azure-devops-extension-api 4.264.0 → 4.266.0

package/AdvancedSecurity.Reporting/Reporting.d.ts

@@ -62,6 +62,107 @@ export declare enum AlertType {
      */
     License = 4
 }
+export declare enum AlertValidityStatus {
+    /**
+     * When there are no validation fingerprints attached to the alert.
+     */
+    None = 0,
+    /**
+     * When the validations for validation fingerprints associated to the alert have not been conclusive.
+     */
+    Unknown = 1,
+    /**
+     * When at least one validation fingerprint associated to the alert is exploitable.
+     */
+    Active = 2,
+    /**
+     * When all validation fingerprints associated to the alert are not exploitable.
+     */
+    Inactive = 3
+}
+export interface CombinedAlertFilterCriteria {
+    /**
+     * If provided, only return alerts whose titles match this pattern.
+     */
+    keywords: string;
+    /**
+     * If provided, return alerts that are active or inactive based on this value. \<br /\>Otherwise, return alerts in any state.
+     */
+    state: DashboardAlertState;
+}
+/**
+ * An alert entity used in the dashboard for combined alerts.
+ */
+export interface DashboardAlert {
+    /**
+     * Identifier for the alert. It is unique within Azure DevOps organization.
+     */
+    alertId: number;
+    /**
+     * Type of the alert. E.g. secret, code, etc.
+     */
+    alertType: AlertType;
+    /**
+     * This value is computed and returned by the service. This value represents the first time the vulnerability was introduced.
+     */
+    introducedDate: Date;
+    /**
+     * This value is computed and returned by the service. It is a value based on the results from all analysis configurations. An example of a physical location is a file location.
+     */
+    locations: DashboardAlertPhysicalLocation[];
+    /**
+     * Name of the project where the alert was detected.
+     */
+    projectName: string;
+    /**
+     * Name of the repository where the alert was detected.
+     */
+    repositoryName: string;
+    /**
+     * Severity of the alert.
+     */
+    severity: Severity;
+    /**
+     * This value is computed and returned by the service. It is a value based on the results from all analysis configurations.
+     */
+    state: State;
+    /**
+     * Title will only be rendered as text and does not support markdown formatting. There is a maximum character limit of 256.
+     */
+    title: string;
+    /**
+     * A truncated/obfuscated version of the secret pertaining to the alert (if applicable).
+     */
+    truncatedSecret: string;
+    /**
+     * Validity status of an alert. Currently, this is only applicable to secret alerts. In case of secret alerts, the validity status is computed by looking at the liveness results for validation fingerprints associated to an alert.
+     */
+    validityStatus: AlertValidityStatus;
+}
+/**
+ * Location in the source control system where the issue was found
+ */
+export interface DashboardAlertPhysicalLocation {
+    alertId: number;
+    /**
+     * Path of the file where the issue was found
+     */
+    filePath: string;
+    /**
+     * Details about the location where the issue was found including a snippet
+     */
+    region: Region;
+}
+export declare enum DashboardAlertState {
+    /**
+     * Alert has been detected in the code and corresponds to 'Active' state.
+     */
+    Open = 0,
+    /**
+     * Alert corresponds to 'Unknown', 'Dismissed', 'Fixed' or 'AutoDismissed' states.
+     */
+    Closed = 1
+}
 export interface EnablementFilterCriteria {
     /**
      * If provided, only return repos whose titles match this pattern.
@@ -192,6 +293,24 @@ export interface ProjectEnablementSummary {
      */
     repos: RepoEnablementSummary[];
 }
+export interface Region {
+    /**
+     * The column where the code snippet ends
+     */
+    columnEnd: number;
+    /**
+     * The column where the code snippet starts
+     */
+    columnStart: number;
+    /**
+     * The line number where the code snippet ends
+     */
+    lineEnd: number;
+    /**
+     * The line number where the code snippet starts
+     */
+    lineStart: number;
+}
 /**
  * Repo Alert Summary.
  */
@@ -241,6 +360,12 @@ export interface RepoEnablementSummary {
      * Repo Name.
      */
     repoName: string;
+    /**
+     * Repo scan type metadata for different scan types.
+     */
+    scanTypeMetadata: {
+        [key: number]: ScanTypeSummaryMetadata;
+    };
     /**
      * Repo enablement summary for different scan types.
      */
@@ -258,6 +383,15 @@ export interface ReportingUXComputedFilters {
      */
     projects: Project[];
 }
+/**
+ * Metadata for a scan type.
+ */
+export interface ScanTypeSummaryMetadata {
+    /**
+     * The date and time of the last scan for the associated alert type/repo combination. Null if no scan has been performed.
+     */
+    lastScanDate: Date;
+}
 export interface ScanTypeSummaryProperties {
     /**
      * True if alerts are enabled for the associated alert type/repo combination, false if disabled.
@@ -288,6 +422,28 @@ export declare enum Severity {
     Error = 6,
     Undefined = 7
 }
+export declare enum State {
+    /**
+     * Alert is in an indeterminate state
+     */
+    Unknown = 0,
+    /**
+     * Alert has been detected in the code
+     */
+    Active = 1,
+    /**
+     * Alert was dismissed by a user
+     */
+    Dismissed = 2,
+    /**
+     * The issue is no longer detected in the code
+     */
+    Fixed = 4,
+    /**
+     * The tool has determined that the issue is no longer a risk
+     */
+    AutoDismissed = 8
+}
 export declare enum TimePeriod {
     Undefined = 0,
     Last24Hours = 5,

