Docs
PackagesGoogle Cloud Native is in preview. Google Cloud Classic is fully supported.
Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
google-native.containeranalysis/v1alpha1.Occurrence
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
Creates a new Occurrence. Use this method to create Occurrences for a resource.
Create Occurrence Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Occurrence(name: string, args?: OccurrenceArgs, opts?: CustomResourceOptions);@overload
def Occurrence(resource_name: str,
args: Optional[OccurrenceArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def Occurrence(resource_name: str,
opts: Optional[ResourceOptions] = None,
attestation: Optional[AttestationArgs] = None,
build_details: Optional[BuildDetailsArgs] = None,
compliance: Optional[ComplianceOccurrenceArgs] = None,
deployment: Optional[DeploymentArgs] = None,
derived_image: Optional[DerivedArgs] = None,
discovered: Optional[DiscoveredArgs] = None,
dsse_attestation: Optional[DSSEAttestationOccurrenceArgs] = None,
envelope: Optional[EnvelopeArgs] = None,
installation: Optional[InstallationArgs] = None,
name: Optional[str] = None,
note_name: Optional[str] = None,
project: Optional[str] = None,
remediation: Optional[str] = None,
resource: Optional[ResourceArgs] = None,
resource_url: Optional[str] = None,
sbom: Optional[DocumentOccurrenceArgs] = None,
sbom_reference: Optional[SBOMReferenceOccurrenceArgs] = None,
spdx_file: Optional[FileOccurrenceArgs] = None,
spdx_package: Optional[PackageInfoOccurrenceArgs] = None,
spdx_relationship: Optional[RelationshipOccurrenceArgs] = None,
upgrade: Optional[UpgradeOccurrenceArgs] = None,
vulnerability_details: Optional[VulnerabilityDetailsArgs] = None)func NewOccurrence(ctx *Context, name string, args *OccurrenceArgs, opts ...ResourceOption) (*Occurrence, error)public Occurrence(string name, OccurrenceArgs? args = null, CustomResourceOptions? opts = null)
public Occurrence(String name, OccurrenceArgs args)
public Occurrence(String name, OccurrenceArgs args, CustomResourceOptions options)
type: google-native:containeranalysis/v1alpha1:Occurrence
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args OccurrenceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args OccurrenceArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args OccurrenceArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args OccurrenceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args OccurrenceArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Example
The following reference example uses placeholder values for all input properties.
var google_nativeOccurrenceResource = new GoogleNative.ContainerAnalysis.V1Alpha1.Occurrence("google-nativeOccurrenceResource", new()
{
Attestation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AttestationArgs
{
PgpSignedAttestation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PgpSignedAttestationArgs
{
ContentType = GoogleNative.ContainerAnalysis.V1Alpha1.PgpSignedAttestationContentType.ContentTypeUnspecified,
PgpKeyId = "string",
Signature = "string",
},
},
BuildDetails = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildDetailsArgs
{
InTotoSlsaProvenanceV1 = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.InTotoSlsaProvenanceV1Args
{
Predicate = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaProvenanceV1Args
{
BuildDefinition = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildDefinitionArgs
{
BuildType = "string",
ExternalParameters =
{
{ "string", "string" },
},
InternalParameters =
{
{ "string", "string" },
},
ResolvedDependencies = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ResourceDescriptorArgs
{
Annotations =
{
{ "string", "string" },
},
Content = "string",
Digest =
{
{ "string", "string" },
},
DownloadLocation = "string",
MediaType = "string",
Name = "string",
Uri = "string",
},
},
},
RunDetails = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RunDetailsArgs
{
Builder = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ProvenanceBuilderArgs
{
BuilderDependencies = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ResourceDescriptorArgs
{
Annotations =
{
{ "string", "string" },
},
Content = "string",
Digest =
{
{ "string", "string" },
},
DownloadLocation = "string",
MediaType = "string",
Name = "string",
Uri = "string",
},
},
Id = "string",
Version =
{
{ "string", "string" },
},
},
Byproducts = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ResourceDescriptorArgs
{
Annotations =
{
{ "string", "string" },
},
Content = "string",
Digest =
{
{ "string", "string" },
},
DownloadLocation = "string",
MediaType = "string",
Name = "string",
Uri = "string",
},
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildMetadataArgs
{
FinishedOn = "string",
InvocationId = "string",
StartedOn = "string",
},
},
},
PredicateType = "string",
Subject = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SubjectArgs
{
Digest =
{
{ "string", "string" },
},
Name = "string",
},
},
Type = "string",
},
IntotoStatement = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.InTotoStatementArgs
{
PredicateType = "string",
Provenance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.InTotoProvenanceArgs
{
BuilderConfig = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuilderConfigArgs
{
Id = "string",
},
Materials = new[]
{
"string",
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.MetadataArgs
{
BuildFinishedOn = "string",
BuildInvocationId = "string",
BuildStartedOn = "string",
Completeness = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CompletenessArgs
{
Arguments = false,
Environment = false,
Materials = false,
},
Reproducible = false,
},
Recipe = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RecipeArgs
{
Arguments = new[]
{
{
{ "string", "string" },
},
},
DefinedInMaterial = "string",
EntryPoint = "string",
Environment = new[]
{
{
{ "string", "string" },
},
},
Type = "string",
},
},
SlsaProvenance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaProvenanceArgs
{
Builder = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaBuilderArgs
{
Id = "string",
},
Materials = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.MaterialArgs
{
Digest =
{
{ "string", "string" },
},
Uri = "string",
},
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaMetadataArgs
{
BuildFinishedOn = "string",
BuildInvocationId = "string",
BuildStartedOn = "string",
Completeness = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaCompletenessArgs
{
Arguments = false,
Environment = false,
Materials = false,
},
Reproducible = false,
},
Recipe = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaRecipeArgs
{
Arguments =
{
{ "string", "string" },
},
DefinedInMaterial = "string",
EntryPoint = "string",
Environment =
{
{ "string", "string" },
},
Type = "string",
},
},
SlsaProvenanceZeroTwo = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaProvenanceZeroTwoArgs
{
BuildConfig =
{
{ "string", "string" },
},
BuildType = "string",
Builder = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs
{
Id = "string",
},
Invocation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs
{
ConfigSource = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs
{
Digest =
{
{ "string", "string" },
},
EntryPoint = "string",
Uri = "string",
},
Environment =
{
{ "string", "string" },
},
Parameters =
{
{ "string", "string" },
},
},
Materials = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs
{
Digest =
{
{ "string", "string" },
},
Uri = "string",
},
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs
{
BuildFinishedOn = "string",
BuildInvocationId = "string",
BuildStartedOn = "string",
Completeness = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs
{
Environment = false,
Materials = false,
Parameters = false,
},
Reproducible = false,
},
},
Subject = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SubjectArgs
{
Digest =
{
{ "string", "string" },
},
Name = "string",
},
},
Type = "string",
},
Provenance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildProvenanceArgs
{
BuildOptions =
{
{ "string", "string" },
},
BuilderVersion = "string",
BuiltArtifacts = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ArtifactArgs
{
Checksum = "string",
Id = "string",
Names = new[]
{
"string",
},
},
},
Commands = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CommandArgs
{
Args = new[]
{
"string",
},
Dir = "string",
Env = new[]
{
"string",
},
Id = "string",
Name = "string",
WaitFor = new[]
{
"string",
},
},
},
CreateTime = "string",
Creator = "string",
FinishTime = "string",
Id = "string",
LogsBucket = "string",
Project = "string",
SourceProvenance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SourceArgs
{
AdditionalContexts = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs
{
CloudRepo = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs
{
AliasContext = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs
{
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
Name = "string",
},
RepoId = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs
{
ProjectRepoId = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs
{
Project = "string",
RepoName = "string",
},
Uid = "string",
},
RevisionId = "string",
},
Gerrit = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs
{
AliasContext = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs
{
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
Name = "string",
},
GerritProject = "string",
HostUri = "string",
RevisionId = "string",
},
Git = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs
{
RevisionId = "string",
Url = "string",
},
Labels =
{
{ "string", "string" },
},
},
},
ArtifactStorageSource = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.StorageSourceArgs
{
Bucket = "string",
Generation = "string",
Object = "string",
},
Context = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs
{
CloudRepo = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs
{
AliasContext = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs
{
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
Name = "string",
},
RepoId = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs
{
ProjectRepoId = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs
{
Project = "string",
RepoName = "string",
},
Uid = "string",
},
RevisionId = "string",
},
Gerrit = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs
{
AliasContext = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs
{
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
Name = "string",
},
GerritProject = "string",
HostUri = "string",
RevisionId = "string",
},
Git = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs
{
RevisionId = "string",
Url = "string",
},
Labels =
{
{ "string", "string" },
},
},
FileHashes =
{
{ "string", "string" },
},
RepoSource = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RepoSourceArgs
{
BranchName = "string",
CommitSha = "string",
Project = "string",
RepoName = "string",
TagName = "string",
},
StorageSource = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.StorageSourceArgs
{
Bucket = "string",
Generation = "string",
Object = "string",
},
},
StartTime = "string",
TriggerId = "string",
},
ProvenanceBytes = "string",
},
Compliance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ComplianceOccurrenceArgs
{
NonComplianceReason = "string",
NonCompliantFiles = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.NonCompliantFileArgs
{
DisplayCommand = "string",
Path = "string",
Reason = "string",
},
},
},
Deployment = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DeploymentArgs
{
Address = "string",
Config = "string",
DeployTime = "string",
Platform = GoogleNative.ContainerAnalysis.V1Alpha1.DeploymentPlatform.PlatformUnspecified,
ResourceUri = new[]
{
"string",
},
UndeployTime = "string",
UserEmail = "string",
},
DerivedImage = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DerivedArgs
{
Fingerprint = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FingerprintArgs
{
V1Name = "string",
V2Blob = new[]
{
"string",
},
},
LayerInfo = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LayerArgs
{
Arguments = "string",
Directive = GoogleNative.ContainerAnalysis.V1Alpha1.LayerDirective.DirectiveUnspecified,
},
},
},
Discovered = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DiscoveredArgs
{
AnalysisCompleted = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AnalysisCompletedArgs
{
AnalysisType = new[]
{
"string",
},
},
AnalysisError = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.StatusArgs
{
Code = 0,
Details = new[]
{
{
{ "string", "string" },
},
},
Message = "string",
},
},
AnalysisStatus = GoogleNative.ContainerAnalysis.V1Alpha1.DiscoveredAnalysisStatus.AnalysisStatusUnspecified,
AnalysisStatusError = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.StatusArgs
{
Code = 0,
Details = new[]
{
{
{ "string", "string" },
},
},
Message = "string",
},
ArchiveTime = "string",
ContinuousAnalysis = GoogleNative.ContainerAnalysis.V1Alpha1.DiscoveredContinuousAnalysis.ContinuousAnalysisUnspecified,
Cpe = "string",
LastScanTime = "string",
},
DsseAttestation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DSSEAttestationOccurrenceArgs
{
Envelope = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.EnvelopeArgs
{
Payload = "string",
PayloadType = "string",
Signatures = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.EnvelopeSignatureArgs
{
Keyid = "string",
Sig = "string",
},
},
},
Statement = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.InTotoStatementArgs
{
PredicateType = "string",
Provenance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.InTotoProvenanceArgs
{
BuilderConfig = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuilderConfigArgs
{
Id = "string",
},
Materials = new[]
{
"string",
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.MetadataArgs
{
BuildFinishedOn = "string",
BuildInvocationId = "string",
BuildStartedOn = "string",
Completeness = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CompletenessArgs
{
Arguments = false,
Environment = false,
Materials = false,
},
Reproducible = false,
},
Recipe = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RecipeArgs
{
Arguments = new[]
{
{
{ "string", "string" },
},
},
DefinedInMaterial = "string",
EntryPoint = "string",
Environment = new[]
{
{
{ "string", "string" },
},
},
Type = "string",
},
},
SlsaProvenance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaProvenanceArgs
{
Builder = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaBuilderArgs
{
Id = "string",
},
Materials = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.MaterialArgs
{
Digest =
{
{ "string", "string" },
},
Uri = "string",
},
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaMetadataArgs
{
BuildFinishedOn = "string",
BuildInvocationId = "string",
BuildStartedOn = "string",
Completeness = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaCompletenessArgs
{
Arguments = false,
Environment = false,
Materials = false,
},
Reproducible = false,
},
Recipe = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaRecipeArgs
{
Arguments =
{
{ "string", "string" },
},
DefinedInMaterial = "string",
EntryPoint = "string",
Environment =
{
{ "string", "string" },
},
Type = "string",
},
},
SlsaProvenanceZeroTwo = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SlsaProvenanceZeroTwoArgs
{
BuildConfig =
{
{ "string", "string" },
},
BuildType = "string",
Builder = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs
{
Id = "string",
},
Invocation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs
{
ConfigSource = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs
{
Digest =
{
{ "string", "string" },
},
EntryPoint = "string",
Uri = "string",
},
Environment =
{
{ "string", "string" },
},
Parameters =
{
{ "string", "string" },
},
},
Materials = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs
{
Digest =
{
{ "string", "string" },
},
Uri = "string",
},
},
Metadata = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs
{
BuildFinishedOn = "string",
BuildInvocationId = "string",
BuildStartedOn = "string",
Completeness = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs
{
Environment = false,
Materials = false,
Parameters = false,
},
Reproducible = false,
},
},
Subject = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SubjectArgs
{
Digest =
{
{ "string", "string" },
},
Name = "string",
},
},
Type = "string",
},
},
Envelope = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.EnvelopeArgs
{
Payload = "string",
PayloadType = "string",
Signatures = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.EnvelopeSignatureArgs
{
Keyid = "string",
Sig = "string",
},
},
},
Installation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.InstallationArgs
{
License = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseArgs
{
Comments = "string",
Expression = "string",
},
Location = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LocationArgs
{
Path = "string",
},
},
},
Name = "string",
NoteName = "string",
Project = "string",
Remediation = "string",
Resource = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ResourceArgs
{
ContentHash = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.HashArgs
{
Type = GoogleNative.ContainerAnalysis.V1Alpha1.HashType.None,
Value = "string",
},
Name = "string",
Uri = "string",
},
ResourceUrl = "string",
Sbom = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DocumentOccurrenceArgs
{
CreateTime = "string",
