oci-adm 2.109.1 → 2.111.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/lib/model/application-dependency-recommendation-summary.d.ts +2 -2
  2. package/lib/model/application-dependency-vulnerability-summary.d.ts +17 -2
  3. package/lib/model/application-dependency-vulnerability-summary.js.map +1 -1
  4. package/lib/model/application-dependency.d.ts +4 -2
  5. package/lib/model/application-dependency.js.map +1 -1
  6. package/lib/model/detect-configuration.d.ts +4 -4
  7. package/lib/model/network-configuration.d.ts +1 -2
  8. package/lib/model/network-configuration.js.map +1 -1
  9. package/lib/model/vulnerability.d.ts +6 -2
  10. package/lib/model/vulnerability.js.map +1 -1
  11. package/lib/request/list-application-dependency-recommendations-request.d.ts +1 -1
  12. package/lib/request/list-application-dependency-vulnerabilities-request.d.ts +1 -1
  13. package/package.json +3 -3
package/lib/model/application-dependency-recommendation-summary.d.ts CHANGED
@@ -21,7 +21,7 @@ export interface ApplicationDependencyRecommendationSummary {
21
21
  */
22
22
  "gav": string;
23
23
  /**
24
- * Package URL defined in https://github.com/package-url/purl-spec, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
24
+ * Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
25
25
  */
26
26
  "purl"?: string;
27
27
  /**
@@ -37,7 +37,7 @@ export interface ApplicationDependencyRecommendationSummary {
37
37
  */
38
38
  "recommendedGav"?: string;
39
39
  /**
40
- * Recommended application dependency in PURL format, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.2.0
40
+ * Recommended application dependency in purl format, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.2.0
41
41
  */
42
42
  "recommendedPurl"?: string;
43
43
  }
package/lib/model/application-dependency-vulnerability-summary.d.ts CHANGED
@@ -25,7 +25,7 @@ export interface ApplicationDependencyVulnerabilitySummary {
25
25
  */
26
26
  "gav": string;
27
27
  /**
28
- * Package URL defined in https://github.com/package-url/purl-spec, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
28
+ * Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
29
29
  */
30
30
  "purl"?: string;
31
31
  /**
@@ -41,9 +41,24 @@ export interface ApplicationDependencyVulnerabilitySummary {
41
41
  */
42
42
  "vulnerabilities": Array<model.Vulnerability>;
43
43
  /**
44
- * Indicates if the artifact is found in the knowledge base.
44
+ * Indicates if the artifact is found in the knowledge base, this field is deprecated and will be removed in the future.
45
45
  */
46
46
  "isFoundInKnowledgeBase": boolean;
47
+ /**
48
+ * Potential issues in the artifact identifiers (purls) provided by the user, that the user is alerted about. ADM supports the following warnings:
49
+ * - MISSING_VERSION: Missing version
50
+ * - INCORRECT_FORMAT_VERSION: Version can not be parsed according to the ecosystem
51
+ * - UNKNOWN_ECOSYSTEM: The purl's ecosystem is unknown to ADM
52
+ * - INCORRECT_FORMAT_EPOCH: Epoch qualifier can not be parsed according to the ecosystem
53
+ * - MISSING_DISTRO: The distro qualifier is required for the ecosystem, but was not provided in the purl
54
+ * - UNKNOWN_DISTRO: ADM does not have data for the provided distro value for the given ecosystem
55
+ * - MISSING_ARCH: The arch qualifier is required for the ecosystem and distro, but was not provided in the purl
56
+ * - UNKNOWN_ARCH: ADM does not have data for the provided arch value for the given ecosystem and distro
57
+ * - EPOCH_VALUE_MISMATCH: Epoch value in qualifier is not the same as the epoch value in version
58
+ * - INVALID_PURL: The provided PURL could not be parsed
59
+ *
60
+ */
61
+ "warnings"?: Array<string>;
47
62
  }
48
63
  export declare namespace ApplicationDependencyVulnerabilitySummary {
49
64
  function getJsonObj(obj: ApplicationDependencyVulnerabilitySummary): object;