package/AdvancedSecurity.Reporting/Reporting.js

@@ -29,6 +29,36 @@ define(["require", "exports"], function (require, exports) {
          */
         AlertType[AlertType["License"] = 4] = "License";
     })(AlertType = exports.AlertType || (exports.AlertType = {}));
+    var AlertValidityStatus;
+    (function (AlertValidityStatus) {
+        /**
+         * When there are no validation fingerprints attached to the alert.
+         */
+        AlertValidityStatus[AlertValidityStatus["None"] = 0] = "None";
+        /**
+         * When the validations for validation fingerprints associated to the alert have not been conclusive.
+         */
+        AlertValidityStatus[AlertValidityStatus["Unknown"] = 1] = "Unknown";
+        /**
+         * When at least one validation fingerprint associated to the alert is exploitable.
+         */
+        AlertValidityStatus[AlertValidityStatus["Active"] = 2] = "Active";
+        /**
+         * When all validation fingerprints associated to the alert are not exploitable.
+         */
+        AlertValidityStatus[AlertValidityStatus["Inactive"] = 3] = "Inactive";
+    })(AlertValidityStatus = exports.AlertValidityStatus || (exports.AlertValidityStatus = {}));
+    var DashboardAlertState;
+    (function (DashboardAlertState) {
+        /**
+         * Alert has been detected in the code and corresponds to 'Active' state.
+         */
+        DashboardAlertState[DashboardAlertState["Open"] = 0] = "Open";
+        /**
+         * Alert corresponds to 'Unknown', 'Dismissed', 'Fixed' or 'AutoDismissed' states.
+         */
+        DashboardAlertState[DashboardAlertState["Closed"] = 1] = "Closed";
+    })(DashboardAlertState = exports.DashboardAlertState || (exports.DashboardAlertState = {}));
     var Severity;
     (function (Severity) {
         Severity[Severity["Low"] = 0] = "Low";
@@ -40,6 +70,29 @@ define(["require", "exports"], function (require, exports) {
         Severity[Severity["Error"] = 6] = "Error";
         Severity[Severity["Undefined"] = 7] = "Undefined";
     })(Severity = exports.Severity || (exports.Severity = {}));
+    var State;
+    (function (State) {
+        /**
+         * Alert is in an indeterminate state
+         */
+        State[State["Unknown"] = 0] = "Unknown";
+        /**
+         * Alert has been detected in the code
+         */
+        State[State["Active"] = 1] = "Active";
+        /**
+         * Alert was dismissed by a user
+         */
+        State[State["Dismissed"] = 2] = "Dismissed";
+        /**
+         * The issue is no longer detected in the code
+         */
+        State[State["Fixed"] = 4] = "Fixed";
+        /**
+         * The tool has determined that the issue is no longer a risk
+         */
+        State[State["AutoDismissed"] = 8] = "AutoDismissed";
+    })(State = exports.State || (exports.State = {}));
     var TimePeriod;
     (function (TimePeriod) {
         TimePeriod[TimePeriod["Undefined"] = 0] = "Undefined";

