tccli 3.0.1214.1__py2.py3-none-any.whl → 3.0.1216.1__py2.py3-none-any.whl

tccli/services/bsca/v20210811/api.json

@@ -53,7 +53,7 @@
   "metadata": {
     "apiVersion": "2021-08-11",
     "api_brief": "介绍如何使用API对二进制软件成分分析进行操作，包括新建分析、查看分析列表、查看报告等。",
-    "serviceNameCN": "二进制软件成分分析",
+    "serviceNameCN": "软件成分分析",
     "serviceShortName": "bsca"
   },
   "objects": {
@@ -274,17 +274,17 @@
           "example": "无",
           "member": "PURL",
           "name": "PURL",
-          "required": true,
+          "output_required": true,
           "type": "object",
           "value_allowed_null": false
         },
         {
           "disabled": false,
           "document": "第三方组件的主页",
-          "example": "http://example.com",
+          "example": "https://www.openssl.org",
           "member": "string",
           "name": "Homepage",
-          "required": true,
+          "output_required": true,
           "type": "string",
           "value_allowed_null": false
         },
@@ -294,27 +294,27 @@
           "example": "OpenSSL is a toolkit for supporting cryptography.",
           "member": "string",
           "name": "Summary",
-          "required": true,
+          "output_required": true,
           "type": "string",
           "value_allowed_null": false
         },
         {
           "disabled": false,
           "document": "第三方组件的别名列表\n注意：此字段可能返回 null，表示取不到有效值。",
-          "example": "无",
+          "example": "[\"gmock\", \"googlemock\", \"gmock-gtest-all\"]",
           "member": "string",
           "name": "NicknameList",
-          "required": true,
+          "output_required": true,
           "type": "list",
           "value_allowed_null": true
         },
         {
           "disabled": false,
           "document": "第三方组件的代码位置列表\n注意：此字段可能返回 null，表示取不到有效值。",
-          "example": "无",
+          "example": "[\"https://github.com/google/googletest.git\",\"https://github.com/abseil/googletest.git\"]",
           "member": "string",
           "name": "CodeLocationList",
-          "required": true,
+          "output_required": true,
           "type": "list",
           "value_allowed_null": true
         },
@@ -324,15 +324,69 @@
           "example": "apache-2.0",
           "member": "string",
           "name": "LicenseExpression",
-          "required": true,
+          "output_required": true,
           "type": "string",
           "value_allowed_null": false
+        },
+        {
+          "disabled": false,
+          "document": "第三方组件的版本信息(如果匹配到版本)\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "无",
+          "member": "ComponentVersionInfo",
+          "name": "VersionInfo",
+          "output_required": false,
+          "type": "object",
+          "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "第三方组件的最后更新时间\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "2024-10-03T11:12:40Z",
+          "member": "string",
+          "name": "LastUpdateTime",
+          "output_required": false,
+          "type": "string",
+          "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "第三方组件的类型标签\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "[\"hardware\"]",
+          "member": "string",
+          "name": "TagList",
+          "output_required": false,
+          "type": "list",
+          "value_allowed_null": true
         }
       ],
       "usage": "out"
     },
+    "ComponentTagFilter": {
+      "document": "筛选条件，同一个Tag不能同时出现在IncludeTags和ExcludeTags，可能的Tag包括：\"CopyrightUpdated\", \"LicenseUpdated\", \"ContainsVulnerability\"",
+      "members": [
+        {
+          "disabled": false,
+          "document": "包括的Tag\n",
+          "example": "[\"CopyrightUpdated\"]",
+          "member": "string",
+          "name": "IncludeTags",
+          "required": false,
+          "type": "list"
+        },
+        {
+          "disabled": false,
+          "document": "排除的Tag",
+          "example": "[\"LicenseUpdated\"]",
+          "member": "string",
+          "name": "ExcludeTags",
+          "required": false,
+          "type": "list"
+        }
+      ],
+      "usage": "in"
+    },
     "ComponentVersion": {
-      "document": "描述组件的一条版本信息。",
+      "document": "描述一个组件版本。",
       "members": [
         {
           "disabled": false,
@@ -353,6 +407,52 @@
           "output_required": true,
           "type": "string",
           "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "组件的版本信息\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "无",
+          "member": "ComponentVersionInfo",
+          "name": "VersionInfo",
+          "output_required": false,
+          "type": "object",
+          "value_allowed_null": true
+        }
+      ],
+      "usage": "out"
+    },
+    "ComponentVersionInfo": {
+      "document": "描述组件版本的详情，包含组件发布时间、Copyright列表、组件描述Tag。",
+      "members": [
+        {
+          "disabled": false,
+          "document": "版本发布时间\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "2024-04-17 08:50:11.000000",
+          "member": "string",
+          "name": "PublishTime",
+          "output_required": false,
+          "type": "string",
+          "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "当前版本的所有copyright\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "[\"Copyright (c) 1998-2018 The OpenSSL Project\",   \"Copyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\",   \"holder is Tim Hudson (tjh@cryptsoft.com)\" ]",
+          "member": "string",
+          "name": "CopyrightList",
+          "output_required": false,
+          "type": "list",
+          "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "版本标签\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "[\"ContainsVulnerability\", \"LicenseUpdated\"]",
+          "member": "string",
+          "name": "TagList",
+          "output_required": false,
+          "type": "list",
+          "value_allowed_null": true
         }
       ],
       "usage": "out"
@@ -473,7 +573,7 @@
           "example": "无",
           "member": "Component",
           "name": "Component",
-          "required": true,
+          "output_required": true,
           "type": "object",
           "value_allowed_null": false
         },
@@ -497,6 +597,51 @@
           "name": "PURL",
           "required": true,
           "type": "object"
+        },
+        {
+          "disabled": false,
+          "document": "页号",
+          "example": "1",
+          "member": "uint64",
+          "name": "PageNumber",
+          "required": false,
+          "type": "int"
+        },
+        {
+          "disabled": false,
+          "document": "页大小",
+          "example": "10",
+          "member": "uint64",
+          "name": "PageSize",
+          "required": false,
+          "type": "int"
+        },
+        {
+          "disabled": false,
+          "document": "排序方式，可以是\"ASC\"或\"DESC\"，默认\"DESC\"",
+          "example": "ASC",
+          "member": "string",
+          "name": "Order",
+          "required": false,
+          "type": "string"
+        },
+        {
+          "disabled": false,
+          "document": "排序字段，可能的字段包括“Version”、\"PublishTime\"",
+          "example": "[\"PublishTime\",\"Version\"]",
+          "member": "string",
+          "name": "OrderBy",
+          "required": false,
+          "type": "list"
+        },
+        {
+          "disabled": false,
+          "document": "Tag筛选",
+          "example": "无",
+          "member": "ComponentTagFilter",
+          "name": "Filter",
+          "required": false,
+          "type": "object"
         }
       ],
       "type": "object"
@@ -560,6 +705,26 @@
           "type": "list",
           "value_allowed_null": true
         },
+        {
+          "disabled": false,
+          "document": "组件purl",
+          "example": "无",
+          "member": "PURL",
+          "name": "PURL",
+          "output_required": true,
+          "type": "object",
+          "value_allowed_null": false
+        },
+        {
+          "disabled": false,
+          "document": "推荐版本，当前版本中的所有漏洞都修复了的版本",
+          "example": "1.1.12",
+          "member": "string",
+          "name": "RecommendedVersion",
+          "output_required": false,
+          "type": "string",
