azure-devops-extension-api 4.265.0 → 4.266.0

package/AdvancedSecurity.Reporting/Reporting.d.ts

@@ -62,6 +62,107 @@ export declare enum AlertType {
      */
     License = 4
 }
+export declare enum AlertValidityStatus {
+    /**
+     * When there are no validation fingerprints attached to the alert.
+     */
+    None = 0,
+    /**
+     * When the validations for validation fingerprints associated to the alert have not been conclusive.
+     */
+    Unknown = 1,
+    /**
+     * When at least one validation fingerprint associated to the alert is exploitable.
+     */
+    Active = 2,
+    /**
+     * When all validation fingerprints associated to the alert are not exploitable.
+     */
+    Inactive = 3
+}
+export interface CombinedAlertFilterCriteria {
+    /**
+     * If provided, only return alerts whose titles match this pattern.
+     */
+    keywords: string;
+    /**
+     * If provided, return alerts that are active or inactive based on this value. \<br /\>Otherwise, return alerts in any state.
+     */
+    state: DashboardAlertState;
+}
+/**
+ * An alert entity used in the dashboard for combined alerts.
+ */
+export interface DashboardAlert {
+    /**
+     * Identifier for the alert. It is unique within Azure DevOps organization.
+     */
+    alertId: number;
+    /**
+     * Type of the alert. E.g. secret, code, etc.
+     */
+    alertType: AlertType;
+    /**
+     * This value is computed and returned by the service. This value represents the first time the vulnerability was introduced.
+     */
+    introducedDate: Date;
+    /**
+     * This value is computed and returned by the service. It is a value based on the results from all analysis configurations. An example of a physical location is a file location.
+     */
+    locations: DashboardAlertPhysicalLocation[];
+    /**
+     * Name of the project where the alert was detected.
+     */
+    projectName: string;
+    /**
+     * Name of the repository where the alert was detected.
+     */
+    repositoryName: string;
+    /**
+     * Severity of the alert.
+     */
+    severity: Severity;
+    /**
+     * This value is computed and returned by the service. It is a value based on the results from all analysis configurations.
+     */
+    state: State;
+    /**
+     * Title will only be rendered as text and does not support markdown formatting. There is a maximum character limit of 256.
+     */
+    title: string;
+    /**
+     * A truncated/obfuscated version of the secret pertaining to the alert (if applicable).
+     */
+    truncatedSecret: string;
+    /**
+     * Validity status of an alert. Currently, this is only applicable to secret alerts. In case of secret alerts, the validity status is computed by looking at the liveness results for validation fingerprints associated to an alert.
+     */
+    validityStatus: AlertValidityStatus;
+}
+/**
+ * Location in the source control system where the issue was found
+ */
+export interface DashboardAlertPhysicalLocation {
+    alertId: number;
+    /**
+     * Path of the file where the issue was found
+     */
+    filePath: string;
+    /**
+     * Details about the location where the issue was found including a snippet
+     */
+    region: Region;
+}
+export declare enum DashboardAlertState {
+    /**
+     * Alert has been detected in the code and corresponds to 'Active' state.
+     */
+    Open = 0,
+    /**
+     * Alert corresponds to 'Unknown', 'Dismissed', 'Fixed' or 'AutoDismissed' states.
+     */
+    Closed = 1
+}
 export interface EnablementFilterCriteria {
     /**
      * If provided, only return repos whose titles match this pattern.
@@ -192,6 +293,24 @@ export interface ProjectEnablementSummary {
      */
     repos: RepoEnablementSummary[];
 }
+export interface Region {
+    /**
+     * The column where the code snippet ends
+     */
+    columnEnd: number;
+    /**
+     * The column where the code snippet starts
+     */
+    columnStart: number;
+    /**
+     * The line number where the code snippet ends
+     */
+    lineEnd: number;
+    /**
+     * The line number where the code snippet starts
+     */
+    lineStart: number;
+}
 /**
  * Repo Alert Summary.
  */
@@ -241,6 +360,12 @@ export interface RepoEnablementSummary {
      * Repo Name.
      */
     repoName: string;
+    /**
+     * Repo scan type metadata for different scan types.
+     */
+    scanTypeMetadata: {
+        [key: number]: ScanTypeSummaryMetadata;
+    };
     /**
      * Repo enablement summary for different scan types.
      */
@@ -258,6 +383,15 @@ export interface ReportingUXComputedFilters {
      */
     projects: Project[];
 }
+/**
+ * Metadata for a scan type.
+ */
+export interface ScanTypeSummaryMetadata {
+    /**
+     * The date and time of the last scan for the associated alert type/repo combination. Null if no scan has been performed.
+     */
+    lastScanDate: Date;
+}
 export interface ScanTypeSummaryProperties {
     /**
      * True if alerts are enabled for the associated alert type/repo combination, false if disabled.
@@ -288,6 +422,28 @@ export declare enum Severity {
     Error = 6,
     Undefined = 7
 }
+export declare enum State {
+    /**
+     * Alert is in an indeterminate state
+     */
+    Unknown = 0,
+    /**
+     * Alert has been detected in the code
+     */
+    Active = 1,
+    /**
+     * Alert was dismissed by a user
+     */
+    Dismissed = 2,
+    /**
+     * The issue is no longer detected in the code
+     */
+    Fixed = 4,
+    /**
+     * The tool has determined that the issue is no longer a risk
+     */
+    AutoDismissed = 8
+}
 export declare enum TimePeriod {
     Undefined = 0,
     Last24Hours = 5,