CreatorComment = "string",
Creators = new[]
{
"string",
},
DocumentComment = "string",
ExternalDocumentRefs = new[]
{
"string",
},
Id = "string",
LicenseListVersion = "string",
Namespace = "string",
Title = "string",
},
SbomReference = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SBOMReferenceOccurrenceArgs
{
Payload = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SbomReferenceIntotoPayloadArgs
{
Predicate = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SbomReferenceIntotoPredicateArgs
{
Digest =
{
{ "string", "string" },
},
Location = "string",
MimeType = "string",
ReferrerId = "string",
},
PredicateType = "string",
Subject = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SubjectArgs
{
Digest =
{
{ "string", "string" },
},
Name = "string",
},
},
Type = "string",
},
PayloadType = "string",
Signatures = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.EnvelopeSignatureArgs
{
Keyid = "string",
Sig = "string",
},
},
},
SpdxFile = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileOccurrenceArgs
{
Attributions = new[]
{
"string",
},
Comment = "string",
Contributors = new[]
{
"string",
},
Copyright = "string",
FilesLicenseInfo = new[]
{
"string",
},
Id = "string",
LicenseConcluded = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseArgs
{
Comments = "string",
Expression = "string",
},
Notice = "string",
},
SpdxPackage = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PackageInfoOccurrenceArgs
{
Comment = "string",
Filename = "string",
Id = "string",
LicenseConcluded = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseArgs
{
Comments = "string",
Expression = "string",
},
SourceInfo = "string",
},
SpdxRelationship = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RelationshipOccurrenceArgs
{
Comment = "string",
Source = "string",
Target = "string",
},
Upgrade = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeOccurrenceArgs
{
Distribution = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeDistributionArgs
{
Classification = "string",
CpeUri = "string",
Cve = new[]
{
"string",
},
Severity = "string",
},
Package = "string",
ParsedVersion = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
{
Epoch = 0,
Inclusive = false,
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
Name = "string",
Revision = "string",
},
},
VulnerabilityDetails = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityDetailsArgs
{
CvssV2 = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CVSSArgs
{
AttackComplexity = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackComplexity.AttackComplexityUnspecified,
AttackVector = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackVector.AttackVectorUnspecified,
Authentication = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAuthentication.AuthenticationUnspecified,
AvailabilityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAvailabilityImpact.ImpactUnspecified,
BaseScore = 0,
ConfidentialityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSConfidentialityImpact.ImpactUnspecified,
ExploitabilityScore = 0,
ImpactScore = 0,
IntegrityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSIntegrityImpact.ImpactUnspecified,
PrivilegesRequired = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
Scope = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSScope.ScopeUnspecified,
UserInteraction = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSUserInteraction.UserInteractionUnspecified,
},
CvssV3 = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CVSSArgs
{
AttackComplexity = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackComplexity.AttackComplexityUnspecified,
AttackVector = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackVector.AttackVectorUnspecified,
Authentication = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAuthentication.AuthenticationUnspecified,
AvailabilityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAvailabilityImpact.ImpactUnspecified,
BaseScore = 0,
ConfidentialityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSConfidentialityImpact.ImpactUnspecified,
ExploitabilityScore = 0,
ImpactScore = 0,
IntegrityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSIntegrityImpact.ImpactUnspecified,
PrivilegesRequired = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
Scope = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSScope.ScopeUnspecified,
UserInteraction = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSUserInteraction.UserInteractionUnspecified,
},
EffectiveSeverity = GoogleNative.ContainerAnalysis.V1Alpha1.VulnerabilityDetailsEffectiveSeverity.SeverityUnspecified,
ExtraDetails = "string",
PackageIssue = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PackageIssueArgs
{
AffectedLocation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityLocationArgs
{
CpeUri = "string",
FileLocation = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileLocationArgs
{
FilePath = "string",
},
},
Package = "string",
Version = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
{
Epoch = 0,
Inclusive = false,
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
Name = "string",
Revision = "string",
},
},
FixedLocation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityLocationArgs
{
CpeUri = "string",
FileLocation = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileLocationArgs
{
FilePath = "string",
},
},
Package = "string",
Version = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
{
Epoch = 0,
Inclusive = false,
Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
Name = "string",
Revision = "string",
},
},
PackageType = "string",
SeverityName = "string",
},
},
Type = "string",
VexAssessment = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VexAssessmentArgs
{
Cve = "string",
Impacts = new[]
{
"string",
},
Justification = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.JustificationArgs
{
Details = "string",
JustificationType = GoogleNative.ContainerAnalysis.V1Alpha1.JustificationJustificationType.JustificationTypeUnspecified,
},
NoteName = "string",
RelatedUris = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URIArgs
{
Label = "string",
Uri = "string",
},
},
Remediations = new[]
{
new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RemediationArgs
{
Details = "string",
RemediationType = GoogleNative.ContainerAnalysis.V1Alpha1.RemediationRemediationType.RemediationTypeUnspecified,
RemediationUri = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URIArgs
{
Label = "string",
Uri = "string",
},
},
},
State = GoogleNative.ContainerAnalysis.V1Alpha1.VexAssessmentState.StateUnspecified,
VulnerabilityId = "string",
},
},
});
example, err := containeranalysisv1alpha1.NewOccurrence(ctx, "google-nativeOccurrenceResource", &containeranalysisv1alpha1.OccurrenceArgs{
Attestation: &containeranalysis.AttestationArgs{
PgpSignedAttestation: &containeranalysis.PgpSignedAttestationArgs{
ContentType: containeranalysisv1alpha1.PgpSignedAttestationContentTypeContentTypeUnspecified,
PgpKeyId: pulumi.String("string"),
Signature: pulumi.String("string"),
},
},
BuildDetails: &containeranalysis.BuildDetailsArgs{
InTotoSlsaProvenanceV1: &containeranalysis.InTotoSlsaProvenanceV1Args{
Predicate: &containeranalysis.SlsaProvenanceV1Args{
BuildDefinition: &containeranalysis.BuildDefinitionArgs{
BuildType: pulumi.String("string"),
ExternalParameters: pulumi.StringMap{
"string": pulumi.String("string"),
},
InternalParameters: pulumi.StringMap{
"string": pulumi.String("string"),
},
ResolvedDependencies: containeranalysis.ResourceDescriptorArray{
&containeranalysis.ResourceDescriptorArgs{
Annotations: pulumi.StringMap{
"string": pulumi.String("string"),
},
Content: pulumi.String("string"),
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
DownloadLocation: pulumi.String("string"),
MediaType: pulumi.String("string"),
Name: pulumi.String("string"),
Uri: pulumi.String("string"),
},
},
},
RunDetails: &containeranalysis.RunDetailsArgs{
Builder: &containeranalysis.ProvenanceBuilderArgs{
BuilderDependencies: containeranalysis.ResourceDescriptorArray{
&containeranalysis.ResourceDescriptorArgs{
Annotations: pulumi.StringMap{
"string": pulumi.String("string"),
},
Content: pulumi.String("string"),
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
DownloadLocation: pulumi.String("string"),
MediaType: pulumi.String("string"),
Name: pulumi.String("string"),
Uri: pulumi.String("string"),
},
},
Id: pulumi.String("string"),
Version: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Byproducts: containeranalysis.ResourceDescriptorArray{
&containeranalysis.ResourceDescriptorArgs{
Annotations: pulumi.StringMap{
"string": pulumi.String("string"),
},
Content: pulumi.String("string"),
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
DownloadLocation: pulumi.String("string"),
MediaType: pulumi.String("string"),
Name: pulumi.String("string"),
Uri: pulumi.String("string"),
},
},
Metadata: &containeranalysis.BuildMetadataArgs{
FinishedOn: pulumi.String("string"),
InvocationId: pulumi.String("string"),
StartedOn: pulumi.String("string"),
},
},
},
PredicateType: pulumi.String("string"),
Subject: containeranalysis.SubjectArray{
&containeranalysis.SubjectArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
Type: pulumi.String("string"),
},
IntotoStatement: &containeranalysis.InTotoStatementArgs{
PredicateType: pulumi.String("string"),
Provenance: &containeranalysis.InTotoProvenanceArgs{
BuilderConfig: &containeranalysis.BuilderConfigArgs{
Id: pulumi.String("string"),
},
Materials: pulumi.StringArray{
pulumi.String("string"),
},
Metadata: &containeranalysis.MetadataArgs{
BuildFinishedOn: pulumi.String("string"),
BuildInvocationId: pulumi.String("string"),
BuildStartedOn: pulumi.String("string"),
Completeness: &containeranalysis.CompletenessArgs{
Arguments: pulumi.Bool(false),
Environment: pulumi.Bool(false),
Materials: pulumi.Bool(false),
},
Reproducible: pulumi.Bool(false),
},
Recipe: &containeranalysis.RecipeArgs{
Arguments: pulumi.StringMapArray{
pulumi.StringMap{
"string": pulumi.String("string"),
},
},
DefinedInMaterial: pulumi.String("string"),
EntryPoint: pulumi.String("string"),
Environment: pulumi.StringMapArray{
pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Type: pulumi.String("string"),
},
},
SlsaProvenance: &containeranalysis.SlsaProvenanceArgs{
Builder: &containeranalysis.SlsaBuilderArgs{
Id: pulumi.String("string"),
},
Materials: containeranalysis.MaterialArray{
&containeranalysis.MaterialArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Uri: pulumi.String("string"),
},
},
Metadata: &containeranalysis.SlsaMetadataArgs{
BuildFinishedOn: pulumi.String("string"),
BuildInvocationId: pulumi.String("string"),
BuildStartedOn: pulumi.String("string"),
Completeness: &containeranalysis.SlsaCompletenessArgs{
Arguments: pulumi.Bool(false),
Environment: pulumi.Bool(false),
Materials: pulumi.Bool(false),
},
Reproducible: pulumi.Bool(false),
},
Recipe: &containeranalysis.SlsaRecipeArgs{
Arguments: pulumi.StringMap{
"string": pulumi.String("string"),
},
DefinedInMaterial: pulumi.String("string"),
EntryPoint: pulumi.String("string"),
Environment: pulumi.StringMap{
"string": pulumi.String("string"),
},
Type: pulumi.String("string"),
},
},
SlsaProvenanceZeroTwo: &containeranalysis.SlsaProvenanceZeroTwoArgs{
BuildConfig: pulumi.StringMap{
"string": pulumi.String("string"),
},
BuildType: pulumi.String("string"),
Builder: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs{
Id: pulumi.String("string"),
},
Invocation: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs{
ConfigSource: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
EntryPoint: pulumi.String("string"),
Uri: pulumi.String("string"),
},
Environment: pulumi.StringMap{
"string": pulumi.String("string"),
},
Parameters: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Materials: containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArray{
&containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Uri: pulumi.String("string"),
},
},
Metadata: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs{
BuildFinishedOn: pulumi.String("string"),
BuildInvocationId: pulumi.String("string"),
BuildStartedOn: pulumi.String("string"),
Completeness: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs{
Environment: pulumi.Bool(false),
Materials: pulumi.Bool(false),
Parameters: pulumi.Bool(false),
},
Reproducible: pulumi.Bool(false),
},
},
Subject: containeranalysis.SubjectArray{
&containeranalysis.SubjectArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
Type: pulumi.String("string"),
},
Provenance: &containeranalysis.BuildProvenanceArgs{
BuildOptions: pulumi.StringMap{
"string": pulumi.String("string"),
},
BuilderVersion: pulumi.String("string"),
BuiltArtifacts: containeranalysis.ArtifactArray{
&containeranalysis.ArtifactArgs{
Checksum: pulumi.String("string"),
Id: pulumi.String("string"),
Names: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Commands: containeranalysis.CommandArray{
&containeranalysis.CommandArgs{
Args: pulumi.StringArray{
pulumi.String("string"),
},
Dir: pulumi.String("string"),
Env: pulumi.StringArray{
pulumi.String("string"),
},
Id: pulumi.String("string"),
Name: pulumi.String("string"),
WaitFor: pulumi.StringArray{
pulumi.String("string"),
},
},
},
CreateTime: pulumi.String("string"),
Creator: pulumi.String("string"),
FinishTime: pulumi.String("string"),
Id: pulumi.String("string"),
LogsBucket: pulumi.String("string"),
Project: pulumi.String("string"),
SourceProvenance: &containeranalysis.SourceArgs{
AdditionalContexts: containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArray{
&containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs{
CloudRepo: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs{
AliasContext: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs{
Kind: containeranalysisv1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKindKindUnspecified,
Name: pulumi.String("string"),
},
RepoId: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs{
ProjectRepoId: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs{
Project: pulumi.String("string"),
RepoName: pulumi.String("string"),
},
Uid: pulumi.String("string"),
},
RevisionId: pulumi.String("string"),
},
Gerrit: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs{
AliasContext: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs{
Kind: containeranalysisv1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKindKindUnspecified,
Name: pulumi.String("string"),
},
GerritProject: pulumi.String("string"),
HostUri: pulumi.String("string"),
RevisionId: pulumi.String("string"),
},
Git: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs{
RevisionId: pulumi.String("string"),
Url: pulumi.String("string"),
},
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
},
ArtifactStorageSource: &containeranalysis.StorageSourceArgs{
Bucket: pulumi.String("string"),
Generation: pulumi.String("string"),
Object: pulumi.String("string"),
},
Context: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs{
CloudRepo: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs{
AliasContext: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs{
Kind: containeranalysisv1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKindKindUnspecified,
Name: pulumi.String("string"),
},
RepoId: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs{
ProjectRepoId: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs{
Project: pulumi.String("string"),
RepoName: pulumi.String("string"),
},
Uid: pulumi.String("string"),
},
RevisionId: pulumi.String("string"),
},
Gerrit: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs{
AliasContext: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs{
Kind: containeranalysisv1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKindKindUnspecified,
Name: pulumi.String("string"),
},
GerritProject: pulumi.String("string"),
HostUri: pulumi.String("string"),
RevisionId: pulumi.String("string"),
},
Git: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs{
RevisionId: pulumi.String("string"),
Url: pulumi.String("string"),
},
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
FileHashes: pulumi.StringMap{
"string": pulumi.String("string"),
},
RepoSource: &containeranalysis.RepoSourceArgs{
BranchName: pulumi.String("string"),
CommitSha: pulumi.String("string"),
Project: pulumi.String("string"),
RepoName: pulumi.String("string"),
TagName: pulumi.String("string"),
},
StorageSource: &containeranalysis.StorageSourceArgs{
Bucket: pulumi.String("string"),
Generation: pulumi.String("string"),
Object: pulumi.String("string"),
},
},
StartTime: pulumi.String("string"),
TriggerId: pulumi.String("string"),
},
ProvenanceBytes: pulumi.String("string"),
},
Compliance: &containeranalysis.ComplianceOccurrenceArgs{
NonComplianceReason: pulumi.String("string"),
NonCompliantFiles: containeranalysis.NonCompliantFileArray{
&containeranalysis.NonCompliantFileArgs{
DisplayCommand: pulumi.String("string"),
Path: pulumi.String("string"),
Reason: pulumi.String("string"),
},
},
},
Deployment: &containeranalysis.DeploymentArgs{
Address: pulumi.String("string"),
Config: pulumi.String("string"),
DeployTime: pulumi.String("string"),
Platform: containeranalysisv1alpha1.DeploymentPlatformPlatformUnspecified,
ResourceUri: pulumi.StringArray{
pulumi.String("string"),
},
UndeployTime: pulumi.String("string"),
UserEmail: pulumi.String("string"),
},
DerivedImage: &containeranalysis.DerivedArgs{
Fingerprint: &containeranalysis.FingerprintArgs{
