azure-devops-extension-api 5.275.0 → 5.279.1

package/AdvancedSecurity.Reporting/Reporting.d.ts

@@ -128,7 +128,11 @@ export declare enum AlertType {
     /**
      * The code contains a weakness determined by AI-powered analysis.
      */
-    AICode = 5
+    AICode = 5,
+    /**
+     * The code uses a dependency flagged as malware by the GitHub Advisory Database.
+     */
+    Malware = 6
 }
 export declare enum AlertValidityStatus {
     /**
@@ -306,6 +310,15 @@ export declare enum ComponentType {
      */
     Vcpkg = 16
 }
+/**
+ * Repository count for a Security Overview Coverage metric.
+ */
+export interface CoverageSummaryMetric {
+    /**
+     * Number of repositories matching the metric.
+     */
+    repositoryCount: number;
+}
 /**
  * An alert entity used in the dashboard for combined alerts.
  */
@@ -343,7 +356,7 @@ export interface DashboardAlert {
      */
     state: State;
     /**
-     * Title will only be rendered as text and does not support markdown formatting. There is a maximum character limit of 256.
+     * Title will only be rendered as text and does not support markdown formatting. There is a maximum character limit of 512.
      */
     title: string;
     /**
@@ -487,6 +500,39 @@ export interface OrgAlertSummary {
      * A list of Project summary data.
      */
     projects: ProjectAlertSummary[];
+    /**
+     * Summary metrics for the authorized repository scope.
+     */
+    totals: OrgAlertSummaryTotals;
+}
+/**
+ * Aggregate Risk values for an organization Security Overview response.
+ */
+export interface OrgAlertSummaryTotals {
+    /**
+     * Alerts dismissed during the selected period.
+     */
+    dismissedAlerts: number;
+    /**
+     * Alerts fixed during the selected period.
+     */
+    fixedAlerts: number;
+    /**
+     * Distinct authorized repositories in the filtered response.
+     */
+    matchingRepositoryCount: number;
+    /**
+     * Alerts introduced during the selected period that remain open.
+     */
+    newAlerts: number;
+    /**
+     * Current open alerts.
+     */
+    openAlerts: number;
+    /**
+     * Distinct authorized Advanced Security-enabled repositories.
+     */
+    totalRepositoryCount: number;
 }
 /**
  * Org Enablement Summary.
@@ -500,6 +546,39 @@ export interface OrgEnablementSummary {
      * A list of Project Enablement data.
      */
     projects: ProjectEnablementSummary[];
+    /**
+     * Summary metrics for the authorized repository scope.
+     */
+    totals: OrgEnablementSummaryTotals;
+}
+/**
+ * Aggregate Coverage values for an organization Security Overview response.
+ */
+export interface OrgEnablementSummaryTotals {
+    /**
+     * Repositories with code alerts enabled.
+     */
+    code: CoverageSummaryMetric;
+    /**
+     * Repositories with dependency alerts enabled.
+     */
+    dependencies: CoverageSummaryMetric;
+    /**
+     * Distinct authorized repositories in the filtered response.
+     */
+    matchingRepositoryCount: number;
+    /**
+     * Repositories with all Coverage settings disabled.
+     */
+    noTooling: CoverageSummaryMetric;
+    /**
+     * Repositories with secret alerts enabled.
+     */
+    secrets: CoverageSummaryMetric;
+    /**
+     * Distinct authorized Advanced Security-enabled repositories.
+     */
+    totalRepositoryCount: number;
 }
 export interface Project {
     id: string;

package/AdvancedSecurity.Reporting/Reporting.js

@@ -32,6 +32,10 @@ var AlertType;
      * The code contains a weakness determined by AI-powered analysis.
      */
     AlertType[AlertType["AICode"] = 5] = "AICode";
+    /**
+     * The code uses a dependency flagged as malware by the GitHub Advisory Database.
+     */
+    AlertType[AlertType["Malware"] = 6] = "Malware";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var AlertValidityStatus;
 (function (AlertValidityStatus) {

package/AdvancedSecurity.Reporting/Reporting.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TimePeriod=exports.State=exports.Severity=exports.DismissalType=exports.DashboardAlertState=exports.ComponentType=exports.AlertValidityStatus=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var DashboardAlertState;!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(DashboardAlertState||(exports.DashboardAlertState=DashboardAlertState={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var TimePeriod;!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(TimePeriod||(exports.TimePeriod=TimePeriod={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TimePeriod=exports.State=exports.Severity=exports.DismissalType=exports.DashboardAlertState=exports.ComponentType=exports.AlertValidityStatus=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode",e[e.Malware=6]="Malware"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var DashboardAlertState;!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(DashboardAlertState||(exports.DashboardAlertState=DashboardAlertState={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var TimePeriod;!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(TimePeriod||(exports.TimePeriod=TimePeriod={}));