package/AdvancedSecurity.Reporting/Reporting.js

@@ -29,6 +29,36 @@ define(["require", "exports"], function (require, exports) {
          */
         AlertType[AlertType["License"] = 4] = "License";
     })(AlertType = exports.AlertType || (exports.AlertType = {}));
+    var AlertValidityStatus;
+    (function (AlertValidityStatus) {
+        /**
+         * When there are no validation fingerprints attached to the alert.
+         */
+        AlertValidityStatus[AlertValidityStatus["None"] = 0] = "None";
+        /**
+         * When the validations for validation fingerprints associated to the alert have not been conclusive.
+         */
+        AlertValidityStatus[AlertValidityStatus["Unknown"] = 1] = "Unknown";
+        /**
+         * When at least one validation fingerprint associated to the alert is exploitable.
+         */
+        AlertValidityStatus[AlertValidityStatus["Active"] = 2] = "Active";
+        /**
+         * When all validation fingerprints associated to the alert are not exploitable.
+         */
+        AlertValidityStatus[AlertValidityStatus["Inactive"] = 3] = "Inactive";
+    })(AlertValidityStatus = exports.AlertValidityStatus || (exports.AlertValidityStatus = {}));
+    var DashboardAlertState;
+    (function (DashboardAlertState) {
+        /**
+         * Alert has been detected in the code and corresponds to 'Active' state.
+         */
+        DashboardAlertState[DashboardAlertState["Open"] = 0] = "Open";
+        /**
+         * Alert corresponds to 'Unknown', 'Dismissed', 'Fixed' or 'AutoDismissed' states.
+         */
+        DashboardAlertState[DashboardAlertState["Closed"] = 1] = "Closed";
+    })(DashboardAlertState = exports.DashboardAlertState || (exports.DashboardAlertState = {}));
     var Severity;
     (function (Severity) {
         Severity[Severity["Low"] = 0] = "Low";
@@ -40,6 +70,29 @@ define(["require", "exports"], function (require, exports) {
         Severity[Severity["Error"] = 6] = "Error";
         Severity[Severity["Undefined"] = 7] = "Undefined";
     })(Severity = exports.Severity || (exports.Severity = {}));
+    var State;
+    (function (State) {
+        /**
+         * Alert is in an indeterminate state
+         */
+        State[State["Unknown"] = 0] = "Unknown";
+        /**
+         * Alert has been detected in the code
+         */
+        State[State["Active"] = 1] = "Active";
+        /**
+         * Alert was dismissed by a user
+         */
+        State[State["Dismissed"] = 2] = "Dismissed";
+        /**
+         * The issue is no longer detected in the code
+         */
+        State[State["Fixed"] = 4] = "Fixed";
+        /**
+         * The tool has determined that the issue is no longer a risk
+         */
+        State[State["AutoDismissed"] = 8] = "AutoDismissed";
+    })(State = exports.State || (exports.State = {}));
     var TimePeriod;
     (function (TimePeriod) {
         TimePeriod[TimePeriod["Undefined"] = 0] = "Undefined";