package/AdvancedSecurity.Reporting/Reporting.min.js

@@ -1 +1 @@
-define(["require","exports"],function(e,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(n.AlertType||(n.AlertType={}));!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(n.Severity||(n.Severity={}));!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(n.TimePeriod||(n.TimePeriod={}))});
+define(["require","exports"],function(e,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(n.AlertType||(n.AlertType={}));!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(n.AlertValidityStatus||(n.AlertValidityStatus={}));!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(n.DashboardAlertState||(n.DashboardAlertState={}));!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(n.Severity||(n.Severity={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(n.State||(n.State={}));!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(n.TimePeriod||(n.TimePeriod={}))});

package/AdvancedSecurity.Reporting/ReportingClient.d.ts

@@ -1,6 +1,7 @@
 import { IVssRestClientOptions } from "../Common/Context";
 import { RestClientBase } from "../Common/RestClientBase";
 import * as Reporting from "../AdvancedSecurity.Reporting/Reporting";
+import * as WebApi from "../WebApi/WebApi";
 export declare class ReportingRestClient extends RestClientBase {
     constructor(options: IVssRestClientOptions);
     /**
@@ -9,11 +10,21 @@ export declare class ReportingRestClient extends RestClientBase {
     /**
      * Get Alert summary by severity for the org
      *
-     * @param criteria -
+     * @param criteria - Options to limit the summaries returned
      */
     getAlertSummaryForOrg(criteria?: Reporting.FilterCriteria): Promise<Reporting.OrgAlertSummary>;
     /**
-     * @param criteria -
+     * Get Combined Alerts for the org
+     *
+     * @param criteria - Options to filter the combined alerts returned
+     * @param top - The maximum number of alerts to return
+     * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header.  Use that token here to get the next page of alerts
+     */
+    getCombinedAlertsForOrg(criteria?: Reporting.CombinedAlertFilterCriteria, top?: number, continuationToken?: string): Promise<WebApi.PagedList<Reporting.DashboardAlert>>;
+    /**
+     * Get Enablement summary for the org
+     *
+     * @param criteria - Options to limit the summaries returned
      */
     getEnablementSummaryForOrg(criteria?: Reporting.EnablementFilterCriteria): Promise<Reporting.OrgEnablementSummary>;
 }

package/AdvancedSecurity.Reporting/ReportingClient.js

@@ -48,7 +48,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-define(["require", "exports", "../Common/RestClientBase"], function (require, exports, RestClientBase_1) {
+define(["require", "exports", "../Common/RestClientBase", "../Common/Util/Serialization"], function (require, exports, RestClientBase_1, Serialization_1) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var ReportingRestClient = /** @class */ (function (_super) {
@@ -74,7 +74,7 @@ define(["require", "exports", "../Common/RestClientBase"], function (require, ex
         /**
          * Get Alert summary by severity for the org
          *
-         * @param criteria -
+         * @param criteria - Options to limit the summaries returned
          */
         ReportingRestClient.prototype.getAlertSummaryForOrg = function (criteria) {
             return __awaiter(this, void 0, void 0, function () {
@@ -95,7 +95,49 @@ define(["require", "exports", "../Common/RestClientBase"], function (require, ex
             });
         };
         /**
-         * @param criteria -
+         * Get Combined Alerts for the org
+         *
+         * @param criteria - Options to filter the combined alerts returned
+         * @param top - The maximum number of alerts to return
+         * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header.  Use that token here to get the next page of alerts
+         */
+        ReportingRestClient.prototype.getCombinedAlertsForOrg = function (criteria, top, continuationToken) {
+            return __awaiter(this, void 0, void 0, function () {
+                var queryValues;
+                var _this = this;
+                return __generator(this, function (_a) {
+                    queryValues = {
+                        criteria: criteria,
+                        top: top,
+                        continuationToken: continuationToken
+                    };
+                    return [2 /*return*/, this.beginRequest({
+                            apiVersion: "7.2-preview.1",
+                            routeTemplate: "_apis/Reporting/summary/{action}",
+                            routeValues: {
+                                action: "AlertsBatch"
+                            },
+                            queryParams: queryValues,
+                            returnRawResponse: true
+                        }).then(function (response) { return __awaiter(_this, void 0, void 0, function () {
+                            var body;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, response.text().then(Serialization_1.deserializeVssJsonObject)];
+                                    case 1:
+                                        body = _a.sent();
+                                        body.continuationToken = response.headers.get("x-ms-continuationtoken");
+                                        return [2 /*return*/, body];
+                                }
+                            });
+                        }); })];
+                });
+            });
+        };
+        /**
+         * Get Enablement summary for the org
+         *
+         * @param criteria - Options to limit the summaries returned
          */
         ReportingRestClient.prototype.getEnablementSummaryForOrg = function (criteria) {
             return __awaiter(this, void 0, void 0, function () {

