ justificationType?:
1515
+ | 'JUSTIFICATION_TYPE_UNSPECIFIED'
1516
+ | 'COMPONENT_NOT_PRESENT'
1517
+ | 'VULNERABLE_CODE_NOT_PRESENT'
1518
+ | 'VULNERABLE_CODE_NOT_IN_EXECUTE_PATH'
1519
+ | 'VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY'
1520
+ | 'INLINE_MITIGATIONS_ALREADY_EXIST';
1217
1521
  }
1218
1522
  interface Layer {
1219
1523
  /** The recovered arguments to the Dockerfile directive. */
1220
1524
  arguments?: string;
1221
1525
  /** The recovered Dockerfile directive used to construct this layer. */
1222
- directive?: string;
1526
+ directive?:
1527
+ | 'DIRECTIVE_UNSPECIFIED'
1528
+ | 'MAINTAINER'
1529
+ | 'RUN'
1530
+ | 'CMD'
1531
+ | 'LABEL'
1532
+ | 'EXPOSE'
1533
+ | 'ENV'
1534
+ | 'ADD'
1535
+ | 'COPY'
1536
+ | 'ENTRYPOINT'
1537
+ | 'VOLUME'
1538
+ | 'USER'
1539
+ | 'WORKDIR'
1540
+ | 'ARG'
1541
+ | 'ONBUILD'
1542
+ | 'STOPSIGNAL'
1543
+ | 'HEALTHCHECK'
1544
+ | 'SHELL';
1223
1545
  }
1224
1546
  interface LayerDetails {
1225
1547
  /** The base images the layer is found within. */
@@ -1298,6 +1620,8 @@ declare namespace gapi.client {
1298
1620
  reason?: string;
1299
1621
  }
1300
1622
  interface Note {
1623
+ /** A note describing an AI skill analysis. */
1624
+ aiSkillAnalysis?: any;
1301
1625
  /** A note describing an attestation role. */
1302
1626
  attestationAuthority?: AttestationAuthority;
1303
1627
  /** A note describing a base image. */
@@ -1317,7 +1641,26 @@ declare namespace gapi.client {
1317
1641
  /** Time of expiration for this note, null if note does not expire. */
1318
1642
  expirationTime?: string;
1319
1643
  /** Output only. This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests. */
1320
- kind?: string;
1644
+ kind?:
1645
+ | 'KIND_UNSPECIFIED'
1646
+ | 'PACKAGE_VULNERABILITY'
1647
+ | 'BUILD_DETAILS'
1648
+ | 'IMAGE_BASIS'
1649
+ | 'PACKAGE_MANAGER'
1650
+ | 'DEPLOYABLE'
1651
+ | 'DISCOVERY'
1652
+ | 'ATTESTATION_AUTHORITY'
1653
+ | 'UPGRADE'
1654
+ | 'COMPLIANCE'
1655
+ | 'SBOM'
1656
+ | 'SPDX_PACKAGE'
1657
+ | 'SPDX_FILE'
1658
+ | 'SPDX_RELATIONSHIP'
1659
+ | 'DSSE_ATTESTATION'
1660
+ | 'VULNERABILITY_ASSESSMENT'
1661
+ | 'SBOM_REFERENCE'
1662
+ | 'SECRET'
1663
+ | 'AI_SKILL_ANALYSIS';
1321
1664
  /** A detailed description of this `Note`. */
1322
1665
  longDescription?: string;
1323
1666
  /** The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}" */
@@ -1350,6 +1693,8 @@ declare namespace gapi.client {
1350
1693
  vulnerabilityType?: VulnerabilityType;
1351
1694
  }
1352
1695
  interface Occurrence {
1696
+ /** This represents an AI skill analysis occurrence */
1697
+ aiSkillAnalysis?: AISkillAnalysisOccurrence;
1353
1698
  /** Describes an attestation of an artifact. */
1354
1699
  attestation?: Attestation;
1355
1700
  /** Build details for a verifiable build. */
@@ -1371,7 +1716,26 @@ declare namespace gapi.client {
1371
1716
  /** Describes the installation of a package on the linked resource. */
1372
1717
  installation?: Installation;
1373
1718
  /** Output only. This explicitly denotes which of the `Occurrence` details are specified. This field can be used as a filter in list requests. */
1374
- kind?: string;
1719
+ kind?:
1720
+ | 'KIND_UNSPECIFIED'
1721
+ | 'PACKAGE_VULNERABILITY'
1722
+ | 'BUILD_DETAILS'
1723
+ | 'IMAGE_BASIS'
1724
+ | 'PACKAGE_MANAGER'
1725
+ | 'DEPLOYABLE'
1726
+ | 'DISCOVERY'
1727
+ | 'ATTESTATION_AUTHORITY'
1728
+ | 'UPGRADE'
1729
+ | 'COMPLIANCE'
1730
+ | 'SBOM'
1731
+ | 'SPDX_PACKAGE'
1732
+ | 'SPDX_FILE'
1733
+ | 'SPDX_RELATIONSHIP'
1734
+ | 'DSSE_ATTESTATION'
1735
+ | 'VULNERABILITY_ASSESSMENT'
1736
+ | 'SBOM_REFERENCE'
1737
+ | 'SECRET'
1738
+ | 'AI_SKILL_ANALYSIS';
1375
1739
  /** Output only. The name of the `Occurrence` in the form "projects/{project_id}/occurrences/{OCCURRENCE_ID}" */
1376
1740
  name?: string;
1377
1741
  /** An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests. */
@@ -1415,7 +1779,7 @@ declare namespace gapi.client {
1415
1779
  }
1416
1780
  interface Package {
1417
1781
  /** The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages. */
1418
- architecture?: string;
1782
+ architecture?: 'ARCHITECTURE_UNSPECIFIED' | 'X86' | 'X64';
1419
1783
  /** The cpe_uri in [CPE format](https://cpe.mitre.org/specification/) denoting the package manager version distributing a package. The cpe_uri will be blank for language packages. */
1420
1784
  cpeUri?: string;
1421
1785
  /** The description of this package. */
@@ -1499,7 +1863,13 @@ declare namespace gapi.client {
1499
1863
  /** The location of the vulnerability. */
1500
1864
  affectedLocation?: VulnerabilityLocation;
1501
1865
  /** Output only. The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability. */
1502
- effectiveSeverity?: string;
1866
+ effectiveSeverity?:
1867
+ | 'SEVERITY_UNSPECIFIED'
1868
+ | 'MINIMAL'
1869
+ | 'LOW'
1870
+ | 'MEDIUM'
1871
+ | 'HIGH'
1872
+ | 'CRITICAL';
1503
1873
  /** The location of the available fix for vulnerability. */
1504
1874
  fixedLocation?: VulnerabilityLocation;
1505
1875
  /** The type of package (e.g. OS, MAVEN, GO). */
@@ -1508,7 +1878,7 @@ declare namespace gapi.client {
1508
1878
  }
1509
1879
  interface PgpSignedAttestation {
1510
1880
  /** Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema). */