package/AdvancedSecurity.Reporting/Reporting.min.js

@@ -1 +1 @@
-define(["require","exports"],function(e,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(n.AlertType||(n.AlertType={}));!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(n.Severity||(n.Severity={}));!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(n.TimePeriod||(n.TimePeriod={}))});
+define(["require","exports"],function(e,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(n.AlertType||(n.AlertType={}));!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(n.AlertValidityStatus||(n.AlertValidityStatus={}));!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(n.DashboardAlertState||(n.DashboardAlertState={}));!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(n.Severity||(n.Severity={}));!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(n.State||(n.State={}));!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(n.TimePeriod||(n.TimePeriod={}))});

package/AdvancedSecurity.Reporting/ReportingClient.d.ts

@@ -1,6 +1,7 @@
 import { IVssRestClientOptions } from "../Common/Context";
 import { RestClientBase } from "../Common/RestClientBase";
 import * as Reporting from "../AdvancedSecurity.Reporting/Reporting";
+import * as WebApi from "../WebApi/WebApi";
 export declare class ReportingRestClient extends RestClientBase {
     constructor(options: IVssRestClientOptions);
     /**
@@ -9,11 +10,21 @@ export declare class ReportingRestClient extends RestClientBase {
     /**
      * Get Alert summary by severity for the org
      *
-     * @param criteria -
+     * @param criteria - Options to limit the summaries returned
      */
     getAlertSummaryForOrg(criteria?: Reporting.FilterCriteria): Promise<Reporting.OrgAlertSummary>;
     /**
-     * @param criteria -
+     * Get Combined Alerts for the org
+     *
+     * @param criteria - Options to filter the combined alerts returned
+     * @param top - The maximum number of alerts to return
+     * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header.  Use that token here to get the next page of alerts
+     */
+    getCombinedAlertsForOrg(criteria?: Reporting.CombinedAlertFilterCriteria, top?: number, continuationToken?: string): Promise<WebApi.PagedList<Reporting.DashboardAlert>>;
+    /**
+     * Get Enablement summary for the org
+     *
+     * @param criteria - Options to limit the summaries returned
      */
     getEnablementSummaryForOrg(criteria?: Reporting.EnablementFilterCriteria): Promise<Reporting.OrgEnablementSummary>;
 }

package/AdvancedSecurity.Reporting/ReportingClient.js

@@ -48,7 +48,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-define(["require", "exports", "../Common/RestClientBase"], function (require, exports, RestClientBase_1) {
+define(["require", "exports", "../Common/RestClientBase", "../Common/Util/Serialization"], function (require, exports, RestClientBase_1, Serialization_1) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var ReportingRestClient = /** @class */ (function (_super) {
@@ -74,7 +74,7 @@ define(["require", "exports", "../Common/RestClientBase"], function (require, ex
         /**
          * Get Alert summary by severity for the org
          *
-         * @param criteria -
+         * @param criteria - Options to limit the summaries returned
          */
         ReportingRestClient.prototype.getAlertSummaryForOrg = function (criteria) {
             return __awaiter(this, void 0, void 0, function () {
@@ -95,7 +95,49 @@ define(["require", "exports", "../Common/RestClientBase"], function (require, ex
             });
         };
         /**
-         * @param criteria -
+         * Get Combined Alerts for the org
+         *
+         * @param criteria - Options to filter the combined alerts returned
+         * @param top - The maximum number of alerts to return
+         * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header.  Use that token here to get the next page of alerts
+         */
+        ReportingRestClient.prototype.getCombinedAlertsForOrg = function (criteria, top, continuationToken) {
+            return __awaiter(this, void 0, void 0, function () {
+                var queryValues;
+                var _this = this;
+                return __generator(this, function (_a) {
+                    queryValues = {
+                        criteria: criteria,
+                        top: top,
+                        continuationToken: continuationToken
+                    };
+                    return [2 /*return*/, this.beginRequest({
+                            apiVersion: "7.2-preview.1",
+                            routeTemplate: "_apis/Reporting/summary/{action}",
+                            routeValues: {
+                                action: "AlertsBatch"
+                            },
+                            queryParams: queryValues,
+                            returnRawResponse: true
+                        }).then(function (response) { return __awaiter(_this, void 0, void 0, function () {
+                            var body;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, response.text().then(Serialization_1.deserializeVssJsonObject)];
+                                    case 1:
+                                        body = _a.sent();
+                                        body.continuationToken = response.headers.get("x-ms-continuationtoken");
+                                        return [2 /*return*/, body];
+                                }
+                            });
+                        }); })];
+                });
+            });
+        };
+        /**
+         * Get Enablement summary for the org
+         *
+         * @param criteria - Options to limit the summaries returned
          */
         ReportingRestClient.prototype.getEnablementSummaryForOrg = function (criteria) {
             return __awaiter(this, void 0, void 0, function () {