package/lib/model/application-dependency-vulnerability-summary.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"application-dependency-vulnerability-summary.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/application-dependency-vulnerability-summary.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;AAEH,gDAAkC;AAsClC,IAAiB,yCAAyC,CA6BzD;AA7BD,WAAiB,yCAAyC;IACxD,SAAgB,UAAU,CAAC,GAA8C;QACvE,MAAM,OAAO,mCACR,GAAG,GACH;YACD,iBAAiB,EAAE,GAAG,CAAC,eAAe;gBACpC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;oBAC7B,OAAO,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC,CAAC;gBACJ,CAAC,CAAC,SAAS;SACd,CACF,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAbe,oDAAU,aAazB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAA8C;QACnF,MAAM,OAAO,mCACR,GAAG,GACH;YACD,iBAAiB,EAAE,GAAG,CAAC,eAAe;gBACpC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;oBAC7B,OAAO,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC,CAAC;gBACJ,CAAC,CAAC,SAAS;SACd,CACF,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAbe,gEAAsB,yBAarC,CAAA;AACH,CAAC,EA7BgB,yCAAyC,GAAzC,iDAAyC,KAAzC,iDAAyC,QA6BzD"}
1
+ {"version":3,"file":"application-dependency-vulnerability-summary.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/application-dependency-vulnerability-summary.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;AAEH,gDAAkC;AAqDlC,IAAiB,yCAAyC,CA6BzD;AA7BD,WAAiB,yCAAyC;IACxD,SAAgB,UAAU,CAAC,GAA8C;QACvE,MAAM,OAAO,mCACR,GAAG,GACH;YACD,iBAAiB,EAAE,GAAG,CAAC,eAAe;gBACpC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;oBAC7B,OAAO,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC,CAAC;gBACJ,CAAC,CAAC,SAAS;SACd,CACF,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAbe,oDAAU,aAazB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAA8C;QACnF,MAAM,OAAO,mCACR,GAAG,GACH;YACD,iBAAiB,EAAE,GAAG,CAAC,eAAe;gBACpC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;oBAC7B,OAAO,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC,CAAC;gBACJ,CAAC,CAAC,SAAS;SACd,CACF,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAbe,gEAAsB,yBAarC,CAAA;AACH,CAAC,EA7BgB,yCAAyC,GAAzC,iDAAyC,KAAzC,iDAAyC,QA6BzD"}
package/lib/model/application-dependency.d.ts CHANGED
@@ -11,7 +11,9 @@
11
11
  * This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
12
12
  */
13
13
  /**
14
- * An application dependency resource creates a vulnerability audit.
14
+ * An ApplicationDependency resource is used within the applicationDependencies of a CreateVulnerabilityAuditDetails resource to create a vulnerability audit.
15
+ * Each ApplicationDependency resource must provide either Package URL (purl) identifier or a Group Artifact Version (GAV) to identify the application dependency.
16
+ *
15
17
  */
16
18
  export interface ApplicationDependency {
17
19
  /**
@@ -21,7 +23,7 @@ export interface ApplicationDependency {
21
23
  */
22
24
  "gav"?: string;
23
25
  /**
24
- * Package URL defined in https://github.com/package-url/purl-spec, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
26
+ * Package URL identifier, e.g. pkg:maven/org.graalvm.nativeimage/svm@21.1.0
25
27
  */
26
28
  "purl"?: string;
27
29
  /**
package/lib/model/application-dependency.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"application-dependency.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/application-dependency.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAsCH,IAAiB,qBAAqB,CAWrC;AAXD,WAAiB,qBAAqB;IACpC,SAAgB,UAAU,CAAC,GAA0B;QACnD,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,gCAAU,aAIzB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAA0B;QAC/D,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,4CAAsB,yBAIrC,CAAA;AACH,CAAC,EAXgB,qBAAqB,GAArB,6BAAqB,KAArB,6BAAqB,QAWrC"}
1
+ {"version":3,"file":"application-dependency.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/application-dependency.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAwCH,IAAiB,qBAAqB,CAWrC;AAXD,WAAiB,qBAAqB;IACpC,SAAgB,UAAU,CAAC,GAA0B;QACnD,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,gCAAU,aAIzB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAA0B;QAC/D,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,4CAAsB,yBAIrC,CAAA;AACH,CAAC,EAXgB,qBAAqB,GAArB,6BAAqB,KAArB,6BAAqB,QAWrC"}
package/lib/model/detect-configuration.d.ts CHANGED
@@ -12,7 +12,7 @@
12
12
  */
13
13
  import * as model from "../model";
14
14
  /**
15
- * A configuration to define the constraints when detecting vulnerable dependencies.