package/AdvancedSecurity.Reporting/ReportingClient.min.js

@@ -1 +1 @@
-var __extends=this&&this.__extends||function(){var t=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}||function(t,e){for(var r in e)e.hasOwnProperty(r)&&(t[r]=e[r])};return function(e,r){function n(){this.constructor=e}t(e,r),e.prototype=null===r?Object.create(r):(n.prototype=r.prototype,new n)}}(),__awaiter=this&&this.__awaiter||function(t,e,r,n){return new(r||(r=Promise))(function(o,i){function a(t){try{s(n.next(t))}catch(t){i(t)}}function u(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){t.done?o(t.value):new r(function(e){e(t.value)}).then(a,u)}s((n=n.apply(t,e||[])).next())})},__generator=this&&this.__generator||function(t,e){function r(r){return function(a){return function(r){if(n)throw new TypeError("Generator is already executing.");for(;u;)try{if(n=1,o&&(i=2&r[0]?o.return:r[0]?o.throw||((i=o.return)&&i.call(o),0):o.next)&&!(i=i.call(o,r[1])).done)return i;switch(o=0,i&&(r=[2&r[0],i.value]),r[0]){case 0:case 1:i=r;break;case 4:return u.label++,{value:r[1],done:!1};case 5:u.label++,o=r[1],r=[0];continue;case 7:r=u.ops.pop(),u.trys.pop();continue;default:if(i=u.trys,!(i=i.length>0&&i[i.length-1])&&(6===r[0]||2===r[0])){u=0;continue}if(3===r[0]&&(!i||r[1]>i[0]&&r[1]<i[3])){u.label=r[1];break}if(6===r[0]&&u.label<i[1]){u.label=i[1],i=r;break}if(i&&u.label<i[2]){u.label=i[2],u.ops.push(r);break}i[2]&&u.ops.pop(),u.trys.pop();continue}r=e.call(t,u)}catch(t){r=[6,t],o=0}finally{n=i=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,a])}}var n,o,i,a,u={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return a={next:r(0),throw:r(1),return:r(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a};define(["require","exports","../Common/RestClientBase"],function(t,e,r){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var n=function(t){function e(e){return t.call(this,e)||this}return __extends(e,t),e.prototype.getUXComputedFilters=function(){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/filters/{action}",routeValues:{action:"Default"}})]})})},e.prototype.getAlertSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(r){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Alerts"},queryParams:e})]})})},e.prototype.getEnablementSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(r){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Enablement"},queryParams:e})]})})},e}(r.RestClientBase);e.ReportingRestClient=n});
+var __extends=this&&this.__extends||function(){var t=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}||function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])};return function(e,n){function r(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(r.prototype=n.prototype,new r)}}(),__awaiter=this&&this.__awaiter||function(t,e,n,r){return new(n||(n=Promise))(function(i,o){function a(t){try{s(r.next(t))}catch(t){o(t)}}function u(t){try{s(r.throw(t))}catch(t){o(t)}}function s(t){t.done?i(t.value):new n(function(e){e(t.value)}).then(a,u)}s((r=r.apply(t,e||[])).next())})},__generator=this&&this.__generator||function(t,e){function n(n){return function(a){return function(n){if(r)throw new TypeError("Generator is already executing.");for(;u;)try{if(r=1,i&&(o=2&n[0]?i.return:n[0]?i.throw||((o=i.return)&&o.call(i),0):i.next)&&!(o=o.call(i,n[1])).done)return o;switch(i=0,o&&(n=[2&n[0],o.value]),n[0]){case 0:case 1:o=n;break;case 4:return u.label++,{value:n[1],done:!1};case 5:u.label++,i=n[1],n=[0];continue;case 7:n=u.ops.pop(),u.trys.pop();continue;default:if(o=u.trys,!(o=o.length>0&&o[o.length-1])&&(6===n[0]||2===n[0])){u=0;continue}if(3===n[0]&&(!o||n[1]>o[0]&&n[1]<o[3])){u.label=n[1];break}if(6===n[0]&&u.label<o[1]){u.label=o[1],o=n;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(n);break}o[2]&&u.ops.pop(),u.trys.pop();continue}n=e.call(t,u)}catch(t){n=[6,t],i=0}finally{r=o=0}if(5&n[0])throw n[1];return{value:n[0]?n[1]:void 0,done:!0}}([n,a])}}var r,i,o,a,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return a={next:n(0),throw:n(1),return:n(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a};define(["require","exports","../Common/RestClientBase","../Common/Util/Serialization"],function(t,e,n,r){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var i=function(t){function e(e){return t.call(this,e)||this}return __extends(e,t),e.prototype.getUXComputedFilters=function(){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/filters/{action}",routeValues:{action:"Default"}})]})})},e.prototype.getAlertSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(n){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Alerts"},queryParams:e})]})})},e.prototype.getCombinedAlertsForOrg=function(t,e,n){return __awaiter(this,void 0,void 0,function(){var i,o=this;return __generator(this,function(a){return i={criteria:t,top:e,continuationToken:n},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"AlertsBatch"},queryParams:i,returnRawResponse:!0}).then(function(t){return __awaiter(o,void 0,void 0,function(){var e;return __generator(this,function(n){switch(n.label){case 0:return[4,t.text().then(r.deserializeVssJsonObject)];case 1:return e=n.sent(),e.continuationToken=t.headers.get("x-ms-continuationtoken"),[2,e]}})})})]})})},e.prototype.getEnablementSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(n){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Enablement"},queryParams:e})]})})},e}(n.RestClientBase);e.ReportingRestClient=i});