package/AdvancedSecurity.Reporting/ReportingClient.min.js

@@ -1 +1 @@
-var __extends=this&&this.__extends||function(){var t=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}||function(t,e){for(var r in e)e.hasOwnProperty(r)&&(t[r]=e[r])};return function(e,r){function n(){this.constructor=e}t(e,r),e.prototype=null===r?Object.create(r):(n.prototype=r.prototype,new n)}}(),__awaiter=this&&this.__awaiter||function(t,e,r,n){return new(r||(r=Promise))(function(o,i){function a(t){try{s(n.next(t))}catch(t){i(t)}}function u(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){t.done?o(t.value):new r(function(e){e(t.value)}).then(a,u)}s((n=n.apply(t,e||[])).next())})},__generator=this&&this.__generator||function(t,e){function r(r){return function(a){return function(r){if(n)throw new TypeError("Generator is already executing.");for(;u;)try{if(n=1,o&&(i=2&r[0]?o.return:r[0]?o.throw||((i=o.return)&&i.call(o),0):o.next)&&!(i=i.call(o,r[1])).done)return i;switch(o=0,i&&(r=[2&r[0],i.value]),r[0]){case 0:case 1:i=r;break;case 4:return u.label++,{value:r[1],done:!1};case 5:u.label++,o=r[1],r=[0];continue;case 7:r=u.ops.pop(),u.trys.pop();continue;default:if(i=u.trys,!(i=i.length>0&&i[i.length-1])&&(6===r[0]||2===r[0])){u=0;continue}if(3===r[0]&&(!i||r[1]>i[0]&&r[1]<i[3])){u.label=r[1];break}if(6===r[0]&&u.label<i[1]){u.label=i[1],i=r;break}if(i&&u.label<i[2]){u.label=i[2],u.ops.push(r);break}i[2]&&u.ops.pop(),u.trys.pop();continue}r=e.call(t,u)}catch(t){r=[6,t],o=0}finally{n=i=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,a])}}var n,o,i,a,u={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return a={next:r(0),throw:r(1),return:r(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a};define(["require","exports","../Common/RestClientBase"],function(t,e,r){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var n=function(t){function e(e){return t.call(this,e)||this}return __extends(e,t),e.prototype.getUXComputedFilters=function(){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/filters/{action}",routeValues:{action:"Default"}})]})})},e.prototype.getAlertSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(r){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Alerts"},queryParams:e})]})})},e.prototype.getEnablementSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(r){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Enablement"},queryParams:e})]})})},e}(r.RestClientBase);e.ReportingRestClient=n});
+var __extends=this&&this.__extends||function(){var t=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}||function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])};return function(e,n){function r(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(r.prototype=n.prototype,new r)}}(),__awaiter=this&&this.__awaiter||function(t,e,n,r){return new(n||(n=Promise))(function(i,o){function a(t){try{s(r.next(t))}catch(t){o(t)}}function u(t){try{s(r.throw(t))}catch(t){o(t)}}function s(t){t.done?i(t.value):new n(function(e){e(t.value)}).then(a,u)}s((r=r.apply(t,e||[])).next())})},__generator=this&&this.__generator||function(t,e){function n(n){return function(a){return function(n){if(r)throw new TypeError("Generator is already executing.");for(;u;)try{if(r=1,i&&(o=2&n[0]?i.return:n[0]?i.throw||((o=i.return)&&o.call(i),0):i.next)&&!(o=o.call(i,n[1])).done)return o;switch(i=0,o&&(n=[2&n[0],o.value]),n[0]){case 0:case 1:o=n;break;case 4:return u.label++,{value:n[1],done:!1};case 5:u.label++,i=n[1],n=[0];continue;case 7:n=u.ops.pop(),u.trys.pop();continue;default:if(o=u.trys,!(o=o.length>0&&o[o.length-1])&&(6===n[0]||2===n[0])){u=0;continue}if(3===n[0]&&(!o||n[1]>o[0]&&n[1]<o[3])){u.label=n[1];break}if(6===n[0]&&u.label<o[1]){u.label=o[1],o=n;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(n);break}o[2]&&u.ops.pop(),u.trys.pop();continue}n=e.call(t,u)}catch(t){n=[6,t],i=0}finally{r=o=0}if(5&n[0])throw n[1];return{value:n[0]?n[1]:void 0,done:!0}}([n,a])}}var r,i,o,a,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return a={next:n(0),throw:n(1),return:n(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a};define(["require","exports","../Common/RestClientBase","../Common/Util/Serialization"],function(t,e,n,r){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var i=function(t){function e(e){return t.call(this,e)||this}return __extends(e,t),e.prototype.getUXComputedFilters=function(){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/filters/{action}",routeValues:{action:"Default"}})]})})},e.prototype.getAlertSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(n){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Alerts"},queryParams:e})]})})},e.prototype.getCombinedAlertsForOrg=function(t,e,n){return __awaiter(this,void 0,void 0,function(){var i,o=this;return __generator(this,function(a){return i={criteria:t,top:e,continuationToken:n},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"AlertsBatch"},queryParams:i,returnRawResponse:!0}).then(function(t){return __awaiter(o,void 0,void 0,function(){var e;return __generator(this,function(n){switch(n.label){case 0:return[4,t.text().then(r.deserializeVssJsonObject)];case 1:return e=n.sent(),e.continuationToken=t.headers.get("x-ms-continuationtoken"),[2,e]}})})})]})})},e.prototype.getEnablementSummaryForOrg=function(t){return __awaiter(this,void 0,void 0,function(){var e;return __generator(this,function(n){return e={criteria:t},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Reporting/summary/{action}",routeValues:{action:"Enablement"},queryParams:e})]})})},e}(n.RestClientBase);e.ReportingRestClient=i});