1511
- contentType?: string;
1881
+ contentType?: 'CONTENT_TYPE_UNSPECIFIED' | 'SIMPLE_SIGNING_JSON';
1512
1882
  /** The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. `gpg --list-keys`. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the `fpr` field returned when calling --list-keys with --with-colons. For example: ``` gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: ``` Above, the fingerprint is `24FF6481B76AC91E66A00AC657A93A81EF3AE6FB`. */
1513
1883
  pgpKeyId?: string;
1514
1884
  /** The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (`--armor` to gpg), non-clearsigned (`--sign` rather than `--clearsign` to gpg) are supported. Concretely, `gpg --sign --armor --output=signature.gpg payload.json` will create the signature content expected in this field in `signature.gpg` for the `payload.json` attestation payload. */
@@ -1545,13 +1915,13 @@ declare namespace gapi.client {
1545
1915
  }
1546
1916
  interface Recipe {
1547
1917
  /** Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. */
1548
- arguments?: Array<{[P in string]: any}>;
1918
+ arguments?: {[P in string]: any}[];
1549
1919
  /** Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64. */
1550
1920
  definedInMaterial?: string;
1551
1921
  /** String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use. */
1552
1922
  entryPoint?: string;
1553
1923
  /** Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. */
1554
- environment?: Array<{[P in string]: any}>;
1924
+ environment?: {[P in string]: any}[];
1555
1925
  /** URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials. */
1556
1926
  type?: string;
1557
1927
  }
@@ -1563,7 +1933,51 @@ declare namespace gapi.client {
1563
1933
  }
1564
1934
  interface RelationshipNote {
1565
1935
  /** The type of relationship between the source and target SPDX elements */
1566
- type?: string;
1936
+ type?:
1937
+ | 'RELATIONSHIP_TYPE_UNSPECIFIED'
1938
+ | 'DESCRIBES'
1939
+ | 'DESCRIBED_BY'
1940
+ | 'CONTAINS'
1941
+ | 'CONTAINED_BY'
1942
+ | 'DEPENDS_ON'
1943
+ | 'DEPENDENCY_OF'
1944
+ | 'DEPENDENCY_MANIFEST_OF'
1945
+ | 'BUILD_DEPENDENCY_OF'
1946
+ | 'DEV_DEPENDENCY_OF'
1947
+ | 'OPTIONAL_DEPENDENCY_OF'
1948
+ | 'PROVIDED_DEPENDENCY_OF'
1949
+ | 'TEST_DEPENDENCY_OF'
1950
+ | 'RUNTIME_DEPENDENCY_OF'
1951
+ | 'EXAMPLE_OF'
1952
+ | 'GENERATES'
1953
+ | 'GENERATED_FROM'
1954
+ | 'ANCESTOR_OF'
1955
+ | 'DESCENDANT_OF'
1956
+ | 'VARIANT_OF'
1957
+ | 'DISTRIBUTION_ARTIFACT'
1958
+ | 'PATCH_FOR'
1959
+ | 'PATCH_APPLIED'
1960
+ | 'COPY_OF'
1961
+ | 'FILE_ADDED'
1962
+ | 'FILE_DELETED'
1963
+ | 'FILE_MODIFIED'
1964
+ | 'EXPANDED_FROM_ARCHIVE'
1965
+ | 'DYNAMIC_LINK'
1966
+ | 'STATIC_LINK'
1967
+ | 'DATA_FILE_OF'
1968
+ | 'TEST_CASE_OF'
1969
+ | 'BUILD_TOOL_OF'
1970
+ | 'DEV_TOOL_OF'
1971
+ | 'TEST_OF'
1972
+ | 'TEST_TOOL_OF'
1973
+ | 'DOCUMENTATION_OF'
1974
+ | 'OPTIONAL_COMPONENT_OF'
1975
+ | 'METAFILE_OF'
1976
+ | 'PACKAGE_OF'
1977
+ | 'AMENDS'
1978
+ | 'PREREQUISITE_FOR'
1979
+ | 'HAS_PREREQUISITE'
1980
+ | 'OTHER';
1567
1981
  }
1568
1982
  interface RelationshipOccurrence {
1569
1983
  /** A place for the SPDX file creator to record any general comments about the relationship */
@@ -1573,13 +1987,63 @@ declare namespace gapi.client {
1573
1987
  /** Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it */
1574
1988
  target?: string;
1575
1989
  /** Output only. The type of relationship between the source and target SPDX elements */
1576
- type?: string;
1990
+ type?:
1991
+ | 'RELATIONSHIP_TYPE_UNSPECIFIED'
1992
+ | 'DESCRIBES'
1993
+ | 'DESCRIBED_BY'
1994
+ | 'CONTAINS'
1995
+ | 'CONTAINED_BY'
1996
+ | 'DEPENDS_ON'
1997
+ | 'DEPENDENCY_OF'
1998
+ | 'DEPENDENCY_MANIFEST_OF'
1999
+ | 'BUILD_DEPENDENCY_OF'
2000
+ | 'DEV_DEPENDENCY_OF'
2001
+ | 'OPTIONAL_DEPENDENCY_OF'
2002
+ | 'PROVIDED_DEPENDENCY_OF'
2003
+ | 'TEST_DEPENDENCY_OF'
2004
+ | 'RUNTIME_DEPENDENCY_OF'
2005
+ | 'EXAMPLE_OF'
2006
+ | 'GENERATES'
2007
+ | 'GENERATED_FROM'
2008
+ | 'ANCESTOR_OF'
2009
+ | 'DESCENDANT_OF'
2010
+ | 'VARIANT_OF'
2011
+ | 'DISTRIBUTION_ARTIFACT'
2012
+ | 'PATCH_FOR'
2013
+ | 'PATCH_APPLIED'
2014
+ | 'COPY_OF'
2015
+ | 'FILE_ADDED'
2016
+ | 'FILE_DELETED'
2017
+ | 'FILE_MODIFIED'
2018
+ | 'EXPANDED_FROM_ARCHIVE'
2019
+ | 'DYNAMIC_LINK'
2020
+ | 'STATIC_LINK'
2021
+ | 'DATA_FILE_OF'
2022
+ | 'TEST_CASE_OF'
2023
+ | 'BUILD_TOOL_OF'
2024
+ | 'DEV_TOOL_OF'
2025
+ | 'TEST_OF'
2026
+ | 'TEST_TOOL_OF'
2027
+ | 'DOCUMENTATION_OF'
2028
+ | 'OPTIONAL_COMPONENT_OF'
2029
+ | 'METAFILE_OF'
2030
+ | 'PACKAGE_OF'
2031
+ | 'AMENDS'
2032
+ | 'PREREQUISITE_FOR'
2033
+ | 'HAS_PREREQUISITE'
2034
+ | 'OTHER';
1577
2035
  }
1578
2036
  interface Remediation {
1579
2037
  /** Contains a comprehensive human-readable discussion of the remediation. */
1580
2038
  details?: string;
1581
2039
  /** The type of remediation that can be applied. */
1582
- remediationType?: string;
2040
+ remediationType?:
2041
+ | 'REMEDIATION_TYPE_UNSPECIFIED'
2042
+ | 'MITIGATION'
2043
+ | 'NO_FIX_PLANNED'
2044
+ | 'NONE_AVAILABLE'
2045
+ | 'VENDOR_FIX'
2046
+ | 'WORKAROUND';
1583
2047
  /** Contains the URL where to obtain the remediation. */
1584
2048
  remediationUri?: URI;
1585
2049
  }
@@ -1661,7 +2125,7 @@ declare namespace gapi.client {
