google_api_container_analysis v0.5.0 API Reference
Modules
API client metadata for GoogleApi.ContainerAnalysis.V1alpha1.
API calls for all endpoints tagged Projects
.
API calls for all endpoints tagged Providers
.
Handle Tesla connections for GoogleApi.ContainerAnalysis.V1alpha1.
Artifact describes a build product.
Occurrence that represents a single "attestation". The authenticity of an Attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the AttestationAuthority to which this Attestation is attached is primarily useful for look-up (how to find this Attestation if you already know the Authority and artifact to be verified) and intent (which authority was this attestation intended to sign for).
Note kind that represents a logical attestation "role" or "authority". For
example, an organization might have one AttestationAuthority
for "QA" and
one for "build". This Note is intended to act strictly as a grouping
mechanism for the attached Occurrences (Attestations). This grouping
mechanism also provides a security boundary, since IAM ACLs gate the ability
for a principle to attach an Occurrence to a given Note. It also provides a
single point of lookup to find all attached Attestation Occurrences, even if
they don't all live in the same project.
This submessage provides human-readable hints about the purpose of the AttestationAuthority. Because the name of a Note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should NOT be used to look up AttestationAuthorities in security sensitive contexts, such as when looking up Attestations to verify.
Basis describes the base image portion (Note) of the DockerImage
relationship. Linked occurrences are derived from this or an
equivalent image via:
FROM
Associates members
with a role
.
Message encapsulating build provenance details.
Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.
Message encapsulating the signature of the verified build.
Note holding the version of the provider's builder and the signature of the provenance message in linked BuildDetails.
Command describes a step performed as part of the build pipeline.
Request for creating an operation
An artifact that can be deployed in some runtime.
The period during which some deployable was active in a runtime.
Derived describes the derived image portion (Occurrence) of the
DockerImage relationship. This image would be produced from a Dockerfile
with FROM
Identifies all occurrences of this vulnerability in the package for a specific distro/location For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
Provides information about the scan status of a discovered resource.
A note that indicates a type of analysis a provider would perform. This note
exists in a provider's project. A Discovery
occurrence is created in a
consumer's project at the start of analysis. The occurrence's operation will
indicate the status of the analysis. Absence of an occurrence linked to this
note for a resource indicates that analysis hasn't started.
This represents a particular channel of distribution for a given package. e.g. Debian's jessie-backports dpkg mirror
A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance
Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec.
Container message for hashes of byte content of files, used in Source messages to verify integrity of source input to the build.
A set of properties that uniquely identify a given Docker image.
Request message for GetIamPolicy
method.
Encapsulates settings provided to GetIamPolicy.
A summary of how many vulnz occurrences there are per severity type. counts by groups, or if we should have different summary messages like this.
An alias to a repo revision.
A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
A SourceContext referring to a Gerrit project.
A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
Metadata for all operations used and required for all operations that created by Container Analysis Providers
Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
A unique identifier for a Cloud Repo.
A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.
Container message for hash values.
This represents how a particular software package may be installed on a system.
Layer holds metadata specific to a layer of a Docker image.
Response including listed occurrences for a note.
Response including listed notes.
Response including listed active occurrences.
A list of scan configs for the project.
An occurrence of a particular package installation found within a system's filesystem. e.g. glibc was found in /var/lib/dpkg/status
Provides a detailed description of a Note
.
Occurrence
includes information about analysis occurrences for an image.
This resource represents a long-running operation that is the result of a network API call.
This represents a particular package that is distributed over various channels. e.g. glibc (aka libc6) is distributed by many, at various versions.
This message wraps a location affected by a vulnerability and its associated fix (if one is available).
An attestation wrapper with a PGP-compatible signature.
This message only supports ATTACHED
signatures, where the payload that is
signed is included alongside the signature itself in the same file.
An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources.
Metadata for any related URL information
RepoSource describes the location of the source in a Google Cloud Source Repository.
Resource is an entity that can have metadata. E.g., a Docker image.
Indicates various scans and whether they are turned on or off.
Request message for SetIamPolicy
method.
The number of occurrences created for a specific severity.
Source describes the location of the source used for the build.
The Status
type defines a logical error model that is suitable for
different programming environments, including REST APIs and RPC APIs. It is
used by gRPC. Each Status
message contains
three pieces of data: error code, error message, and error details.
StorageSource describes the location of the source in an archive file in Google Cloud Storage.
Request message for TestIamPermissions
method.
Response message for TestIamPermissions
method.
Request for updating an existing operation
The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities.
An Upgrade Note represents a potential upgrade of a package to a given version. For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), there will be a Upgrade Note.
An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability).
Version contains structured information about the version of the package. For a discussion of this in Debian/Ubuntu: http://serverfault.com/questions/604541/debian-packages-version-convention For a discussion of this in Redhat/Fedora/Centos: http://blog.jasonantman.com/2014/07/how-yum-and-rpm-compare-versions/
Used by Occurrence to point to where the vulnerability exists and how to fix it.
The location of the vulnerability
VulnerabilityType provides metadata about a security vulnerability.