package/Alert/Alert.d.ts

@@ -128,6 +128,19 @@ export interface AlertAnalysisInstance {
      */
     state: State;
 }
+/**
+ * Request model for getting alerts by IDs with optional alert type filter.
+ */
+export interface AlertBatchRequest {
+    /**
+     * List of alert IDs to retrieve.
+     */
+    alertIds: number[];
+    /**
+     * Alert type of the alert IDs.
+     */
+    alertType: AlertType;
+}
 export declare enum AlertListExpandOption {
     /**
      * No Expands.
@@ -1112,6 +1125,10 @@ export interface ValidationFingerprint {
     assetFingerprint: {
         [key: string]: string;
     };
+    /**
+     * Represents the CrossCompanyCorrelatingId for the secret in the ValidationFingerprintJson.
+     */
+    c3Id: string;
     /**
      * The hash associated to the secret.
      */

package/Alert/AlertClient.d.ts

@@ -45,6 +45,14 @@ export declare class AlertRestClient extends RestClientBase {
      * @param repository - The name or ID of the repository
      */
     updateAlert(stateUpdate: Alert.AlertStateUpdate, project: string, alertId: number, repository: string): Promise<Alert.Alert>;
+    /**
+     * Get alerts by alert IDs Currently supports fetching secret alerts only.
+     *
+     * @param request - Request containing alert IDs and optional alert type filter
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     */
+    getAlertsByIds(request: Alert.AlertBatchRequest, project: string, repository: string): Promise<Alert.Alert[]>;
     /**
      * Returns the branches for which analysis results were submitted.
      *