15
+ * A configuration to define the constraints when detecting vulnerable dependencies and recommending remediations.
16
16
  *
17
17
  */
18
18
  export interface DetectConfiguration {
@@ -29,15 +29,15 @@ export interface DetectConfiguration {
29
29
  */
30
30
  "upgradePolicy"?: DetectConfiguration.UpgradePolicy;
31
31
  /**
32
- * The maximum Common Vulnerability Scoring System Version 2 (CVSS V2) score. An artifact with a CVSS V2 score below this value is not considered for patching. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
32
+ * The maximum Common Vulnerability Scoring System Version 2 (CVSS V2) score. A vulnerability with a CVSS V2 score below this value is not considered for remediation. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
33
33
  */
34
34
  "maxPermissibleCvssV2Score"?: number;
35
35
  /**
36
- * The maximum Common Vulnerability Scoring System Version 3 (CVSS V3) score. An artifact with a CVSS V3 score below this value is not considered for patching. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
36
+ * The maximum Common Vulnerability Scoring System Version 3 (CVSS V3) score. A vulnerability with a CVSS V3 score below this value is not considered for patching. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
37
37
  */
38
38
  "maxPermissibleCvssV3Score"?: number;
39
39
  /**
40
- * The maximum ADM Severity. An artifact with an ADM Severity below this value is not considered for patching.
40
+ * The maximum ADM Severity. A vulnerability with an severity below this value is not considered for remediation.
41
41
  */
42
42
  "maxPermissibleSeverity"?: model.ConfigSeverity;
43
43
  }
package/lib/model/network-configuration.d.ts CHANGED
@@ -11,8 +11,7 @@
11
11
  * This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
12
12
  */
13
13
  /**
14
- * A network configuration defines the required network characteristics for an ADM remediation recipe.
15
- * A network configuration is required if the build service is one of: GitHub Actions, GitLab Pipeline, or Jenkins Pipeline.
14
+ * A network configuration defines the required network characteristics for the remediation run of the recipe to access the source repository and/or verify build services.
16
15
  *
17
16
  */
18
17
  export interface NetworkConfiguration {
package/lib/model/network-configuration.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"network-configuration.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/network-configuration.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAqBH,IAAiB,oBAAoB,CAWpC;AAXD,WAAiB,oBAAoB;IACnC,SAAgB,UAAU,CAAC,GAAyB;QAClD,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,+BAAU,aAIzB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAAyB;QAC9D,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,2CAAsB,yBAIrC,CAAA;AACH,CAAC,EAXgB,oBAAoB,GAApB,4BAAoB,KAApB,4BAAoB,QAWpC"}
1
+ {"version":3,"file":"network-configuration.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/network-configuration.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAoBH,IAAiB,oBAAoB,CAWpC;AAXD,WAAiB,oBAAoB;IACnC,SAAgB,UAAU,CAAC,GAAyB;QAClD,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,+BAAU,aAIzB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAAyB;QAC9D,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,2CAAsB,yBAIrC,CAAA;AACH,CAAC,EAXgB,oBAAoB,GAApB,4BAAoB,KAApB,4BAAoB,QAWpC"}
package/lib/model/vulnerability.d.ts CHANGED
@@ -26,11 +26,15 @@ export interface Vulnerability {
26
26
  */
27
27
  "source"?: string;
28
28
  /**
29
- * Common Vulnerability Scoring System (CVSS) Version 2. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
29
+ * Common Vulnerability Scoring System (CVSS) Version 2, calculated from the metrics provided in the CVSS vector provided from the vulnerability source.
