VulnerabilityDetailsResponse class

Used by Occurrence to point to where the vulnerability exists and how to fix it.

Constructors

VulnerabilityDetailsResponse({required Input<double> cvssScore, required Input<CVSSResponseContaineranalysisV1alpha1> cvssV2, required Input<CVSSResponseContaineranalysisV1alpha1> cvssV3, required Input<String> cvssVersion, required Input<String> effectiveSeverity, required Input<String> extraDetails, required Input<List<PackageIssueResponseContaineranalysisV1alpha1>> packageIssue, required Input<String> severity, required Input<String> type, required Input<VexAssessmentResponseContaineranalysisV1alpha1> vexAssessment})
Creates a new VulnerabilityDetailsResponse. cvssScore The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity. cvssV2 The CVSS v2 score of this vulnerability. cvssV3 The CVSS v3 score of this vulnerability. cvssVersion CVSS version used to populate cvss_score and severity. effectiveSeverity The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues. extraDetails Occurrence-specific extra details about the vulnerability. packageIssue The set of affected locations and their fixes (if available) within the associated resource. severity The note provider assigned Severity of the vulnerability. type The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types. vexAssessment VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
const
VulnerabilityDetailsResponse.fromMap(Map<String, dynamic> map)
factory

Properties

cvssScore → Input<double>
The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
final
cvssV2 → Input<CVSSResponseContaineranalysisV1alpha1>
The CVSS v2 score of this vulnerability.
final
cvssV3 → Input<CVSSResponseContaineranalysisV1alpha1>
The CVSS v3 score of this vulnerability.
final
cvssVersion → Input<String>
CVSS version used to populate cvss_score and severity.
final
effectiveSeverity → Input<String>
The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
final
extraDetails → Input<String>
Occurrence-specific extra details about the vulnerability.
final
hashCode → int
The hash code for this object.
no setterinherited
packageIssue → Input<List<PackageIssueResponseContaineranalysisV1alpha1>>
The set of affected locations and their fixes (if available) within the associated resource.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
severity → Input<String>
The note provider assigned Severity of the vulnerability.
final
type → Input<String>
The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
final
vexAssessment → Input<VexAssessmentResponseContaineranalysisV1alpha1>
VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
final

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited