containeranalysis library

Classes

AliasContext: An alias to a repo revision.
AliasContextContaineranalysisV1beta1: An alias to a repo revision.
AliasContextResponse: An alias to a repo revision.
AliasContextResponseContaineranalysisV1beta1: An alias to a repo revision.
AnalysisCompleted: Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.
AnalysisCompletedContaineranalysisV1alpha1: Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.
AnalysisCompletedContaineranalysisV1beta1: Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.
AnalysisCompletedResponse: Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.
AnalysisCompletedResponseContaineranalysisV1alpha1: Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.
AnalysisCompletedResponseContaineranalysisV1beta1: Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.
Artifact: Artifact describes a build product.
ArtifactContaineranalysisV1alpha1: Artifact describes a build product.
ArtifactContaineranalysisV1beta1: Artifact describes a build product.
ArtifactHashes: Defines a hash object for use in Materials and Products.
ArtifactHashesResponse: Defines a hash object for use in Materials and Products.
ArtifactResponse: Artifact describes a build product.
ArtifactResponseContaineranalysisV1alpha1: Artifact describes a build product.
ArtifactResponseContaineranalysisV1beta1: Artifact describes a build product.
ArtifactRule: Defines an object to declare an in-toto artifact rule
ArtifactRuleResponse: Defines an object to declare an in-toto artifact rule
Assessment: Assessment provides all information that is related to a single vulnerability for this product.
AssessmentContaineranalysisV1alpha1: Assessment provides all information that is related to a single vulnerability for this product.
AssessmentContaineranalysisV1beta1: Assessment provides all information that is related to a single vulnerability for this product.
AssessmentResponse: Assessment provides all information that is related to a single vulnerability for this product.
AssessmentResponseContaineranalysisV1alpha1: Assessment provides all information that is related to a single vulnerability for this product.
AssessmentResponseContaineranalysisV1beta1: Assessment provides all information that is related to a single vulnerability for this product.
Attestation: Occurrence that represents a single "attestation". The authenticity of an Attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the AttestationAuthority to which this Attestation is attached is primarily useful for look-up (how to find this Attestation if you already know the Authority and artifact to be verified) and intent (which authority was this attestation intended to sign for).
AttestationAuthority: Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one AttestationAuthority for "QA" and one for "build". This Note is intended to act strictly as a grouping mechanism for the attached Occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an Occurrence to a given Note. It also provides a single point of lookup to find all attached Attestation Occurrences, even if they don't all live in the same project.
AttestationAuthorityHint: This submessage provides human-readable hints about the purpose of the AttestationAuthority. Because the name of a Note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should NOT be used to look up AttestationAuthorities in security sensitive contexts, such as when looking up Attestations to verify.
AttestationAuthorityHintResponse: This submessage provides human-readable hints about the purpose of the AttestationAuthority. Because the name of a Note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should NOT be used to look up AttestationAuthorities in security sensitive contexts, such as when looking up Attestations to verify.
AttestationAuthorityResponse: Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one AttestationAuthority for "QA" and one for "build". This Note is intended to act strictly as a grouping mechanism for the attached Occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an Occurrence to a given Note. It also provides a single point of lookup to find all attached Attestation Occurrences, even if they don't all live in the same project.
AttestationContaineranalysisV1beta1: Occurrence that represents a single "attestation". The authenticity of an attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the authority to which this attestation is attached is primarily useful for look-up (how to find this attestation if you already know the authority and artifact to be verified) and intent (which authority was this attestation intended to sign for).
AttestationNote: Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one Authority for "QA" and one for "build". This note is intended to act strictly as a grouping mechanism for the attached occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an occurrence to a given note. It also provides a single point of lookup to find all attached attestation occurrences, even if they don't all live in the same project.
AttestationNoteResponse: Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one Authority for "QA" and one for "build". This note is intended to act strictly as a grouping mechanism for the attached occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an occurrence to a given note. It also provides a single point of lookup to find all attached attestation occurrences, even if they don't all live in the same project.
AttestationOccurrence: Occurrence that represents a single "attestation". The authenticity of an attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the authority to which this attestation is attached is primarily useful for lookup (how to find this attestation if you already know the authority and artifact to be verified) and intent (for which authority this attestation was intended to sign.
AttestationOccurrenceResponse: Occurrence that represents a single "attestation". The authenticity of an attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the authority to which this attestation is attached is primarily useful for lookup (how to find this attestation if you already know the authority and artifact to be verified) and intent (for which authority this attestation was intended to sign.
AttestationResponse: Occurrence that represents a single "attestation". The authenticity of an Attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the AttestationAuthority to which this Attestation is attached is primarily useful for look-up (how to find this Attestation if you already know the Authority and artifact to be verified) and intent (which authority was this attestation intended to sign for).
AttestationResponseContaineranalysisV1beta1: Occurrence that represents a single "attestation". The authenticity of an attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the authority to which this attestation is attached is primarily useful for look-up (how to find this attestation if you already know the authority and artifact to be verified) and intent (which authority was this attestation intended to sign for).
Authority: Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one Authority for "QA" and one for "build". This note is intended to act strictly as a grouping mechanism for the attached occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an occurrence to a given note. It also provides a single point of lookup to find all attached attestation occurrences, even if they don't all live in the same project.
AuthorityResponse: Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one Authority for "QA" and one for "build". This note is intended to act strictly as a grouping mechanism for the attached occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an occurrence to a given note. It also provides a single point of lookup to find all attached attestation occurrences, even if they don't all live in the same project.
Basis: Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g. a tag of the resource_url.
BasisContaineranalysisV1beta1: Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g. a tag of the resource_url.
BasisResponse: Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g. a tag of the resource_url.
BasisResponseContaineranalysisV1beta1: Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g. a tag of the resource_url.
Binding: Associates members, or principals, with a role.
BindingContaineranalysisV1alpha1: Associates members, or principals, with a role.
BindingContaineranalysisV1beta1: Associates members, or principals, with a role.
BindingResponse: Associates members, or principals, with a role.
BindingResponseContaineranalysisV1alpha1: Associates members, or principals, with a role.
BindingResponseContaineranalysisV1beta1: Associates members, or principals, with a role.
Build: Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
BuildDefinition
BuildDefinitionContaineranalysisV1alpha1
BuildDefinitionContaineranalysisV1beta1
BuildDefinitionResponse
BuildDefinitionResponseContaineranalysisV1alpha1
BuildDefinitionResponseContaineranalysisV1beta1
BuildDetails: Message encapsulating build provenance details.
BuildDetailsResponse: Message encapsulating build provenance details.
BuilderConfig
BuilderConfigContaineranalysisV1alpha1
BuildMetadata
BuildMetadataContaineranalysisV1alpha1
BuildMetadataContaineranalysisV1beta1
BuildMetadataResponse
BuildMetadataResponseContaineranalysisV1alpha1
BuildMetadataResponseContaineranalysisV1beta1
BuildNote: Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
BuildNoteResponse: Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
BuildOccurrence: Details of a build occurrence.
BuildOccurrenceResponse: Details of a build occurrence.
BuildProvenance: Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
BuildProvenanceContaineranalysisV1alpha1: Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
BuildProvenanceContaineranalysisV1beta1: Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
BuildProvenanceResponse: Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
BuildProvenanceResponseContaineranalysisV1alpha1: Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
BuildProvenanceResponseContaineranalysisV1beta1: Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
BuildResponse: Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
BuildSignature: Message encapsulating the signature of the verified build.
BuildSignatureContaineranalysisV1beta1: Message encapsulating the signature of the verified build.
BuildSignatureResponse: Message encapsulating the signature of the verified build.
BuildSignatureResponseContaineranalysisV1beta1: Message encapsulating the signature of the verified build.
BuildType: Note holding the version of the provider's builder and the signature of the provenance message in linked BuildDetails.
BuildTypeResponse: Note holding the version of the provider's builder and the signature of the provenance message in linked BuildDetails.
ByProducts: Defines an object for the byproducts field in in-toto links. The suggested fields are "stderr", "stdout", and "return-value".
ByProductsResponse: Defines an object for the byproducts field in in-toto links. The suggested fields are "stderr", "stdout", and "return-value".
Category: The category to which the update belongs.
CategoryResponse: The category to which the update belongs.
CisBenchmark: A compliance check that is a CIS benchmark.
CisBenchmarkContaineranalysisV1alpha1: A compliance check that is a CIS benchmark.
CisBenchmarkResponse: A compliance check that is a CIS benchmark.
CisBenchmarkResponseContaineranalysisV1alpha1: A compliance check that is a CIS benchmark.
CloudRepoSourceContext: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
CloudRepoSourceContextContaineranalysisV1beta1: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
CloudRepoSourceContextResponse: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
CloudRepoSourceContextResponseContaineranalysisV1beta1: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
Command: Command describes a step performed as part of the build pipeline.
CommandContaineranalysisV1alpha1: Command describes a step performed as part of the build pipeline.
CommandContaineranalysisV1beta1: Command describes a step performed as part of the build pipeline.
CommandResponse: Command describes a step performed as part of the build pipeline.
CommandResponseContaineranalysisV1alpha1: Command describes a step performed as part of the build pipeline.
CommandResponseContaineranalysisV1beta1: Command describes a step performed as part of the build pipeline.
Completeness: Indicates that the builder claims certain fields in this message to be complete.