package/Alert/Alert.d.ts

@@ -1,11 +1,28 @@
 import * as WebApi from "../WebApi/WebApi";
+/**
+ * Reference to the AI metadata blob associated with an AI code alert. Allows a consumer to download the full metadata blob. No querying over the blob contents is supported.
+ */
+export interface AIMetadataBlobReference {
+    /**
+     * URL to download the full AI metadata blob.
+     */
+    downloadUrl: string;
+}
 export interface Alert {
+    /**
+     * Additional information message to display for this alert. For ASAN tools, contains crash details formatted in code blocks. For AI code scanning tools, contains markdown content from result.message.markdown.
+     */
+    additionalInformationMessage: string;
     /**
      * Additional properties of this alert.
      */
     additionalProperties: {
         [key: string]: any;
     };
+    /**
+     * Reference to the AI metadata blob associated with the alert (AI code alerts only). Only returned on demand when the Expand parameter is set to AIMetadataBlobReference.
+     */
+    aiMetadataBlobReference: AIMetadataBlobReference;
     /**
      * Identifier for the alert. It is unique within Azure DevOps organization.
      */
@@ -43,9 +60,13 @@ export interface Alert {
      */
     introducedDate: Date;
     /**
-     * Value indicates whether the alert can be auto-fixed by Copilot Autofix. True when the alert is a code scanning alert detected by CodeQL with a supported rule. Null when the value has not been computed for this code path.
+     * Value indicates whether Copilot Autofix can currently be run on the alert. True when Copilot Autofix is available for the organization and enabled on the repository, the alert is a code scanning alert detected by CodeQL with a supported rule, and the alert's ref is eligible. Null when the value has not been computed for this code path.
      */
     isAutoFixable: boolean;
+    /**
+     * Value indicates whether the alert was generated for a development dependency. True indicates development dependency, false indicates runtime dependency, and null indicates unknown or not applicable.
+     */
+    isDevDependency: boolean;
     /**
      * This value is computed and returned by the service. This value represents the last time the service has seen this issue reported in an analysis instance.
      */
@@ -83,7 +104,7 @@ export interface Alert {
      */
     state: State;
     /**
-     * Title will only be rendered as text and does not support markdown formatting. There is a maximum character limit of 256.
+     * Title will only be rendered as text and does not support markdown formatting. There is a maximum character limit of 512.
      */
     title: string;
     /**
@@ -158,6 +179,106 @@ export interface AlertBatchStateUpdateRequest {
      */
     alertType: AlertType;
 }
+/**
+ * Describes the last accepted snapshot of an external job.
+ */
+export interface AlertJob {
+    /**
+     * Gets or sets the alerts associated with the job.
+     */
+    alertIds: number[];
+    /**
+     * Gets or sets the artifacts produced by the job.
+     */
+    artifacts: AlertJobArtifact[];
+    /**
+     * Gets or sets the requested branch reference.
+     */
+    branchRef: string;
+    /**
+     * Gets or sets the identity that created the job.
+     */
+    createdBy: string;
+    /**
+     * Gets or sets the date the job was created.
+     */
+    createdDate: Date;
+    /**
+     * Gets or sets the provider-assigned job identifier.
+     */
+    jobId: string;
+    /**
+     * Gets or sets the provider-defined job state.
+     */
+    jobState: string;
+    /**
+     * Gets or sets the job type.
+     */
+    jobType: AlertJobType;
+    /**
+     * Gets or sets the identity that last updated the job.
+     */
+    lastUpdatedBy: string;
+    /**
+     * Gets or sets the date the job was last updated.
+     */
+    lastUpdatedDate: Date;
+    /**
+     * Gets or sets provider-specific properties.
+     */
+    properties: any;
+    /**
+     * Gets or sets the external job provider.
+     */
+    provider: string;
+    /**
+     * Gets or sets the storage revision used for optimistic concurrency.
+     */
+    revision: number;
+}
+/**
+ * Describes a canonical artifact produced by an external job.
+ */
+export interface AlertJobArtifact {
+    /**
+     * Gets or sets the artifact type.
+     */
+    type: AlertJobArtifactType;
+    /**
+     * Gets or sets the externally addressable artifact URL.
+     */
+    url: string;
+}
+/**
+ * Identifies the supported artifact types produced by an alert job.
+ */
+export declare enum AlertJobArtifactType {
+    /**
+     * An artifact type not recognized by this client version.
+     */
+    Unknown = 0,
+    /**
+     * An Azure Repos pull request.
+     */
+    PullRequest = 1
+}
+/**