+          "value_allowed_null": false
+        },
         {
           "document": "唯一请求 ID，由服务端生成，每次请求都会返回（若请求因其他原因未能抵达服务端，则该次请求不会获得 RequestId）。定位问题时需要提供该次请求的 RequestId。",
           "member": "string",
@@ -1072,7 +1237,7 @@
         {
           "disabled": false,
           "document": "漏洞类别",
-          "example": "其他",
+          "example": "反序列化",
           "member": "string",
           "name": "Category",
           "output_required": true,
@@ -1092,7 +1257,7 @@
         {
           "disabled": false,
           "document": "漏洞描述",
-          "example": "漏洞描述",
+          "example": "ApacheLog4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。ApacheLog4J存在输入验证错误漏洞.Log4j-2中存在JNDI注入漏洞，当程序将用户输入的数据进行日志记录时，即可触发此漏洞，成功利用此漏洞可以在目标服务器上执行任意代码。",
           "member": "string",
           "name": "Description",
           "output_required": true,
@@ -1112,7 +1277,7 @@
         {
           "disabled": false,
           "document": "漏洞信息参考列表",
-          "example": "无",
+          "example": "[\"https://logging.apache.org/log4j/2.x/security.html\", \"http://www.openwall.com/lists/oss-security/2021/12/10/1\"]",
           "member": "string",
           "name": "ReferenceList",
           "output_required": true,
@@ -1159,6 +1324,16 @@
           "type": "string",
           "value_allowed_null": false
         },
+        {
+          "disabled": false,
+          "document": "漏洞更新时间",
+          "example": "2019-09-11 01:15:00",
+          "member": "string",
+          "name": "UpdateTime",
+          "output_required": true,
+          "type": "string",
+          "value_allowed_null": false
+        },
         {
           "disabled": false,
           "document": "CWE编号",
@@ -1228,7 +1403,7 @@
         {
           "disabled": false,
           "document": "漏洞所属CNVD编号",
-          "example": "CNVD-XXX",
+          "example": "CNVD-2021-100238",
           "member": "string",
           "name": "CNVDID",
           "output_required": true,
@@ -1238,7 +1413,7 @@
         {
           "disabled": false,
           "document": "漏洞所属CNNVD编号",
-          "example": "CNNVD-202012-579",
+          "example": "CNNVD-202112-799",
           "member": "string",
           "name": "CNNVDID",
           "output_required": true,
@@ -1274,6 +1449,36 @@
           "output_required": true,
           "type": "string",
           "value_allowed_null": false
+        },
+        {
+          "disabled": true,
+          "document": "架构信息，如x86、ARM等，废弃，请使用ArchitectureList\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "[\"x86_64\"]",
+          "member": "string",
+          "name": "Architecture",
+          "output_required": false,
+          "type": "list",
+          "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "架构信息，如x86、ARM等\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "[\"x86_64\"]",
+          "member": "string",
+          "name": "ArchitectureList",
+          "output_required": false,
+          "type": "list",
+          "value_allowed_null": true
+        },
+        {
+          "disabled": false,
+          "document": "patch链接\n注意：此字段可能返回 null，表示取不到有效值。",
+          "example": "[\"https://github.com/apache/logging-log4j2/commit/c77b3cb39312b83b053d23a2158b99ac7de44dd3\"]",
+          "member": "string",
+          "name": "PatchUrlList",
+          "output_required": false,
+          "type": "list",
+          "value_allowed_null": true
         }
       ],
       "usage": "out"

tccli/services/bsca/v20210811/examples.json

@@ -4,7 +4,7 @@
       {
         "document": "",
         "input": "POST / HTTP/1.1\nHost: bsca.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeKBComponent\n<公共请求参数>\n\n{\n    \"PURL\": {\n        \"Name\": \"openssl\"\n    }\n}",
