VulnerabilityOccurrenceResponse class

An occurrence of a severity vulnerability on a resource.

Constructors

VulnerabilityOccurrenceResponse({required Input<double> cvssScore, required Input<CVSSResponse> cvssV2, required Input<String> cvssVersion, required Input<CVSSResponse> cvssv3, required Input<String> effectiveSeverity, required Input<String> extraDetails, required Input<bool> fixAvailable, required Input<String> longDescription, required Input<List<PackageIssueResponse>> packageIssue, required Input<List<RelatedUrlResponse>> relatedUrls, required Input<String> severity, required Input<String> shortDescription, required Input<String> type, required Input<VexAssessmentResponse> vexAssessment})

Creates a new VulnerabilityOccurrenceResponse. cvssScore The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity. cvssV2 The cvss v2 score for the vulnerability. cvssVersion CVSS version used to populate cvss_score and severity. cvssv3 The cvss v3 score for the vulnerability. effectiveSeverity The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues. extraDetails Occurrence-specific extra details about the vulnerability. fixAvailable Whether at least one of the affected packages has a fix available. longDescription A detailed description of this vulnerability. packageIssue The set of affected locations and their fixes (if available) within the associated resource. relatedUrls URLs related to this vulnerability. severity The note provider assigned severity of this vulnerability. shortDescription A one sentence description of this vulnerability. type The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.). vexAssessment Required.

const

VulnerabilityOccurrenceResponse.fromMap(Map<String, dynamic> map)

factory

Properties

cvssScore → Input<double>

The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.

final

cvssV2 → Input<CVSSResponse>

The cvss v2 score for the vulnerability.

final

cvssv3 → Input<CVSSResponse>

The cvss v3 score for the vulnerability.

final

cvssVersion → Input<String>

CVSS version used to populate cvss_score and severity.

final

effectiveSeverity → Input<String>

The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.

final

extraDetails → Input<String>

Occurrence-specific extra details about the vulnerability.

final

fixAvailable → Input<bool>

Whether at least one of the affected packages has a fix available.

final

hashCode → int

The hash code for this object.

no setter, inherited

longDescription → Input<String>

A detailed description of this vulnerability.

final

packageIssue → Input<List<PackageIssueResponse>>

The set of affected locations and their fixes (if available) within the associated resource.

final

relatedUrls → Input<List<RelatedUrlResponse>>

URLs related to this vulnerability.

final

runtimeType → Type

A representation of the runtime type of the object.

no setter, inherited

severity → Input<String>

The note provider assigned severity of this vulnerability.

final

shortDescription → Input<String>

A one sentence description of this vulnerability.

final

type → Input<String>

The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).

final

vexAssessment → Input<VexAssessmentResponse>

final

Methods

noSuchMethod(Invocation invocation) → dynamic

Invoked when a nonexistent method or property is accessed.

inherited

toMap() → Map<String, dynamic>

toString() → String

A string representation of this object.

inherited

Operators

operator ==(Object other) → bool

The equality operator.

inherited