CompletenessContaineranalysisV1alpha1: Indicates that the builder claims certain fields in this message to be complete.
CompletenessResponse: Indicates that the builder claims certain fields in this message to be complete.
CompletenessResponseContaineranalysisV1alpha1: Indicates that the builder claims certain fields in this message to be complete.
ComplianceNote
ComplianceNoteContaineranalysisV1alpha1: ComplianceNote encapsulates all information about a specific compliance check.
ComplianceNoteResponse
ComplianceNoteResponseContaineranalysisV1alpha1: ComplianceNote encapsulates all information about a specific compliance check.
ComplianceOccurrence: An indication that the compliance checks in the associated ComplianceNote were not satisfied for particular resources or a specified reason.
ComplianceOccurrenceContaineranalysisV1alpha1: An indication that the compliance checks in the associated ComplianceNote were not satisfied for particular resources or a specified reason.
ComplianceOccurrenceResponse: An indication that the compliance checks in the associated ComplianceNote were not satisfied for particular resources or a specified reason.
ComplianceOccurrenceResponseContaineranalysisV1alpha1: An indication that the compliance checks in the associated ComplianceNote were not satisfied for particular resources or a specified reason.
ComplianceVersion: Describes the CIS benchmark version that is applicable to a given OS and os version.
ComplianceVersionContaineranalysisV1alpha1: Describes the CIS benchmark version that is applicable to a given OS and os version.
ComplianceVersionResponse: Describes the CIS benchmark version that is applicable to a given OS and os version.
ComplianceVersionResponseContaineranalysisV1alpha1: Describes the CIS benchmark version that is applicable to a given OS and os version.
CVSS: Common Vulnerability Scoring System. For details, see https://www.first.org/cvss/specification-document This is a message we will try to use for storing various versions of CVSS rather than making a separate proto for storing a specific version.
CVSSContaineranalysisV1alpha1: Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
CVSSContaineranalysisV1beta1: Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
CVSSResponse: Common Vulnerability Scoring System. For details, see https://www.first.org/cvss/specification-document This is a message we will try to use for storing various versions of CVSS rather than making a separate proto for storing a specific version.
CVSSResponseContaineranalysisV1alpha1: Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
CVSSResponseContaineranalysisV1beta1: Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
CVSSv3: Common Vulnerability Scoring System version 3. For details, see https://www.first.org/cvss/specification-document
CVSSv3ContaineranalysisV1beta1: Deprecated. Common Vulnerability Scoring System version 3. For details, see https://www.first.org/cvss/specification-document
CVSSv3Response: Common Vulnerability Scoring System version 3. For details, see https://www.first.org/cvss/specification-document
CVSSv3ResponseContaineranalysisV1beta1: Deprecated. Common Vulnerability Scoring System version 3. For details, see https://www.first.org/cvss/specification-document
Deployable: An artifact that can be deployed in some runtime.
DeployableContaineranalysisV1beta1: An artifact that can be deployed in some runtime.
DeployableResponse: An artifact that can be deployed in some runtime.
DeployableResponseContaineranalysisV1beta1: An artifact that can be deployed in some runtime.
DeploymentContaineranalysisV1beta1: The period during which some deployable was active in a runtime.
DeploymentNote: An artifact that can be deployed in some runtime.
DeploymentNoteResponse: An artifact that can be deployed in some runtime.
DeploymentOccurrence: The period during which some deployable was active in a runtime.
DeploymentOccurrenceResponse: The period during which some deployable was active in a runtime.
DeploymentResponse: The period during which some deployable was active in a runtime.
DeploymentResponseContaineranalysisV1beta1: The period during which some deployable was active in a runtime.
DeploymentType: The period during which some deployable was active in a runtime.
Derived: Derived describes the derived image portion (Occurrence) of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .
DerivedContaineranalysisV1beta1: Derived describes the derived image portion (Occurrence) of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .
DerivedResponse: Derived describes the derived image portion (Occurrence) of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .
DerivedResponseContaineranalysisV1beta1: Derived describes the derived image portion (Occurrence) of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .
Detail: A detail for a distro and package affected by this vulnerability and its associated fix (if one is available).
DetailContaineranalysisV1alpha1: Identifies all occurrences of this vulnerability in the package for a specific distro/location For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
DetailContaineranalysisV1beta1: Identifies all appearances of this vulnerability in the package for a specific distro/location. For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
DetailResponse: A detail for a distro and package affected by this vulnerability and its associated fix (if one is available).
DetailResponseContaineranalysisV1alpha1: Identifies all occurrences of this vulnerability in the package for a specific distro/location For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
DetailResponseContaineranalysisV1beta1: Identifies all appearances of this vulnerability in the package for a specific distro/location. For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
Details: Details of an attestation occurrence.
DetailsResponse: Details of an attestation occurrence.
Digest: Digest information.
DigestContaineranalysisV1alpha1: Digest information.
DigestContaineranalysisV1beta1: Digest information.
DigestResponse: Digest information.
DigestResponseContaineranalysisV1alpha1: Digest information.
DigestResponseContaineranalysisV1beta1: Digest information.
Discovered: Provides information about the scan status of a discovered resource.
DiscoveredContaineranalysisV1beta1: Provides information about the analysis status of a discovered resource.
DiscoveredResponse: Provides information about the scan status of a discovered resource.
DiscoveredResponseContaineranalysisV1beta1: Provides information about the analysis status of a discovered resource.
Discovery: A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis. The occurrence's operation will indicate the status of the analysis. Absence of an occurrence linked to this note for a resource indicates that analysis hasn't started.
DiscoveryContaineranalysisV1beta1: A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis.
DiscoveryNote: A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis.
DiscoveryNoteResponse: A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis.
DiscoveryOccurrence: Provides information about the analysis status of a discovered resource.
DiscoveryOccurrenceResponse: Provides information about the analysis status of a discovered resource.
DiscoveryResponse: A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis. The occurrence's operation will indicate the status of the analysis. Absence of an occurrence linked to this note for a resource indicates that analysis hasn't started.
DiscoveryResponseContaineranalysisV1beta1: A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis.
Distribution: This represents a particular channel of distribution for a given package. E.g., Debian's jessie-backports dpkg mirror.
DistributionContaineranalysisV1alpha1: This represents a particular channel of distribution for a given package. e.g. Debian's jessie-backports dpkg mirror
DistributionContaineranalysisV1beta1: This represents a particular channel of distribution for a given package. E.g., Debian's jessie-backports dpkg mirror.
DistributionResponse: This represents a particular channel of distribution for a given package. E.g., Debian's jessie-backports dpkg mirror.
DistributionResponseContaineranalysisV1alpha1: This represents a particular channel of distribution for a given package. e.g. Debian's jessie-backports dpkg mirror
DistributionResponseContaineranalysisV1beta1: This represents a particular channel of distribution for a given package. E.g., Debian's jessie-backports dpkg mirror.
DocumentNote: DocumentNote represents an SPDX Document Creation Infromation section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentNoteContaineranalysisV1beta1: DocumentNote represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentNoteResponse: DocumentNote represents an SPDX Document Creation Infromation section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentNoteResponseContaineranalysisV1beta1: DocumentNote represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentOccurrence: DocumentOccurrence represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentOccurrenceContaineranalysisV1beta1: DocumentOccurrence represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentOccurrenceResponse: DocumentOccurrence represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DocumentOccurrenceResponseContaineranalysisV1beta1: DocumentOccurrence represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/
DSSEAttestationNote
DSSEAttestationNoteContaineranalysisV1alpha1: A note describing an attestation
DSSEAttestationNoteResponse
DSSEAttestationNoteResponseContaineranalysisV1alpha1: A note describing an attestation
DSSEAttestationOccurrence: Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at the top level of the Occurrence.
DSSEAttestationOccurrenceContaineranalysisV1alpha1: An occurrence describing an attestation on a resource
DSSEAttestationOccurrenceResponse: Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at the top level of the Occurrence.
DSSEAttestationOccurrenceResponseContaineranalysisV1alpha1: An occurrence describing an attestation on a resource
DSSEHint: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
DSSEHintContaineranalysisV1alpha1: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
DSSEHintResponse: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
DSSEHintResponseContaineranalysisV1alpha1: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
Envelope: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.
EnvelopeContaineranalysisV1alpha1: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.
EnvelopeContaineranalysisV1beta1: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.
EnvelopeResponse: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.
EnvelopeResponseContaineranalysisV1alpha1: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.
EnvelopeResponseContaineranalysisV1beta1: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.
EnvelopeSignature
EnvelopeSignatureContaineranalysisV1alpha1: A DSSE signature
EnvelopeSignatureContaineranalysisV1beta1
EnvelopeSignatureResponse
EnvelopeSignatureResponseContaineranalysisV1alpha1: A DSSE signature
EnvelopeSignatureResponseContaineranalysisV1beta1
Environment: Defines an object for the environment field in in-toto links. The suggested fields are "variables", "filesystem", and "workdir".
EnvironmentResponse: Defines an object for the environment field in in-toto links. The suggested fields are "variables", "filesystem", and "workdir".
Expr: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprContaineranalysisV1alpha1: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprContaineranalysisV1beta1: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprResponse: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprResponseContaineranalysisV1alpha1: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExprResponseContaineranalysisV1beta1: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.