package/Alert/AlertClient.js

@@ -188,6 +188,29 @@ define(["require", "exports", "../Common/RestClientBase", "../Common/Util/Serial
                 });
             });
         };
+        /**
+         * Get alerts by alert IDs Currently supports fetching secret alerts only.
+         *
+         * @param request - Request containing alert IDs and optional alert type filter
+         * @param project - Project ID or project name
+         * @param repository - The name or ID of the repository
+         */
+        AlertRestClient.prototype.getAlertsByIds = function (request, project, repository) {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    return [2 /*return*/, this.beginRequest({
+                            apiVersion: "7.2-preview.1",
+                            method: "POST",
+                            routeTemplate: "{project}/_apis/Alert/repositories/{repository}/AlertsBatch",
+                            routeValues: {
+                                project: project,
+                                repository: repository
+                            },
+                            body: request
+                        })];
+                });
+            });
+        };
         /**
          * Returns the branches for which analysis results were submitted.
          *

package/Alert/AlertClient.min.js

@@ -1 +1 @@
-var __extends=this&&this.__extends||function(){var e=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var r in t)t.hasOwnProperty(r)&&(e[r]=t[r])};return function(t,r){function o(){this.constructor=t}e(t,r),t.prototype=null===r?Object.create(r):(o.prototype=r.prototype,new o)}}(),__awaiter=this&&this.__awaiter||function(e,t,r,o){return new(r||(r=Promise))(function(i,n){function a(e){try{u(o.next(e))}catch(e){n(e)}}function s(e){try{u(o.throw(e))}catch(e){n(e)}}function u(e){e.done?i(e.value):new r(function(t){t(e.value)}).then(a,s)}u((o=o.apply(e,t||[])).next())})},__generator=this&&this.__generator||function(e,t){function r(r){return function(a){return function(r){if(o)throw new TypeError("Generator is already executing.");for(;s;)try{if(o=1,i&&(n=2&r[0]?i.return:r[0]?i.throw||((n=i.return)&&n.call(i),0):i.next)&&!(n=n.call(i,r[1])).done)return n;switch(i=0,n&&(r=[2&r[0],n.value]),r[0]){case 0:case 1:n=r;break;case 4:return s.label++,{value:r[1],done:!1};case 5:s.label++,i=r[1],r=[0];continue;case 7:r=s.ops.pop(),s.trys.pop();continue;default:if(n=s.trys,!(n=n.length>0&&n[n.length-1])&&(6===r[0]||2===r[0])){s=0;continue}if(3===r[0]&&(!n||r[1]>n[0]&&r[1]<n[3])){s.label=r[1];break}if(6===r[0]&&s.label<n[1]){s.label=n[1],n=r;break}if(n&&s.label<n[2]){s.label=n[2],s.ops.push(r);break}n[2]&&s.ops.pop(),s.trys.pop();continue}r=t.call(e,s)}catch(e){r=[6,e],i=0}finally{o=n=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,a])}}var o,i,n,a,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return a={next:r(0),throw:r(1),return:r(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a};define(["require","exports","../Common/RestClientBase","../Common/Util/Serialization"],function(e,t,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var i=function(e){function t(t){return e.call(this,t)||this}return __extends(t,e),t.prototype.getAlert=function(e,t,r,o,i){return __awaiter(this,void 0,void 0,function(){var n;return __generator(this,function(a){return n={ref:o,expand:i},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:n})]})})},t.prototype.getAlerts=function(e,t,r,i,n,a,s){return __awaiter(this,void 0,void 0,function(){var u,p=this;return __generator(this,function(c){return u={top:r,orderBy:i,criteria:n,expand:a,continuationToken:s},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,repository:t},queryParams:u,returnRawResponse:!0}).then(function(e){return __awaiter(p,void 0,void 0,function(){var t;return __generator(this,function(r){switch(r.label){case 0:return[4,e.text().then(o.deserializeVssJsonObject)];case 1:return t=r.sent(),t.continuationToken=e.headers.get("x-ms-continuationtoken"),[2,t]}})})})]})})},t.prototype.getAlertSarif=function(e,t,r,o,i){return __awaiter(this,void 0,void 0,function(){var n;return __generator(this,function(a){return n={ref:o,expand:i},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:n})]})})},t.prototype.updateAlert=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(i){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:t,alertId:r,repository:o},body:e})]})})},t.prototype.getBranches=function(e,t,r,o,i,n,a){return __awaiter(this,void 0,void 0,function(){var s;return __generator(this,function(u){return s={alertType:r,continuationToken:o,branchNameContains:i,top:n,includePullRequestBranches:a},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Branches"},queryParams:s})]})})},t.prototype.getUxFilters=function(e,t,r){return __awaiter(this,void 0,void 0,function(){var o;return __generator(this,function(i){return o={alertType:r},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Default"},queryParams:o})]})})},t.prototype.getAlertInstances=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){var i;return __generator(this,function(n){return i={ref:o},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Instances",routeValues:{project:e,alertId:t,repository:r},queryParams:i})]})})},t.prototype.createLegalReview=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){var i;return __generator(this,function(n){return i={alertId:r,ref:o},[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:e,repository:t},queryParams:i})]})})},t.prototype.updateAlertsMetadata=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:t,repository:r},body:e})]})})},t.prototype.getAlertMetadata=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/metadata",routeValues:{project:e,alertId:t,repository:r}})]})})},t.prototype.getAlertMetadataBatch=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/MetadataBatch",routeValues:{project:t,repository:r},body:e})]})})},t.prototype.getOrgLevelAlertsByIds=function(e){return __awaiter(this,void 0,void 0,function(){var t;return __generator(this,function(r){return t={alertIds:e&&e.join(",")},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Alert/alerts",queryParams:t})]})})},t.prototype.uploadSarif=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(i){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/sarifs",routeValues:{project:t,repository:r},customHeaders:{"Content-Type":"application/octet-stream","X-AdvSec-NotificationSarif":o},body:e})]})})},t.prototype.getSarif=function(e){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.2",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",routeValues:{sarifId:e}})]})})},t.prototype.uploadOrgSarif=function(e){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.2",method:"POST",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",customHeaders:{"Content-Type":"application/octet-stream"},body:e})]})})},t.prototype.getValidityData=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})]})})},t.prototype.initiateValidation=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})]})})},t}(r.RestClientBase);t.AlertRestClient=i});
+var __extends=this&&this.__extends||function(){var e=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var r in t)t.hasOwnProperty(r)&&(e[r]=t[r])};return function(t,r){function o(){this.constructor=t}e(t,r),t.prototype=null===r?Object.create(r):(o.prototype=r.prototype,new o)}}(),__awaiter=this&&this.__awaiter||function(e,t,r,o){return new(r||(r=Promise))(function(i,n){function a(e){try{u(o.next(e))}catch(e){n(e)}}function s(e){try{u(o.throw(e))}catch(e){n(e)}}function u(e){e.done?i(e.value):new r(function(t){t(e.value)}).then(a,s)}u((o=o.apply(e,t||[])).next())})},__generator=this&&this.__generator||function(e,t){function r(r){return function(a){return function(r){if(o)throw new TypeError("Generator is already executing.");for(;s;)try{if(o=1,i&&(n=2&r[0]?i.return:r[0]?i.throw||((n=i.return)&&n.call(i),0):i.next)&&!(n=n.call(i,r[1])).done)return n;switch(i=0,n&&(r=[2&r[0],n.value]),r[0]){case 0:case 1:n=r;break;case 4:return s.label++,{value:r[1],done:!1};case 5:s.label++,i=r[1],r=[0];continue;case 7:r=s.ops.pop(),s.trys.pop();continue;default:if(n=s.trys,!(n=n.length>0&&n[n.length-1])&&(6===r[0]||2===r[0])){s=0;continue}if(3===r[0]&&(!n||r[1]>n[0]&&r[1]<n[3])){s.label=r[1];break}if(6===r[0]&&s.label<n[1]){s.label=n[1],n=r;break}if(n&&s.label<n[2]){s.label=n[2],s.ops.push(r);break}n[2]&&s.ops.pop(),s.trys.pop();continue}r=t.call(e,s)}catch(e){r=[6,e],i=0}finally{o=n=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,a])}}var o,i,n,a,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return a={next:r(0),throw:r(1),return:r(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a};define(["require","exports","../Common/RestClientBase","../Common/Util/Serialization"],function(e,t,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var i=function(e){function t(t){return e.call(this,t)||this}return __extends(t,e),t.prototype.getAlert=function(e,t,r,o,i){return __awaiter(this,void 0,void 0,function(){var n;return __generator(this,function(a){return n={ref:o,expand:i},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:n})]})})},t.prototype.getAlerts=function(e,t,r,i,n,a,s){return __awaiter(this,void 0,void 0,function(){var u,p=this;return __generator(this,function(c){return