V1Name: pulumi.String("string"),
V2Blob: pulumi.StringArray{
pulumi.String("string"),
},
},
LayerInfo: containeranalysis.LayerArray{
&containeranalysis.LayerArgs{
Arguments: pulumi.String("string"),
Directive: containeranalysisv1alpha1.LayerDirectiveDirectiveUnspecified,
},
},
},
Discovered: &containeranalysis.DiscoveredArgs{
AnalysisCompleted: &containeranalysis.AnalysisCompletedArgs{
AnalysisType: pulumi.StringArray{
pulumi.String("string"),
},
},
AnalysisError: containeranalysis.StatusArray{
&containeranalysis.StatusArgs{
Code: pulumi.Int(0),
Details: pulumi.StringMapArray{
pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Message: pulumi.String("string"),
},
},
AnalysisStatus: containeranalysisv1alpha1.DiscoveredAnalysisStatusAnalysisStatusUnspecified,
AnalysisStatusError: &containeranalysis.StatusArgs{
Code: pulumi.Int(0),
Details: pulumi.StringMapArray{
pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Message: pulumi.String("string"),
},
ArchiveTime: pulumi.String("string"),
ContinuousAnalysis: containeranalysisv1alpha1.DiscoveredContinuousAnalysisContinuousAnalysisUnspecified,
Cpe: pulumi.String("string"),
LastScanTime: pulumi.String("string"),
},
DsseAttestation: &containeranalysis.DSSEAttestationOccurrenceArgs{
Envelope: &containeranalysis.EnvelopeArgs{
Payload: pulumi.String("string"),
PayloadType: pulumi.String("string"),
Signatures: containeranalysis.EnvelopeSignatureArray{
&containeranalysis.EnvelopeSignatureArgs{
Keyid: pulumi.String("string"),
Sig: pulumi.String("string"),
},
},
},
Statement: &containeranalysis.InTotoStatementArgs{
PredicateType: pulumi.String("string"),
Provenance: &containeranalysis.InTotoProvenanceArgs{
BuilderConfig: &containeranalysis.BuilderConfigArgs{
Id: pulumi.String("string"),
},
Materials: pulumi.StringArray{
pulumi.String("string"),
},
Metadata: &containeranalysis.MetadataArgs{
BuildFinishedOn: pulumi.String("string"),
BuildInvocationId: pulumi.String("string"),
BuildStartedOn: pulumi.String("string"),
Completeness: &containeranalysis.CompletenessArgs{
Arguments: pulumi.Bool(false),
Environment: pulumi.Bool(false),
Materials: pulumi.Bool(false),
},
Reproducible: pulumi.Bool(false),
},
Recipe: &containeranalysis.RecipeArgs{
Arguments: pulumi.StringMapArray{
pulumi.StringMap{
"string": pulumi.String("string"),
},
},
DefinedInMaterial: pulumi.String("string"),
EntryPoint: pulumi.String("string"),
Environment: pulumi.StringMapArray{
pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Type: pulumi.String("string"),
},
},
SlsaProvenance: &containeranalysis.SlsaProvenanceArgs{
Builder: &containeranalysis.SlsaBuilderArgs{
Id: pulumi.String("string"),
},
Materials: containeranalysis.MaterialArray{
&containeranalysis.MaterialArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Uri: pulumi.String("string"),
},
},
Metadata: &containeranalysis.SlsaMetadataArgs{
BuildFinishedOn: pulumi.String("string"),
BuildInvocationId: pulumi.String("string"),
BuildStartedOn: pulumi.String("string"),
Completeness: &containeranalysis.SlsaCompletenessArgs{
Arguments: pulumi.Bool(false),
Environment: pulumi.Bool(false),
Materials: pulumi.Bool(false),
},
Reproducible: pulumi.Bool(false),
},
Recipe: &containeranalysis.SlsaRecipeArgs{
Arguments: pulumi.StringMap{
"string": pulumi.String("string"),
},
DefinedInMaterial: pulumi.String("string"),
EntryPoint: pulumi.String("string"),
Environment: pulumi.StringMap{
"string": pulumi.String("string"),
},
Type: pulumi.String("string"),
},
},
SlsaProvenanceZeroTwo: &containeranalysis.SlsaProvenanceZeroTwoArgs{
BuildConfig: pulumi.StringMap{
"string": pulumi.String("string"),
},
BuildType: pulumi.String("string"),
Builder: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs{
Id: pulumi.String("string"),
},
Invocation: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs{
ConfigSource: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
EntryPoint: pulumi.String("string"),
Uri: pulumi.String("string"),
},
Environment: pulumi.StringMap{
"string": pulumi.String("string"),
},
Parameters: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
Materials: containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArray{
&containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Uri: pulumi.String("string"),
},
},
Metadata: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs{
BuildFinishedOn: pulumi.String("string"),
BuildInvocationId: pulumi.String("string"),
BuildStartedOn: pulumi.String("string"),
Completeness: &containeranalysis.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs{
Environment: pulumi.Bool(false),
Materials: pulumi.Bool(false),
Parameters: pulumi.Bool(false),
},
Reproducible: pulumi.Bool(false),
},
},
Subject: containeranalysis.SubjectArray{
&containeranalysis.SubjectArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
Type: pulumi.String("string"),
},
},
Envelope: &containeranalysis.EnvelopeArgs{
Payload: pulumi.String("string"),
PayloadType: pulumi.String("string"),
Signatures: containeranalysis.EnvelopeSignatureArray{
&containeranalysis.EnvelopeSignatureArgs{
Keyid: pulumi.String("string"),
Sig: pulumi.String("string"),
},
},
},
Installation: &containeranalysis.InstallationArgs{
License: &containeranalysis.LicenseArgs{
Comments: pulumi.String("string"),
Expression: pulumi.String("string"),
},
Location: containeranalysis.LocationArray{
&containeranalysis.LocationArgs{
Path: pulumi.String("string"),
},
},
},
Name: pulumi.String("string"),
NoteName: pulumi.String("string"),
Project: pulumi.String("string"),
Remediation: pulumi.String("string"),
Resource: &containeranalysis.ResourceArgs{
ContentHash: &containeranalysis.HashArgs{
Type: containeranalysisv1alpha1.HashTypeNone,
Value: pulumi.String("string"),
},
Name: pulumi.String("string"),
Uri: pulumi.String("string"),
},
ResourceUrl: pulumi.String("string"),
Sbom: &containeranalysis.DocumentOccurrenceArgs{
CreateTime: pulumi.String("string"),
CreatorComment: pulumi.String("string"),
Creators: pulumi.StringArray{
pulumi.String("string"),
},
DocumentComment: pulumi.String("string"),
ExternalDocumentRefs: pulumi.StringArray{
pulumi.String("string"),
},
Id: pulumi.String("string"),
LicenseListVersion: pulumi.String("string"),
Namespace: pulumi.String("string"),
Title: pulumi.String("string"),
},
SbomReference: &containeranalysis.SBOMReferenceOccurrenceArgs{
Payload: &containeranalysis.SbomReferenceIntotoPayloadArgs{
Predicate: &containeranalysis.SbomReferenceIntotoPredicateArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Location: pulumi.String("string"),
MimeType: pulumi.String("string"),
ReferrerId: pulumi.String("string"),
},
PredicateType: pulumi.String("string"),
Subject: containeranalysis.SubjectArray{
&containeranalysis.SubjectArgs{
Digest: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
},
},
Type: pulumi.String("string"),
},
PayloadType: pulumi.String("string"),
Signatures: containeranalysis.EnvelopeSignatureArray{
&containeranalysis.EnvelopeSignatureArgs{
Keyid: pulumi.String("string"),
Sig: pulumi.String("string"),
},
},
},
SpdxFile: &containeranalysis.FileOccurrenceArgs{
Attributions: pulumi.StringArray{
pulumi.String("string"),
},
Comment: pulumi.String("string"),
Contributors: pulumi.StringArray{
pulumi.String("string"),
},
Copyright: pulumi.String("string"),
FilesLicenseInfo: pulumi.StringArray{
pulumi.String("string"),
},
Id: pulumi.String("string"),
LicenseConcluded: &containeranalysis.LicenseArgs{
Comments: pulumi.String("string"),
Expression: pulumi.String("string"),
},
Notice: pulumi.String("string"),
},
SpdxPackage: &containeranalysis.PackageInfoOccurrenceArgs{
Comment: pulumi.String("string"),
Filename: pulumi.String("string"),
Id: pulumi.String("string"),
LicenseConcluded: &containeranalysis.LicenseArgs{
Comments: pulumi.String("string"),
Expression: pulumi.String("string"),
},
SourceInfo: pulumi.String("string"),
},
SpdxRelationship: &containeranalysis.RelationshipOccurrenceArgs{
Comment: pulumi.String("string"),
Source: pulumi.String("string"),
Target: pulumi.String("string"),
},
Upgrade: &containeranalysis.UpgradeOccurrenceArgs{
Distribution: &containeranalysis.UpgradeDistributionArgs{
Classification: pulumi.String("string"),
CpeUri: pulumi.String("string"),
Cve: pulumi.StringArray{
pulumi.String("string"),
},
Severity: pulumi.String("string"),
},
Package: pulumi.String("string"),
ParsedVersion: &containeranalysis.VersionArgs{
Epoch: pulumi.Int(0),
Inclusive: pulumi.Bool(false),
Kind: containeranalysisv1alpha1.VersionKindNormal,
Name: pulumi.String("string"),
Revision: pulumi.String("string"),
},
},
VulnerabilityDetails: &containeranalysis.VulnerabilityDetailsArgs{
CvssV2: &containeranalysis.CVSSArgs{
AttackComplexity: containeranalysisv1alpha1.CVSSAttackComplexityAttackComplexityUnspecified,
AttackVector: containeranalysisv1alpha1.CVSSAttackVectorAttackVectorUnspecified,
Authentication: containeranalysisv1alpha1.CVSSAuthenticationAuthenticationUnspecified,
AvailabilityImpact: containeranalysisv1alpha1.CVSSAvailabilityImpactImpactUnspecified,
BaseScore: pulumi.Float64(0),
ConfidentialityImpact: containeranalysisv1alpha1.CVSSConfidentialityImpactImpactUnspecified,
ExploitabilityScore: pulumi.Float64(0),
ImpactScore: pulumi.Float64(0),
IntegrityImpact: containeranalysisv1alpha1.CVSSIntegrityImpactImpactUnspecified,
PrivilegesRequired: containeranalysisv1alpha1.CVSSPrivilegesRequiredPrivilegesRequiredUnspecified,
Scope: containeranalysisv1alpha1.CVSSScopeScopeUnspecified,
UserInteraction: containeranalysisv1alpha1.CVSSUserInteractionUserInteractionUnspecified,
},
CvssV3: &containeranalysis.CVSSArgs{
AttackComplexity: containeranalysisv1alpha1.CVSSAttackComplexityAttackComplexityUnspecified,
AttackVector: containeranalysisv1alpha1.CVSSAttackVectorAttackVectorUnspecified,
Authentication: containeranalysisv1alpha1.CVSSAuthenticationAuthenticationUnspecified,
AvailabilityImpact: containeranalysisv1alpha1.CVSSAvailabilityImpactImpactUnspecified,
BaseScore: pulumi.Float64(0),
ConfidentialityImpact: containeranalysisv1alpha1.CVSSConfidentialityImpactImpactUnspecified,
ExploitabilityScore: pulumi.Float64(0),
ImpactScore: pulumi.Float64(0),
IntegrityImpact: containeranalysisv1alpha1.CVSSIntegrityImpactImpactUnspecified,
PrivilegesRequired: containeranalysisv1alpha1.CVSSPrivilegesRequiredPrivilegesRequiredUnspecified,
Scope: containeranalysisv1alpha1.CVSSScopeScopeUnspecified,
UserInteraction: containeranalysisv1alpha1.CVSSUserInteractionUserInteractionUnspecified,
},
EffectiveSeverity: containeranalysisv1alpha1.VulnerabilityDetailsEffectiveSeveritySeverityUnspecified,
ExtraDetails: pulumi.String("string"),
PackageIssue: containeranalysis.PackageIssueArray{
&containeranalysis.PackageIssueArgs{
AffectedLocation: &containeranalysis.VulnerabilityLocationArgs{
CpeUri: pulumi.String("string"),
FileLocation: containeranalysis.FileLocationArray{
&containeranalysis.FileLocationArgs{
FilePath: pulumi.String("string"),
},
},
Package: pulumi.String("string"),
Version: &containeranalysis.VersionArgs{
Epoch: pulumi.Int(0),
Inclusive: pulumi.Bool(false),
Kind: containeranalysisv1alpha1.VersionKindNormal,
Name: pulumi.String("string"),
Revision: pulumi.String("string"),
},
},
FixedLocation: &containeranalysis.VulnerabilityLocationArgs{
CpeUri: pulumi.String("string"),
FileLocation: containeranalysis.FileLocationArray{
&containeranalysis.FileLocationArgs{
FilePath: pulumi.String("string"),
},
},
Package: pulumi.String("string"),
Version: &containeranalysis.VersionArgs{
Epoch: pulumi.Int(0),
Inclusive: pulumi.Bool(false),
Kind: containeranalysisv1alpha1.VersionKindNormal,
Name: pulumi.String("string"),
Revision: pulumi.String("string"),
},
},
PackageType: pulumi.String("string"),
SeverityName: pulumi.String("string"),
},
},
Type: pulumi.String("string"),
VexAssessment: &containeranalysis.VexAssessmentArgs{
Cve: pulumi.String("string"),
Impacts: pulumi.StringArray{
pulumi.String("string"),
},
Justification: &containeranalysis.JustificationArgs{
Details: pulumi.String("string"),
JustificationType: containeranalysisv1alpha1.JustificationJustificationTypeJustificationTypeUnspecified,
},
NoteName: pulumi.String("string"),
RelatedUris: containeranalysis.URIArray{
&containeranalysis.URIArgs{
Label: pulumi.String("string"),
Uri: pulumi.String("string"),
},
},
Remediations: containeranalysis.RemediationArray{
&containeranalysis.RemediationArgs{
Details: pulumi.String("string"),
RemediationType: containeranalysisv1alpha1.RemediationRemediationTypeRemediationTypeUnspecified,
RemediationUri: &containeranalysis.URIArgs{
Label: pulumi.String("string"),
Uri: pulumi.String("string"),
},
},
},
State: containeranalysisv1alpha1.VexAssessmentStateStateUnspecified,
VulnerabilityId: pulumi.String("string"),
},
},
})
var google_nativeOccurrenceResource = new Occurrence("google-nativeOccurrenceResource", OccurrenceArgs.builder()
.attestation(AttestationArgs.builder()
.pgpSignedAttestation(PgpSignedAttestationArgs.builder()
.contentType("CONTENT_TYPE_UNSPECIFIED")
.pgpKeyId("string")
.signature("string")
.build())
.build())
.buildDetails(BuildDetailsArgs.builder()
.inTotoSlsaProvenanceV1(InTotoSlsaProvenanceV1Args.builder()
.predicate(SlsaProvenanceV1Args.builder()
.buildDefinition(BuildDefinitionArgs.builder()
.buildType("string")
.externalParameters(Map.of("string", "string"))
.internalParameters(Map.of("string", "string"))
.resolvedDependencies(ResourceDescriptorArgs.builder()
.annotations(Map.of("string", "string"))
.content("string")
.digest(Map.of("string", "string"))
.downloadLocation("string")
.mediaType("string")
.name("string")
.uri("string")
.build())
.build())
.runDetails(RunDetailsArgs.builder()
.builder(ProvenanceBuilderArgs.builder()
.builderDependencies(ResourceDescriptorArgs.builder()
.annotations(Map.of("string", "string"))
.content("string")
.digest(Map.of("string", "string"))
.downloadLocation("string")
.mediaType("string")
.name("string")
.uri("string")
.build())
.id("string")
.version(Map.of("string", "string"))
.build())
.byproducts(ResourceDescriptorArgs.builder()
.annotations(Map.of("string", "string"))
.content("string")
.digest(Map.of("string", "string"))
.downloadLocation("string")
.mediaType("string")
.name("string")
.uri("string")
.build())
.metadata(BuildMetadataArgs.builder()
.finishedOn("string")
.invocationId("string")
.startedOn("string")
.build())
.build())
.build())
.predicateType("string")
.subject(SubjectArgs.builder()
.digest(Map.of("string", "string"))
.name("string")
.build())
.type("string")
.build())
.intotoStatement(InTotoStatementArgs.builder()
.predicateType("string")
.provenance(InTotoProvenanceArgs.builder()
.builderConfig(BuilderConfigArgs.builder()
.id("string")
.build())
.materials("string")
.metadata(MetadataArgs.builder()
.buildFinishedOn("string")
.buildInvocationId("string")
.buildStartedOn("string")
.completeness(CompletenessArgs.builder()
.arguments(false)
.environment(false)
.materials(false)
.build())
.reproducible(false)
.build())
.recipe(RecipeArgs.builder()
.arguments(Map.of("string", "string"))
.definedInMaterial("string")
.entryPoint("string")
.environment(Map.of("string", "string"))
.type("string")
.build())
.build())
.slsaProvenance(SlsaProvenanceArgs.builder()
.builder(SlsaBuilderArgs.builder()
.id("string")
.build())
.materials(MaterialArgs.builder()
.digest(Map.of("string", "string"))
.uri("string")
.build())
.metadata(SlsaMetadataArgs.builder()
.buildFinishedOn("string")
.buildInvocationId("string")
.buildStartedOn("string")
.completeness(SlsaCompletenessArgs.builder()
.arguments(false)
.environment(false)
.materials(false)
.build())
.reproducible(false)
.build())
.recipe(SlsaRecipeArgs.builder()
.arguments(Map.of("string", "string"))
.definedInMaterial("string")
.entryPoint("string")
.environment(Map.of("string", "string"))
.type("string")
.build())
.build())
.slsaProvenanceZeroTwo(SlsaProvenanceZeroTwoArgs.builder()
.buildConfig(Map.of("string", "string"))
.buildType("string")
.builder(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs.builder()
.id("string")
.build())
.invocation(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs.builder()
.configSource(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs.builder()
.digest(Map.of("string", "string"))
.entryPoint("string")
.uri("string")
.build())
.environment(Map.of("string", "string"))
.parameters(Map.of("string", "string"))
.build())
.materials(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs.builder()
.digest(Map.of("string", "string"))
.uri("string")
.build())
.metadata(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs.builder()
.buildFinishedOn("string")
.buildInvocationId("string")
.buildStartedOn("string")
.completeness(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs.builder()
.environment(false)
.materials(false)
.parameters(false)
.build())
.reproducible(false)
.build())
.build())
.subject(SubjectArgs.builder()
.digest(Map.of("string", "string"))
.name("string")
.build())
.type("string")
.build())
.provenance(BuildProvenanceArgs.builder()
.buildOptions(Map.of("string", "string"))
.builderVersion("string")
.builtArtifacts(ArtifactArgs.builder()
.checksum("string")
.id("string")
.names("string")
.build())
.commands(CommandArgs.builder()
.args("string")
.dir("string")
.env("string")
.id("string")
.name("string")
.waitFor("string")
.build())
.createTime("string")
.creator("string")
.finishTime("string")
.id("string")
.logsBucket("string")
.project("string")
.sourceProvenance(SourceArgs.builder()