-        "output": "{\n    \"Response\": {\n        \"Component\": {\n            \"CodeLocationList\": null,\n            \"Homepage\": \"https://www.openssl.org\",\n            \"LicenseExpression\": \"openssl-ssleay\",\n            \"NicknameList\": null,\n            \"PURL\": {\n                \"Name\": \"openssl\",\n                \"Namespace\": \"\",\n                \"Protocol\": \"generic\",\n                \"Qualifiers\": null,\n                \"Subpath\": \"\",\n                \"Version\": \"\"\n            },\n            \"Summary\": \"OpenSSL is a toolkit for supporting cryptography. The openssl-static\\npackage contains static libraries needed for static linking of\\napplications which support various cryptographic algorithms and\\nprotocols.\"\n        },\n        \"RequestId\": \"56dabf5e-0887-4960-bf6f-595ea9a9a0d7\"\n    }\n}",
+        "output": "{\n    \"Response\": {\n        \"Component\": {\n            \"CodeLocationList\": [\n                \"https://github.com/openssl/openssl.git\",\n                \"https://android.googlesource.com/platform/external/openssl\"\n            ],\n            \"Homepage\": \"https://www.openssl.org\",\n            \"LastUpdateTime\": \"2023-09-11 22:08:48.000000\",\n            \"LicenseExpression\": \"openssl-ssleay\",\n            \"NicknameList\": null,\n            \"PURL\": {\n                \"Name\": \"openssl\",\n                \"Namespace\": \"\",\n                \"Protocol\": \"generic\",\n                \"Qualifiers\": [],\n                \"Subpath\": \"\",\n                \"Version\": \"1.0.0\"\n            },\n            \"Summary\": \"OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security (TLS) protocol formerly known as the Secure Sockets Layer (SSL) protocol. The protocol implementation is based on a full-strength general purpose cryptographic library, which can also be used stand-alone.\",\n            \"TagList\": [\n                \"network\"\n            ],\n            \"VersionInfo\": {\n                \"CopyrightList\": [\n                    \"Copyright (c) 1998-2008 The OpenSSL Project\",\n                    \"Copyright (c) 1995-1998 Eric Young (eay@cryptsoft.com)\",\n                    \"holder is Tim Hudson (tjh@cryptsoft.com)\"\n                ],\n                \"PublishTime\": \"2015-01-22 09:46:52.000000\",\n                \"TagList\": [\n                    \"copyright_updated\"\n                ]\n            }\n        },\n        \"RequestId\": \"deadc0de-3ab7-45dd-9def-6b3e087dd354\"\n    }\n}",
         "title": "查询openssl组件信息"
       }
     ],
@@ -12,15 +12,15 @@
       {
         "document": "查询ristretto组件的版本列表",
         "input": "POST / HTTP/1.1\nHost: bsca.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeKBComponentVersionList\n<公共请求参数>\n\n{\n    \"PURL\": {\n        \"Name\": \"ristretto\",\n        \"Protocol\": \"golang\",\n        \"Namespace\": \"\",\n        \"Subpath\": \"\",\n        \"Version\": \"\"\n    }\n}",
-        "output": "{\n    \"Response\": {\n        \"RequestId\": \"1df9b437-4e92-4ad5-b422-abeb45bbaf03\",\n        \"VersionList\": [\n            {\n                \"LicenseExpression\": \"apache-2.0\",\n                \"PURL\": {\n                    \"Name\": \"ristretto\",\n                    \"Namespace\": \"github.com/sergiub32\",\n                    \"Protocol\": \"golang\",\n                    \"Qualifiers\": [],\n                    \"Subpath\": \"\",\n                    \"Version\": \"v0.2.1\"\n                }\n            }\n        ]\n    }\n}",
+        "output": "{\n    \"Response\": {\n        \"VersionList\": [\n            {\n                \"LicenseExpression\": \"gpl-3.0\",\n                \"PURL\": {\n                    \"Name\": \"xxl-job-core\",\n                    \"Namespace\": \"com.xuxueli\",\n                    \"Protocol\": \"maven\",\n                    \"Qualifiers\": [],\n                    \"Subpath\": \"\",\n                    \"Version\": \"2.4.1\"\n                },\n                \"VersionInfo\": {\n                    \"CopyrightList\": [],\n                    \"PublishTime\": \"2024-04-17 08:50:11.000000\",\n                    \"TagList\": [\n                        \"ContainsVulnerability\"\n                    ]\n                }\n            }\n        ],\n        \"RequestId\": \"101705d6-b972-4dbf-9d10-0b075d509d3d\"\n    }\n}",
         "title": "查询知识库组件的版本列表"
       }