1661
2125
  /** Output only. If there was an error generating an SBOM, this will indicate what that error was. */
1662
2126
  error?: string;
1663
2127
  /** Output only. The progress of the SBOM generation. */
1664
- sbomState?: string;
2128
+ sbomState?: 'SBOM_STATE_UNSPECIFIED' | 'PENDING' | 'COMPLETE';
1665
2129
  }
1666
2130
  interface ScanConfig {
1667
2131
  /** Output only. The time this scan config was created. */
@@ -1682,7 +2146,30 @@ declare namespace gapi.client {
1682
2146
  interface SecretNote {}
1683
2147
  interface SecretOccurrence {
1684
2148
  /** Required. Type of secret. */
1685
- kind?: string;
2149
+ kind?:
2150
+ | 'SECRET_KIND_UNSPECIFIED'
2151
+ | 'SECRET_KIND_UNKNOWN'
2152
+ | 'SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY'
2153
+ | 'SECRET_KIND_GCP_API_KEY'
2154
+ | 'SECRET_KIND_GCP_OAUTH2_CLIENT_CREDENTIALS'
2155
+ | 'SECRET_KIND_GCP_OAUTH2_ACCESS_TOKEN'
2156
+ | 'SECRET_KIND_ANTHROPIC_ADMIN_API_KEY'
2157
+ | 'SECRET_KIND_ANTHROPIC_API_KEY'
2158
+ | 'SECRET_KIND_AZURE_ACCESS_TOKEN'
2159
+ | 'SECRET_KIND_AZURE_IDENTITY_TOKEN'
2160
+ | 'SECRET_KIND_DOCKER_HUB_PERSONAL_ACCESS_TOKEN'
2161
+ | 'SECRET_KIND_GITHUB_APP_REFRESH_TOKEN'
2162
+ | 'SECRET_KIND_GITHUB_APP_SERVER_TO_SERVER_TOKEN'
2163
+ | 'SECRET_KIND_GITHUB_APP_USER_TO_SERVER_TOKEN'
2164
+ | 'SECRET_KIND_GITHUB_CLASSIC_PERSONAL_ACCESS_TOKEN'
2165
+ | 'SECRET_KIND_GITHUB_FINE_GRAINED_PERSONAL_ACCESS_TOKEN'
2166
+ | 'SECRET_KIND_GITHUB_OAUTH_TOKEN'
2167
+ | 'SECRET_KIND_HUGGINGFACE_API_KEY'
2168
+ | 'SECRET_KIND_OPENAI_API_KEY'
2169
+ | 'SECRET_KIND_PERPLEXITY_API_KEY'
2170
+ | 'SECRET_KIND_STRIPE_SECRET_KEY'
2171
+ | 'SECRET_KIND_STRIPE_RESTRICTED_KEY'
2172
+ | 'SECRET_KIND_STRIPE_WEBHOOK_SECRET';
1686
2173
  /** Optional. Locations where the secret is detected. */
1687
2174
  locations?: SecretLocation[];
1688
2175
  /** Optional. Status of the secret. */
@@ -1692,7 +2179,7 @@ declare namespace gapi.client {
1692
2179
  /** Optional. Optional message about the status code. */
1693
2180
  message?: string;
1694
2181
  /** Optional. The status of the secret. */
1695
- status?: string;
2182
+ status?: 'STATUS_UNSPECIFIED' | 'UNKNOWN' | 'VALID' | 'INVALID';
1696
2183
  /** Optional. The time the secret status was last updated. */
1697
2184
  updateTime?: string;
1698
2185
  }
@@ -1704,7 +2191,13 @@ declare namespace gapi.client {
1704
2191
  /** The number of occurrences with the severity. */
1705
2192
  count?: string;
1706
2193
  /** The severity of the occurrences. */
1707
- severity?: string;
2194
+ severity?:
2195
+ | 'SEVERITY_UNSPECIFIED'
2196
+ | 'MINIMAL'
2197
+ | 'LOW'
2198
+ | 'MEDIUM'
2199
+ | 'HIGH'
2200
+ | 'CRITICAL';
1708
2201
  }
1709
2202
  interface SlsaBuilder {
1710
2203
  /** id is the id of the slsa provenance builder */
@@ -1788,7 +2281,7 @@ declare namespace gapi.client {
1788
2281
  /** The status code, which should be an enum value of google.rpc.Code. */
1789
2282
  code?: number;
1790
2283
  /** A list of messages that carry the error details. There is a common set of message types for APIs to use. */
1791
- details?: Array<{[P in string]: any}>;
2284
+ details?: {[P in string]: any}[];
1792
2285
  /** A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. */
1793
2286
  message?: string;
1794
2287
  }
@@ -1869,7 +2362,7 @@ declare namespace gapi.client {
1869
2362
  /** Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not */
1870
2363
  inclusive?: boolean;
1871
2364
  /** Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored. */
1872
- kind?: string;
2365
+ kind?: 'NORMAL' | 'MINIMUM' | 'MAXIMUM';
1873
2366
  /** The main part of the version name. */
1874
2367
  name?: string;
1875
2368
  /** The iteration of the package build from the above version. */
@@ -1889,7 +2382,12 @@ declare namespace gapi.client {
1889
2382
  /** Specifies details on how to handle (and presumably, fix) a vulnerability. */
1890
2383
  remediations?: Remediation[];
1891
2384
  /** Provides the state of this Vulnerability assessment. */
1892
- state?: string;
2385
+ state?:
2386
+ | 'STATE_UNSPECIFIED'
2387
+ | 'AFFECTED'
2388
+ | 'NOT_AFFECTED'
2389
+ | 'FIXED'
2390
+ | 'UNDER_INVESTIGATION';
1893
2391
  /** The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc. */
1894
2392
  vulnerabilityId?: string;
1895
2393
  }
@@ -1921,7 +2419,10 @@ declare namespace gapi.client {
1921
2419
  /** Output only. The last time we attempted to generate an attestation. */
1922
2420
  lastAttemptTime?: string;
1923
2421
  /** Output only. The success/failure state of the latest attestation attempt. */
1924
- state?: string;
2422
+ state?:
2423
+ | 'VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED'
2424
+ | 'SUCCESS'
2425
+ | 'FAILURE';
1925
2426
  }
1926
2427
  interface VulnerabilityDetails {
1927
2428
  /** Output only. The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity. */
@@ -1931,9 +2432,19 @@ declare namespace gapi.client {
1931
2432
  /** The CVSS v3 score of this vulnerability. */
1932
2433
  cvssV3?: CVSS;
1933
2434
  /** Output only. CVSS version used to populate cvss_score and severity. */
1934
- cvssVersion?: string;
2435
+ cvssVersion?:
2436
+ | 'CVSS_VERSION_UNSPECIFIED'
2437
+ | 'CVSS_VERSION_2'
2438
+ | 'CVSS_VERSION_3'
2439
+ | 'CVSS_VERSION_4';
1935
2440
  /** The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues. */
1936
- effectiveSeverity?: string;
2441
+ effectiveSeverity?:
2442
+ | 'SEVERITY_UNSPECIFIED'
2443
+ | 'MINIMAL'
2444
+ | 'LOW'
2445
+ | 'MEDIUM'
2446
+ | 'HIGH'
2447
+ | 'CRITICAL';
1937
2448
  /** Occurrence-specific extra details about the vulnerability. */
1938
2449
  extraDetails?: string;
1939
2450
  /** The set of affected locations and their fixes (if available) within the associated resource. */
@@ -1941,7 +2452,13 @@ declare namespace gapi.client {
1941
2452
  /** Risk information about the vulnerability, such as CISA, EPSS, etc. */
1942
2453
  risk?: Risk;
1943
2454
  /** Output only. The note provider assigned Severity of the vulnerability. */
1944
- severity?: string;
2455
+ severity?:
2456
+ | 'SEVERITY_UNSPECIFIED'
2457
+ | 'MINIMAL'
2458
+ | 'LOW'
2459
+ | 'MEDIUM'
2460
+ | 'HIGH'
2461
+ | 'CRITICAL';
1945
2462
  /** The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types. */
1946
2463
  type?: string;
1947
2464
  /** VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource. */
@@ -1965,23 +2482,33 @@ declare namespace gapi.client {
1965
2482
  /** The full description of the CVSS for version 2. */
1966
2483
  cvssV2?: CVSS;
1967
2484
  /** CVSS version used to populate cvss_score and severity. */
1968
- cvssVersion?: string;
2485
+ cvssVersion?:
2486
+ | 'CVSS_VERSION_UNSPECIFIED'
2487
+ | 'CVSS_VERSION_2'
2488
+ | 'CVSS_VERSION_3'
2489
+ | 'CVSS_VERSION_4';
1969
2490
  /** A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html */
1970
2491
  cwe?: string[];
1971
2492
  /** All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in. */
1972
2493
  details?: Detail[];
1973
2494
  /** Note provider assigned impact of the vulnerability */
1974
- severity?: string;
2495
+ severity?:
2496
+ | 'SEVERITY_UNSPECIFIED'
2497
+ | 'MINIMAL'
2498
+ | 'LOW'
2499
+ | 'MEDIUM'
2500
+ | 'HIGH'
2501
+ | 'CRITICAL';
1975
2502
  }
1976
2503
  interface OccurrencesResource {
1977
2504
  /** Lists `Occurrences` referencing the specified `Note`. Use this method to get all occurrences referencing your `Note` across all your customer projects. */
1978
2505
  list(request?: {
1979
2506
  /** V1 error format. */
1980
- '$.xgafv'?: string;
2507
+ '$.xgafv'?: '1' | '2';
1981
2508
  /** OAuth access token. */
1982
2509
  access_token?: string;
1983
2510
  /** Data format for response. */
1984
- alt?: string;
2511
+ alt?: 'json' | 'media' | 'proto';
1985
2512
  /** JSONP */
1986
2513
  callback?: string;
1987
2514
  /** Selector specifying which fields to include in a partial response. */
@@ -2012,11 +2539,11 @@ declare namespace gapi.client {
2012
2539
  /** Creates a new `Note`. */
2013
2540
  create(request: {
2014
2541
  /** V1 error format. */
2015
- '$.xgafv'?: string;
2542
+ '$.xgafv'?: '1' | '2';
2016
2543
  /** OAuth access token. */
2017
2544
  access_token?: string;
2018
2545
  /** Data format for response. */
2019
- alt?: string;
2546
+ alt?: 'json' | 'media' | 'proto';
2020
2547
  /** JSONP */
2021
2548
  callback?: string;
2022
2549
  /** Selector specifying which fields to include in a partial response. */
@@ -2045,11 +2572,11 @@ declare namespace gapi.client {
2045
2572
  create(
2046
2573
  request: {
2047
2574
  /** V1 error format. */
2048
- '$.xgafv'?: string;
2575
+ '$.xgafv'?: '1' | '2';
2049
2576
  /** OAuth access token. */
2050
2577
  access_token?: string;
2051
2578
  /** Data format for response. */
2052
- alt?: string;
2579
+ alt?: 'json' | 'media' | 'proto';
2053
2580
  /** JSONP */
2054
2581
  callback?: string;
2055
2582
  /** Selector specifying which fields to include in a partial response. */
@@ -2078,11 +2605,11 @@ declare namespace gapi.client {
2078
2605
  /** Deletes the given `Note` from the system. */
2079
2606
  delete(request?: {
2080
2607
  /** V1 error format. */
2081
- '$.xgafv'?: string;
2608
+ '$.xgafv'?: '1' | '2';
2082
2609
  /** OAuth access token. */
2083
2610
  access_token?: string;
2084
2611
  /** Data format for response. */
2085
- alt?: string;
2612
+ alt?: 'json' | 'media' | 'proto';
2086
2613
  /** JSONP */
2087
2614
  callback?: string;
2088
2615
  /** Selector specifying which fields to include in a partial response. */
@@ -2105,11 +2632,11 @@ declare namespace gapi.client {
2105
2632
  /** Returns the requested `Note`. */
2106
2633
  get(request?: {
2107
2634
  /** V1 error format. */
2108
- '$.xgafv'?: string;
2635
+ '$.xgafv'?: '1' | '2';
2109
2636
  /** OAuth access token. */
2110
2637
  access_token?: string;
2111
2638
  /** Data format for response. */
2112
- alt?: string;
2639
+ alt?: 'json' | 'media' | 'proto';
2113
2640
  /** JSONP */
2114
2641
  callback?: string;
2115
2642
  /** Selector specifying which fields to include in a partial response. */
@@ -2133,11 +2660,11 @@ declare namespace gapi.client {
2133
2660
  getIamPolicy(
2134
2661
  request: {
2135
2662
  /** V1 error format. */
2136
- '$.xgafv'?: string;
2663
+ '$.xgafv'?: '1' | '2';
2137
2664
  /** OAuth access token. */
2138
2665
  access_token?: string;
2139
2666
  /** Data format for response. */
2140
- alt?: string;
2667
+ alt?: 'json' | 'media' | 'proto';
2141
2668
  /** JSONP */
2142
2669
  callback?: string;
2143
2670
  /** Selector specifying which fields to include in a partial response. */
@@ -2162,11 +2689,11 @@ declare namespace gapi.client {
2162
2689
  /** Lists all `Notes` for a given project. */
2163
2690
  list(request?: {
2164
2691
  /** V1 error format. */
2165
- '$.xgafv'?: string;
2692
+ '$.xgafv'?: '1' | '2';
2166
2693
  /** OAuth access token. */
2167
2694
  access_token?: string;
2168
2695
  /** Data format for response. */
2169
- alt?: string;
2696
+ alt?: 'json' | 'media' | 'proto';
2170
2697
  /** JSONP */
2171
2698
  callback?: string;
2172
2699
  /** Selector specifying which fields to include in a partial response. */
@@ -2197,11 +2724,11 @@ declare namespace gapi.client {
2197
2724
  /** Updates an existing `Note`. */
2198
2725
  patch(request: {
2199
2726
  /** V1 error format. */
2200
- '$.xgafv'?: string;
2727
+ '$.xgafv'?: '1' | '2';
2201
2728
  /** OAuth access token. */
2202
2729
  access_token?: string;
2203
2730
  /** Data format for response. */
2204
- alt?: string;
2731
+ alt?: 'json' | 'media' | 'proto';
2205
2732
  /** JSONP */
2206
2733
  callback?: string;
2207
2734
  /** Selector specifying which fields to include in a partial response. */
@@ -2228,11 +2755,11 @@ declare namespace gapi.client {
2228
2755
  patch(
2229
2756
  request: {
2230
2757
  /** V1 error format. */
2231
- '$.xgafv'?: string;
2758
+ '$.xgafv'?: '1' | '2';
2232
2759
  /** OAuth access token. */
2233
2760
  access_token?: string;
2234
2761
  /** Data format for response. */
2235
- alt?: string;
2762
+ alt?: 'json' | 'media' | 'proto';
2236
2763
  /** JSONP */
2237
2764
  callback?: string;
2238
2765
  /** Selector specifying which fields to include in a partial response. */
@@ -2260,11 +2787,11 @@ declare namespace gapi.client {
2260
2787
  setIamPolicy(
2261
2788
  request: {
2262
2789
  /** V1 error format. */
2263
- '$.xgafv'?: string;
2790
+ '$.xgafv'?: '1' | '2';
2264
2791
  /** OAuth access token. */
2265
2792
  access_token?: string;
2266
2793
  /** Data format for response. */
2267
- alt?: string;
2794
+ alt?: 'json' | 'media' | 'proto';
2268
2795
  /** JSONP */
2269
2796
  callback?: string;
2270
2797
  /** Selector specifying which fields to include in a partial response. */
@@ -2290,11 +2817,11 @@ declare namespace gapi.client {
2290
2817
  testIamPermissions(
2291
2818
  request: {
2292
2819
  /** V1 error format. */
2293
- '$.xgafv'?: string;
2820
+ '$.xgafv'?: '1' | '2';
2294
2821
  /** OAuth access token. */
2295
2822
  access_token?: string;
2296
2823
  /** Data format for response. */
2297
- alt?: string;
2824
+ alt?: 'json' | 'media' | 'proto';
2298
2825
  /** JSONP */
2299
2826
  callback?: string;
2300
2827
  /** Selector specifying which fields to include in a partial response. */
@@ -2322,11 +2849,11 @@ declare namespace gapi.client {
2322
2849
  /** Creates a new `Occurrence`. Use this method to create `Occurrences` for a resource. */
2323
2850
  create(request: {
2324
2851
  /** V1 error format. */
2325
- '$.xgafv'?: string;
2852
+ '$.xgafv'?: '1' | '2';
2326
2853
  /** OAuth access token. */
2327
2854
  access_token?: string;
2328
2855
  /** Data format for response. */
2329
- alt?: string;
2856
+ alt?: 'json' | 'media' | 'proto';
2330
2857
  /** JSONP */
2331
2858
  callback?: string;
2332
2859
  /** Selector specifying which fields to include in a partial response. */
@@ -2353,11 +2880,11 @@ declare namespace gapi.client {
2353
2880
  create(
2354
2881
  request: {
2355
2882
  /** V1 error format. */
2356
- '$.xgafv'?: string;
2883
+ '$.xgafv'?: '1' | '2';
2357
2884
  /** OAuth access token. */
2358
2885
  access_token?: string;
2359
2886
  /** Data format for response. */
2360
- alt?: string;
2887
+ alt?: 'json' | 'media' | 'proto';
2361
2888
  /** JSONP */
2362
2889
  callback?: string;
2363
2890
  /** Selector specifying which fields to include in a partial response. */
@@ -2384,11 +2911,11 @@ declare namespace gapi.client {
2384
2911
  /** Deletes the given `Occurrence` from the system. Use this when an `Occurrence` is no longer applicable for the given resource. */
2385
2912
  delete(request?: {
2386
2913
  /** V1 error format. */
2387
- '$.xgafv'?: string;
2914
+ '$.xgafv'?: '1' | '2';
2388
2915
  /** OAuth access token. */
2389
2916
  access_token?: string;
2390
2917
  /** Data format for response. */
2391
- alt?: string;
2918
+ alt?: 'json' | 'media' | 'proto';
2392
2919
  /** JSONP */
2393
2920
  callback?: string;
2394
2921
  /** Selector specifying which fields to include in a partial response. */
@@ -2411,11 +2938,11 @@ declare namespace gapi.client {
2411
2938
  /** Returns the requested `Occurrence`. */
2412
2939
  get(request?: {
2413
2940
  /** V1 error format. */
2414
- '$.xgafv'?: string;
2941
+ '$.xgafv'?: '1' | '2';
2415
2942
  /** OAuth access token. */
2416
2943
  access_token?: string;
2417
2944
  /** Data format for response. */
2418
- alt?: string;
2945
+ alt?: 'json' | 'media' | 'proto';
2419
2946
  /** JSONP */
2420
2947
  callback?: string;
2421
2948
  /** Selector specifying which fields to include in a partial response. */
@@ -2439,11 +2966,11 @@ declare namespace gapi.client {
2439
2966
  getIamPolicy(
2440
2967
  request: {
2441
2968
  /** V1 error format. */
2442
- '$.xgafv'?: string;
2969
+ '$.xgafv'?: '1' | '2';
2443
2970
  /** OAuth access token. */
2444
2971
  access_token?: string;
2445
2972
  /** Data format for response. */
2446
- alt?: string;
2973
+ alt?: 'json' | 'media' | 'proto';
2447
2974
  /** JSONP */
2448
2975
  callback?: string;
2449
2976
  /** Selector specifying which fields to include in a partial response. */
@@ -2468,11 +2995,11 @@ declare namespace gapi.client {
2468
2995
  /** Gets the `Note` attached to the given `Occurrence`. */
2469
2996
  getNotes(request?: {
2470
2997
  /** V1 error format. */
2471
- '$.xgafv'?: string;
2998
+ '$.xgafv'?: '1' | '2';
2472
2999
  /** OAuth access token. */
2473
3000
  access_token?: string;
2474
3001
  /** Data format for response. */
2475
- alt?: string;
3002
+ alt?: 'json' | 'media' | 'proto';
2476
3003
  /** JSONP */
2477
3004
  callback?: string;
2478
3005
  /** Selector specifying which fields to include in a partial response. */
@@ -2495,11 +3022,11 @@ declare namespace gapi.client {
2495
3022
  /** Gets a summary of the number and severity of occurrences. */
2496
3023
  getVulnerabilitySummary(request?: {
2497
3024
  /** V1 error format. */
2498
- '$.xgafv'?: string;
3025
+ '$.xgafv'?: '1' | '2';
2499
3026
  /** OAuth access token. */
2500
3027
  access_token?: string;
2501
3028
  /** Data format for response. */
2502
- alt?: string;
3029
+ alt?: 'json' | 'media' | 'proto';
2503
3030
  /** JSONP */
2504
3031
  callback?: string;
2505
3032
  /** Selector specifying which fields to include in a partial response. */
@@ -2524,11 +3051,11 @@ declare namespace gapi.client {
2524
3051
  /** Lists active `Occurrences` for a given project matching the filters. */
2525
3052
  list(request?: {
2526
3053
  /** V1 error format. */
2527
- '$.xgafv'?: string;
3054
+ '$.xgafv'?: '1' | '2';
2528
3055
  /** OAuth access token. */
2529
3056
  access_token?: string;
2530
3057
  /** Data format for response. */
2531
- alt?: string;
3058
+ alt?: 'json' | 'media' | 'proto';
2532
3059
  /** JSONP */
2533
3060
  callback?: string;
2534
3061
  /** Selector specifying which fields to include in a partial response. */
@@ -2538,7 +3065,26 @@ declare namespace gapi.client {
2538
3065
  /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
2539
3066
  key?: string;
2540
3067
  /** The kind of occurrences to filter on. */
2541
- kind?: string;
3068
+ kind?:
3069
+ | 'KIND_UNSPECIFIED'
3070
+ | 'PACKAGE_VULNERABILITY'
3071
+ | 'BUILD_DETAILS'
3072
+ | 'IMAGE_BASIS'
3073
+ | 'PACKAGE_MANAGER'
3074
+ | 'DEPLOYABLE'
3075
+ | 'DISCOVERY'
3076
+ | 'ATTESTATION_AUTHORITY'
3077
+ | 'UPGRADE'
3078
+ | 'COMPLIANCE'
3079
+ | 'SBOM'
3080
+ | 'SPDX_PACKAGE'
3081
+ | 'SPDX_FILE'
3082
+ | 'SPDX_RELATIONSHIP'
3083
+ | 'DSSE_ATTESTATION'
3084
+ | 'VULNERABILITY_ASSESSMENT'
3085
+ | 'SBOM_REFERENCE'
3086
+ | 'SECRET'
3087
+ | 'AI_SKILL_ANALYSIS';
2542
3088
  /** The name field contains the project Id. For example: "projects/{project_id} @Deprecated */
2543
3089
  name?: string;
2544
3090
  /** OAuth 2.0 token for the current user. */
@@ -2561,11 +3107,11 @@ declare namespace gapi.client {
2561
3107
  /** Updates an existing occurrence. */
2562
3108
  patch(request: {
2563
3109
  /** V1 error format. */
2564
- '$.xgafv'?: string;
3110
+ '$.xgafv'?: '1' | '2';
2565
3111
  /** OAuth access token. */
2566
3112
  access_token?: string;
2567
3113
  /** Data format for response. */
2568
- alt?: string;
3114
+ alt?: 'json' | 'media' | 'proto';
2569
3115
  /** JSONP */
2570
3116
  callback?: string;
2571
3117
  /** Selector specifying which fields to include in a partial response. */
@@ -2592,11 +3138,11 @@ declare namespace gapi.client {
2592
3138
  patch(
2593
3139
  request: {
2594
3140
  /** V1 error format. */
2595
- '$.xgafv'?: string;
3141
+ '$.xgafv'?: '1' | '2';
2596
3142
  /** OAuth access token. */
2597
3143
  access_token?: string;
2598
3144
  /** Data format for response. */
2599
- alt?: string;
3145
+ alt?: 'json' | 'media' | 'proto';
2600
3146
  /** JSONP */
2601
3147
  callback?: string;
2602
3148
  /** Selector specifying which fields to include in a partial response. */
@@ -2624,11 +3170,11 @@ declare namespace gapi.client {
2624
3170
  setIamPolicy(
2625
3171
  request: {
2626
3172
  /** V1 error format. */
2627
- '$.xgafv'?: string;
3173
+ '$.xgafv'?: '1' | '2';
2628
3174
  /** OAuth access token. */
2629
3175
  access_token?: string;
2630
3176
  /** Data format for response. */
2631
- alt?: string;
3177
+ alt?: 'json' | 'media' | 'proto';
2632
3178
  /** JSONP */
2633
3179
  callback?: string;
2634
3180
  /** Selector specifying which fields to include in a partial response. */
@@ -2654,11 +3200,11 @@ declare namespace gapi.client {
2654
3200
  testIamPermissions(
2655
3201
  request: {
2656
3202
  /** V1 error format. */
2657
- '$.xgafv'?: string;
3203
+ '$.xgafv'?: '1' | '2';
2658
3204
  /** OAuth access token. */
2659
3205
  access_token?: string;
2660
3206
  /** Data format for response. */
2661
- alt?: string;
3207
+ alt?: 'json' | 'media' | 'proto';
2662
3208
  /** JSONP */
2663
3209
  callback?: string;
2664
3210
  /** Selector specifying which fields to include in a partial response. */
@@ -2685,11 +3231,11 @@ declare namespace gapi.client {