.additionalContexts(GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs.builder()
.cloudRepo(GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs.builder()
.aliasContext(GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs.builder()
.kind("KIND_UNSPECIFIED")
.name("string")
.build())
.repoId(GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs.builder()
.projectRepoId(GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs.builder()
.project("string")
.repoName("string")
.build())
.uid("string")
.build())
.revisionId("string")
.build())
.gerrit(GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs.builder()
.aliasContext(GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs.builder()
.kind("KIND_UNSPECIFIED")
.name("string")
.build())
.gerritProject("string")
.hostUri("string")
.revisionId("string")
.build())
.git(GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs.builder()
.revisionId("string")
.url("string")
.build())
.labels(Map.of("string", "string"))
.build())
.artifactStorageSource(StorageSourceArgs.builder()
.bucket("string")
.generation("string")
.object("string")
.build())
.context(GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs.builder()
.cloudRepo(GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs.builder()
.aliasContext(GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs.builder()
.kind("KIND_UNSPECIFIED")
.name("string")
.build())
.repoId(GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs.builder()
.projectRepoId(GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs.builder()
.project("string")
.repoName("string")
.build())
.uid("string")
.build())
.revisionId("string")
.build())
.gerrit(GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs.builder()
.aliasContext(GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs.builder()
.kind("KIND_UNSPECIFIED")
.name("string")
.build())
.gerritProject("string")
.hostUri("string")
.revisionId("string")
.build())
.git(GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs.builder()
.revisionId("string")
.url("string")
.build())
.labels(Map.of("string", "string"))
.build())
.fileHashes(Map.of("string", "string"))
.repoSource(RepoSourceArgs.builder()
.branchName("string")
.commitSha("string")
.project("string")
.repoName("string")
.tagName("string")
.build())
.storageSource(StorageSourceArgs.builder()
.bucket("string")
.generation("string")
.object("string")
.build())
.build())
.startTime("string")
.triggerId("string")
.build())
.provenanceBytes("string")
.build())
.compliance(ComplianceOccurrenceArgs.builder()
.nonComplianceReason("string")
.nonCompliantFiles(NonCompliantFileArgs.builder()
.displayCommand("string")
.path("string")
.reason("string")
.build())
.build())
.deployment(DeploymentArgs.builder()
.address("string")
.config("string")
.deployTime("string")
.platform("PLATFORM_UNSPECIFIED")
.resourceUri("string")
.undeployTime("string")
.userEmail("string")
.build())
.derivedImage(DerivedArgs.builder()
.fingerprint(FingerprintArgs.builder()
.v1Name("string")
.v2Blob("string")
.build())
.layerInfo(LayerArgs.builder()
.arguments("string")
.directive("DIRECTIVE_UNSPECIFIED")
.build())
.build())
.discovered(DiscoveredArgs.builder()
.analysisCompleted(AnalysisCompletedArgs.builder()
.analysisType("string")
.build())
.analysisError(StatusArgs.builder()
.code(0)
.details(Map.of("string", "string"))
.message("string")
.build())
.analysisStatus("ANALYSIS_STATUS_UNSPECIFIED")
.analysisStatusError(StatusArgs.builder()
.code(0)
.details(Map.of("string", "string"))
.message("string")
.build())
.archiveTime("string")
.continuousAnalysis("CONTINUOUS_ANALYSIS_UNSPECIFIED")
.cpe("string")
.lastScanTime("string")
.build())
.dsseAttestation(DSSEAttestationOccurrenceArgs.builder()
.envelope(EnvelopeArgs.builder()
.payload("string")
.payloadType("string")
.signatures(EnvelopeSignatureArgs.builder()
.keyid("string")
.sig("string")
.build())
.build())
.statement(InTotoStatementArgs.builder()
.predicateType("string")
.provenance(InTotoProvenanceArgs.builder()
.builderConfig(BuilderConfigArgs.builder()
.id("string")
.build())
.materials("string")
.metadata(MetadataArgs.builder()
.buildFinishedOn("string")
.buildInvocationId("string")
.buildStartedOn("string")
.completeness(CompletenessArgs.builder()
.arguments(false)
.environment(false)
.materials(false)
.build())
.reproducible(false)
.build())
.recipe(RecipeArgs.builder()
.arguments(Map.of("string", "string"))
.definedInMaterial("string")
.entryPoint("string")
.environment(Map.of("string", "string"))
.type("string")
.build())
.build())
.slsaProvenance(SlsaProvenanceArgs.builder()
.builder(SlsaBuilderArgs.builder()
.id("string")
.build())
.materials(MaterialArgs.builder()
.digest(Map.of("string", "string"))
.uri("string")
.build())
.metadata(SlsaMetadataArgs.builder()
.buildFinishedOn("string")
.buildInvocationId("string")
.buildStartedOn("string")
.completeness(SlsaCompletenessArgs.builder()
.arguments(false)
.environment(false)
.materials(false)
.build())
.reproducible(false)
.build())
.recipe(SlsaRecipeArgs.builder()
.arguments(Map.of("string", "string"))
.definedInMaterial("string")
.entryPoint("string")
.environment(Map.of("string", "string"))
.type("string")
.build())
.build())
.slsaProvenanceZeroTwo(SlsaProvenanceZeroTwoArgs.builder()
.buildConfig(Map.of("string", "string"))
.buildType("string")
.builder(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs.builder()
.id("string")
.build())
.invocation(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs.builder()
.configSource(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs.builder()
.digest(Map.of("string", "string"))
.entryPoint("string")
.uri("string")
.build())
.environment(Map.of("string", "string"))
.parameters(Map.of("string", "string"))
.build())
.materials(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs.builder()
.digest(Map.of("string", "string"))
.uri("string")
.build())
.metadata(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs.builder()
.buildFinishedOn("string")
.buildInvocationId("string")
.buildStartedOn("string")
.completeness(GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs.builder()
.environment(false)
.materials(false)
.parameters(false)
.build())
.reproducible(false)
.build())
.build())
.subject(SubjectArgs.builder()
.digest(Map.of("string", "string"))
.name("string")
.build())
.type("string")
.build())
.build())
.envelope(EnvelopeArgs.builder()
.payload("string")
.payloadType("string")
.signatures(EnvelopeSignatureArgs.builder()
.keyid("string")
.sig("string")
.build())
.build())
.installation(InstallationArgs.builder()
.license(LicenseArgs.builder()
.comments("string")
.expression("string")
.build())
.location(LocationArgs.builder()
.path("string")
.build())
.build())
.name("string")
.noteName("string")
.project("string")
.remediation("string")
.resource(ResourceArgs.builder()
.contentHash(HashArgs.builder()
.type("NONE")
.value("string")
.build())
.name("string")
.uri("string")
.build())
.resourceUrl("string")
.sbom(DocumentOccurrenceArgs.builder()
.createTime("string")
.creatorComment("string")
.creators("string")
.documentComment("string")
.externalDocumentRefs("string")
.id("string")
.licenseListVersion("string")
.namespace("string")
.title("string")
.build())
.sbomReference(SBOMReferenceOccurrenceArgs.builder()
.payload(SbomReferenceIntotoPayloadArgs.builder()
.predicate(SbomReferenceIntotoPredicateArgs.builder()
.digest(Map.of("string", "string"))
.location("string")
.mimeType("string")
.referrerId("string")
.build())
.predicateType("string")
.subject(SubjectArgs.builder()
.digest(Map.of("string", "string"))
.name("string")
.build())
.type("string")
.build())
.payloadType("string")
.signatures(EnvelopeSignatureArgs.builder()
.keyid("string")
.sig("string")
.build())
.build())
.spdxFile(FileOccurrenceArgs.builder()
.attributions("string")
.comment("string")
.contributors("string")
.copyright("string")
.filesLicenseInfo("string")
.id("string")
.licenseConcluded(LicenseArgs.builder()
.comments("string")
.expression("string")
.build())
.notice("string")
.build())
.spdxPackage(PackageInfoOccurrenceArgs.builder()
.comment("string")
.filename("string")
.id("string")
.licenseConcluded(LicenseArgs.builder()
.comments("string")
.expression("string")
.build())
.sourceInfo("string")
.build())
.spdxRelationship(RelationshipOccurrenceArgs.builder()
.comment("string")
.source("string")
.target("string")
.build())
.upgrade(UpgradeOccurrenceArgs.builder()
.distribution(UpgradeDistributionArgs.builder()
.classification("string")
.cpeUri("string")
.cve("string")
.severity("string")
.build())
.package_("string")
.parsedVersion(VersionArgs.builder()
.epoch(0)
.inclusive(false)
.kind("NORMAL")
.name("string")
.revision("string")
.build())
.build())
.vulnerabilityDetails(VulnerabilityDetailsArgs.builder()
.cvssV2(CVSSArgs.builder()
.attackComplexity("ATTACK_COMPLEXITY_UNSPECIFIED")
.attackVector("ATTACK_VECTOR_UNSPECIFIED")
.authentication("AUTHENTICATION_UNSPECIFIED")
.availabilityImpact("IMPACT_UNSPECIFIED")
.baseScore(0)
.confidentialityImpact("IMPACT_UNSPECIFIED")
.exploitabilityScore(0)
.impactScore(0)
.integrityImpact("IMPACT_UNSPECIFIED")
.privilegesRequired("PRIVILEGES_REQUIRED_UNSPECIFIED")
.scope("SCOPE_UNSPECIFIED")
.userInteraction("USER_INTERACTION_UNSPECIFIED")
.build())
.cvssV3(CVSSArgs.builder()
.attackComplexity("ATTACK_COMPLEXITY_UNSPECIFIED")
.attackVector("ATTACK_VECTOR_UNSPECIFIED")
.authentication("AUTHENTICATION_UNSPECIFIED")
.availabilityImpact("IMPACT_UNSPECIFIED")
.baseScore(0)
.confidentialityImpact("IMPACT_UNSPECIFIED")
.exploitabilityScore(0)
.impactScore(0)
.integrityImpact("IMPACT_UNSPECIFIED")
.privilegesRequired("PRIVILEGES_REQUIRED_UNSPECIFIED")
.scope("SCOPE_UNSPECIFIED")
.userInteraction("USER_INTERACTION_UNSPECIFIED")
.build())
.effectiveSeverity("SEVERITY_UNSPECIFIED")
.extraDetails("string")
.packageIssue(PackageIssueArgs.builder()
.affectedLocation(VulnerabilityLocationArgs.builder()
.cpeUri("string")
.fileLocation(FileLocationArgs.builder()
.filePath("string")
.build())
.package_("string")
.version(VersionArgs.builder()
.epoch(0)
.inclusive(false)
.kind("NORMAL")
.name("string")
.revision("string")
.build())
.build())
.fixedLocation(VulnerabilityLocationArgs.builder()
.cpeUri("string")
.fileLocation(FileLocationArgs.builder()
.filePath("string")
.build())
.package_("string")
.version(VersionArgs.builder()
.epoch(0)
.inclusive(false)
.kind("NORMAL")
.name("string")
.revision("string")
.build())
.build())
.packageType("string")
.severityName("string")
.build())
.type("string")
.vexAssessment(VexAssessmentArgs.builder()
.cve("string")
.impacts("string")
.justification(JustificationArgs.builder()
.details("string")
.justificationType("JUSTIFICATION_TYPE_UNSPECIFIED")
.build())
.noteName("string")
.relatedUris(URIArgs.builder()
.label("string")
.uri("string")
.build())
.remediations(RemediationArgs.builder()
.details("string")
.remediationType("REMEDIATION_TYPE_UNSPECIFIED")
.remediationUri(URIArgs.builder()
.label("string")
.uri("string")
.build())
.build())
.state("STATE_UNSPECIFIED")
.vulnerabilityId("string")
.build())
.build())
.build());
google_native_occurrence_resource = google_native.containeranalysis.v1alpha1.Occurrence("google-nativeOccurrenceResource",
attestation=google_native.containeranalysis.v1alpha1.AttestationArgs(
pgp_signed_attestation=google_native.containeranalysis.v1alpha1.PgpSignedAttestationArgs(
content_type=google_native.containeranalysis.v1alpha1.PgpSignedAttestationContentType.CONTENT_TYPE_UNSPECIFIED,
pgp_key_id="string",
signature="string",
),
),
build_details=google_native.containeranalysis.v1alpha1.BuildDetailsArgs(
in_toto_slsa_provenance_v1=google_native.containeranalysis.v1alpha1.InTotoSlsaProvenanceV1Args(
predicate=google_native.containeranalysis.v1alpha1.SlsaProvenanceV1Args(
build_definition=google_native.containeranalysis.v1alpha1.BuildDefinitionArgs(
build_type="string",
external_parameters={
"string": "string",
},
internal_parameters={
"string": "string",
},
resolved_dependencies=[google_native.containeranalysis.v1alpha1.ResourceDescriptorArgs(
annotations={
"string": "string",
},
content="string",
digest={
"string": "string",
},
download_location="string",
media_type="string",
name="string",
uri="string",
)],
),
run_details=google_native.containeranalysis.v1alpha1.RunDetailsArgs(
builder=google_native.containeranalysis.v1alpha1.ProvenanceBuilderArgs(
builder_dependencies=[google_native.containeranalysis.v1alpha1.ResourceDescriptorArgs(
annotations={
"string": "string",
},
content="string",
digest={
"string": "string",
},
download_location="string",
media_type="string",
name="string",
uri="string",
)],
id="string",
version={
"string": "string",
},
),
byproducts=[google_native.containeranalysis.v1alpha1.ResourceDescriptorArgs(
annotations={
"string": "string",
},
content="string",
digest={
"string": "string",
},
download_location="string",
media_type="string",
name="string",
uri="string",
)],
metadata=google_native.containeranalysis.v1alpha1.BuildMetadataArgs(
finished_on="string",
invocation_id="string",
started_on="string",
),
),
),
predicate_type="string",
subject=[google_native.containeranalysis.v1alpha1.SubjectArgs(
digest={
"string": "string",
},
name="string",
)],
type="string",
),
intoto_statement=google_native.containeranalysis.v1alpha1.InTotoStatementArgs(
predicate_type="string",
provenance=google_native.containeranalysis.v1alpha1.InTotoProvenanceArgs(
builder_config=google_native.containeranalysis.v1alpha1.BuilderConfigArgs(
id="string",
),
materials=["string"],
metadata=google_native.containeranalysis.v1alpha1.MetadataArgs(
build_finished_on="string",
build_invocation_id="string",
build_started_on="string",
completeness=google_native.containeranalysis.v1alpha1.CompletenessArgs(
arguments=False,
environment=False,
materials=False,
),
reproducible=False,
),
recipe=google_native.containeranalysis.v1alpha1.RecipeArgs(
arguments=[{
"string": "string",
}],
defined_in_material="string",
entry_point="string",
environment=[{
"string": "string",
}],
type="string",
),
),
slsa_provenance=google_native.containeranalysis.v1alpha1.SlsaProvenanceArgs(
builder=google_native.containeranalysis.v1alpha1.SlsaBuilderArgs(
id="string",
),
materials=[google_native.containeranalysis.v1alpha1.MaterialArgs(
digest={
"string": "string",
},
uri="string",
)],
metadata=google_native.containeranalysis.v1alpha1.SlsaMetadataArgs(
build_finished_on="string",
build_invocation_id="string",
build_started_on="string",
completeness=google_native.containeranalysis.v1alpha1.SlsaCompletenessArgs(
arguments=False,
environment=False,
materials=False,
),
reproducible=False,
),
recipe=google_native.containeranalysis.v1alpha1.SlsaRecipeArgs(
arguments={
"string": "string",
},
defined_in_material="string",
entry_point="string",
environment={
"string": "string",
},
type="string",
),
),
slsa_provenance_zero_two=google_native.containeranalysis.v1alpha1.SlsaProvenanceZeroTwoArgs(
build_config={
"string": "string",
},
build_type="string",
builder=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs(
id="string",
),
invocation=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs(
config_source=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs(
digest={
"string": "string",
},
entry_point="string",
uri="string",
),
environment={
"string": "string",
},
parameters={
"string": "string",
},
),
materials=[google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs(
digest={
"string": "string",
},
uri="string",
)],
metadata=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs(
build_finished_on="string",
build_invocation_id="string",
build_started_on="string",
completeness=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs(
environment=False,
materials=False,
parameters=False,
),
reproducible=False,
),
),
subject=[google_native.containeranalysis.v1alpha1.SubjectArgs(
digest={
"string": "string",
},
name="string",
)],
type="string",
),
provenance=google_native.containeranalysis.v1alpha1.BuildProvenanceArgs(
build_options={
"string": "string",
},
builder_version="string",
built_artifacts=[google_native.containeranalysis.v1alpha1.ArtifactArgs(
checksum="string",
id="string",
names=["string"],
)],
commands=[google_native.containeranalysis.v1alpha1.CommandArgs(
args=["string"],
dir="string",
env=["string"],
id="string",
name="string",
wait_for=["string"],
)],
create_time="string",
creator="string",
finish_time="string",
id="string",
logs_bucket="string",
project="string",
source_provenance=google_native.containeranalysis.v1alpha1.SourceArgs(
additional_contexts=[google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs(
cloud_repo=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs(
alias_context=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs(
kind=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KIND_UNSPECIFIED,
name="string",
),
repo_id=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs(
project_repo_id=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs(
project="string",
repo_name="string",
),
uid="string",
),
revision_id="string",
),
gerrit=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs(
alias_context=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs(
kind=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KIND_UNSPECIFIED,
name="string",
),
gerrit_project="string",
host_uri="string",
revision_id="string",
),
git=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs(
revision_id="string",
url="string",
),
labels={
"string": "string",
},
)],
artifact_storage_source=google_native.containeranalysis.v1alpha1.StorageSourceArgs(
bucket="string",
generation="string",
object="string",
),
context=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs(
cloud_repo=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs(
alias_context=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs(
kind=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KIND_UNSPECIFIED,
name="string",
),
repo_id=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs(
project_repo_id=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs(
project="string",
repo_name="string",
),
uid="string",
),
revision_id="string",
),
gerrit=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs(
alias_context=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs(
kind=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KIND_UNSPECIFIED,
name="string",
),
gerrit_project="string",
host_uri="string",
revision_id="string",
),
git=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs(
revision_id="string",
url="string",
),
labels={
"string": "string",
},
),
file_hashes={
"string": "string",
},
repo_source=google_native.containeranalysis.v1alpha1.RepoSourceArgs(
branch_name="string",
commit_sha="string",
project="string",
repo_name="string",
tag_name="string",
),
storage_source=google_native.containeranalysis.v1alpha1.StorageSourceArgs(
bucket="string",
generation="string",
object="string",
),
),
start_time="string",
trigger_id="string",
),
provenance_bytes="string",
),
compliance=google_native.containeranalysis.v1alpha1.ComplianceOccurrenceArgs(
non_compliance_reason="string",
non_compliant_files=[google_native.containeranalysis.v1alpha1.NonCompliantFileArgs(
display_command="string",
path="string",
reason="string",
)],
),
deployment=google_native.containeranalysis.v1alpha1.DeploymentArgs(
address="string",
config="string",
deploy_time="string",
platform=google_native.containeranalysis.v1alpha1.DeploymentPlatform.PLATFORM_UNSPECIFIED,
resource_uri=["string"],
undeploy_time="string",
user_email="string",
),
derived_image=google_native.containeranalysis.v1alpha1.DerivedArgs(
fingerprint=google_native.containeranalysis.v1alpha1.FingerprintArgs(
v1_name="string",
v2_blob=["string"],
),
layer_info=[google_native.containeranalysis.v1alpha1.LayerArgs(
arguments="string",
directive=google_native.containeranalysis.v1alpha1.LayerDirective.DIRECTIVE_UNSPECIFIED,
)],
),
discovered=google_native.containeranalysis.v1alpha1.DiscoveredArgs(
analysis_completed=google_native.containeranalysis.v1alpha1.AnalysisCompletedArgs(
analysis_type=["string"],
),
analysis_error=[google_native.containeranalysis.v1alpha1.StatusArgs(
code=0,
details=[{
"string": "string",
}],
message="string",
)],
analysis_status=google_native.containeranalysis.v1alpha1.DiscoveredAnalysisStatus.ANALYSIS_STATUS_UNSPECIFIED,
analysis_status_error=google_native.containeranalysis.v1alpha1.StatusArgs(
code=0,
details=[{
"string": "string",
}],
message="string",
),
archive_time="string",
continuous_analysis=google_native.containeranalysis.v1alpha1.DiscoveredContinuousAnalysis.CONTINUOUS_ANALYSIS_UNSPECIFIED,
cpe="string",
last_scan_time="string",
),
dsse_attestation=google_native.containeranalysis.v1alpha1.DSSEAttestationOccurrenceArgs(
envelope=google_native.containeranalysis.v1alpha1.EnvelopeArgs(
payload="string",
payload_type="string",
signatures=[google_native.containeranalysis.v1alpha1.EnvelopeSignatureArgs(
keyid="string",
sig="string",
)],
),
statement=google_native.containeranalysis.v1alpha1.InTotoStatementArgs(
predicate_type="string",
provenance=google_native.containeranalysis.v1alpha1.InTotoProvenanceArgs(
builder_config=google_native.containeranalysis.v1alpha1.BuilderConfigArgs(
id="string",
),
materials=["string"],
metadata=google_native.containeranalysis.v1alpha1.MetadataArgs(
build_finished_on="string",
build_invocation_id="string",
build_started_on="string",
completeness=google_native.containeranalysis.v1alpha1.CompletenessArgs(
arguments=False,
environment=False,
materials=False,
),
reproducible=False,
),
recipe=google_native.containeranalysis.v1alpha1.RecipeArgs(
arguments=[{
"string": "string",
}],
defined_in_material="string",
entry_point="string",
environment=[{
"string": "string",
}],
type="string",
),
),
slsa_provenance=google_native.containeranalysis.v1alpha1.SlsaProvenanceArgs(
builder=google_native.containeranalysis.v1alpha1.SlsaBuilderArgs(
id="string",
),
materials=[google_native.containeranalysis.v1alpha1.MaterialArgs(
digest={
"string": "string",
},
uri="string",
)],
metadata=google_native.containeranalysis.v1alpha1.SlsaMetadataArgs(
build_finished_on="string",
build_invocation_id="string",
build_started_on="string",
completeness=google_native.containeranalysis.v1alpha1.SlsaCompletenessArgs(
arguments=False,
environment=False,
materials=False,
),
reproducible=False,
),
recipe=google_native.containeranalysis.v1alpha1.SlsaRecipeArgs(
arguments={
"string": "string",
},
defined_in_material="string",
entry_point="string",
environment={
"string": "string",
},
type="string",
),
),
slsa_provenance_zero_two=google_native.containeranalysis.v1alpha1.SlsaProvenanceZeroTwoArgs(
build_config={
"string": "string",
},
build_type="string",
builder=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs(
id="string",
),
invocation=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs(
config_source=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs(
digest={
"string": "string",
},
entry_point="string",
uri="string",
),
environment={
"string": "string",
},
parameters={
"string": "string",
},
),
materials=[google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs(
digest={
"string": "string",
},
uri="string",
)],
metadata=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs(
build_finished_on="string",
build_invocation_id="string",
build_started_on="string",
completeness=google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs(
environment=False,
materials=False,
parameters=False,
),
reproducible=False,
),
),
subject=[google_native.containeranalysis.v1alpha1.SubjectArgs(
digest={
"string": "string",
},
name="string",
)],
type="string",
),
),
envelope=google_native.containeranalysis.v1alpha1.EnvelopeArgs(
payload="string",
payload_type="string",
signatures=[google_native.containeranalysis.v1alpha1.EnvelopeSignatureArgs(
keyid="string",
sig="string",
)],
),
installation=google_native.containeranalysis.v1alpha1.InstallationArgs(
license=google_native.containeranalysis.v1alpha1.LicenseArgs(
comments="string",
expression="string",
),
location=[google_native.containeranalysis.v1alpha1.LocationArgs(
path="string",
)],
),
name="string",
note_name="string",
project="string",
remediation="string",
resource=google_native.containeranalysis.v1alpha1.ResourceArgs(
content_hash=google_native.containeranalysis.v1alpha1.HashArgs(
type=google_native.containeranalysis.v1alpha1.HashType.NONE,
value="string",
),
name="string",
uri="string",
),
resource_url="string",
sbom=google_native.containeranalysis.v1alpha1.DocumentOccurrenceArgs(
create_time="string",
creator_comment="string",
creators=["string"],
document_comment="string",
external_document_refs=["string"],
id="string",
license_list_version="string",
namespace="string",
title="string",
),
sbom_reference=google_native.containeranalysis.v1alpha1.SBOMReferenceOccurrenceArgs(
payload=google_native.containeranalysis.v1alpha1.SbomReferenceIntotoPayloadArgs(
predicate=google_native.containeranalysis.v1alpha1.SbomReferenceIntotoPredicateArgs(
digest={
"string": "string",
},
location="string",
mime_type="string",
referrer_id="string",
),
predicate_type="string",
subject=[google_native.containeranalysis.v1alpha1.SubjectArgs(
digest={
"string": "string",
},
name="string",
)],
type="string",
),
payload_type="string",
signatures=[google_native.containeranalysis.v1alpha1.EnvelopeSignatureArgs(
keyid="string",
sig="string",
)],
),
spdx_file=google_native.containeranalysis.v1alpha1.FileOccurrenceArgs(
attributions=["string"],
comment="string",
contributors=["string"],
copyright="string",
files_license_info=["string"],
id="string",
license_concluded=google_native.containeranalysis.v1alpha1.LicenseArgs(
comments="string",
expression="string",
),
notice="string",
),
spdx_package=google_native.containeranalysis.v1alpha1.PackageInfoOccurrenceArgs(
comment="string",
filename="string",
id="string",
license_concluded=google_native.containeranalysis.v1alpha1.LicenseArgs(
comments="string",
expression="string",
),
source_info="string",
),
spdx_relationship=google_native.containeranalysis.v1alpha1.RelationshipOccurrenceArgs(
comment="string",
source="string",
target="string",
),
upgrade=google_native.containeranalysis.v1alpha1.UpgradeOccurrenceArgs(
distribution=google_native.containeranalysis.v1alpha1.UpgradeDistributionArgs(
classification="string",
cpe_uri="string",
cve=["string"],
severity="string",
),
package="string",
parsed_version=google_native.containeranalysis.v1alpha1.VersionArgs(
epoch=0,
inclusive=False,
kind=google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
name="string",
revision="string",
),
),
vulnerability_details=google_native.containeranalysis.v1alpha1.VulnerabilityDetailsArgs(
cvss_v2=google_native.containeranalysis.v1alpha1.CVSSArgs(
attack_complexity=google_native.containeranalysis.v1alpha1.CVSSAttackComplexity.ATTACK_COMPLEXITY_UNSPECIFIED,
attack_vector=google_native.containeranalysis.v1alpha1.CVSSAttackVector.ATTACK_VECTOR_UNSPECIFIED,
authentication=google_native.containeranalysis.v1alpha1.CVSSAuthentication.AUTHENTICATION_UNSPECIFIED,
availability_impact=google_native.containeranalysis.v1alpha1.CVSSAvailabilityImpact.IMPACT_UNSPECIFIED,
base_score=0,
confidentiality_impact=google_native.containeranalysis.v1alpha1.CVSSConfidentialityImpact.IMPACT_UNSPECIFIED,
exploitability_score=0,
impact_score=0,
integrity_impact=google_native.containeranalysis.v1alpha1.CVSSIntegrityImpact.IMPACT_UNSPECIFIED,
privileges_required=google_native.containeranalysis.v1alpha1.CVSSPrivilegesRequired.PRIVILEGES_REQUIRED_UNSPECIFIED,
scope=google_native.containeranalysis.v1alpha1.CVSSScope.SCOPE_UNSPECIFIED,
user_interaction=google_native.containeranalysis.v1alpha1.CVSSUserInteraction.USER_INTERACTION_UNSPECIFIED,
),
cvss_v3=google_native.containeranalysis.v1alpha1.CVSSArgs(
attack_complexity=google_native.containeranalysis.v1alpha1.CVSSAttackComplexity.ATTACK_COMPLEXITY_UNSPECIFIED,
attack_vector=google_native.containeranalysis.v1alpha1.CVSSAttackVector.ATTACK_VECTOR_UNSPECIFIED,
authentication=google_native.containeranalysis.v1alpha1.CVSSAuthentication.AUTHENTICATION_UNSPECIFIED,
availability_impact=google_native.containeranalysis.v1alpha1.CVSSAvailabilityImpact.IMPACT_UNSPECIFIED,
base_score=0,
confidentiality_impact=google_native.containeranalysis.v1alpha1.CVSSConfidentialityImpact.IMPACT_UNSPECIFIED,
exploitability_score=0,
impact_score=0,
integrity_impact=google_native.containeranalysis.v1alpha1.CVSSIntegrityImpact.IMPACT_UNSPECIFIED,
privileges_required=google_native.containeranalysis.v1alpha1.CVSSPrivilegesRequired.PRIVILEGES_REQUIRED_UNSPECIFIED,
scope=google_native.containeranalysis.v1alpha1.CVSSScope.SCOPE_UNSPECIFIED,
user_interaction=google_native.containeranalysis.v1alpha1.CVSSUserInteraction.USER_INTERACTION_UNSPECIFIED,
),
effective_severity=google_native.containeranalysis.v1alpha1.VulnerabilityDetailsEffectiveSeverity.SEVERITY_UNSPECIFIED,
extra_details="string",
package_issue=[google_native.containeranalysis.v1alpha1.PackageIssueArgs(
affected_location=google_native.containeranalysis.v1alpha1.VulnerabilityLocationArgs(
cpe_uri="string",
file_location=[google_native.containeranalysis.v1alpha1.FileLocationArgs(
file_path="string",
)],
package="string",
version=google_native.containeranalysis.v1alpha1.VersionArgs(
epoch=0,
inclusive=False,
kind=google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
name="string",
revision="string",
),
),
fixed_location=google_native.containeranalysis.v1alpha1.VulnerabilityLocationArgs(
cpe_uri="string",
file_location=[google_native.containeranalysis.v1alpha1.FileLocationArgs(
file_path="string",
)],
package="string",
version=google_native.containeranalysis.v1alpha1.VersionArgs(
epoch=0,
inclusive=False,
kind=google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
name="string",
revision="string",
),
),
package_type="string",
severity_name="string",
)],
type="string",
vex_assessment=google_native.containeranalysis.v1alpha1.VexAssessmentArgs(
cve="string",
impacts=["string"],
justification=google_native.containeranalysis.v1alpha1.JustificationArgs(
details="string",
justification_type=google_native.containeranalysis.v1alpha1.JustificationJustificationType.JUSTIFICATION_TYPE_UNSPECIFIED,
),
note_name="string",
related_uris=[google_native.containeranalysis.v1alpha1.URIArgs(
label="string",
uri="string",
)],
remediations=[google_native.containeranalysis.v1alpha1.RemediationArgs(
details="string",
remediation_type=google_native.containeranalysis.v1alpha1.RemediationRemediationType.REMEDIATION_TYPE_UNSPECIFIED,
remediation_uri=google_native.containeranalysis.v1alpha1.URIArgs(
label="string",
uri="string",
),
)],
state=google_native.containeranalysis.v1alpha1.VexAssessmentState.STATE_UNSPECIFIED,
vulnerability_id="string",
),
))
const google_nativeOccurrenceResource = new google_native.containeranalysis.v1alpha1.Occurrence("google-nativeOccurrenceResource", {
attestation: {
pgpSignedAttestation: {
contentType: google_native.containeranalysis.v1alpha1.PgpSignedAttestationContentType.ContentTypeUnspecified,
pgpKeyId: "string",
signature: "string",
},
},
buildDetails: {
inTotoSlsaProvenanceV1: {
predicate: {
buildDefinition: {
buildType: "string",
externalParameters: {
string: "string",
},
internalParameters: {
string: "string",
},
resolvedDependencies: [{
annotations: {
string: "string",
},
content: "string",
digest: {
string: "string",
},
downloadLocation: "string",
mediaType: "string",
name: "string",
uri: "string",
}],
},
runDetails: {
builder: {
builderDependencies: [{
annotations: {
string: "string",
},
content: "string",
digest: {
string: "string",
},
downloadLocation: "string",
mediaType: "string",
name: "string",
uri: "string",
}],
id: "string",
version: {
string: "string",
},
},
byproducts: [{
annotations: {
string: "string",
},
content: "string",
digest: {
string: "string",
},
downloadLocation: "string",
mediaType: "string",
name: "string",
uri: "string",
}],
metadata: {
finishedOn: "string",
invocationId: "string",
startedOn: "string",
},
},
},
predicateType: "string",
subject: [{
digest: {
string: "string",
},
name: "string",
}],
type: "string",
},
intotoStatement: {
predicateType: "string",
provenance: {
builderConfig: {
id: "string",
},
materials: ["string"],
metadata: {
buildFinishedOn: "string",
buildInvocationId: "string",
buildStartedOn: "string",
completeness: {
arguments: false,
environment: false,
materials: false,
},
reproducible: false,
},
recipe: {
arguments: [{
string: "string",
}],
definedInMaterial: "string",
entryPoint: "string",
environment: [{
string: "string",
}],
type: "string",
},
},
slsaProvenance: {
builder: {
id: "string",
},
materials: [{
digest: {
string: "string",
},
uri: "string",
}],
metadata: {
buildFinishedOn: "string",
buildInvocationId: "string",
buildStartedOn: "string",
completeness: {
arguments: false,
environment: false,
materials: false,
},
reproducible: false,
},
recipe: {
arguments: {
string: "string",
},
definedInMaterial: "string",
entryPoint: "string",
environment: {
string: "string",
},
type: "string",
},
},
slsaProvenanceZeroTwo: {
buildConfig: {
string: "string",
},
buildType: "string",
builder: {
id: "string",
},
invocation: {
configSource: {
digest: {
string: "string",
},
entryPoint: "string",
uri: "string",
},
environment: {
string: "string",
},
parameters: {
string: "string",
},
},
materials: [{
digest: {
string: "string",
},
uri: "string",
}],
metadata: {
buildFinishedOn: "string",
buildInvocationId: "string",
buildStartedOn: "string",
completeness: {
environment: false,
materials: false,
parameters: false,
},
reproducible: false,
},
},
subject: [{
digest: {
string: "string",
},
name: "string",
}],
type: "string",
},
provenance: {
buildOptions: {
string: "string",
},
builderVersion: "string",
builtArtifacts: [{
checksum: "string",
id: "string",
names: ["string"],
}],
commands: [{
args: ["string"],
dir: "string",
env: ["string"],
id: "string",
name: "string",
waitFor: ["string"],
}],
createTime: "string",
creator: "string",
finishTime: "string",
id: "string",
logsBucket: "string",
project: "string",
sourceProvenance: {
additionalContexts: [{
cloudRepo: {
aliasContext: {
kind: google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
name: "string",
},
repoId: {
projectRepoId: {
project: "string",
repoName: "string",
},
uid: "string",
},
revisionId: "string",
},
gerrit: {
aliasContext: {
kind: google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
name: "string",
},
gerritProject: "string",
hostUri: "string",
revisionId: "string",
},
git: {
revisionId: "string",
url: "string",
},
labels: {
string: "string",
},
}],
artifactStorageSource: {
bucket: "string",
generation: "string",
object: "string",
},
context: {
cloudRepo: {
aliasContext: {
kind: google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
name: "string",
},
repoId: {
projectRepoId: {
project: "string",
repoName: "string",
},
uid: "string",
},
revisionId: "string",
},
gerrit: {