ExternalRef: An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
ExternalRefContaineranalysisV1beta1: An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
ExternalRefResponse: An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
ExternalRefResponseContaineranalysisV1beta1: An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
FileLocation: Indicates the location at which a package was found.
FileLocationResponse: Indicates the location at which a package was found.
FileNote: FileNote represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileNoteContaineranalysisV1beta1: FileNote represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileNoteResponse: FileNote represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileNoteResponseContaineranalysisV1beta1: FileNote represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileOccurrence: FileOccurrence represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileOccurrenceContaineranalysisV1beta1: FileOccurrence represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileOccurrenceResponse: FileOccurrence represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
FileOccurrenceResponseContaineranalysisV1beta1: FileOccurrence represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/
Fingerprint: A set of properties that uniquely identify a given Docker image.
FingerprintContaineranalysisV1alpha1: A set of properties that uniquely identify a given Docker image.
FingerprintContaineranalysisV1beta1: A set of properties that uniquely identify a given Docker image.
FingerprintResponse: A set of properties that uniquely identify a given Docker image.
FingerprintResponseContaineranalysisV1alpha1: A set of properties that uniquely identify a given Docker image.
FingerprintResponseContaineranalysisV1beta1: A set of properties that uniquely identify a given Docker image.
GenericSignedAttestation: An attestation wrapper that uses the Grafeas Signature message. This attestation must define the serialized_payload that the signatures verify and any metadata necessary to interpret that plaintext. The signatures should always be over the serialized_payload bytestring.
GenericSignedAttestationResponse: An attestation wrapper that uses the Grafeas Signature message. This attestation must define the serialized_payload that the signatures verify and any metadata necessary to interpret that plaintext. The signatures should always be over the serialized_payload bytestring.
GerritSourceContext: A SourceContext referring to a Gerrit project.
GerritSourceContextContaineranalysisV1beta1: A SourceContext referring to a Gerrit project.
GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
GerritSourceContextResponseContaineranalysisV1beta1: A SourceContext referring to a Gerrit project.
GetNoteArgs: Arguments for getNote. Arguments for getNote.
GetNoteContaineranalysisV1alpha1Args: Arguments for getNote. Arguments for getNote.
GetNoteContaineranalysisV1alpha1Result: Result data returned by getNote.
GetNoteContaineranalysisV1beta1Args: Arguments for getNote. Arguments for getNote.
GetNoteContaineranalysisV1beta1Result: Result data returned by getNote.
GetNoteIamPolicyArgs: Arguments for getNoteIamPolicy. Arguments for getNoteIamPolicy.
GetNoteIamPolicyContaineranalysisV1alpha1Args: Arguments for getNoteIamPolicy. Arguments for getNoteIamPolicy.
GetNoteIamPolicyContaineranalysisV1alpha1Result: Result data returned by getNoteIamPolicy.
GetNoteIamPolicyContaineranalysisV1beta1Args: Arguments for getNoteIamPolicy. Arguments for getNoteIamPolicy.
GetNoteIamPolicyContaineranalysisV1beta1Result: Result data returned by getNoteIamPolicy.
GetNoteIamPolicyResult: Result data returned by getNoteIamPolicy.
GetNoteResult: Result data returned by getNote.
GetOccurrenceArgs: Arguments for getOccurrence. Arguments for getOccurrence.
GetOccurrenceContaineranalysisV1alpha1Args: Arguments for getOccurrence. Arguments for getOccurrence.
GetOccurrenceContaineranalysisV1alpha1Result: Result data returned by getOccurrence.
GetOccurrenceContaineranalysisV1beta1Args: Arguments for getOccurrence. Arguments for getOccurrence.
GetOccurrenceContaineranalysisV1beta1Result: Result data returned by getOccurrence.
GetOccurrenceIamPolicyArgs: Arguments for getOccurrenceIamPolicy. Arguments for getOccurrenceIamPolicy.
GetOccurrenceIamPolicyContaineranalysisV1alpha1Args: Arguments for getOccurrenceIamPolicy. Arguments for getOccurrenceIamPolicy.
GetOccurrenceIamPolicyContaineranalysisV1alpha1Result: Result data returned by getOccurrenceIamPolicy.
GetOccurrenceIamPolicyContaineranalysisV1beta1Args: Arguments for getOccurrenceIamPolicy. Arguments for getOccurrenceIamPolicy.
GetOccurrenceIamPolicyContaineranalysisV1beta1Result: Result data returned by getOccurrenceIamPolicy.
GetOccurrenceIamPolicyResult: Result data returned by getOccurrenceIamPolicy.
GetOccurrenceResult: Result data returned by getOccurrence.
GetProviderNoteIamPolicyArgs: Arguments for getProviderNoteIamPolicy. Arguments for getProviderNoteIamPolicy.
GetProviderNoteIamPolicyResult: Result data returned by getProviderNoteIamPolicy.
GitSourceContext: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GitSourceContextContaineranalysisV1beta1: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GitSourceContextResponse: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GitSourceContextResponseContaineranalysisV1beta1: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GoogleDevtoolsContaineranalysisV1alpha1AliasContext: An alias to a repo revision.
GoogleDevtoolsContaineranalysisV1alpha1AliasContextResponse: An alias to a repo revision.
GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContext: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextResponse: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContext: A SourceContext referring to a Gerrit project.
GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
GoogleDevtoolsContaineranalysisV1alpha1GitSourceContext: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextResponse: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoId: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdResponse: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
GoogleDevtoolsContaineranalysisV1alpha1RepoId: A unique identifier for a Cloud Repo.
GoogleDevtoolsContaineranalysisV1alpha1RepoIdResponse: A unique identifier for a Cloud Repo.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilder: Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompleteness: Indicates that the builder claims certain fields in this message to be complete.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessResponse: Indicates that the builder claims certain fields in this message to be complete.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSource: Describes where the config file that kicked off the build came from. This is effectively a pointer to the source where buildConfig came from.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceResponse: Describes where the config file that kicked off the build came from. This is effectively a pointer to the source where buildConfig came from.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocation: Identifies the event that kicked off the build.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationResponse: Identifies the event that kicked off the build.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterial: The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialResponse: The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadata: Other properties of the build.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataResponse: Other properties of the build.
GoogleDevtoolsContaineranalysisV1alpha1SourceContext: A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
GoogleDevtoolsContaineranalysisV1alpha1SourceContextResponse: A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
GrafeasV1beta1BuildDetails: Details of a build occurrence.
GrafeasV1beta1BuildDetailsResponse: Details of a build occurrence.
GrafeasV1beta1DeploymentDetails: Details of a deployment occurrence.
GrafeasV1beta1DeploymentDetailsResponse: Details of a deployment occurrence.
GrafeasV1beta1DiscoveryDetails: Details of a discovery occurrence.
GrafeasV1beta1DiscoveryDetailsResponse: Details of a discovery occurrence.
GrafeasV1beta1ImageDetails: Details of an image occurrence.
GrafeasV1beta1ImageDetailsResponse: Details of an image occurrence.
GrafeasV1beta1IntotoArtifact
GrafeasV1beta1IntotoArtifactResponse
GrafeasV1beta1IntotoDetails: This corresponds to a signed in-toto link - it is made up of one or more signatures and the in-toto link itself. This is used for occurrences of a Grafeas in-toto note.
GrafeasV1beta1IntotoDetailsResponse: This corresponds to a signed in-toto link - it is made up of one or more signatures and the in-toto link itself. This is used for occurrences of a Grafeas in-toto note.
GrafeasV1beta1IntotoSignature: A signature object consists of the KeyID used and the signature itself.
GrafeasV1beta1IntotoSignatureResponse: A signature object consists of the KeyID used and the signature itself.
GrafeasV1beta1PackageDetails: Details of a package occurrence.
GrafeasV1beta1PackageDetailsResponse: Details of a package occurrence.
GrafeasV1beta1VulnerabilityDetails: Details of a vulnerability Occurrence.
GrafeasV1beta1VulnerabilityDetailsResponse: Details of a vulnerability Occurrence.
GrafeasV1FileLocation: Indicates the location at which a package was found.
GrafeasV1FileLocationResponse: Indicates the location at which a package was found.
GrafeasV1SlsaProvenanceZeroTwoSlsaBuilder: Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
GrafeasV1SlsaProvenanceZeroTwoSlsaCompleteness: Indicates that the builder claims certain fields in this message to be complete.
GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessResponse: Indicates that the builder claims certain fields in this message to be complete.
GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSource: Describes where the config file that kicked off the build came from. This is effectively a pointer to the source where buildConfig came from.
GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceResponse: Describes where the config file that kicked off the build came from. This is effectively a pointer to the source where buildConfig came from.
GrafeasV1SlsaProvenanceZeroTwoSlsaInvocation: Identifies the event that kicked off the build.
GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationResponse: Identifies the event that kicked off the build.
GrafeasV1SlsaProvenanceZeroTwoSlsaMaterial: The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialResponse: The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
GrafeasV1SlsaProvenanceZeroTwoSlsaMetadata: Other properties of the build.
GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataResponse: Other properties of the build.
Hash: Container message for hash values.
HashContaineranalysisV1beta1: Container message for hash values.
HashResponse: Container message for hash values.