package/Alert/Alert.d.ts

@@ -34,6 +34,10 @@ export interface Alert {
      * Reference to a git object, e.g. branch ref.
      */
     gitRef: string;
+    /**
+     * Value indicates whether the alert comes from a SARIF uploaded by a trusted source.
+     */
+    hasTrustedSourceOrigin: boolean;
     /**
      * This value is computed and returned by the service. This value represents the first time the vulnerability was introduced.
      */
@@ -124,6 +128,19 @@ export interface AlertAnalysisInstance {
      */
     state: State;
 }
+/**
+ * Request model for getting alerts by IDs with optional alert type filter.
+ */
+export interface AlertBatchRequest {
+    /**
+     * List of alert IDs to retrieve.
+     */
+    alertIds: number[];
+    /**
+     * Alert type of the alert IDs.
+     */
+    alertType: AlertType;
+}
 export declare enum AlertListExpandOption {
     /**
      * No Expands.
@@ -147,6 +164,19 @@ export interface AlertMetadata {
      */
     metadata: Metadata[];
 }
+/**
+ * Alert metadata.
+ */
+export interface AlertMetadataBatchRequest {
+    /**
+     * List of alert IDs.
+     */
+    alertIds: number[];
+    /**
+     * The flag to control error policy in a bulk get work items request. Possible options are \{Fail, Omit\}.
+     */
+    errorPolicy: AlertMetadataErrorPolicy;
+}
 /**
  * Used to represent an update in a relationship between an alert and an artifact.
  */
@@ -160,6 +190,19 @@ export interface AlertMetadataChange {
      */
     metadataChange: MetadataChange;
 }
+/**
+ * Enum to control error policy in a bulk get alert metadata items request.
+ */
+export declare enum AlertMetadataErrorPolicy {
+    /**
+     * Fail error policy: if an alert id is not found, the whole request fails.
+     */
+    Fail = 1,
+    /**
+     * Omit error policy: if an alert id is not found, it will be omitted from the results.
+     */
+    Omit = 2
+}
 export interface AlertStateUpdate {
     dismissedComment: string;
     dismissedReason: DismissalType;
@@ -1082,6 +1125,10 @@ export interface ValidationFingerprint {
     assetFingerprint: {
         [key: string]: string;
     };
+    /**
+     * Represents the CrossCompanyCorrelatingId for the secret in the ValidationFingerprintJson.
+     */
+    c3Id: string;
     /**
      * The hash associated to the secret.
      */

package/Alert/Alert.js

@@ -17,6 +17,20 @@ define(["require", "exports"], function (require, exports) {
          */
         AlertListExpandOption[AlertListExpandOption["Minimal"] = 1] = "Minimal";
     })(AlertListExpandOption = exports.AlertListExpandOption || (exports.AlertListExpandOption = {}));
+    /**
+     * Enum to control error policy in a bulk get alert metadata items request.
+     */
+    var AlertMetadataErrorPolicy;
+    (function (AlertMetadataErrorPolicy) {
+        /**
+         * Fail error policy: if an alert id is not found, the whole request fails.
+         */
+        AlertMetadataErrorPolicy[AlertMetadataErrorPolicy["Fail"] = 1] = "Fail";
+        /**
+         * Omit error policy: if an alert id is not found, it will be omitted from the results.
+         */
+        AlertMetadataErrorPolicy[AlertMetadataErrorPolicy["Omit"] = 2] = "Omit";
+    })(AlertMetadataErrorPolicy = exports.AlertMetadataErrorPolicy || (exports.AlertMetadataErrorPolicy = {}));
     var AlertType;
     (function (AlertType) {
         /**

package/Alert/Alert.min.js

@@ -1 +1 @@
-define(["require","exports"],function(e,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal"}(n.AlertListExpandOption||(n.AlertListExpandOption={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(n.AlertType||(n.AlertType={}));!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(n.AlertValidationRequestStatus||(n.AlertValidationRequestStatus={}));!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(n.AlertValidityStatus||(n.AlertValidityStatus={}));!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(n.AnalysisConfigurationType||(n.AnalysisConfigurationType={}));!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(n.ComponentType||(n.ComponentType={}));!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(n.Confidence||(n.Confidence={}));!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(n.DependencyKind||(n.DependencyKind={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(n.DismissalType||(n.DismissalType={}));!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint"}(n.ExpandOption||(n.ExpandOption={}));!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(n.LicenseState||(n.LicenseState={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(n.LicenseType||(n.LicenseType={}));!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(n.MetadataChangeType||(n.MetadataChangeType={}));!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(n.MetadataOperation||(n.MetadataOperation={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(n.ResultType||(n.ResultType={}));!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued"}(n.SarifJobStatus||(n.SarifJobStatus={}));!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(n.Severity||(n.Severity={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(n.State||(n.State={}));!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(n.ValidationResult||(n.ValidationResult={}))});
+define(["require","exports"],function(e,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal"}(n.AlertListExpandOption||(n.AlertListExpandOption={}));!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(n.AlertMetadataErrorPolicy||(n.AlertMetadataErrorPolicy={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(n.AlertType||(n.AlertType={}));!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(n.AlertValidationRequestStatus||(n.AlertValidationRequestStatus={}));!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(n.AlertValidityStatus||(n.AlertValidityStatus={}));!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(n.AnalysisConfigurationType||(n.AnalysisConfigurationType={}));!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(n.ComponentType||(n.ComponentType={}));!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(n.Confidence||(n.Confidence={}));!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(n.DependencyKind||(n.DependencyKind={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(n.DismissalType||(n.DismissalType={}));!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint"}(n.ExpandOption||(n.ExpandOption={}));!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(n.LicenseState||(n.LicenseState={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(n.LicenseType||(n.LicenseType={}));!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(n.MetadataChangeType||(n.MetadataChangeType={}));!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(n.MetadataOperation||(n.MetadataOperation={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(n.ResultType||(n.ResultType={}));!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued"}(n.SarifJobStatus||(n.SarifJobStatus={}));!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(n.Severity||(n.Severity={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(n.State||(n.State={}));!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(n.ValidationResult||(n.ValidationResult={}))});

package/Alert/AlertClient.d.ts

@@ -45,6 +45,14 @@ export declare class AlertRestClient extends RestClientBase {
      * @param repository - The name or ID of the repository
      */
     updateAlert(stateUpdate: Alert.AlertStateUpdate, project: string, alertId: number, repository: string): Promise<Alert.Alert>;
+    /**
+     * Get alerts by alert IDs Currently supports fetching secret alerts only.
+     *
+     * @param request - Request containing alert IDs and optional alert type filter
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     */
+    getAlertsByIds(request: Alert.AlertBatchRequest, project: string, repository: string): Promise<Alert.Alert[]>;
     /**
      * Returns the branches for which analysis results were submitted.
      *
@@ -89,6 +97,22 @@ export declare class AlertRestClient extends RestClientBase {
      * @param repository - The name or ID of the repository.
      */
     updateAlertsMetadata(alertsMetadata: Alert.AlertMetadata[], project: string, repository: string): Promise<Alert.AlertMetadataChange[]>;
+    /**
+     * Get an alert metadata.
+     *
+     * @param project - Project ID or project name
+     * @param alertId - ID of alert to retrieve
+     * @param repository - Name or id  of a repository that alert is part of
+     */
+    getAlertMetadata(project: string, alertId: number, repository: string): Promise<Alert.AlertMetadata>;
+    /**
+     * Get alerts metadata.
+     *
+     * @param alertMetadataBatchRequest -
+     * @param project - Project ID or project name
+     * @param repository - Name or id  of a repository that alert is part of
+     */
+    getAlertMetadataBatch(alertMetadataBatchRequest: Alert.AlertMetadataBatchRequest, project: string, repository: string): Promise<Alert.AlertMetadata[]>;
     /**
      * Get alerts by their IDs at the organization level. Only retruns alerts that the user has permission to view. Only returns alerts of sku plans that are enabled.
      *

package/Alert/AlertClient.js

@@ -188,6 +188,29 @@ define(["require", "exports", "../Common/RestClientBase", "../Common/Util/Serial
                 });
             });
         };
+        /**
+         * Get alerts by alert IDs Currently supports fetching secret alerts only.
+         *
+         * @param request - Request containing alert IDs and optional alert type filter
+         * @param project - Project ID or project name
+         * @param repository - The name or ID of the repository
+         */
+        AlertRestClient.prototype.getAlertsByIds = function (request, project, repository) {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    return [2 /*return*/, this.beginRequest({
+                            apiVersion: "7.2-preview.1",
+                            method: "POST",
+                            routeTemplate: "{project}/_apis/Alert/repositories/{repository}/AlertsBatch",
+                            routeValues: {
+                                project: project,
+                                repository: repository
+                            },
+                            body: request
+                        })];
+                });
+            });
+        };
         /**
          * Returns the branches for which analysis results were submitted.
          *
@@ -328,6 +351,51 @@ define(["require", "exports", "../Common/RestClientBase", "../Common/Util/Serial
                 });
             });
         };
+        /**
+         * Get an alert metadata.
+         *
+         * @param project - Project ID or project name
+         * @param alertId - ID of alert to retrieve
+         * @param repository - Name or id  of a repository that alert is part of
+         */
+        AlertRestClient.prototype.getAlertMetadata = function (project, alertId, repository) {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    return [2 /*return*/, this.beginRequest({
+                            apiVersion: "7.2-preview.1",
+                            routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/metadata",
+                            routeValues: {
+                                project: project,
+                                alertId: alertId,
+                                repository: repository
+                            }
+                        })];
+                });
+            });
+        };
+        /**
+         * Get alerts metadata.
+         *
+         * @param alertMetadataBatchRequest -
+         * @param project - Project ID or project name
+         * @param repository - Name or id  of a repository that alert is part of
+         */
+        AlertRestClient.prototype.getAlertMetadataBatch = function (alertMetadataBatchRequest, project, repository) {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    return [2 /*return*/, this.beginRequest({
+                            apiVersion: "7.2-preview.1",
+                            method: "POST",
+                            routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/MetadataBatch",
+                            routeValues: {
+                                project: project,
+                                repository: repository
+                            },
+                            body: alertMetadataBatchRequest
+                        })];
+                });
+            });
+        };
         /**
          * Get alerts by their IDs at the organization level. Only retruns alerts that the user has permission to view. Only returns alerts of sku plans that are enabled.
          *