aliasContext: {
kind: google_native.containeranalysis.v1alpha1.GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind.KindUnspecified,
name: "string",
},
gerritProject: "string",
hostUri: "string",
revisionId: "string",
},
git: {
revisionId: "string",
url: "string",
},
labels: {
string: "string",
},
},
fileHashes: {
string: "string",
},
repoSource: {
branchName: "string",
commitSha: "string",
project: "string",
repoName: "string",
tagName: "string",
},
storageSource: {
bucket: "string",
generation: "string",
object: "string",
},
},
startTime: "string",
triggerId: "string",
},
provenanceBytes: "string",
},
compliance: {
nonComplianceReason: "string",
nonCompliantFiles: [{
displayCommand: "string",
path: "string",
reason: "string",
}],
},
deployment: {
address: "string",
config: "string",
deployTime: "string",
platform: google_native.containeranalysis.v1alpha1.DeploymentPlatform.PlatformUnspecified,
resourceUri: ["string"],
undeployTime: "string",
userEmail: "string",
},
derivedImage: {
fingerprint: {
v1Name: "string",
v2Blob: ["string"],
},
layerInfo: [{
arguments: "string",
directive: google_native.containeranalysis.v1alpha1.LayerDirective.DirectiveUnspecified,
}],
},
discovered: {
analysisCompleted: {
analysisType: ["string"],
},
analysisError: [{
code: 0,
details: [{
string: "string",
}],
message: "string",
}],
analysisStatus: google_native.containeranalysis.v1alpha1.DiscoveredAnalysisStatus.AnalysisStatusUnspecified,
analysisStatusError: {
code: 0,
details: [{
string: "string",
}],
message: "string",
},
archiveTime: "string",
continuousAnalysis: google_native.containeranalysis.v1alpha1.DiscoveredContinuousAnalysis.ContinuousAnalysisUnspecified,
cpe: "string",
lastScanTime: "string",
},
dsseAttestation: {
envelope: {
payload: "string",
payloadType: "string",
signatures: [{
keyid: "string",
sig: "string",
}],
},
statement: {
predicateType: "string",
provenance: {
builderConfig: {
id: "string",
},
materials: ["string"],
metadata: {
buildFinishedOn: "string",
buildInvocationId: "string",
buildStartedOn: "string",
completeness: {
arguments: false,
environment: false,
materials: false,
},
reproducible: false,
},
recipe: {
arguments: [{
string: "string",
}],
definedInMaterial: "string",
entryPoint: "string",
environment: [{
string: "string",
}],
type: "string",
},
},
slsaProvenance: {
builder: {
id: "string",
},
materials: [{
digest: {
string: "string",
},
uri: "string",
}],
metadata: {
buildFinishedOn: "string",
buildInvocationId: "string",
buildStartedOn: "string",
completeness: {
arguments: false,
environment: false,
materials: false,
},
reproducible: false,
},
recipe: {
arguments: {
string: "string",
},
definedInMaterial: "string",
entryPoint: "string",
environment: {
string: "string",
},
type: "string",
},
},
slsaProvenanceZeroTwo: {
buildConfig: {
string: "string",
},
buildType: "string",
builder: {
id: "string",
},
invocation: {
configSource: {
digest: {
string: "string",
},
entryPoint: "string",
uri: "string",
},
environment: {
string: "string",
},
parameters: {
string: "string",
},
},
materials: [{
digest: {
string: "string",
},
uri: "string",
}],
metadata: {
buildFinishedOn: "string",
buildInvocationId: "string",
buildStartedOn: "string",
completeness: {
environment: false,
materials: false,
parameters: false,
},
reproducible: false,
},
},
subject: [{
digest: {
string: "string",
},
name: "string",
}],
type: "string",
},
},
envelope: {
payload: "string",
payloadType: "string",
signatures: [{
keyid: "string",
sig: "string",
}],
},
installation: {
license: {
comments: "string",
expression: "string",
},
location: [{
path: "string",
}],
},
name: "string",
noteName: "string",
project: "string",
remediation: "string",
resource: {
contentHash: {
type: google_native.containeranalysis.v1alpha1.HashType.None,
value: "string",
},
name: "string",
uri: "string",
},
resourceUrl: "string",
sbom: {
createTime: "string",
creatorComment: "string",
creators: ["string"],
documentComment: "string",
externalDocumentRefs: ["string"],
id: "string",
licenseListVersion: "string",
namespace: "string",
title: "string",
},
sbomReference: {
payload: {
predicate: {
digest: {
string: "string",
},
location: "string",
mimeType: "string",
referrerId: "string",
},
predicateType: "string",
subject: [{
digest: {
string: "string",
},
name: "string",
}],
type: "string",
},
payloadType: "string",
signatures: [{
keyid: "string",
sig: "string",
}],
},
spdxFile: {
attributions: ["string"],
comment: "string",
contributors: ["string"],
copyright: "string",
filesLicenseInfo: ["string"],
id: "string",
licenseConcluded: {
comments: "string",
expression: "string",
},
notice: "string",
},
spdxPackage: {
comment: "string",
filename: "string",
id: "string",
licenseConcluded: {
comments: "string",
expression: "string",
},
sourceInfo: "string",
},
spdxRelationship: {
comment: "string",
source: "string",
target: "string",
},
upgrade: {
distribution: {
classification: "string",
cpeUri: "string",
cve: ["string"],
severity: "string",
},
"package": "string",
parsedVersion: {
epoch: 0,
inclusive: false,
kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
name: "string",
revision: "string",
},
},
vulnerabilityDetails: {
cvssV2: {
attackComplexity: google_native.containeranalysis.v1alpha1.CVSSAttackComplexity.AttackComplexityUnspecified,
attackVector: google_native.containeranalysis.v1alpha1.CVSSAttackVector.AttackVectorUnspecified,
authentication: google_native.containeranalysis.v1alpha1.CVSSAuthentication.AuthenticationUnspecified,
availabilityImpact: google_native.containeranalysis.v1alpha1.CVSSAvailabilityImpact.ImpactUnspecified,
baseScore: 0,
confidentialityImpact: google_native.containeranalysis.v1alpha1.CVSSConfidentialityImpact.ImpactUnspecified,
exploitabilityScore: 0,
impactScore: 0,
integrityImpact: google_native.containeranalysis.v1alpha1.CVSSIntegrityImpact.ImpactUnspecified,
privilegesRequired: google_native.containeranalysis.v1alpha1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
scope: google_native.containeranalysis.v1alpha1.CVSSScope.ScopeUnspecified,
userInteraction: google_native.containeranalysis.v1alpha1.CVSSUserInteraction.UserInteractionUnspecified,
},
cvssV3: {
attackComplexity: google_native.containeranalysis.v1alpha1.CVSSAttackComplexity.AttackComplexityUnspecified,
attackVector: google_native.containeranalysis.v1alpha1.CVSSAttackVector.AttackVectorUnspecified,
authentication: google_native.containeranalysis.v1alpha1.CVSSAuthentication.AuthenticationUnspecified,
availabilityImpact: google_native.containeranalysis.v1alpha1.CVSSAvailabilityImpact.ImpactUnspecified,
baseScore: 0,
confidentialityImpact: google_native.containeranalysis.v1alpha1.CVSSConfidentialityImpact.ImpactUnspecified,
exploitabilityScore: 0,
impactScore: 0,
integrityImpact: google_native.containeranalysis.v1alpha1.CVSSIntegrityImpact.ImpactUnspecified,
privilegesRequired: google_native.containeranalysis.v1alpha1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
scope: google_native.containeranalysis.v1alpha1.CVSSScope.ScopeUnspecified,
userInteraction: google_native.containeranalysis.v1alpha1.CVSSUserInteraction.UserInteractionUnspecified,
},
effectiveSeverity: google_native.containeranalysis.v1alpha1.VulnerabilityDetailsEffectiveSeverity.SeverityUnspecified,
extraDetails: "string",
packageIssue: [{
affectedLocation: {
cpeUri: "string",
fileLocation: [{
filePath: "string",
}],
"package": "string",
version: {
epoch: 0,
inclusive: false,
kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
name: "string",
revision: "string",
},
},
fixedLocation: {
cpeUri: "string",
fileLocation: [{
filePath: "string",
}],
"package": "string",
version: {
epoch: 0,
inclusive: false,
kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
name: "string",
revision: "string",
},
},
packageType: "string",
severityName: "string",
}],
type: "string",
vexAssessment: {
cve: "string",
impacts: ["string"],
justification: {
details: "string",
justificationType: google_native.containeranalysis.v1alpha1.JustificationJustificationType.JustificationTypeUnspecified,
},
noteName: "string",
relatedUris: [{
label: "string",
uri: "string",
}],
remediations: [{
details: "string",
remediationType: google_native.containeranalysis.v1alpha1.RemediationRemediationType.RemediationTypeUnspecified,
remediationUri: {
label: "string",
uri: "string",
},
}],
state: google_native.containeranalysis.v1alpha1.VexAssessmentState.StateUnspecified,
vulnerabilityId: "string",
},
},
});
type: google-native:containeranalysis/v1alpha1:Occurrence
properties:
attestation:
pgpSignedAttestation:
contentType: CONTENT_TYPE_UNSPECIFIED
pgpKeyId: string
signature: string
buildDetails:
inTotoSlsaProvenanceV1:
predicate:
buildDefinition:
buildType: string
externalParameters:
string: string
internalParameters:
string: string
resolvedDependencies:
- annotations:
string: string
content: string
digest:
string: string
downloadLocation: string
mediaType: string
name: string
uri: string
runDetails:
builder:
builderDependencies:
- annotations:
string: string
content: string
digest:
string: string
downloadLocation: string
mediaType: string
name: string
uri: string
id: string
version:
string: string
byproducts:
- annotations:
string: string
content: string
digest:
string: string
downloadLocation: string
mediaType: string
name: string
uri: string
metadata:
finishedOn: string
invocationId: string
startedOn: string
predicateType: string
subject:
- digest:
string: string
name: string
type: string
intotoStatement:
predicateType: string
provenance:
builderConfig:
id: string
materials:
- string
metadata:
buildFinishedOn: string
buildInvocationId: string
buildStartedOn: string
completeness:
arguments: false
environment: false
materials: false
reproducible: false
recipe:
arguments:
- string: string
definedInMaterial: string
entryPoint: string
environment:
- string: string
type: string
slsaProvenance:
builder:
id: string
materials:
- digest:
string: string
uri: string
metadata:
buildFinishedOn: string
buildInvocationId: string
buildStartedOn: string
completeness:
arguments: false
environment: false
materials: false
reproducible: false
recipe:
arguments:
string: string
definedInMaterial: string
entryPoint: string
environment:
string: string
type: string
slsaProvenanceZeroTwo:
buildConfig:
string: string
buildType: string
builder:
id: string
invocation:
configSource:
digest:
string: string
entryPoint: string
uri: string
environment:
string: string
parameters:
string: string
materials:
- digest:
string: string
uri: string
metadata:
buildFinishedOn: string
buildInvocationId: string
buildStartedOn: string
completeness:
environment: false
materials: false
parameters: false
reproducible: false
subject:
- digest:
string: string
name: string
type: string
provenance:
buildOptions:
string: string
builderVersion: string
builtArtifacts:
- checksum: string
id: string
names:
- string
commands:
- args:
- string
dir: string
env:
- string
id: string
name: string
waitFor:
- string
createTime: string
creator: string
finishTime: string
id: string
logsBucket: string
project: string
sourceProvenance:
additionalContexts:
- cloudRepo:
aliasContext:
kind: KIND_UNSPECIFIED
name: string
repoId:
projectRepoId:
project: string
repoName: string
uid: string
revisionId: string
gerrit:
aliasContext:
kind: KIND_UNSPECIFIED
name: string
gerritProject: string
hostUri: string
revisionId: string
git:
revisionId: string
url: string
labels:
string: string
artifactStorageSource:
bucket: string
generation: string
object: string
context:
cloudRepo:
aliasContext:
kind: KIND_UNSPECIFIED
name: string
repoId:
projectRepoId:
project: string
repoName: string
uid: string
revisionId: string
gerrit:
aliasContext:
kind: KIND_UNSPECIFIED
name: string
gerritProject: string
hostUri: string
revisionId: string
git:
revisionId: string
url: string
labels:
string: string
fileHashes:
string: string
repoSource:
branchName: string
commitSha: string
project: string
repoName: string
tagName: string
storageSource:
bucket: string
generation: string
object: string
startTime: string
triggerId: string
provenanceBytes: string
compliance:
nonComplianceReason: string
nonCompliantFiles:
- displayCommand: string
path: string
reason: string
deployment:
address: string
config: string
deployTime: string
platform: PLATFORM_UNSPECIFIED
resourceUri:
- string
undeployTime: string
userEmail: string
derivedImage:
fingerprint:
v1Name: string
v2Blob:
- string
layerInfo:
- arguments: string
directive: DIRECTIVE_UNSPECIFIED
discovered:
analysisCompleted:
analysisType:
- string
analysisError:
- code: 0
details:
- string: string
message: string
analysisStatus: ANALYSIS_STATUS_UNSPECIFIED
analysisStatusError:
code: 0
details:
- string: string
message: string
archiveTime: string
continuousAnalysis: CONTINUOUS_ANALYSIS_UNSPECIFIED
cpe: string
lastScanTime: string
dsseAttestation:
envelope:
payload: string
payloadType: string
signatures:
- keyid: string
sig: string
statement:
predicateType: string
provenance:
builderConfig:
id: string
materials:
- string
metadata:
buildFinishedOn: string
buildInvocationId: string
buildStartedOn: string
completeness:
arguments: false
environment: false
materials: false
reproducible: false
recipe:
arguments:
- string: string
definedInMaterial: string
entryPoint: string
environment:
- string: string
type: string
slsaProvenance:
builder:
id: string
materials:
- digest:
string: string
uri: string
metadata:
buildFinishedOn: string
buildInvocationId: string
buildStartedOn: string
completeness:
arguments: false
environment: false
materials: false
reproducible: false
recipe:
arguments:
string: string
definedInMaterial: string
entryPoint: string
environment:
string: string
type: string
slsaProvenanceZeroTwo:
buildConfig:
string: string
buildType: string
builder:
id: string
invocation:
configSource:
digest:
string: string
entryPoint: string
uri: string
environment:
string: string
parameters:
string: string
materials:
- digest:
string: string
uri: string
metadata:
buildFinishedOn: string
buildInvocationId: string
buildStartedOn: string
completeness:
environment: false
materials: false
parameters: false
reproducible: false
subject:
- digest:
string: string
name: string
type: string
envelope:
payload: string
payloadType: string
signatures:
- keyid: string
sig: string
installation:
license:
comments: string
expression: string
location:
- path: string
name: string
noteName: string
project: string
remediation: string
resource:
contentHash:
type: NONE
value: string
name: string
uri: string
resourceUrl: string
sbom:
createTime: string
creatorComment: string
creators:
- string
documentComment: string
externalDocumentRefs:
- string
id: string
licenseListVersion: string
namespace: string
title: string
sbomReference:
payload:
predicate:
digest:
string: string
location: string
mimeType: string
referrerId: string
predicateType: string
subject:
- digest:
string: string
name: string
type: string
payloadType: string
signatures:
- keyid: string
sig: string
spdxFile:
attributions:
- string
comment: string
contributors:
- string
copyright: string
filesLicenseInfo:
- string
id: string
licenseConcluded:
comments: string
expression: string
notice: string
spdxPackage:
comment: string
filename: string
id: string
licenseConcluded:
comments: string
expression: string
sourceInfo: string
spdxRelationship:
comment: string
source: string
target: string
upgrade:
distribution:
classification: string
cpeUri: string
cve:
- string
severity: string
package: string
parsedVersion:
epoch: 0
inclusive: false
kind: NORMAL
name: string
revision: string
vulnerabilityDetails:
cvssV2:
attackComplexity: ATTACK_COMPLEXITY_UNSPECIFIED
attackVector: ATTACK_VECTOR_UNSPECIFIED
authentication: AUTHENTICATION_UNSPECIFIED
availabilityImpact: IMPACT_UNSPECIFIED
baseScore: 0
confidentialityImpact: IMPACT_UNSPECIFIED
exploitabilityScore: 0
impactScore: 0
integrityImpact: IMPACT_UNSPECIFIED
privilegesRequired: PRIVILEGES_REQUIRED_UNSPECIFIED
scope: SCOPE_UNSPECIFIED
userInteraction: USER_INTERACTION_UNSPECIFIED
cvssV3:
attackComplexity: ATTACK_COMPLEXITY_UNSPECIFIED
attackVector: ATTACK_VECTOR_UNSPECIFIED
authentication: AUTHENTICATION_UNSPECIFIED
availabilityImpact: IMPACT_UNSPECIFIED
baseScore: 0
confidentialityImpact: IMPACT_UNSPECIFIED
exploitabilityScore: 0
impactScore: 0
integrityImpact: IMPACT_UNSPECIFIED
privilegesRequired: PRIVILEGES_REQUIRED_UNSPECIFIED
scope: SCOPE_UNSPECIFIED
userInteraction: USER_INTERACTION_UNSPECIFIED
effectiveSeverity: SEVERITY_UNSPECIFIED
extraDetails: string
packageIssue:
- affectedLocation:
cpeUri: string
fileLocation:
- filePath: string
package: string
version:
epoch: 0
inclusive: false
kind: NORMAL
name: string
revision: string
fixedLocation:
cpeUri: string
fileLocation:
- filePath: string
package: string
version:
epoch: 0
inclusive: false
kind: NORMAL
name: string
revision: string
packageType: string
severityName: string
type: string
vexAssessment:
cve: string
impacts:
- string
justification:
details: string
justificationType: JUSTIFICATION_TYPE_UNSPECIFIED
noteName: string
relatedUris:
- label: string
uri: string
remediations:
- details: string
remediationType: REMEDIATION_TYPE_UNSPECIFIED
remediationUri:
label: string
uri: string
state: STATE_UNSPECIFIED
vulnerabilityId: string
Occurrence Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Occurrence resource accepts the following input properties:
- Attestation
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Attestation - Describes an attestation of an artifact.