     ],
     "DescribeKBComponentVulnerability": [
       {
         "document": "",
-        "input": "POST / HTTP/1.1\nHost: bsca.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeKBComponentVulnerability\n<公共请求参数>\n\n{\n    \"PURL\": {\n        \"Version\": \"1.1.1\",\n        \"Name\": \"openssl\"\n    }\n}",
-        "output": "{\n    \"Response\": {\n        \"VulnerabilityList\": [\n            {\n                \"Summary\": {\n                    \"CNNVDID\": \"CNNVD-201909-447\",\n                    \"CNVDID\": \"CNVD-2019-38485\",\n                    \"CVEID\": \"CVE-2019-1547\",\n                    \"IsSuggest\": false,\n                    \"Name\": \"OpenSSL 安全漏洞\",\n                    \"Severity\": \"Medium\",\n                    \"VulID\": \"pcmgr-124087\"\n                },\n                \"SummaryInComponent\": {\n                    \"AffectedComponent\": \"openssl\",\n                    \"AffectedVersion\": \"1.1.1\",\n                    \"CanBeFixed\": true,\n                    \"FixedVersion\": \">1.0.2s,>1.1.0k,>1.1.1c\",\n                    \"PURL\": {\n                        \"Name\": \"openssl\",\n                        \"Namespace\": \"\",\n                        \"Protocol\": \"\",\n                        \"Qualifiers\": [],\n                        \"Subpath\": \"\",\n                        \"Version\": \"1.1.1\"\n                    },\n                    \"RiskLevel\": \"Medium\"\n                }\n            }\n        ],\n        \"RequestId\": \"278a8e3b-f491-4396-b6b2-984a354ff5b0\"\n    }\n}",
+        "input": "POST / HTTP/1.1\nHost: bsca.tencentcloudapi.com\nContent-Type: application/json\nX-TC-Action: DescribeKBComponentVulnerability\n<公共请求参数>\n\n{\n    \"PURL\": {\n        \"Name\": \"xxl-job-core\",\n        \"Protocol\": \"maven\",\n        \"Namespace\": \"com.xuxueli\",\n        \"Version\": \"2.2.0\"\n    }\n}",
+        "output": "{\n    \"Response\": {\n        \"PURL\": {\n            \"Name\": \"com.xuxueli:xxl-job-core\",\n            \"Namespace\": \"\",\n            \"Protocol\": \"maven\",\n            \"Qualifiers\": [],\n            \"Subpath\": \"\",\n            \"Version\": \"2.2.0\"\n        },\n        \"RecommendedVersion\": \"2.4.1\",\n        \"VulnerabilityList\": [\n            {\n                \"Summary\": {\n                    \"ArchitectureList\": [],\n                    \"CNNVDID\": \"CNNVD-202408-1426\",\n                    \"CNVDID\": \"\",\n                    \"CVEID\": \"CVE-2024-42681\",\n                    \"IsSuggest\": true,\n                    \"Name\": \"XXL-JOB 安全漏洞\",\n                    \"PatchUrlList\": null,\n                    \"Severity\": \"High\",\n                    \"VulID\": \"pcmgr-513695\"\n                },\n                \"SummaryInComponent\": {\n                    \"AffectedComponent\": \"com.xuxueli:xxl-job-core\",\n                    \"AffectedVersion\": \"2.2.0\",\n                    \"CanBeFixed\": true,\n                    \"FixedVersion\": \">2.4.1\",\n                    \"PURL\": {\n                        \"Name\": \"com.xuxueli:xxl-job-core\",\n                        \"Namespace\": \"\",\n                        \"Protocol\": \"maven\",\n                        \"Qualifiers\": [],\n                        \"Subpath\": \"\",\n                        \"Version\": \"2.2.0\"\n                    },\n                    \"RiskLevel\": \"High\"\n                }\n            },\n            {\n                \"Summary\": {\n                    \"ArchitectureList\": [],\n                    \"CNNVDID\": \"CNNVD-202012-1604\",\n                    \"CNVDID\": \"CNVD-2021-44699\",\n                    \"CVEID\": \"CVE-2020-29204\",\n                    \"IsSuggest\": false,\n                    \"Name\": \"XXL-JOB跨站脚本漏洞（CVE-2020-29204）\",\n                    \"PatchUrlList\": null,\n                    \"Severity\": \"Medium\",\n                    \"VulID\": \"pcmgr-304614\"\n                },\n                \"SummaryInComponent\": {\n                    \"AffectedComponent\": \"com.xuxueli:xxl-job-core\",\n                    \"AffectedVersion\": \"2.2.0\",\n                    \"CanBeFixed\": true,\n                    \"FixedVersion\": \">2.2.0,2.3.0\",\n                    \"PURL\": {\n                        \"Name\": \"com.xuxueli:xxl-job-core\",\n                        \"Namespace\": \"\",\n                        \"Protocol\": \"maven\",\n                        \"Qualifiers\": [],\n                        \"Subpath\": \"\",\n                        \"Version\": \"2.2.0\"\n                    },\n                    \"RiskLevel\": \"Medium\"\n                }\n            },\n            {\n                \"Summary\": {\n                    \"ArchitectureList\": [],\n                    \"CNNVDID\": \"CNNVD-202209-2891\",\n                    \"CNVDID\": \"\",\n                    \"CVEID\": \"CVE-2022-40929\",\n                    \"IsSuggest\": true,\n                    \"Name\": \"XXL-JOB 命令注入漏洞\",\n                    \"PatchUrlList\": null,\n                    \"Severity\": \"Critical\",\n                    \"VulID\": \"pcmgr-368382\"\n                },\n                \"SummaryInComponent\": {\n                    \"AffectedComponent\": \"com.xuxueli:xxl-job-core\",\n                    \"AffectedVersion\": \"2.2.0\",\n                    \"CanBeFixed\": true,\n                    \"FixedVersion\": \">2.2.0\",\n                    \"PURL\": {\n                        \"Name\": \"com.xuxueli:xxl-job-core\",\n                        \"Namespace\": \"\",\n                        \"Protocol\": \"maven\",\n                        \"Qualifiers\": [],\n                        \"Subpath\": \"\",\n                        \"Version\": \"2.2.0\"\n                    },\n                    \"RiskLevel\": \"Critical\"\n                }\n            },\n            {\n                \"Summary\": {\n                    \"ArchitectureList\": [],\n                    \"CNNVDID\": \"\",\n                    \"CNVDID\": \"CNVD-2022-81229\",\n                    \"CVEID\": \"CVE-2022-43183\",\n                    \"IsSuggest\": true,\n                    \"Name\": \"XXL-JOB代码问题漏洞(CVE-2022-43183)\",\n                    \"PatchUrlList\": null,\n                    \"Severity\": \"High\",\n                    \"VulID\": \"pcmgr-378820\"\n                },\n                \"SummaryInComponent\": {\n                    \"AffectedComponent\": \"com.xuxueli:xxl-job-core\",\n                    \"AffectedVersion\": \"2.2.0\",\n                    \"CanBeFixed\": true,\n                    \"FixedVersion\": \">2.3.0,2.3.1\",\n                    \"PURL\": {\n                        \"Name\": \"com.xuxueli:xxl-job-core\",\n                        \"Namespace\": \"\",\n                        \"Protocol\": \"maven\",\n                        \"Qualifiers\": [],\n                        \"Subpath\": \"\",\n                        \"Version\": \"2.2.0\"\n                    },\n                    \"RiskLevel\": \"High\"\n                }\n            },\n            {\n                \"Summary\": {\n                    \"ArchitectureList\": [],\n                    \"CNNVDID\": \"CNNVD-202404-775\",\n                    \"CNVDID\": \"\",\n                    \"CVEID\": \"CVE-2024-3366\",\n                    \"IsSuggest\": false,\n                    \"Name\": \"XXL-JOB 注入漏洞(CVE-2024-3366)\",\n                    \"PatchUrlList\": null,\n                    \"Severity\": \"High\",\n                    \"VulID\": \"pcmgr-485156\"\n                },\n                \"SummaryInComponent\": {\n                    \"AffectedComponent\": \"com.xuxueli:xxl-job-core\",\n                    \"AffectedVersion\": \"2.2.0\",\n                    \"CanBeFixed\": true,\n                    \"FixedVersion\": \">2.4.0,2.4.1\",\n                    \"PURL\": {\n                        \"Name\": \"com.xuxueli:xxl-job-core\",\n                        \"Namespace\": \"\",\n                        \"Protocol\": \"maven\",\n                        \"Qualifiers\": [],\n                        \"Subpath\": \"\",\n                        \"Version\": \"2.2.0\"\n                    },\n                    \"RiskLevel\": \"High\"\n                }\n            }\n        ],\n        \"RequestId\": \"3eed4bda-8f2c-444f-bac8-d64555eb0e05\"\n    }\n}",