HashResponseContaineranalysisV1beta1: Container message for hash values.
Hint: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
HintContaineranalysisV1beta1: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
HintResponse: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
HintResponseContaineranalysisV1beta1: This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.
IdentifierHelper: Helps in identifying the underlying product. This should be treated like a one-of field. Only one field should be set in this proto. This is a workaround because spanner indexes on one-of fields restrict addition and deletion of fields.
IdentifierHelperResponse: Helps in identifying the underlying product. This should be treated like a one-of field. Only one field should be set in this proto. This is a workaround because spanner indexes on one-of fields restrict addition and deletion of fields.
Identity: The unique identifier of the update.
IdentityResponse: The unique identifier of the update.
ImageNote: Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g., a tag of the resource_url.
ImageNoteResponse: Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g., a tag of the resource_url.
ImageOccurrence: Details of the derived image portion of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .
ImageOccurrenceResponse: Details of the derived image portion of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .
Installation: This represents how a particular software package may be installed on a system.
InstallationContaineranalysisV1beta1: This represents how a particular software package may be installed on a system.
InstallationResponse: This represents how a particular software package may be installed on a system.
InstallationResponseContaineranalysisV1beta1: This represents how a particular software package may be installed on a system.
InToto: This contains the fields corresponding to the definition of a software supply chain step in an in-toto layout. This information goes into a Grafeas note.
InTotoProvenance
InTotoProvenanceContaineranalysisV1alpha1
InTotoProvenanceResponse
InTotoProvenanceResponseContaineranalysisV1alpha1
InTotoResponse: This contains the fields corresponding to the definition of a software supply chain step in an in-toto layout. This information goes into a Grafeas note.
InTotoSlsaProvenanceV1
InTotoSlsaProvenanceV1ContaineranalysisV1alpha1
InTotoSlsaProvenanceV1ContaineranalysisV1beta1
InTotoSlsaProvenanceV1Response
InTotoSlsaProvenanceV1ResponseContaineranalysisV1alpha1
InTotoSlsaProvenanceV1ResponseContaineranalysisV1beta1
InTotoStatement: Spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement The serialized InTotoStatement will be stored as Envelope.payload. Envelope.payloadType is always "application/vnd.in-toto+json".
InTotoStatementContaineranalysisV1alpha1: Spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement The serialized InTotoStatement will be stored as Envelope.payload. Envelope.payloadType is always "application/vnd.in-toto+json".
InTotoStatementResponse: Spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement The serialized InTotoStatement will be stored as Envelope.payload. Envelope.payloadType is always "application/vnd.in-toto+json".
InTotoStatementResponseContaineranalysisV1alpha1: Spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement The serialized InTotoStatement will be stored as Envelope.payload. Envelope.payloadType is always "application/vnd.in-toto+json".
Justification: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
JustificationContaineranalysisV1alpha1: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
JustificationContaineranalysisV1beta1: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
JustificationResponse: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
JustificationResponseContaineranalysisV1alpha1: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
JustificationResponseContaineranalysisV1beta1: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
Jwt
JwtResponse
KnowledgeBase
KnowledgeBaseContaineranalysisV1beta1
KnowledgeBaseResponse
KnowledgeBaseResponseContaineranalysisV1beta1
Layer: Layer holds metadata specific to a layer of a Docker image.
LayerContaineranalysisV1alpha1: Layer holds metadata specific to a layer of a Docker image.
LayerContaineranalysisV1beta1: Layer holds metadata specific to a layer of a Docker image.
LayerResponse: Layer holds metadata specific to a layer of a Docker image.
LayerResponseContaineranalysisV1alpha1: Layer holds metadata specific to a layer of a Docker image.
LayerResponseContaineranalysisV1beta1: Layer holds metadata specific to a layer of a Docker image.
License: License information.
LicenseContaineranalysisV1alpha1: License information.
LicenseContaineranalysisV1beta1: License information.
LicenseResponse: License information.
LicenseResponseContaineranalysisV1alpha1: License information.
LicenseResponseContaineranalysisV1beta1: License information.
Link: This corresponds to an in-toto link.
LinkResponse: This corresponds to an in-toto link.
Location: An occurrence of a particular package installation found within a system's filesystem. E.g., glibc was found in /var/lib/dpkg/status.
LocationContaineranalysisV1alpha1: An occurrence of a particular package installation found within a system's filesystem. e.g. glibc was found in /var/lib/dpkg/status
LocationContaineranalysisV1beta1: An occurrence of a particular package installation found within a system's filesystem. E.g., glibc was found in /var/lib/dpkg/status.
LocationResponse: An occurrence of a particular package installation found within a system's filesystem. E.g., glibc was found in /var/lib/dpkg/status.
LocationResponseContaineranalysisV1alpha1: An occurrence of a particular package installation found within a system's filesystem. e.g. glibc was found in /var/lib/dpkg/status
LocationResponseContaineranalysisV1beta1: An occurrence of a particular package installation found within a system's filesystem. E.g., glibc was found in /var/lib/dpkg/status.
Material
MaterialContaineranalysisV1alpha1: Material is a material used in the generation of the provenance
MaterialResponse
MaterialResponseContaineranalysisV1alpha1: Material is a material used in the generation of the provenance
Metadata: Other properties of the build.
MetadataContaineranalysisV1alpha1: Other properties of the build.
MetadataResponse: Other properties of the build.
MetadataResponseContaineranalysisV1alpha1: Other properties of the build.
NonCompliantFile: Details about files that caused a compliance check to fail. display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'.
NonCompliantFileContaineranalysisV1alpha1: Details about files that caused a compliance check to fail.
NonCompliantFileResponse: Details about files that caused a compliance check to fail. display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'.
NonCompliantFileResponseContaineranalysisV1alpha1: Details about files that caused a compliance check to fail.
Note: Creates a new note. Auto-naming is currently not supported for this resource.
NoteArgs: The set of arguments for Note. The set of arguments for Note.
NoteContaineranalysisV1alpha1: Creates a new Note.
NoteContaineranalysisV1alpha1Args: The set of arguments for Note. The set of arguments for Note.
NoteContaineranalysisV1beta1: Creates a new note. Auto-naming is currently not supported for this resource.
NoteContaineranalysisV1beta1Args: The set of arguments for Note. The set of arguments for Note.
NoteIamBinding: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
NoteIamBindingArgs: The set of arguments for NoteIamBinding. The set of arguments for NoteIamBinding.
NoteIamBindingContaineranalysisV1alpha1: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes
NoteIamBindingContaineranalysisV1alpha1Args: The set of arguments for NoteIamBinding. The set of arguments for NoteIamBinding.
NoteIamBindingContaineranalysisV1beta1: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
NoteIamBindingContaineranalysisV1beta1Args: The set of arguments for NoteIamBinding. The set of arguments for NoteIamBinding.
NoteIamMember: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
NoteIamMemberArgs: The set of arguments for NoteIamMember. The set of arguments for NoteIamMember.
NoteIamMemberContaineranalysisV1alpha1: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes
NoteIamMemberContaineranalysisV1alpha1Args: The set of arguments for NoteIamMember. The set of arguments for NoteIamMember.
NoteIamMemberContaineranalysisV1beta1: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
NoteIamMemberContaineranalysisV1beta1Args: The set of arguments for NoteIamMember. The set of arguments for NoteIamMember.
NoteIamPolicy: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
NoteIamPolicyArgs: The set of arguments for NoteIamPolicy. The set of arguments for NoteIamPolicy.
NoteIamPolicyContaineranalysisV1alpha1: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
NoteIamPolicyContaineranalysisV1alpha1Args: The set of arguments for NoteIamPolicy. The set of arguments for NoteIamPolicy.
NoteIamPolicyContaineranalysisV1beta1: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
NoteIamPolicyContaineranalysisV1beta1Args: The set of arguments for NoteIamPolicy. The set of arguments for NoteIamPolicy.
Occurrence: Creates a new occurrence. Auto-naming is currently not supported for this resource.
OccurrenceArgs: The set of arguments for Occurrence. The set of arguments for Occurrence.
OccurrenceContaineranalysisV1alpha1: Creates a new Occurrence. Use this method to create Occurrences for a resource.
OccurrenceContaineranalysisV1alpha1Args: The set of arguments for Occurrence. The set of arguments for Occurrence.
OccurrenceContaineranalysisV1beta1: Creates a new occurrence. Auto-naming is currently not supported for this resource.
OccurrenceContaineranalysisV1beta1Args: The set of arguments for Occurrence. The set of arguments for Occurrence.
OccurrenceIamBinding: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
OccurrenceIamBindingArgs: The set of arguments for OccurrenceIamBinding. The set of arguments for OccurrenceIamBinding.
OccurrenceIamBindingContaineranalysisV1alpha1: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes
OccurrenceIamBindingContaineranalysisV1alpha1Args: The set of arguments for OccurrenceIamBinding. The set of arguments for OccurrenceIamBinding.
OccurrenceIamBindingContaineranalysisV1beta1: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
OccurrenceIamBindingContaineranalysisV1beta1Args: The set of arguments for OccurrenceIamBinding. The set of arguments for OccurrenceIamBinding.
OccurrenceIamMember: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
OccurrenceIamMemberArgs: The set of arguments for OccurrenceIamMember. The set of arguments for OccurrenceIamMember.