- Build
Details Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Build Details - Build details for a verifiable build.
- Compliance
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Compliance Occurrence - Describes whether or not a resource passes compliance checks.
- Deployment
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Deployment - Describes the deployment of an artifact on a runtime.
- Derived
Image Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Derived - Describes how this resource derives from the basis in the associated note.
- Discovered
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Discovered - Describes the initial scan status for this resource.
- Dsse
Attestation Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. DSSEAttestation Occurrence - This represents a DSSE attestation occurrence
- Envelope
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope - https://github.com/secure-systems-lab/dsse
- Installation
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Installation - Describes the installation of a package on the linked resource.
- Name string
- The name of the project. Should be of the form "projects/{project_id}". @Deprecated
- Note
Name string - An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests.
- Project string
- Remediation string
- A description of actions that can be taken to remedy the
Note - Resource
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Resource - The resource for which the
Occurrenceapplies. - Resource
Url string - The unique URL of the image or the container for which the
Occurrenceapplies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests. - Sbom
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Document Occurrence - Describes a specific software bill of materials document.
- Sbom
Reference Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. SBOMReference Occurrence - This represents an SBOM reference occurrence
- Spdx
File Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. File Occurrence - Describes a specific SPDX File.
- Spdx
Package Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Package Info Occurrence - Describes a specific SPDX Package.
- Spdx
Relationship Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Relationship Occurrence - Describes a specific relationship between SPDX elements.
- Upgrade
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Upgrade Occurrence - Describes an upgrade.
- Vulnerability
Details Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vulnerability Details - Details of a security vulnerability note.
- Attestation
Attestation
Args - Describes an attestation of an artifact.
- Build
Details BuildDetails Args - Build details for a verifiable build.
- Compliance
Compliance
Occurrence Args - Describes whether or not a resource passes compliance checks.
- Deployment
Deployment
Args - Describes the deployment of an artifact on a runtime.
- Derived
Image DerivedArgs - Describes how this resource derives from the basis in the associated note.
- Discovered
Discovered
Args - Describes the initial scan status for this resource.
- Dsse
Attestation DSSEAttestationOccurrence Args - This represents a DSSE attestation occurrence
- Envelope
Envelope
Args - https://github.com/secure-systems-lab/dsse
- Installation
Installation
Args - Describes the installation of a package on the linked resource.
- Name string
- The name of the project. Should be of the form "projects/{project_id}". @Deprecated
- Note
Name string - An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests.
- Project string
- Remediation string
- A description of actions that can be taken to remedy the
Note - Resource
Resource
Args - The resource for which the
Occurrenceapplies. - Resource
Url string - The unique URL of the image or the container for which the
Occurrenceapplies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests. - Sbom
Document
Occurrence Args - Describes a specific software bill of materials document.
- Sbom
Reference SBOMReferenceOccurrence Args - This represents an SBOM reference occurrence
- Spdx
File FileOccurrence Args - Describes a specific SPDX File.
- Spdx
Package PackageInfo Occurrence Args - Describes a specific SPDX Package.
- Spdx
Relationship RelationshipOccurrence Args - Describes a specific relationship between SPDX elements.
- Upgrade
Upgrade
Occurrence Args - Describes an upgrade.
- Vulnerability
Details VulnerabilityDetails Args - Details of a security vulnerability note.
- attestation Attestation
- Describes an attestation of an artifact.
- build
Details BuildDetails - Build details for a verifiable build.
- compliance
Compliance
Occurrence - Describes whether or not a resource passes compliance checks.
- deployment Deployment
- Describes the deployment of an artifact on a runtime.
- derived
Image Derived - Describes how this resource derives from the basis in the associated note.
- discovered Discovered
- Describes the initial scan status for this resource.
- dsse
Attestation DSSEAttestationOccurrence - This represents a DSSE attestation occurrence
- envelope Envelope
- https://github.com/secure-systems-lab/dsse
- installation Installation
- Describes the installation of a package on the linked resource.
- name String
- The name of the project. Should be of the form "projects/{project_id}". @Deprecated
- note
Name String - An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests.
- project String
- remediation String
- A description of actions that can be taken to remedy the
Note - resource Resource
- The resource for which the
Occurrenceapplies. - resource
Url String - The unique URL of the image or the container for which the
Occurrenceapplies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests. - sbom
Document
Occurrence - Describes a specific software bill of materials document.
- sbom
Reference SBOMReferenceOccurrence - This represents an SBOM reference occurrence
- spdx
File FileOccurrence - Describes a specific SPDX File.
- spdx
Package PackageInfo Occurrence - Describes a specific SPDX Package.
- spdx
Relationship RelationshipOccurrence - Describes a specific relationship between SPDX elements.
- upgrade
Upgrade
Occurrence - Describes an upgrade.
- vulnerability
Details VulnerabilityDetails - Details of a security vulnerability note.
- attestation Attestation
- Describes an attestation of an artifact.
- build
Details BuildDetails - Build details for a verifiable build.
- compliance
Compliance
Occurrence - Describes whether or not a resource passes compliance checks.
- deployment Deployment
- Describes the deployment of an artifact on a runtime.
- derived
Image Derived - Describes how this resource derives from the basis in the associated note.
- discovered Discovered
- Describes the initial scan status for this resource.
- dsse
Attestation DSSEAttestationOccurrence - This represents a DSSE attestation occurrence
- envelope Envelope
- https://github.com/secure-systems-lab/dsse
- installation Installation
- Describes the installation of a package on the linked resource.
- name string
- The name of the project. Should be of the form "projects/{project_id}". @Deprecated
- note
Name string - An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests.
- project string
- remediation string
- A description of actions that can be taken to remedy the
Note - resource Resource
- The resource for which the
Occurrenceapplies. - resource
Url string - The unique URL of the image or the container for which the
Occurrenceapplies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests. - sbom
Document
Occurrence - Describes a specific software bill of materials document.
- sbom
Reference SBOMReferenceOccurrence - This represents an SBOM reference occurrence
- spdx
File FileOccurrence - Describes a specific SPDX File.
- spdx
Package PackageInfo Occurrence - Describes a specific SPDX Package.
- spdx
Relationship RelationshipOccurrence - Describes a specific relationship between SPDX elements.
- upgrade
Upgrade
Occurrence - Describes an upgrade.
- vulnerability
Details VulnerabilityDetails - Details of a security vulnerability note.
- attestation
Attestation
Args - Describes an attestation of an artifact.
- build_
details BuildDetails Args - Build details for a verifiable build.
- compliance
Compliance
Occurrence Args - Describes whether or not a resource passes compliance checks.
- deployment
Deployment
Args - Describes the deployment of an artifact on a runtime.
- derived_
image DerivedArgs - Describes how this resource derives from the basis in the associated note.
- discovered
Discovered
Args - Describes the initial scan status for this resource.
- dsse_
attestation DSSEAttestationOccurrence Args - This represents a DSSE attestation occurrence
- envelope
Envelope
Args - https://github.com/secure-systems-lab/dsse
- installation
Installation
Args - Describes the installation of a package on the linked resource.
- name str
- The name of the project. Should be of the form "projects/{project_id}". @Deprecated
- note_
name str - An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests.
- project str
- remediation str
- A description of actions that can be taken to remedy the
Note - resource
Resource
Args - The resource for which the
Occurrenceapplies. - resource_
url str - The unique URL of the image or the container for which the
Occurrenceapplies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests. - sbom
Document
Occurrence Args - Describes a specific software bill of materials document.
- sbom_
reference SBOMReferenceOccurrence Args - This represents an SBOM reference occurrence
- spdx_
file FileOccurrence Args - Describes a specific SPDX File.
- spdx_
package PackageInfo Occurrence Args - Describes a specific SPDX Package.
- spdx_
relationship RelationshipOccurrence Args - Describes a specific relationship between SPDX elements.
- upgrade
Upgrade
Occurrence Args - Describes an upgrade.
- vulnerability_
details VulnerabilityDetails Args - Details of a security vulnerability note.
- attestation Property Map
- Describes an attestation of an artifact.
- build
Details Property Map - Build details for a verifiable build.
- compliance Property Map
- Describes whether or not a resource passes compliance checks.
- deployment Property Map
- Describes the deployment of an artifact on a runtime.
- derived
Image Property Map - Describes how this resource derives from the basis in the associated note.
- discovered Property Map
- Describes the initial scan status for this resource.
- dsse
Attestation Property Map - This represents a DSSE attestation occurrence
- envelope Property Map
- https://github.com/secure-systems-lab/dsse
- installation Property Map
- Describes the installation of a package on the linked resource.
- name String
- The name of the project. Should be of the form "projects/{project_id}". @Deprecated
- note
Name String - An analysis note associated with this image, in the form "providers/{provider_id}/notes/{NOTE_ID}" This field can be used as a filter in list requests.
- project String
- remediation String
- A description of actions that can be taken to remedy the
Note - resource Property Map
- The resource for which the
Occurrenceapplies. - resource
Url String - The unique URL of the image or the container for which the
Occurrenceapplies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests. - sbom Property Map
- Describes a specific software bill of materials document.
- sbom
Reference Property Map - This represents an SBOM reference occurrence
- spdx
File Property Map - Describes a specific SPDX File.
- spdx
Package Property Map - Describes a specific SPDX Package.
- spdx
Relationship Property Map - Describes a specific relationship between SPDX elements.
- upgrade Property Map
- Describes an upgrade.
- vulnerability
Details Property Map - Details of a security vulnerability note.
Outputs
All input properties are implicitly available as output properties. Additionally, the Occurrence resource produces the following output properties:
- Create
Time string - The time this
Occurrencewas created. - Id string
- The provider-assigned unique ID for this managed resource.
- Kind string
- This explicitly denotes which of the
Occurrencedetails are specified. This field can be used as a filter in list requests. - Update
Time string - The time this
Occurrencewas last updated.
- Create
Time string - The time this
Occurrencewas created. - Id string
- The provider-assigned unique ID for this managed resource.
- Kind string
- This explicitly denotes which of the
Occurrencedetails are specified. This field can be used as a filter in list requests. - Update
Time string - The time this
Occurrencewas last updated.
- create
Time String - The time this
Occurrencewas created. - id String
- The provider-assigned unique ID for this managed resource.
- kind String
- This explicitly denotes which of the
Occurrencedetails are specified. This field can be used as a filter in list requests. - update
Time String - The time this
Occurrencewas last updated.
- create
Time string - The time this
Occurrencewas created. - id string
- The provider-assigned unique ID for this managed resource.
- kind string
- This explicitly denotes which of the
Occurrencedetails are specified. This field can be used as a filter in list requests. - update
Time string - The time this
Occurrencewas last updated.
- create_
time str - The time this
Occurrencewas created. - id str
- The provider-assigned unique ID for this managed resource.
- kind str
- This explicitly denotes which of the
Occurrencedetails are specified. This field can be used as a filter in list requests. - update_
time str - The time this
Occurrencewas last updated.
- create
Time String - The time this
Occurrencewas created. - id String
- The provider-assigned unique ID for this managed resource.
- kind String
- This explicitly denotes which of the
Occurrencedetails are specified. This field can be used as a filter in list requests. - update
Time String - The time this
Occurrencewas last updated.
Supporting Types
AnalysisCompleted, AnalysisCompletedArgs
- Analysis
Type List<string> - type of analysis that were completed on a resource.
- Analysis
Type []string - type of analysis that were completed on a resource.
- analysis
Type List<String> - type of analysis that were completed on a resource.
- analysis
Type string[] - type of analysis that were completed on a resource.
- analysis_
type Sequence[str] - type of analysis that were completed on a resource.
- analysis
Type List<String> - type of analysis that were completed on a resource.
AnalysisCompletedResponse, AnalysisCompletedResponseArgs
- Analysis
Type List<string> - type of analysis that were completed on a resource.
- Analysis
Type []string - type of analysis that were completed on a resource.
- analysis
Type List<String> - type of analysis that were completed on a resource.
- analysis
Type string[] - type of analysis that were completed on a resource.
- analysis_
type Sequence[str] - type of analysis that were completed on a resource.
- analysis
Type List<String> - type of analysis that were completed on a resource.