         "title": "查询openssl 1.1.1的漏洞信息"
       }
     ],

tccli/services/ccc/ccc_client.py

@@ -225,6 +225,58 @@ def doCreateAICall(args, parsed_globals):
     FormatOutput.output("action", json_obj, g_param[OptionsDefine.Output], g_param[OptionsDefine.Filter])
 
 
+def doDescribeTelRecordAsr(args, parsed_globals):
+    g_param = parse_global_arg(parsed_globals)
+
+    if g_param[OptionsDefine.UseCVMRole.replace('-', '_')]:
+        cred = credential.CVMRoleCredential()
+    elif g_param[OptionsDefine.RoleArn.replace('-', '_')] and g_param[OptionsDefine.RoleSessionName.replace('-', '_')]:
+        cred = credential.STSAssumeRoleCredential(
+            g_param[OptionsDefine.SecretId], g_param[OptionsDefine.SecretKey], g_param[OptionsDefine.RoleArn.replace('-', '_')],
+            g_param[OptionsDefine.RoleSessionName.replace('-', '_')], endpoint=g_param["sts_cred_endpoint"]
+        )
+    elif os.getenv(OptionsDefine.ENV_TKE_REGION)             and os.getenv(OptionsDefine.ENV_TKE_PROVIDER_ID)             and os.getenv(OptionsDefine.ENV_TKE_WEB_IDENTITY_TOKEN_FILE)             and os.getenv(OptionsDefine.ENV_TKE_ROLE_ARN):
+        cred = credential.DefaultTkeOIDCRoleArnProvider().get_credentials()
+    else:
+        cred = credential.Credential(
+            g_param[OptionsDefine.SecretId], g_param[OptionsDefine.SecretKey], g_param[OptionsDefine.Token]
+        )
+    http_profile = HttpProfile(
+        reqTimeout=60 if g_param[OptionsDefine.Timeout] is None else int(g_param[OptionsDefine.Timeout]),
+        reqMethod="POST",
+        endpoint=g_param[OptionsDefine.Endpoint],
+        proxy=g_param[OptionsDefine.HttpsProxy.replace('-', '_')]
+    )
+    profile = ClientProfile(httpProfile=http_profile, signMethod="HmacSHA256")
+    if g_param[OptionsDefine.Language]:
+        profile.language = g_param[OptionsDefine.Language]
+    mod = CLIENT_MAP[g_param[OptionsDefine.Version]]
+    client = mod.CccClient(cred, g_param[OptionsDefine.Region], profile)
+    client._sdkVersion += ("_CLI_" + __version__)
+    models = MODELS_MAP[g_param[OptionsDefine.Version]]
+    model = models.DescribeTelRecordAsrRequest()
+    model.from_json_string(json.dumps(args))
+    start_time = time.time()
+    while True:
+        rsp = client.DescribeTelRecordAsr(model)
+        result = rsp.to_json_string()
+        try:
+            json_obj = json.loads(result)
+        except TypeError as e:
+            json_obj = json.loads(result.decode('utf-8'))  # python3.3
+        if not g_param[OptionsDefine.Waiter] or search(g_param['OptionsDefine.WaiterInfo']['expr'], json_obj) == g_param['OptionsDefine.WaiterInfo']['to']:
+            break
+        cur_time = time.time()
+        if cur_time - start_time >= g_param['OptionsDefine.WaiterInfo']['timeout']:
+            raise ClientError('Request timeout, wait `%s` to `%s` timeout, last request is %s' %
+            (g_param['OptionsDefine.WaiterInfo']['expr'], g_param['OptionsDefine.WaiterInfo']['to'],
+            search(g_param['OptionsDefine.WaiterInfo']['expr'], json_obj)))
+        else:
+            print('Inquiry result is %s.' % search(g_param['OptionsDefine.WaiterInfo']['expr'], json_obj))
+        time.sleep(g_param['OptionsDefine.WaiterInfo']['interval'])
+    FormatOutput.output("action", json_obj, g_param[OptionsDefine.Output], g_param[OptionsDefine.Filter])
+
+
 def doModifyOwnNumberApply(args, parsed_globals):
     g_param = parse_global_arg(parsed_globals)
 
@@ -3204,6 +3256,7 @@ ACTION_MAP = {
     "DescribeExtensions": doDescribeExtensions,
     "DescribeAutoCalloutTasks": doDescribeAutoCalloutTasks,
     "CreateAICall": doCreateAICall,
+    "DescribeTelRecordAsr": doDescribeTelRecordAsr,
     "ModifyOwnNumberApply": doModifyOwnNumberApply,
     "DescribePredictiveDialingCampaign": doDescribePredictiveDialingCampaign,
     "DescribePSTNActiveSessionList": doDescribePSTNActiveSessionList,