2685
3231
  /** Creates a new `Operation`. */
2686
3232
  create(request: {
2687
3233
  /** V1 error format. */
2688
- '$.xgafv'?: string;
3234
+ '$.xgafv'?: '1' | '2';
2689
3235
  /** OAuth access token. */
2690
3236
  access_token?: string;
2691
3237
  /** Data format for response. */
2692
- alt?: string;
3238
+ alt?: 'json' | 'media' | 'proto';
2693
3239
  /** JSONP */
2694
3240
  callback?: string;
2695
3241
  /** Selector specifying which fields to include in a partial response. */
@@ -2714,11 +3260,11 @@ declare namespace gapi.client {
2714
3260
  create(
2715
3261
  request: {
2716
3262
  /** V1 error format. */
2717
- '$.xgafv'?: string;
3263
+ '$.xgafv'?: '1' | '2';
2718
3264
  /** OAuth access token. */
2719
3265
  access_token?: string;
2720
3266
  /** Data format for response. */
2721
- alt?: string;
3267
+ alt?: 'json' | 'media' | 'proto';
2722
3268
  /** JSONP */
2723
3269
  callback?: string;
2724
3270
  /** Selector specifying which fields to include in a partial response. */
@@ -2743,11 +3289,11 @@ declare namespace gapi.client {
2743
3289
  /** Updates an existing operation returns an error if operation does not exist. The only valid operations are to update mark the done bit change the result. */
2744
3290
  patch(request: {
2745
3291
  /** V1 error format. */
2746
- '$.xgafv'?: string;
3292
+ '$.xgafv'?: '1' | '2';
2747
3293
  /** OAuth access token. */
2748
3294
  access_token?: string;
2749
3295
  /** Data format for response. */
2750
- alt?: string;
3296
+ alt?: 'json' | 'media' | 'proto';
2751
3297
  /** JSONP */
2752
3298
  callback?: string;
2753
3299
  /** Selector specifying which fields to include in a partial response. */
@@ -2772,11 +3318,11 @@ declare namespace gapi.client {
2772
3318
  patch(
2773
3319
  request: {
2774
3320
  /** V1 error format. */
2775
- '$.xgafv'?: string;
3321
+ '$.xgafv'?: '1' | '2';
2776
3322
  /** OAuth access token. */
2777
3323
  access_token?: string;
2778
3324
  /** Data format for response. */
2779
- alt?: string;
3325
+ alt?: 'json' | 'media' | 'proto';
2780
3326
  /** JSONP */
2781
3327
  callback?: string;
2782
3328
  /** Selector specifying which fields to include in a partial response. */
@@ -2803,11 +3349,11 @@ declare namespace gapi.client {
2803
3349
  /** Gets a specific scan configuration for a project. */
2804
3350
  get(request?: {
2805
3351
  /** V1 error format. */
2806
- '$.xgafv'?: string;
3352
+ '$.xgafv'?: '1' | '2';
2807
3353
  /** OAuth access token. */
2808
3354
  access_token?: string;
2809
3355
  /** Data format for response. */
2810
- alt?: string;
3356
+ alt?: 'json' | 'media' | 'proto';
2811
3357
  /** JSONP */
2812
3358
  callback?: string;
2813
3359
  /** Selector specifying which fields to include in a partial response. */
@@ -2830,11 +3376,11 @@ declare namespace gapi.client {
2830
3376
  /** Lists scan configurations for a project. */
2831
3377
  list(request?: {
2832
3378
  /** V1 error format. */
2833
- '$.xgafv'?: string;
3379
+ '$.xgafv'?: '1' | '2';
2834
3380
  /** OAuth access token. */
2835
3381
  access_token?: string;
2836
3382
  /** Data format for response. */
2837
- alt?: string;
3383
+ alt?: 'json' | 'media' | 'proto';
2838
3384
  /** JSONP */
2839
3385
  callback?: string;
2840
3386
  /** Selector specifying which fields to include in a partial response. */
@@ -2863,11 +3409,11 @@ declare namespace gapi.client {
2863
3409
  /** Updates the scan configuration to a new value. */
2864
3410
  patch(request: {
2865
3411
  /** V1 error format. */
2866
- '$.xgafv'?: string;
3412
+ '$.xgafv'?: '1' | '2';
2867
3413
  /** OAuth access token. */
2868
3414
  access_token?: string;
2869
3415
  /** Data format for response. */
2870
- alt?: string;
3416
+ alt?: 'json' | 'media' | 'proto';
2871
3417
  /** JSONP */
2872
3418
  callback?: string;
2873
3419
  /** Selector specifying which fields to include in a partial response. */
@@ -2894,11 +3440,11 @@ declare namespace gapi.client {
2894
3440
  patch(
2895
3441
  request: {
2896
3442
  /** V1 error format. */
2897
- '$.xgafv'?: string;
3443
+ '$.xgafv'?: '1' | '2';
2898
3444
  /** OAuth access token. */
2899
3445
  access_token?: string;
2900
3446
  /** Data format for response. */
2901
- alt?: string;
3447
+ alt?: 'json' | 'media' | 'proto';
2902
3448
  /** JSONP */
2903
3449
  callback?: string;
2904
3450
  /** Selector specifying which fields to include in a partial response. */
@@ -2933,11 +3479,11 @@ declare namespace gapi.client {
2933
3479
  /** Lists `Occurrences` referencing the specified `Note`. Use this method to get all occurrences referencing your `Note` across all your customer projects. */
2934
3480
  list(request?: {
2935
3481
  /** V1 error format. */
2936
- '$.xgafv'?: string;
3482
+ '$.xgafv'?: '1' | '2';
2937
3483
  /** OAuth access token. */
2938
3484
  access_token?: string;
2939
3485
  /** Data format for response. */
2940
- alt?: string;
3486
+ alt?: 'json' | 'media' | 'proto';
2941
3487
  /** JSONP */
2942
3488
  callback?: string;
2943
3489
  /** Selector specifying which fields to include in a partial response. */
@@ -2968,11 +3514,11 @@ declare namespace gapi.client {
2968
3514
  /** Creates a new `Note`. */
2969
3515
  create(request: {
2970