OccurrenceIamMemberContaineranalysisV1alpha1: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes
OccurrenceIamMemberContaineranalysisV1alpha1Args: The set of arguments for OccurrenceIamMember. The set of arguments for OccurrenceIamMember.
OccurrenceIamMemberContaineranalysisV1beta1: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences.
OccurrenceIamMemberContaineranalysisV1beta1Args: The set of arguments for OccurrenceIamMember. The set of arguments for OccurrenceIamMember.
OccurrenceIamPolicy: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
OccurrenceIamPolicyArgs: The set of arguments for OccurrenceIamPolicy. The set of arguments for OccurrenceIamPolicy.
OccurrenceIamPolicyContaineranalysisV1alpha1: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
OccurrenceIamPolicyContaineranalysisV1alpha1Args: The set of arguments for OccurrenceIamPolicy. The set of arguments for OccurrenceIamPolicy.
OccurrenceIamPolicyContaineranalysisV1beta1: Sets the access control policy on the specified note or occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or an occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
OccurrenceIamPolicyContaineranalysisV1beta1Args: The set of arguments for OccurrenceIamPolicy. The set of arguments for OccurrenceIamPolicy.
OperationResponse: This resource represents a long-running operation that is the result of a network API call.
Package: This represents a particular package that is distributed over various channels. e.g. glibc (aka libc6) is distributed by many, at various versions.
PackageContaineranalysisV1beta1: Package represents a particular package version.
PackageInfoNote: PackageInfoNote represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoNoteContaineranalysisV1beta1: PackageInfoNote represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoNoteResponse: PackageInfoNote represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoNoteResponseContaineranalysisV1beta1: PackageInfoNote represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoOccurrence: PackageInfoOccurrence represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoOccurrenceContaineranalysisV1beta1: PackageInfoOccurrence represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoOccurrenceResponse: PackageInfoOccurrence represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageInfoOccurrenceResponseContaineranalysisV1beta1: PackageInfoOccurrence represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/
PackageIssue: A detail for a distro and package this vulnerability occurrence was found in and its associated fix (if one is available).
PackageIssueContaineranalysisV1alpha1: This message wraps a location affected by a vulnerability and its associated fix (if one is available).
PackageIssueContaineranalysisV1beta1: This message wraps a location affected by a vulnerability and its associated fix (if one is available).
PackageIssueResponse: A detail for a distro and package this vulnerability occurrence was found in and its associated fix (if one is available).
PackageIssueResponseContaineranalysisV1alpha1: This message wraps a location affected by a vulnerability and its associated fix (if one is available).
PackageIssueResponseContaineranalysisV1beta1: This message wraps a location affected by a vulnerability and its associated fix (if one is available).
PackageNote: PackageNote represents a particular package version.
PackageNoteResponse: PackageNote represents a particular package version.
PackageOccurrence: Details on how a particular software package was installed on a system.
PackageOccurrenceResponse: Details on how a particular software package was installed on a system.
PackageResponse: This represents a particular package that is distributed over various channels. e.g. glibc (aka libc6) is distributed by many, at various versions.
PackageResponseContaineranalysisV1beta1: Package represents a particular package version.
PgpSignedAttestation: An attestation wrapper with a PGP-compatible signature. This message only supports ATTACHED signatures, where the payload that is signed is included alongside the signature itself in the same file.
PgpSignedAttestationContaineranalysisV1beta1: An attestation wrapper with a PGP-compatible signature. This message only supports ATTACHED signatures, where the payload that is signed is included alongside the signature itself in the same file.
PgpSignedAttestationResponse: An attestation wrapper with a PGP-compatible signature. This message only supports ATTACHED signatures, where the payload that is signed is included alongside the signature itself in the same file.
PgpSignedAttestationResponseContaineranalysisV1beta1: An attestation wrapper with a PGP-compatible signature. This message only supports ATTACHED signatures, where the payload that is signed is included alongside the signature itself in the same file.
Product: Product contains information about a product and how to uniquely identify it.
ProductContaineranalysisV1alpha1: Product contains information about a product and how to uniquely identify it.
ProductContaineranalysisV1beta1: Product contains information about a product and how to uniquely identify it.
ProductResponse: Product contains information about a product and how to uniquely identify it.
ProductResponseContaineranalysisV1alpha1: Product contains information about a product and how to uniquely identify it.
ProductResponseContaineranalysisV1beta1: Product contains information about a product and how to uniquely identify it.
ProjectRepoId: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
ProjectRepoIdContaineranalysisV1beta1: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
ProjectRepoIdResponse: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
ProjectRepoIdResponseContaineranalysisV1beta1: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
ProvenanceBuilder
ProvenanceBuilderContaineranalysisV1alpha1
ProvenanceBuilderContaineranalysisV1beta1
ProvenanceBuilderResponse
ProvenanceBuilderResponseContaineranalysisV1alpha1
ProvenanceBuilderResponseContaineranalysisV1beta1
ProviderNoteIamBinding: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes
ProviderNoteIamBindingArgs: The set of arguments for ProviderNoteIamBinding. The set of arguments for ProviderNoteIamBinding.
ProviderNoteIamMember: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes
ProviderNoteIamMemberArgs: The set of arguments for ProviderNoteIamMember. The set of arguments for ProviderNoteIamMember.
ProviderNoteIamPolicy: Sets the access control policy on the specified Note or Occurrence. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a Note or an Occurrence, respectively. Attempting to call this method without these permissions will result in a PERMISSION_DENIEDerror. Attempting to call this method on a non-existent resource will result in aNOT_FOUNDerror if the user hascontaineranalysis.notes.listpermission on aNoteorcontaineranalysis.occurrences.liston anOccurrence, or a PERMISSION_DENIEDerror otherwise. The resource takes the following formats:projects/{projectid}/occurrences/{occurrenceid}` for occurrences and projects/{projectid}/notes/{noteid} for notes Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.
ProviderNoteIamPolicyArgs: The set of arguments for ProviderNoteIamPolicy. The set of arguments for ProviderNoteIamPolicy.
Publisher: Publisher contains information about the publisher of this Note.
PublisherContaineranalysisV1alpha1: Publisher contains information about the publisher of this Note.
PublisherContaineranalysisV1beta1: Publisher contains information about the publisher of this Note.
PublisherResponse: Publisher contains information about the publisher of this Note.
PublisherResponseContaineranalysisV1alpha1: Publisher contains information about the publisher of this Note.
PublisherResponseContaineranalysisV1beta1: Publisher contains information about the publisher of this Note.
Recipe: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
RecipeContaineranalysisV1alpha1: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
RecipeResponse: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
RecipeResponseContaineranalysisV1alpha1: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
RelatedUrl: Metadata for any related URL information.
RelatedUrlContaineranalysisV1alpha1: Metadata for any related URL information
RelatedUrlContaineranalysisV1beta1: Metadata for any related URL information.
RelatedUrlResponse: Metadata for any related URL information.
RelatedUrlResponseContaineranalysisV1alpha1: Metadata for any related URL information
RelatedUrlResponseContaineranalysisV1beta1: Metadata for any related URL information.
RelationshipNote: RelationshipNote represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipNoteContaineranalysisV1beta1: RelationshipNote represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipNoteResponse: RelationshipNote represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipNoteResponseContaineranalysisV1beta1: RelationshipNote represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipOccurrence: RelationshipOccurrence represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipOccurrenceContaineranalysisV1beta1: RelationshipOccurrence represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipOccurrenceResponse: RelationshipOccurrence represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
RelationshipOccurrenceResponseContaineranalysisV1beta1: RelationshipOccurrence represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
Remediation: Specifies details on how to handle (and presumably, fix) a vulnerability.
RemediationContaineranalysisV1alpha1: Specifies details on how to handle (and presumably, fix) a vulnerability.
RemediationContaineranalysisV1beta1: Specifies details on how to handle (and presumably, fix) a vulnerability.
RemediationResponse: Specifies details on how to handle (and presumably, fix) a vulnerability.
RemediationResponseContaineranalysisV1alpha1: Specifies details on how to handle (and presumably, fix) a vulnerability.
RemediationResponseContaineranalysisV1beta1: Specifies details on how to handle (and presumably, fix) a vulnerability.
RepoId: A unique identifier for a Cloud Repo.
RepoIdContaineranalysisV1beta1: A unique identifier for a Cloud Repo.
RepoIdResponse: A unique identifier for a Cloud Repo.
RepoIdResponseContaineranalysisV1beta1: A unique identifier for a Cloud Repo.
RepoSource: RepoSource describes the location of the source in a Google Cloud Source Repository.
RepoSourceResponse: RepoSource describes the location of the source in a Google Cloud Source Repository.
ResourceContaineranalysisV1beta1: An entity that can have metadata. For example, a Docker image.
ResourceDescriptor
ResourceDescriptorContaineranalysisV1alpha1
ResourceDescriptorContaineranalysisV1beta1
ResourceDescriptorResponse
ResourceDescriptorResponseContaineranalysisV1alpha1
ResourceDescriptorResponseContaineranalysisV1beta1
ResourceResponse: Resource is an entity that can have metadata. E.g., a Docker image.
ResourceResponseContaineranalysisV1beta1: An entity that can have metadata. For example, a Docker image.