30
+ * This field is deprecated and will be removed in the future. The cvssV2Score can be obtained from the metrics field of the listVulnerabilities endpoint.
31
+ * Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
30
32
  */
31
33
  "cvssV2Score"?: number;
32
34
  /**
33
- * Common Vulnerability Scoring System (CVSS) Version 3. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
35
+ * Common Vulnerability Scoring System (CVSS) Version 3, calculated from the metrics provided in the CVSS vector provided from the vulnerability source.
36
+ * This field is deprecated and will be removed in the future. The cvssV3Score can be obtained from the metrics field of the listVulnerabilities endpoint.
37
+ * Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
34
38
  */
35
39
  "cvssV3Score"?: number;
36
40
  /**
package/lib/model/vulnerability.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"vulnerability.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/vulnerability.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAyCH,IAAiB,aAAa,CAW7B;AAXD,WAAiB,aAAa;IAC5B,SAAgB,UAAU,CAAC,GAAkB;QAC3C,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,wBAAU,aAIzB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAAkB;QACvD,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,oCAAsB,yBAIrC,CAAA;AACH,CAAC,EAXgB,aAAa,GAAb,qBAAa,KAAb,qBAAa,QAW7B"}
1
+ {"version":3,"file":"vulnerability.js","sourceRoot":"","sources":["../../../../../lib/adm/lib/model/vulnerability.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AA6CH,IAAiB,aAAa,CAW7B;AAXD,WAAiB,aAAa;IAC5B,SAAgB,UAAU,CAAC,GAAkB;QAC3C,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,wBAAU,aAIzB,CAAA;IACD,SAAgB,sBAAsB,CAAC,GAAkB;QACvD,MAAM,OAAO,mCAAQ,GAAG,GAAK,EAAE,CAAE,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAJe,oCAAsB,yBAIrC,CAAA;AACH,CAAC,EAXgB,aAAa,GAAb,qBAAa,KAAb,qBAAa,QAW7B"}
package/lib/request/list-application-dependency-recommendations-request.d.ts CHANGED
@@ -41,7 +41,7 @@ export interface ListApplicationDependencyRecommendationsRequest extends common.
41
41
  */
42
42
  "gav"?: string;
43
43
  /**
44
- * A filter to return only resources that match the entire PURL given (https://github.com/package-url/purl-spec/).
44
+ * A filter to return only resources that match the entire purl given.
45
45
  */
46
46
  "purl"?: string;
47
47
  /**
package/lib/request/list-application-dependency-vulnerabilities-request.d.ts CHANGED
@@ -79,7 +79,7 @@ export interface ListApplicationDependencyVulnerabilitiesRequest extends common.
79
79
  */
80
80
  "gav"?: string;
81
81
  /**
82
- * A filter to return only resources that match the entire PURL given (https://github.com/package-url/purl-spec/).
82
+ * A filter to return only resources that match the entire purl given.
83
83
  */
84
84
  "purl"?: string;
85
85
  /**
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "oci-adm",
3
- "version": "2.109.1",
3
+ "version": "2.111.0",
4
4
  "description": "OCI NodeJS client for Adm Service",
5
5
  "repository": {
6
6
  "type": "git",
@@ -15,8 +15,8 @@
15
15
  },
16
16
  "license": "(UPL-1.0 OR Apache-2.0)",
17
17
  "dependencies": {
18
- "oci-common": "2.109.1",
19
- "oci-workrequests": "2.109.1"
18
+ "oci-common": "2.111.0",
19
+ "oci-workrequests": "2.111.0"
20
20
  },
21
21
  "publishConfig": {
22
22
  "registry": "https://registry.npmjs.org"