3516
  /** V1 error format. */
2971
- '$.xgafv'?: string;
3517
+ '$.xgafv'?: '1' | '2';
2972
3518
  /** OAuth access token. */
2973
3519
  access_token?: string;
2974
3520
  /** Data format for response. */
2975
- alt?: string;
3521
+ alt?: 'json' | 'media' | 'proto';
2976
3522
  /** JSONP */
2977
3523
  callback?: string;
2978
3524
  /** Selector specifying which fields to include in a partial response. */
@@ -3001,11 +3547,11 @@ declare namespace gapi.client {
3001
3547
  create(
3002
3548
  request: {
3003
3549
  /** V1 error format. */
3004
- '$.xgafv'?: string;
3550
+ '$.xgafv'?: '1' | '2';
3005
3551
  /** OAuth access token. */
3006
3552
  access_token?: string;
3007
3553
  /** Data format for response. */
3008
- alt?: string;
3554
+ alt?: 'json' | 'media' | 'proto';
3009
3555
  /** JSONP */
3010
3556
  callback?: string;
3011
3557
  /** Selector specifying which fields to include in a partial response. */
@@ -3034,11 +3580,11 @@ declare namespace gapi.client {
3034
3580
  /** Deletes the given `Note` from the system. */
3035
3581
  delete(request?: {
3036
3582
  /** V1 error format. */
3037
- '$.xgafv'?: string;
3583
+ '$.xgafv'?: '1' | '2';
3038
3584
  /** OAuth access token. */
3039
3585
  access_token?: string;
3040
3586
  /** Data format for response. */
3041
- alt?: string;
3587
+ alt?: 'json' | 'media' | 'proto';
3042
3588
  /** JSONP */
3043
3589
  callback?: string;
3044
3590
  /** Selector specifying which fields to include in a partial response. */
@@ -3061,11 +3607,11 @@ declare namespace gapi.client {
3061
3607
  /** Returns the requested `Note`. */
3062
3608
  get(request?: {
3063
3609
  /** V1 error format. */
3064
- '$.xgafv'?: string;
3610
+ '$.xgafv'?: '1' | '2';
3065
3611
  /** OAuth access token. */
3066
3612
  access_token?: string;
3067
3613
  /** Data format for response. */
3068
- alt?: string;
3614
+ alt?: 'json' | 'media' | 'proto';
3069
3615
  /** JSONP */
3070
3616
  callback?: string;
3071
3617
  /** Selector specifying which fields to include in a partial response. */
@@ -3089,11 +3635,11 @@ declare namespace gapi.client {
3089
3635
  getIamPolicy(
3090
3636
  request: {
3091
3637
  /** V1 error format. */
3092
- '$.xgafv'?: string;
3638
+ '$.xgafv'?: '1' | '2';
3093
3639
  /** OAuth access token. */
3094
3640
  access_token?: string;
3095
3641
  /** Data format for response. */
3096
- alt?: string;
3642
+ alt?: 'json' | 'media' | 'proto';
3097
3643
  /** JSONP */
3098
3644
  callback?: string;
3099
3645
  /** Selector specifying which fields to include in a partial response. */
@@ -3118,11 +3664,11 @@ declare namespace gapi.client {
3118
3664
  /** Lists all `Notes` for a given project. */
3119
3665
  list(request?: {
3120
3666
  /** V1 error format. */
3121
- '$.xgafv'?: string;
3667
+ '$.xgafv'?: '1' | '2';
3122
3668
  /** OAuth access token. */
3123
3669
  access_token?: string;
3124
3670
  /** Data format for response. */
3125
- alt?: string;
3671
+ alt?: 'json' | 'media' | 'proto';
3126
3672
  /** JSONP */
3127
3673
  callback?: string;
3128
3674
  /** Selector specifying which fields to include in a partial response. */
@@ -3153,11 +3699,11 @@ declare namespace gapi.client {
3153
3699
  /** Updates an existing `Note`. */
3154
3700
  patch(request: {
3155
3701
  /** V1 error format. */
3156
- '$.xgafv'?: string;
3702
+ '$.xgafv'?: '1' | '2';
3157
3703
  /** OAuth access token. */
3158
3704
  access_token?: string;
3159
3705
  /** Data format for response. */
3160
- alt?: string;
3706
+ alt?: 'json' | 'media' | 'proto';
3161
3707
  /** JSONP */
3162
3708
  callback?: string;
3163
3709
  /** Selector specifying which fields to include in a partial response. */
@@ -3184,11 +3730,11 @@ declare namespace gapi.client {
3184
3730
  patch(
3185
3731
  request: {
3186
3732
  /** V1 error format. */
3187
- '$.xgafv'?: string;
3733
+ '$.xgafv'?: '1' | '2';
3188
3734
  /** OAuth access token. */
3189
3735
  access_token?: string;
3190
3736
  /** Data format for response. */
3191
- alt?: string;
3737
+ alt?: 'json' | 'media' | 'proto';
3192
3738
  /** JSONP */
3193
3739
  callback?: string;
3194
3740
  /** Selector specifying which fields to include in a partial response. */
@@ -3216,11 +3762,11 @@ declare namespace gapi.client {
3216
3762
  setIamPolicy(
3217
3763
  request: {
3218
3764
  /** V1 error format. */
3219
- '$.xgafv'?: string;
3765
+ '$.xgafv'?: '1' | '2';
3220
3766
  /** OAuth access token. */
3221
3767
  access_token?: string;
3222
3768
  /** Data format for response. */
3223
- alt?: string;
3769
+ alt?: 'json' | 'media' | 'proto';
3224
3770
  /** JSONP */
3225
3771
  callback?: string;
3226
3772
  /** Selector specifying which fields to include in a partial response. */
@@ -3246,11 +3792,11 @@ declare namespace gapi.client {
3246
3792
  testIamPermissions(
3247
3793
  request: {
3248
3794
  /** V1 error format. */
3249
- '$.xgafv'?: string;
3795
+ '$.xgafv'?: '1' | '2';
3250
3796
  /** OAuth access token. */
3251
3797
  access_token?: string;
3252
3798
  /** Data format for response. */
3253
- alt?: string;
3799
+ alt?: 'json' | 'media' | 'proto';
3254
3800
  /** JSONP */
3255
3801
  callback?: string;
3256
3802
  /** Selector specifying which fields to include in a partial response. */