ResourceType: Resource is an entity that can have metadata. E.g., a Docker image.
RunDetails
RunDetailsContaineranalysisV1alpha1
RunDetailsContaineranalysisV1beta1
RunDetailsResponse
RunDetailsResponseContaineranalysisV1alpha1
RunDetailsResponseContaineranalysisV1beta1
SbomReferenceIntotoPayload: The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.
SbomReferenceIntotoPayloadContaineranalysisV1alpha1: The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.
SbomReferenceIntotoPayloadContaineranalysisV1beta1: The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.
SbomReferenceIntotoPayloadResponse: The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.
SbomReferenceIntotoPayloadResponseContaineranalysisV1alpha1: The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.
SbomReferenceIntotoPayloadResponseContaineranalysisV1beta1: The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.
SbomReferenceIntotoPredicate: A predicate which describes the SBOM being referenced.
SbomReferenceIntotoPredicateContaineranalysisV1alpha1: A predicate which describes the SBOM being referenced.
SbomReferenceIntotoPredicateContaineranalysisV1beta1: A predicate which describes the SBOM being referenced.
SbomReferenceIntotoPredicateResponse: A predicate which describes the SBOM being referenced.
SbomReferenceIntotoPredicateResponseContaineranalysisV1alpha1: A predicate which describes the SBOM being referenced.
SbomReferenceIntotoPredicateResponseContaineranalysisV1beta1: A predicate which describes the SBOM being referenced.
SBOMReferenceNote: The note representing an SBOM reference.
SBOMReferenceNoteContaineranalysisV1alpha1: The note representing an SBOM reference.
SBOMReferenceNoteContaineranalysisV1beta1: The note representing an SBOM reference.
SBOMReferenceNoteResponse: The note representing an SBOM reference.
SBOMReferenceNoteResponseContaineranalysisV1alpha1: The note representing an SBOM reference.
SBOMReferenceNoteResponseContaineranalysisV1beta1: The note representing an SBOM reference.
SBOMReferenceOccurrence: The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
SBOMReferenceOccurrenceContaineranalysisV1alpha1: The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
SBOMReferenceOccurrenceContaineranalysisV1beta1: The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
SBOMReferenceOccurrenceResponse: The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
SBOMReferenceOccurrenceResponseContaineranalysisV1alpha1: The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
SBOMReferenceOccurrenceResponseContaineranalysisV1beta1: The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.
SBOMStatus: The status of an SBOM generation.
SBOMStatusContaineranalysisV1beta1: The status of an SBOM generation.
SBOMStatusResponse: The status of an SBOM generation.
SBOMStatusResponseContaineranalysisV1alpha1: The status of an SBOM generation.
SBOMStatusResponseContaineranalysisV1beta1: The status of an SBOM generation.
Signature: Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from public_key_id to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature public_key_id as anything more than a key lookup hint. The public_key_id DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The public_key_id is not recognized by the verifier. * The public key that public_key_id refers to does not verify the signature with respect to the payload. The signature contents SHOULD NOT be "attached" (where the payload is included with the serialized signature bytes). Verifiers MUST ignore any "attached" payload and only verify signatures with respect to explicitly provided payload (e.g. a payload field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).
SignatureContaineranalysisV1beta1: Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from public_key_id to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature public_key_id as anything more than a key lookup hint. The public_key_id DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The public_key_id is not recognized by the verifier. * The public key that public_key_id refers to does not verify the signature with respect to the payload. The signature contents SHOULD NOT be "attached" (where the payload is included with the serialized signature bytes). Verifiers MUST ignore any "attached" payload and only verify signatures with respect to explicitly provided payload (e.g. a payload field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).
SignatureResponse: Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from public_key_id to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature public_key_id as anything more than a key lookup hint. The public_key_id DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The public_key_id is not recognized by the verifier. * The public key that public_key_id refers to does not verify the signature with respect to the payload. The signature contents SHOULD NOT be "attached" (where the payload is included with the serialized signature bytes). Verifiers MUST ignore any "attached" payload and only verify signatures with respect to explicitly provided payload (e.g. a payload field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).
SignatureResponseContaineranalysisV1beta1: Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from public_key_id to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature public_key_id as anything more than a key lookup hint. The public_key_id DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The public_key_id is not recognized by the verifier. * The public key that public_key_id refers to does not verify the signature with respect to the payload. The signature contents SHOULD NOT be "attached" (where the payload is included with the serialized signature bytes). Verifiers MUST ignore any "attached" payload and only verify signatures with respect to explicitly provided payload (e.g. a payload field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).
SigningKey: This defines the format used to record keys used in the software supply chain. An in-toto link is attested using one or more keys defined in the in-toto layout. An example of this is: { "key_id": "776a00e29f3559e0141b3b096f696abc6cfb0c657ab40f441132b345b0...", "key_type": "rsa", "public_key_value": "-----BEGIN PUBLIC KEY-----\nMIIBojANBgkqhkiG9w0B...", "key_scheme": "rsassa-pss-sha256" } The format for in-toto's key definition can be found in section 4.2 of the in-toto specification.
SigningKeyResponse: This defines the format used to record keys used in the software supply chain. An in-toto link is attested using one or more keys defined in the in-toto layout. An example of this is: { "key_id": "776a00e29f3559e0141b3b096f696abc6cfb0c657ab40f441132b345b0...", "key_type": "rsa", "public_key_value": "-----BEGIN PUBLIC KEY-----\nMIIBojANBgkqhkiG9w0B...", "key_scheme": "rsassa-pss-sha256" } The format for in-toto's key definition can be found in section 4.2 of the in-toto specification.
SlsaBuilder
SlsaBuilderContaineranalysisV1alpha1: SlsaBuilder encapsulates the identity of the builder of this provenance.
SlsaCompleteness: Indicates that the builder claims certain fields in this message to be complete.
SlsaCompletenessContaineranalysisV1alpha1: Indicates that the builder claims certain fields in this message to be complete.
SlsaCompletenessResponse: Indicates that the builder claims certain fields in this message to be complete.
SlsaCompletenessResponseContaineranalysisV1alpha1: Indicates that the builder claims certain fields in this message to be complete.
SlsaMetadata: Other properties of the build.
SlsaMetadataContaineranalysisV1alpha1: Other properties of the build.
SlsaMetadataResponse: Other properties of the build.
SlsaMetadataResponseContaineranalysisV1alpha1: Other properties of the build.
SlsaProvenance
SlsaProvenanceContaineranalysisV1alpha1: SlsaProvenance is the slsa provenance as defined by the slsa spec.
SlsaProvenanceResponse
SlsaProvenanceResponseContaineranalysisV1alpha1: SlsaProvenance is the slsa provenance as defined by the slsa spec.
SlsaProvenanceV1: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceV1ContaineranalysisV1alpha1: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceV1ContaineranalysisV1beta1: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceV1Response: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceV1ResponseContaineranalysisV1alpha1: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceV1ResponseContaineranalysisV1beta1: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceZeroTwo: See full explanation of fields at slsa.dev/provenance/v0.2.
SlsaProvenanceZeroTwoContaineranalysisV1alpha1: SlsaProvenanceZeroTwo is the slsa provenance as defined by the slsa spec. See full explanation of fields at slsa.dev/provenance/v0.2.
SlsaProvenanceZeroTwoResponse: See full explanation of fields at slsa.dev/provenance/v0.2.
SlsaProvenanceZeroTwoResponseContaineranalysisV1alpha1: SlsaProvenanceZeroTwo is the slsa provenance as defined by the slsa spec. See full explanation of fields at slsa.dev/provenance/v0.2.
SlsaRecipe: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
SlsaRecipeContaineranalysisV1alpha1: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
SlsaRecipeResponse: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
SlsaRecipeResponseContaineranalysisV1alpha1: Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.
Source: Source describes the location of the source used for the build.
SourceContaineranalysisV1alpha1: Source describes the location of the source used for the build.
SourceContaineranalysisV1beta1: Source describes the location of the source used for the build.
SourceContext: A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
SourceContextContaineranalysisV1beta1: A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
SourceContextResponse: A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
SourceContextResponseContaineranalysisV1beta1: A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
SourceResponse: Source describes the location of the source used for the build.
SourceResponseContaineranalysisV1alpha1: Source describes the location of the source used for the build.
SourceResponseContaineranalysisV1beta1: Source describes the location of the source used for the build.
Status: The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.
StatusContaineranalysisV1alpha1: The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.
StatusContaineranalysisV1beta1: The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.
StatusResponse: The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.
StatusResponseContaineranalysisV1alpha1: The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.
StatusResponseContaineranalysisV1beta1: The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.
StorageSource: StorageSource describes the location of the source in an archive file in Google Cloud Storage.
StorageSourceResponse: StorageSource describes the location of the source in an archive file in Google Cloud Storage.
Subject
SubjectContaineranalysisV1alpha1: Subject refers to the subject of the intoto statement
SubjectContaineranalysisV1beta1: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
SubjectResponse
SubjectResponseContaineranalysisV1alpha1: Subject refers to the subject of the intoto statement
SubjectResponseContaineranalysisV1beta1: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
UpgradeDistribution: The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities.
UpgradeDistributionContaineranalysisV1alpha1: The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities.