+ * Identifies the supported alert job workflows.
+ */
+export declare enum AlertJobType {
+    /**
+     * An alert job type not recognized by this client version.
+     */
+    Unknown = 0,
+    /**
+     * A WIM workflow that creates a pull request.
+     */
+    WIMAutoPR = 1,
+    /**
+     * An AI alert consolidation workflow.
+     */
+    AIAlertConsolidation = 2
+}
 export declare enum AlertListExpandOption {
     /**
      * No Expands.
@@ -170,7 +291,11 @@ export declare enum AlertListExpandOption {
     /**
      * Return only the count of active alerts grouped by alert type.
      */
-    Count = 2
+    Count = 2,
+    /**
+     * Return the AI metadata blob reference in AI code alerts.
+     */
+    AIMetadataBlobReference = 3
 }
 /**
  * Alert metadata.
@@ -224,6 +349,17 @@ export declare enum AlertMetadataErrorPolicy {
      */
     Omit = 2
 }
+/**
+ * Criteria for the POST alerts query endpoint. Only metadata type filtering is supported here; use GET alerts with SearchCriteria for other filters.
+ */
+export interface AlertMetadataQueryCriteria {
+    /**
+     * Filters alerts by linkage to specific metadata types (e.g. "pullRequest", "WorkItem"). A value of "true" requires the alert to be linked to that metadata type, "false" requires it not be linked. All entries must be satisfied for an alert to be returned.
+     */
+    metadataTypeFilters: {
+        [key: string]: boolean;
+    };
+}
 export interface AlertStateUpdate {
     dismissedComment: string;
     dismissedReason: DismissalType;
@@ -246,7 +382,7 @@ export interface AlertStateUpdateForAlert {
      */
     dismissedReason: DismissalType;
     /**
-     * The state to transition the alert to (Active, Dismissed, or Draft). Draft means the alert is indeterminate and should remain in its current state.
+     * The state to transition the alert to. Only Active and Dismissed are supported.
      */
     state: State;
 }
@@ -274,7 +410,11 @@ export declare enum AlertType {
     /**
      * The code contains a weakness determined by AI-powered analysis.
      */
-    AICode = 5
+    AICode = 5,
+    /**
+     * The code uses a dependency flagged as malware by the GitHub Advisory Database.
+     */
+    Malware = 6
 }
 export declare enum AlertValidationRequestStatus {
     /**
@@ -464,17 +604,84 @@ export declare enum AutofixCallbackStatus {
     /**
      * The pipeline or post-processing failed.
      */
-    Failed = 1
+    Failed = 1,
+    /**
+     * The pipeline completed successfully but the autofix binary produced no changes, so no pull request was created.
+     */
+    NoChangesProduced = 2,
+    /**
+     * The pipeline completed successfully and determined that the alert is a false positive, so no pull request was created.
+     */
+    FalsePositive = 3,
+    /**
+     * The target file referenced by the analysis could not be found.
+     */
+    TargetFileNotFound = 4,
+    /**
+     * The push was rejected by the commit author email validation policy.
+     */
+    CommitAuthorEmailValidationFailed = 5
 }
 /**
  * Represents an autofix request resource.
  */
 export interface AutofixRequest {
     createdDate: Date;
+    failedReason: AutofixRequestFailedReason;
     pipelinePlanId: string;
+    pullRequestId: number;
     requestId: number;
     status: AutofixRequestStatus;
 }
+/**
+ * Indicates the reason an autofix request failed. Maps to TINYINT (nullable) in the database.
+ */
+export declare enum AutofixRequestFailedReason {
+    /**
+     * Default sentinel value; not a valid failure reason.
+     */
+    None = 0,
+    /**
+     * The autofix pipeline run completed with a failure status.
+     */
+    PipelineFailed = 1,
+    /**
+     * The autofix pipeline did not complete within the allowed time window.
+     */
+    PipelineTimedOut = 2,
+    /**
+     * The expected callback from the pipeline was never received.
+     */
+    CallbackNotReceived = 3,
+    /**
+     * The processor job encountered an error.
+     */
+    ProcessorJobFailed = 4,
+    /**
+     * The pipeline completed successfully but produced no changes, so no pull request was created. A valid terminal outcome surfaced as a failure with this distinct reason.
+     */
+    NoChanges = 5,
+    /**
+     * The target project's agent pool could not be found or has not been authorized for use, so the validation pipeline could not be queued. This is a user/configuration error.
+     */
+    AgentPoolUnavailable = 6,
+    /**
+     * The alert ref cannot be resolved to an existing branch because the pull request or merge ref, source branch, or normal branch no longer exists.
+     */
+    BranchNotResolvable = 7,
+    /**
+     * The pipeline completed successfully and determined that the alert is a false positive, so no pull request was created. This is a terminal non-PR result, not an operational pipeline failure.