u={top:r,orderBy:i,criteria:n,expand:a,continuationToken:s},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,repository:t},queryParams:u,returnRawResponse:!0}).then(function(e){return __awaiter(p,void 0,void 0,function(){var t;return __generator(this,function(r){switch(r.label){case 0:return[4,e.text().then(o.deserializeVssJsonObject)];case 1:return t=r.sent(),t.continuationToken=e.headers.get("x-ms-continuationtoken"),[2,t]}})})})]})})},t.prototype.getAlertSarif=function(e,t,r,o,i){return __awaiter(this,void 0,void 0,function(){var n;return __generator(this,function(a){return n={ref:o,expand:i},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:n})]})})},t.prototype.updateAlert=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(i){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:t,alertId:r,repository:o},body:e})]})})},t.prototype.getAlertsByIds=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/AlertsBatch",routeValues:{project:t,repository:r},body:e})]})})},t.prototype.getBranches=function(e,t,r,o,i,n,a){return __awaiter(this,void 0,void 0,function(){var s;return __generator(this,function(u){return s={alertType:r,continuationToken:o,branchNameContains:i,top:n,includePullRequestBranches:a},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Branches"},queryParams:s})]})})},t.prototype.getUxFilters=function(e,t,r){return __awaiter(this,void 0,void 0,function(){var o;return __generator(this,function(i){return o={alertType:r},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Default"},queryParams:o})]})})},t.prototype.getAlertInstances=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){var i;return __generator(this,function(n){return i={ref:o},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Instances",routeValues:{project:e,alertId:t,repository:r},queryParams:i})]})})},t.prototype.createLegalReview=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){var i;return __generator(this,function(n){return i={alertId:r,ref:o},[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:e,repository:t},queryParams:i})]})})},t.prototype.updateAlertsMetadata=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:t,repository:r},body:e})]})})},t.prototype.getAlertMetadata=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/metadata",routeValues:{project:e,alertId:t,repository:r}})]})})},t.prototype.getAlertMetadataBatch=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/MetadataBatch",routeValues:{project:t,repository:r},body:e})]})})},t.prototype.getOrgLevelAlertsByIds=function(e){return __awaiter(this,void 0,void 0,function(){var t;return __generator(this,function(r){return t={alertIds:e&&e.join(",")},[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Alert/alerts",queryParams:t})]})})},t.prototype.uploadSarif=function(e,t,r,o){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(i){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/sarifs",routeValues:{project:t,repository:r},customHeaders:{"Content-Type":"application/octet-stream","X-AdvSec-NotificationSarif":o},body:e})]})})},t.prototype.getSarif=function(e){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.2",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",routeValues:{sarifId:e}})]})})},t.prototype.uploadOrgSarif=function(e){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(t){return[2,this.beginRequest({apiVersion:"7.2-preview.2",method:"POST",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",customHeaders:{"Content-Type":"application/octet-stream"},body:e})]})})},t.prototype.getValidityData=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})]})})},t.prototype.initiateValidation=function(e,t,r){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(o){return[2,this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})]})})},t}(r.RestClientBase);t.AlertRestClient=i});

package/Management/Management.d.ts

@@ -5,7 +5,7 @@ export interface AdvSecEnablementFeatures {
      */
     autoEnableNewProjectOrRepos: boolean;
     /**
-     * CodeQL enablement status set to False when disabled and True when enabled; Null is never explicitly set.
+     * CodeQL default setup enablement status set to False when not using default setup and True when using default setup; Null is never explicitly set.
      */
     codeQLEnabled: boolean;
     /**
@@ -195,7 +195,7 @@ export interface BulkEnablementSettingsBase {
 }
 export interface CodeSecurityFeatures {
     /**
-     * CodeQL enablement status set to False when disabled and True when enabled; Null is never explicitly set.
+     * CodeQL default setup enablement status set to False when not using default setup and True when using default setup; Null is never explicitly set.
      */
     codeQLEnabled: boolean;
     /**