UpgradeDistributionResponse: The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities.
UpgradeDistributionResponseContaineranalysisV1alpha1: The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities.
UpgradeNote: An Upgrade Note represents a potential upgrade of a package to a given version. For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), there will be an Upgrade Note. For Windows, windows_update field represents the information related to the update.
UpgradeNoteContaineranalysisV1alpha1: An Upgrade Note represents a potential upgrade of a package to a given version. For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), there will be a Upgrade Note.
UpgradeNoteResponse: An Upgrade Note represents a potential upgrade of a package to a given version. For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), there will be an Upgrade Note. For Windows, windows_update field represents the information related to the update.
UpgradeNoteResponseContaineranalysisV1alpha1: An Upgrade Note represents a potential upgrade of a package to a given version. For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), there will be a Upgrade Note.
UpgradeOccurrence: An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability). For Windows, both distribution and windows_update contain information for the Windows update.
UpgradeOccurrenceContaineranalysisV1alpha1: An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability).
UpgradeOccurrenceResponse: An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability). For Windows, both distribution and windows_update contain information for the Windows update.
UpgradeOccurrenceResponseContaineranalysisV1alpha1: An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability).
URI: An URI message.
URIResponse: An URI message.
Version: Version contains structured information about the version of a package.
VersionContaineranalysisV1alpha1: Version contains structured information about the version of the package. For a discussion of this in Debian/Ubuntu: http://serverfault.com/questions/604541/debian-packages-version-convention For a discussion of this in Redhat/Fedora/Centos: http://blog.jasonantman.com/2014/07/how-yum-and-rpm-compare-versions/
VersionContaineranalysisV1beta1: Version contains structured information about the version of a package.
VersionResponse: Version contains structured information about the version of a package.
VersionResponseContaineranalysisV1alpha1: Version contains structured information about the version of the package. For a discussion of this in Debian/Ubuntu: http://serverfault.com/questions/604541/debian-packages-version-convention For a discussion of this in Redhat/Fedora/Centos: http://blog.jasonantman.com/2014/07/how-yum-and-rpm-compare-versions/
VersionResponseContaineranalysisV1beta1: Version contains structured information about the version of a package.
VexAssessment: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
VexAssessmentContaineranalysisV1alpha1: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
VexAssessmentContaineranalysisV1beta1: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
VexAssessmentResponse: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
VexAssessmentResponseContaineranalysisV1alpha1: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
VexAssessmentResponseContaineranalysisV1beta1: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
Vulnerability: Vulnerability provides metadata about a security vulnerability in a Note.
VulnerabilityAssessmentNote: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE.
VulnerabilityAssessmentNoteContaineranalysisV1alpha1: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE. Multiple VulnerabilityAssessmentNotes together form a Vex statement. Please go/sds-vex-example for a sample Vex statement in the CSAF format.
VulnerabilityAssessmentNoteContaineranalysisV1beta1: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE.
VulnerabilityAssessmentNoteResponse: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE.
VulnerabilityAssessmentNoteResponseContaineranalysisV1alpha1: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE. Multiple VulnerabilityAssessmentNotes together form a Vex statement. Please go/sds-vex-example for a sample Vex statement in the CSAF format.
VulnerabilityAssessmentNoteResponseContaineranalysisV1beta1: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE.
VulnerabilityDetails: Used by Occurrence to point to where the vulnerability exists and how to fix it.
VulnerabilityDetailsResponse: Used by Occurrence to point to where the vulnerability exists and how to fix it.
VulnerabilityLocation: The location of the vulnerability
VulnerabilityLocationContaineranalysisV1beta1: The location of the vulnerability.
VulnerabilityLocationResponse: The location of the vulnerability
VulnerabilityLocationResponseContaineranalysisV1beta1: The location of the vulnerability.
VulnerabilityNote: A security vulnerability that can be found in resources.
VulnerabilityNoteResponse: A security vulnerability that can be found in resources.
VulnerabilityOccurrence: An occurrence of a severity vulnerability on a resource.
VulnerabilityOccurrenceResponse: An occurrence of a severity vulnerability on a resource.
VulnerabilityResponse: Vulnerability provides metadata about a security vulnerability in a Note.
VulnerabilityType: VulnerabilityType provides metadata about a security vulnerability.
VulnerabilityTypeResponse: VulnerabilityType provides metadata about a security vulnerability.
WindowsDetail
WindowsDetailContaineranalysisV1beta1
WindowsDetailResponse
WindowsDetailResponseContaineranalysisV1beta1
WindowsUpdate: Windows Update represents the metadata about the update for the Windows operating system. The fields in this message come from the Windows Update API documented at https://docs.microsoft.com/en-us/windows/win32/api/wuapi/nn-wuapi-iupdate.
WindowsUpdateResponse: Windows Update represents the metadata about the update for the Windows operating system. The fields in this message come from the Windows Update API documented at https://docs.microsoft.com/en-us/windows/win32/api/wuapi/nn-wuapi-iupdate.

Enums

AliasContextKind: The alias kind.
AliasContextKindContaineranalysisV1beta1: The alias kind.
AssessmentState: Provides the state of this Vulnerability assessment.
AssessmentStateContaineranalysisV1alpha1: Provides the state of this Vulnerability assessment.
AssessmentStateContaineranalysisV1beta1: Provides the state of this Vulnerability assessment.
BuildSignatureKeyType: The type of the key, either stored in public_key or referenced in key_id
BuildSignatureKeyTypeContaineranalysisV1beta1: The type of the key, either stored in public_key or referenced in key_id.
CisBenchmarkSeverity
CisBenchmarkSeverityContaineranalysisV1alpha1: The severity level of this CIS benchmark check.
CVSSAttackComplexity
CVSSAttackComplexityContaineranalysisV1alpha1: Defined in CVSS v3, CVSS v2
CVSSAttackComplexityContaineranalysisV1beta1: Defined in CVSS v3, CVSS v2
CVSSAttackVector: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
CVSSAttackVectorContaineranalysisV1alpha1: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
CVSSAttackVectorContaineranalysisV1beta1: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
CVSSAuthentication
CVSSAuthenticationContaineranalysisV1alpha1: Defined in CVSS v2
CVSSAuthenticationContaineranalysisV1beta1: Defined in CVSS v2
CVSSAvailabilityImpact
CVSSAvailabilityImpactContaineranalysisV1alpha1: Defined in CVSS v3, CVSS v2
CVSSAvailabilityImpactContaineranalysisV1beta1: Defined in CVSS v3, CVSS v2
CVSSConfidentialityImpact
CVSSConfidentialityImpactContaineranalysisV1alpha1: Defined in CVSS v3, CVSS v2
CVSSConfidentialityImpactContaineranalysisV1beta1: Defined in CVSS v3, CVSS v2
CVSSIntegrityImpact
CVSSIntegrityImpactContaineranalysisV1alpha1: Defined in CVSS v3, CVSS v2
CVSSIntegrityImpactContaineranalysisV1beta1: Defined in CVSS v3, CVSS v2
CVSSPrivilegesRequired
CVSSPrivilegesRequiredContaineranalysisV1alpha1: Defined in CVSS v3
CVSSPrivilegesRequiredContaineranalysisV1beta1: Defined in CVSS v3
CVSSScope
CVSSScopeContaineranalysisV1alpha1: Defined in CVSS v3
CVSSScopeContaineranalysisV1beta1: Defined in CVSS v3
CVSSUserInteraction
CVSSUserInteractionContaineranalysisV1alpha1: Defined in CVSS v3
CVSSUserInteractionContaineranalysisV1beta1: Defined in CVSS v3
CVSSv3AttackComplexity
CVSSv3AttackComplexityContaineranalysisV1beta1
CVSSv3AttackVector: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
CVSSv3AttackVectorContaineranalysisV1beta1: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
CVSSv3AvailabilityImpact
CVSSv3AvailabilityImpactContaineranalysisV1beta1
CVSSv3ConfidentialityImpact
CVSSv3ConfidentialityImpactContaineranalysisV1beta1
CVSSv3IntegrityImpact
CVSSv3IntegrityImpactContaineranalysisV1beta1
CVSSv3PrivilegesRequired
CVSSv3PrivilegesRequiredContaineranalysisV1beta1
CVSSv3Scope
CVSSv3ScopeContaineranalysisV1beta1
CVSSv3UserInteraction
CVSSv3UserInteractionContaineranalysisV1beta1
DeploymentOccurrencePlatform: Platform hosting this deployment.
DeploymentPlatform: Platform hosting this deployment.
DeploymentPlatformContaineranalysisV1beta1: Platform hosting this deployment.
DiscoveredAnalysisStatus: The status of discovery for the resource.
DiscoveredAnalysisStatusContaineranalysisV1beta1: The status of discovery for the resource.
DiscoveredContinuousAnalysis: Whether the resource is continuously analyzed.
DiscoveredContinuousAnalysisContaineranalysisV1beta1: Whether the resource is continuously analyzed.
DiscoveryAnalysisKind: The kind of analysis that is handled by this discovery.
DiscoveryAnalysisKindContaineranalysisV1beta1: Required. Immutable. The kind of analysis that is handled by this discovery.
DiscoveryNoteAnalysisKind: Required. Immutable. The kind of analysis that is handled by this discovery.