+     */
+    FalsePositive = 8,
+    /**
+     * The target file referenced by the analysis could not be found.
+     */
+    TargetFileNotFound = 9,
+    /**
+     * The push was rejected by the commit author email validation policy.
+     */
+    CommitAuthorEmailValidationFailed = 10
+}
 /**
  * Indicates the lifecycle status of an autofix request. Maps to TINYINT in the database.
  */
@@ -647,6 +854,10 @@ export interface DependencyResult {
      */
     versionControlFilePath: VersionControlFilePath;
 }
+export declare enum DependencyScope {
+    Runtime = 0,
+    Development = 1
+}
 /**
  * Information about an alert dismissal
  */
@@ -711,7 +922,11 @@ export declare enum ExpandOption {
     /**
      * Return validationFingerprints in Alert.
      */
-    ValidationFingerprint = 1
+    ValidationFingerprint = 1,
+    /**
+     * Return the AI metadata blob reference in Alert.
+     */
+    AIMetadataBlobReference = 2
 }
 /**
  * Details for a legal review for a given component
@@ -1062,7 +1277,15 @@ export declare enum SarifJobStatus {
     /**
      * The job is currently being processed in the concurrent processing workflow exclusive for no autofix flows
      */
-    ConcurrentProcessing = 5
+    ConcurrentProcessing = 5,
+    /**
+     * The original AI SARIF has been superseded by a consolidated SARIF (AI alert consolidation experiment). Terminal status: the original is never processed for alerts and is never re-consolidated.
+     */
+    Consolidated = 6,
+    /**
+     * An original AI SARIF awaiting consolidation (AI alert consolidation experiment). Excluded from normal alert processing; selected by the consolidation job, which moves it to Consolidated once it has launched the consolidation pipeline.
+     */
+    WaitingConsolidation = 7
 }
 export interface SarifUploadStatus {
     errors: SarifValidationError[];
@@ -1090,12 +1313,16 @@ export interface SearchCriteria {
      * If provided, only alerts for this dependency are returned. \<br /\>Otherwise, return alerts for all dependencies. \<br /\>In a sarif submission, a dependency (or a component) is specified in result.RelatedLocations[].logicalLocation. \<br /\>Not applicable for secret alerts.
      */
     dependencyName: string;
+    /**
+     * If provided, only alerts for dependencies in this scope are returned. \<br /\>Otherwise, return alerts regardless of scope. \<br /\>Only applicable for dependency alerts.
+     */
+    dependencyScope: DependencyScope;
     /**
      * If provided, only return alerts last seen after this date. \<br /\>Otherwise return all alerts.
      */
     fromDate: Date;
     /**
-     * If provided, filters alerts based on whether they have linked work items. \<br /\>Set to "true" to return only alerts with linked work items. \<br /\>Set to "false" to return only alerts without linked work items. \<br /\>If not provided, returns all alerts regardless of linked work items. \<br /\>Not applicable for secret and dependency scanning alerts.
+     * If provided, filters alerts based on whether they have linked work items. \<br /\>Set to "true" to return only alerts with linked work items. \<br /\>Set to "false" to return only alerts without linked work items. \<br /\>If not provided, returns all alerts regardless of linked work items. \<br /\>Not applicable for secret and dependency scanning alerts. \<br /\>This property will be deprecated in the future; prefer filtering by metadata type instead.
      */
     hasLinkedWorkItems: boolean;
     /**
@@ -1162,6 +1389,10 @@ export interface SearchCriteria {
      * If provided with toolName, only return alerts detected by this tool. \<br /\>Otherwise, return alerts detected by all tools.
      */
     toolName: string;
+    /**
+     * If provided, only return alerts detected by these tools. \<br /\>Takes precedence over ToolName when populated. \<br /\>Requires the EnableMultiToolSelection feature flag.
+     */
+    toolNames: string[];
     /**
      * If provided, only return alerts with the validity specified here. If the validity status is Unknown, fetch alerts of all validity results. \<br /\>Only applicable for secret alerts. \<br /\>Filtering by validity status may cause less alerts to be returned than requested with TOP parameter. \<br /\>Due to this behavior, the ContinuationToken(\<![CDATA[\<header name\>]]\>) in the response header should be relied on to decide if another batch needs to be fetched.
      */
@@ -1207,6 +1438,10 @@ export declare enum State {
  * An Analysis tool that can generate security alerts
  */
 export interface Tool {
+    /**
+     * Whether the tool produces deterministic results. Used to group tools in the alerts filter UI.
+     */
+    isDeterministic: boolean;
     /**
      * Name of the tool
      */