DiscoveryOccurrenceAnalysisStatus: The status of discovery for the resource.
DiscoveryOccurrenceContinuousAnalysis: Whether the resource is continuously analyzed.
DistributionArchitecture: The CPU architecture for which packages in this distribution channel were built.
DistributionArchitectureContaineranalysisV1alpha1: The CPU architecture for which packages in this distribution channel were built
DistributionArchitectureContaineranalysisV1beta1: The CPU architecture for which packages in this distribution channel were built.
ExternalRefCategory: An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
ExternalRefCategoryContaineranalysisV1beta1: An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
FileNoteFileType: This field provides information about the type of file identified
FileNoteFileTypeContaineranalysisV1beta1: This field provides information about the type of file identified
GenericSignedAttestationContentType: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind: The alias kind.
GrafeasV1beta1VulnerabilityDetailsEffectiveSeverity: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
HashType: The type of hash that was performed.
HashTypeContaineranalysisV1beta1: Required. The type of hash that was performed.
IdentifierHelperField: The field that is set in the API proto.
JustificationJustificationType: The justification type for this vulnerability.
JustificationJustificationTypeContaineranalysisV1alpha1: The justification type for this vulnerability.
JustificationJustificationTypeContaineranalysisV1beta1: The justification type for this vulnerability.
LayerDirective: The recovered Dockerfile directive used to construct this layer.
LayerDirectiveContaineranalysisV1beta1: Required. The recovered Dockerfile directive used to construct this layer.
PackageArchitecture: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
PackageArchitectureContaineranalysisV1beta1: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
PackageNoteArchitecture: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
PgpSignedAttestationContentType: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
PgpSignedAttestationContentTypeContaineranalysisV1beta1: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
RelationshipNoteType: The type of relationship between the source and target SPDX elements
RelationshipNoteTypeContaineranalysisV1beta1: The type of relationship between the source and target SPDX elements
RemediationRemediationType: The type of remediation that can be applied.
RemediationRemediationTypeContaineranalysisV1alpha1: The type of remediation that can be applied.
RemediationRemediationTypeContaineranalysisV1beta1: The type of remediation that can be applied.
SBOMStatusSbomState: The progress of the SBOM generation.
SBOMStatusSbomStateContaineranalysisV1beta1: The progress of the SBOM generation.
VersionKind: Required. Distinguishes between sentinel MIN/MAX versions and normal versions.
VersionKindContaineranalysisV1alpha1: Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
VersionKindContaineranalysisV1beta1: Required. Distinguishes between sentinel MIN/MAX versions and normal versions.
VexAssessmentState: Provides the state of this Vulnerability assessment.
VexAssessmentStateContaineranalysisV1alpha1: Provides the state of this Vulnerability assessment.
VexAssessmentStateContaineranalysisV1beta1: Provides the state of this Vulnerability assessment.
VulnerabilityCvssVersion: CVSS version used to populate cvss_score and severity.
VulnerabilityDetailsEffectiveSeverity: The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
VulnerabilityNoteCvssVersion: CVSS version used to populate cvss_score and severity.
VulnerabilityNoteSeverity: The note provider assigned severity of this vulnerability.
VulnerabilityOccurrenceEffectiveSeverity: The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
VulnerabilitySeverity: Note provider assigned impact of the vulnerability.
VulnerabilityTypeCvssVersion: CVSS version used to populate cvss_score and severity.
VulnerabilityTypeSeverity: Note provider assigned impact of the vulnerability

Functions

getNote(GetNoteArgs args, {InvokeOptions? options}) → Future<GetNoteResult>: Gets the specified note. args Arguments passed to this invoke. Arguments for getNote. options Invoke options controlling this call.
getNoteContaineranalysisV1alpha1(GetNoteContaineranalysisV1alpha1Args args, {InvokeOptions? options}) → Future<GetNoteContaineranalysisV1alpha1Result>: Returns the requested Note. args Arguments passed to this invoke. Arguments for getNote. options Invoke options controlling this call.
getNoteContaineranalysisV1beta1(GetNoteContaineranalysisV1beta1Args args, {InvokeOptions? options}) → Future<GetNoteContaineranalysisV1beta1Result>: Gets the specified note. args Arguments passed to this invoke. Arguments for getNote. options Invoke options controlling this call.
getNoteIamPolicy(GetNoteIamPolicyArgs args, {InvokeOptions? options}) → Future<GetNoteIamPolicyResult>: Gets the access control policy for a note or an occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. args Arguments passed to this invoke. Arguments for getNoteIamPolicy. options Invoke options controlling this call.
getNoteIamPolicyContaineranalysisV1alpha1(GetNoteIamPolicyContaineranalysisV1alpha1Args args, {InvokeOptions? options}) → Future<GetNoteIamPolicyContaineranalysisV1alpha1Result>: Gets the access control policy for a note or an Occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. Attempting to call this method on a resource without the required permission will result in a PERMISSION_DENIED error. Attempting to call this method on a non-existent resource will result in a NOT_FOUND error if the user has list permission on the project, or a PERMISSION_DENIED error otherwise. The resource takes the following formats: projects/{PROJECT_ID}/occurrences/{OCCURRENCE_ID} for occurrences and projects/{PROJECT_ID}/notes/{NOTE_ID} for notes args Arguments passed to this invoke. Arguments for getNoteIamPolicy. options Invoke options controlling this call.
getNoteIamPolicyContaineranalysisV1beta1(GetNoteIamPolicyContaineranalysisV1beta1Args args, {InvokeOptions? options}) → Future<GetNoteIamPolicyContaineranalysisV1beta1Result>: Gets the access control policy for a note or an occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. args Arguments passed to this invoke. Arguments for getNoteIamPolicy. options Invoke options controlling this call.
getOccurrence(GetOccurrenceArgs args, {InvokeOptions? options}) → Future<GetOccurrenceResult>: Gets the specified occurrence. args Arguments passed to this invoke. Arguments for getOccurrence. options Invoke options controlling this call.
getOccurrenceContaineranalysisV1alpha1(GetOccurrenceContaineranalysisV1alpha1Args args, {InvokeOptions? options}) → Future<GetOccurrenceContaineranalysisV1alpha1Result>: Returns the requested Occurrence. args Arguments passed to this invoke. Arguments for getOccurrence. options Invoke options controlling this call.
getOccurrenceContaineranalysisV1beta1(GetOccurrenceContaineranalysisV1beta1Args args, {InvokeOptions? options}) → Future<GetOccurrenceContaineranalysisV1beta1Result>: Gets the specified occurrence. args Arguments passed to this invoke. Arguments for getOccurrence. options Invoke options controlling this call.
getOccurrenceIamPolicy(GetOccurrenceIamPolicyArgs args, {InvokeOptions? options}) → Future<GetOccurrenceIamPolicyResult>: Gets the access control policy for a note or an occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. args Arguments passed to this invoke. Arguments for getOccurrenceIamPolicy. options Invoke options controlling this call.
getOccurrenceIamPolicyContaineranalysisV1alpha1(GetOccurrenceIamPolicyContaineranalysisV1alpha1Args args, {InvokeOptions? options}) → Future<GetOccurrenceIamPolicyContaineranalysisV1alpha1Result>: Gets the access control policy for a note or an Occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. Attempting to call this method on a resource without the required permission will result in a PERMISSION_DENIED error. Attempting to call this method on a non-existent resource will result in a NOT_FOUND error if the user has list permission on the project, or a PERMISSION_DENIED error otherwise. The resource takes the following formats: projects/{PROJECT_ID}/occurrences/{OCCURRENCE_ID} for occurrences and projects/{PROJECT_ID}/notes/{NOTE_ID} for notes args Arguments passed to this invoke. Arguments for getOccurrenceIamPolicy. options Invoke options controlling this call.
getOccurrenceIamPolicyContaineranalysisV1beta1(GetOccurrenceIamPolicyContaineranalysisV1beta1Args args, {InvokeOptions? options}) → Future<GetOccurrenceIamPolicyContaineranalysisV1beta1Result>: Gets the access control policy for a note or an occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. The resource takes the format projects/[PROJECT_ID]/notes/[NOTE_ID] for notes and projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID] for occurrences. args Arguments passed to this invoke. Arguments for getOccurrenceIamPolicy. options Invoke options controlling this call.
getProviderNoteIamPolicy(GetProviderNoteIamPolicyArgs args, {InvokeOptions? options}) → Future<GetProviderNoteIamPolicyResult>: Gets the access control policy for a note or an Occurrence resource. Requires containeranalysis.notes.setIamPolicy or containeranalysis.occurrences.setIamPolicy permission if the resource is a note or occurrence, respectively. Attempting to call this method on a resource without the required permission will result in a PERMISSION_DENIED error. Attempting to call this method on a non-existent resource will result in a NOT_FOUND error if the user has list permission on the project, or a PERMISSION_DENIED error otherwise. The resource takes the following formats: projects/{PROJECT_ID}/occurrences/{OCCURRENCE_ID} for occurrences and projects/{PROJECT_ID}/notes/{NOTE_ID} for notes args Arguments passed to this invoke. Arguments for getProviderNoteIamPolicy. options Invoke options controlling this call.

containeranalysis library

Classes

Enums

Functions

pulumi_google_native package

containeranalysis library