Artifact, ArtifactArgs
- Checksum string
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- Id string
- Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456
- Name string
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - Names List<string>
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- Checksum string
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- Id string
- Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456
- Name string
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - Names []string
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum String
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- id String
- Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456
- name String
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names List<String>
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum string
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- id string
- Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456
- name string
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names string[]
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum str
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- id str
- Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456
- name str
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names Sequence[str]
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum String
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- id String
- Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456
- name String
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names List<String>
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
ArtifactResponse, ArtifactResponseArgs
- Checksum string
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- Name string
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - Names List<string>
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- Checksum string
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- Name string
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - Names []string
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum String
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- name String
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names List<String>
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum string
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- name string
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names string[]
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum str
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- name str
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names Sequence[str]
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
- checksum String
- Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
- name String
- Name of the artifact. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. This field is deprecated in favor of the pluralnamesfield; it continues to exist here to allow existing BuildProvenance serialized to json in google.devtools.containeranalysis.v1alpha1.BuildDetails.provenance_bytes to deserialize back into proto. - names List<String>
- Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to
docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
Attestation, AttestationArgs
AttestationResponse, AttestationResponseArgs
BuildDefinition, BuildDefinitionArgs
- Build
Type string - External
Parameters Dictionary<string, string> - Internal
Parameters Dictionary<string, string> - Resolved
Dependencies List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Resource Descriptor>
- Build
Type string - External
Parameters map[string]string - Internal
Parameters map[string]string - Resolved
Dependencies []ResourceDescriptor
- build
Type String - external
Parameters Map<String,String> - internal
Parameters Map<String,String> - resolved
Dependencies List<ResourceDescriptor>
- build
Type string - external
Parameters {[key: string]: string} - internal
Parameters {[key: string]: string} - resolved
Dependencies ResourceDescriptor[]
- build_
type str - external_
parameters Mapping[str, str] - internal_
parameters Mapping[str, str] - resolved_
dependencies Sequence[ResourceDescriptor]
- build
Type String - external
Parameters Map<String> - internal
Parameters Map<String> - resolved
Dependencies List<Property Map>
BuildDefinitionResponse, BuildDefinitionResponseArgs
- Build
Type string - External
Parameters Dictionary<string, string> - Internal
Parameters Dictionary<string, string> - Resolved
Dependencies List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Resource Descriptor Response>
- Build
Type string - External
Parameters map[string]string - Internal
Parameters map[string]string - Resolved
Dependencies []ResourceDescriptor Response
- build
Type String - external
Parameters Map<String,String> - internal
Parameters Map<String,String> - resolved
Dependencies List<ResourceDescriptor Response>
- build
Type string - external
Parameters {[key: string]: string} - internal
Parameters {[key: string]: string} - resolved
Dependencies ResourceDescriptor Response[]
- build_
type str - external_
parameters Mapping[str, str] - internal_
parameters Mapping[str, str] - resolved_
dependencies Sequence[ResourceDescriptor Response]
- build
Type String - external
Parameters Map<String> - internal
Parameters Map<String> - resolved
Dependencies List<Property Map>
BuildDetails, BuildDetailsArgs
- In
Toto Pulumi.Slsa Provenance V1 Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Slsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- Intoto
Provenance Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Provenance - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- Intoto
Statement Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Statement - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- Provenance
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Build Provenance - The actual provenance
- Provenance
Bytes string - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- In
Toto InSlsa Provenance V1 Toto Slsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- Intoto
Provenance InToto Provenance - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- Intoto
Statement InToto Statement - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- Provenance
Build
Provenance - The actual provenance
- Provenance
Bytes string - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in
Toto InSlsa Provenance V1 Toto Slsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto
Provenance InToto Provenance - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto
Statement InToto Statement - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance
Build
Provenance - The actual provenance
- provenance
Bytes String - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in
Toto InSlsa Provenance V1 Toto Slsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto
Provenance InToto Provenance - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto
Statement InToto Statement - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance
Build
Provenance - The actual provenance
- provenance
Bytes string - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in_
toto_ Inslsa_ provenance_ v1 Toto Slsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto_
provenance InToto Provenance - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto_
statement InToto Statement - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance
Build
Provenance - The actual provenance
- provenance_
bytes str - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in
Toto Property MapSlsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto
Provenance Property Map - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto
Statement Property Map - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance Property Map
- The actual provenance
- provenance
Bytes String - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
BuildDetailsResponse, BuildDetailsResponseArgs
- In
Toto Pulumi.Slsa Provenance V1 Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Slsa Provenance V1Response - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- Intoto
Provenance Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Provenance Response - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- Intoto
Statement Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Statement Response - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- Provenance
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Build Provenance Response - The actual provenance
- Provenance
Bytes string - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- In
Toto InSlsa Provenance V1 Toto Slsa Provenance V1Response - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- Intoto
Provenance InToto Provenance Response - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- Intoto
Statement InToto Statement Response - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- Provenance
Build
Provenance Response - The actual provenance
- Provenance
Bytes string - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in
Toto InSlsa Provenance V1 Toto Slsa Provenance V1Response - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto
Provenance InToto Provenance Response - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto
Statement InToto Statement Response - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance
Build
Provenance Response - The actual provenance
- provenance
Bytes String - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in
Toto InSlsa Provenance V1 Toto Slsa Provenance V1Response - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto
Provenance InToto Provenance Response - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto
Statement InToto Statement Response - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance
Build
Provenance Response - The actual provenance
- provenance
Bytes string - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in_
toto_ Inslsa_ provenance_ v1 Toto Slsa Provenance V1Response - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto_
provenance InToto Provenance Response - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto_
statement InToto Statement Response - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance
Build
Provenance Response - The actual provenance
- provenance_
bytes str - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
- in
Toto Property MapSlsa Provenance V1 - In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
- intoto
Provenance Property Map - Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.
- intoto
Statement Property Map - In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
- provenance Property Map
- The actual provenance
- provenance
Bytes String - Serialized JSON representation of the provenance, used in generating the
BuildSignaturein the corresponding Result. After verifying the signature,provenance_bytescan be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
BuildMetadata, BuildMetadataArgs
- Finished
On string - Invocation
Id string - Started
On string
- Finished
On string - Invocation
Id string - Started
On string
- finished
On String - invocation
Id String - started
On String
- finished
On string - invocation
Id string - started
On string
- finished_
on str - invocation_
id str - started_
on str
- finished
On String - invocation
Id String - started
On String
BuildMetadataResponse, BuildMetadataResponseArgs
- Finished
On string - Invocation
Id string - Started
On string
- Finished
On string - Invocation
Id string - Started
On string
- finished
On String - invocation
Id String - started
On String
- finished
On string - invocation
Id string - started
On string
- finished_
on str - invocation_
id str - started_
on str
- finished
On String - invocation
Id String - started
On String
BuildProvenance, BuildProvenanceArgs
- Build
Options Dictionary<string, string> - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- Builder
Version string - Version string of the builder at the time this build was executed.
- Built
Artifacts List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Artifact> - Output of the build.
- Commands
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Command> - Commands requested by the build.
- Create
Time string - Time at which the build was created.
- Creator string
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- Finish
Time string - Time at which execution of the build was finished.
- Id string
- Unique identifier of the build.
- Logs
Bucket string - Google Cloud Storage bucket where logs were written.
- Project string
- ID of the project.
- Source
Provenance Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Source - Details of the Source input to the build.
- Start
Time string - Time at which execution of the build was started.
- Trigger
Id string - Trigger identifier if the build was triggered automatically; empty if not.
- Build
Options map[string]string - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- Builder
Version string - Version string of the builder at the time this build was executed.
- Built
Artifacts []Artifact - Output of the build.
- Commands []Command
- Commands requested by the build.
- Create
Time string - Time at which the build was created.
- Creator string
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- Finish
Time string - Time at which execution of the build was finished.
- Id string
- Unique identifier of the build.
- Logs
Bucket string - Google Cloud Storage bucket where logs were written.
- Project string
- ID of the project.
- Source
Provenance Source - Details of the Source input to the build.
- Start
Time string - Time at which execution of the build was started.
- Trigger
Id string - Trigger identifier if the build was triggered automatically; empty if not.
- build
Options Map<String,String> - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder
Version String - Version string of the builder at the time this build was executed.
- built
Artifacts List<Artifact> - Output of the build.
- commands List<Command>
- Commands requested by the build.
- create
Time String - Time at which the build was created.
- creator String
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish
Time String - Time at which execution of the build was finished.
- id String
- Unique identifier of the build.
- logs
Bucket String - Google Cloud Storage bucket where logs were written.
- project String
- ID of the project.
- source
Provenance Source - Details of the Source input to the build.
- start
Time String - Time at which execution of the build was started.
- trigger
Id String - Trigger identifier if the build was triggered automatically; empty if not.
- build
Options {[key: string]: string} - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder
Version string - Version string of the builder at the time this build was executed.
- built
Artifacts Artifact[] - Output of the build.
- commands Command[]
- Commands requested by the build.
- create
Time string - Time at which the build was created.
- creator string
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish
Time string - Time at which execution of the build was finished.
- id string
- Unique identifier of the build.
- logs
Bucket string - Google Cloud Storage bucket where logs were written.
- project string
- ID of the project.
- source
Provenance Source - Details of the Source input to the build.
- start
Time string - Time at which execution of the build was started.
- trigger
Id string - Trigger identifier if the build was triggered automatically; empty if not.
- build_
options Mapping[str, str] - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder_
version str - Version string of the builder at the time this build was executed.
- built_
artifacts Sequence[Artifact] - Output of the build.
- commands Sequence[Command]
- Commands requested by the build.
- create_
time str - Time at which the build was created.
- creator str
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish_
time str - Time at which execution of the build was finished.
- id str
- Unique identifier of the build.
- logs_
bucket str - Google Cloud Storage bucket where logs were written.
- project str
- ID of the project.
- source_
provenance Source - Details of the Source input to the build.
- start_
time str - Time at which execution of the build was started.
- trigger_
id str - Trigger identifier if the build was triggered automatically; empty if not.
- build
Options Map<String> - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder
Version String - Version string of the builder at the time this build was executed.
- built
Artifacts List<Property Map> - Output of the build.
- commands List<Property Map>
- Commands requested by the build.
- create
Time String - Time at which the build was created.
- creator String
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish
Time String - Time at which execution of the build was finished.
- id String
- Unique identifier of the build.
- logs
Bucket String - Google Cloud Storage bucket where logs were written.
- project String
- ID of the project.
- source
Provenance Property Map - Details of the Source input to the build.
- start
Time String - Time at which execution of the build was started.
- trigger
Id String - Trigger identifier if the build was triggered automatically; empty if not.
BuildProvenanceResponse, BuildProvenanceResponseArgs
- Build
Options Dictionary<string, string> - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- Builder
Version string - Version string of the builder at the time this build was executed.
- Built
Artifacts List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Artifact Response> - Output of the build.
- Commands
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Command Response> - Commands requested by the build.
- Create
Time string - Time at which the build was created.
- Creator string
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- Finish
Time string - Time at which execution of the build was finished.
- Logs
Bucket string - Google Cloud Storage bucket where logs were written.
- Project string
- ID of the project.
- Source
Provenance Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Source Response - Details of the Source input to the build.
- Start
Time string - Time at which execution of the build was started.
- Trigger
Id string - Trigger identifier if the build was triggered automatically; empty if not.
- Build
Options map[string]string - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- Builder
Version string - Version string of the builder at the time this build was executed.
- Built
Artifacts []ArtifactResponse - Output of the build.
- Commands
[]Command
Response - Commands requested by the build.
- Create
Time string - Time at which the build was created.
- Creator string
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- Finish
Time string - Time at which execution of the build was finished.
- Logs
Bucket string - Google Cloud Storage bucket where logs were written.
- Project string
- ID of the project.
- Source
Provenance SourceResponse - Details of the Source input to the build.
- Start
Time string - Time at which execution of the build was started.
- Trigger
Id string - Trigger identifier if the build was triggered automatically; empty if not.
- build
Options Map<String,String> - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder
Version String - Version string of the builder at the time this build was executed.
- built
Artifacts List<ArtifactResponse> - Output of the build.
- commands
List<Command
Response> - Commands requested by the build.
- create
Time String - Time at which the build was created.
- creator String
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish
Time String - Time at which execution of the build was finished.
- logs
Bucket String - Google Cloud Storage bucket where logs were written.
- project String
- ID of the project.
- source
Provenance SourceResponse - Details of the Source input to the build.
- start
Time String - Time at which execution of the build was started.
- trigger
Id String - Trigger identifier if the build was triggered automatically; empty if not.
- build
Options {[key: string]: string} - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder
Version string - Version string of the builder at the time this build was executed.
- built
Artifacts ArtifactResponse[] - Output of the build.
- commands
Command
Response[] - Commands requested by the build.
- create
Time string - Time at which the build was created.
- creator string
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish
Time string - Time at which execution of the build was finished.
- logs
Bucket string - Google Cloud Storage bucket where logs were written.
- project string
- ID of the project.
- source
Provenance SourceResponse - Details of the Source input to the build.
- start
Time string - Time at which execution of the build was started.
- trigger
Id string - Trigger identifier if the build was triggered automatically; empty if not.
- build_
options Mapping[str, str] - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder_
version str - Version string of the builder at the time this build was executed.
- built_
artifacts Sequence[ArtifactResponse] - Output of the build.
- commands
Sequence[Command
Response] - Commands requested by the build.
- create_
time str - Time at which the build was created.
- creator str
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish_
time str - Time at which execution of the build was finished.
- logs_
bucket str - Google Cloud Storage bucket where logs were written.
- project str
- ID of the project.
- source_
provenance SourceResponse - Details of the Source input to the build.
- start_
time str - Time at which execution of the build was started.
- trigger_
id str - Trigger identifier if the build was triggered automatically; empty if not.
- build
Options Map<String> - Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
- builder
Version String - Version string of the builder at the time this build was executed.
- built
Artifacts List<Property Map> - Output of the build.
- commands List<Property Map>
- Commands requested by the build.
- create
Time String - Time at which the build was created.
- creator String
- E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
- finish
Time String - Time at which execution of the build was finished.
- logs
Bucket String - Google Cloud Storage bucket where logs were written.
- project String
- ID of the project.
- source
Provenance Property Map - Details of the Source input to the build.
- start
Time String - Time at which execution of the build was started.
- trigger
Id String - Trigger identifier if the build was triggered automatically; empty if not.
BuilderConfig, BuilderConfigArgs
- Id string
- Id string
- id String
- id string
- id str
- id String
CVSS, CVSSArgs
- Attack
Complexity Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSAttack Complexity - Defined in CVSS v3, CVSS v2
- Attack
Vector Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSAttack Vector - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- Authentication
Pulumi.
Google Native. Container Analysis. V1Alpha1. CVSSAuthentication - Defined in CVSS v2
- Availability
Impact Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSAvailability Impact - Defined in CVSS v3, CVSS v2
- Base
Score double - The base score is a function of the base metric scores.
- Confidentiality
Impact Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSConfidentiality Impact - Defined in CVSS v3, CVSS v2
- Exploitability
Score double - Impact
Score double - Integrity
Impact Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSIntegrity Impact - Defined in CVSS v3, CVSS v2
- Privileges
Required Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSPrivileges Required - Defined in CVSS v3
- Scope
Pulumi.
Google Native. Container Analysis. V1Alpha1. CVSSScope - Defined in CVSS v3
- User
Interaction Pulumi.Google Native. Container Analysis. V1Alpha1. CVSSUser Interaction - Defined in CVSS v3
- Attack
Complexity CVSSAttackComplexity - Defined in CVSS v3, CVSS v2
- Attack
Vector CVSSAttackVector - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- Authentication CVSSAuthentication
- Defined in CVSS v2
- Availability
Impact CVSSAvailabilityImpact - Defined in CVSS v3, CVSS v2
- Base
Score float64 - The base score is a function of the base metric scores.
- Confidentiality
Impact CVSSConfidentialityImpact - Defined in CVSS v3, CVSS v2
- Exploitability
Score float64 - Impact
Score float64 - Integrity
Impact CVSSIntegrityImpact - Defined in CVSS v3, CVSS v2
- Privileges
Required CVSSPrivilegesRequired - Defined in CVSS v3
- Scope CVSSScope
- Defined in CVSS v3
- User
Interaction CVSSUserInteraction - Defined in CVSS v3
- attack
Complexity CVSSAttackComplexity - Defined in CVSS v3, CVSS v2
- attack
Vector CVSSAttackVector - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication CVSSAuthentication
- Defined in CVSS v2
- availability
Impact CVSSAvailabilityImpact - Defined in CVSS v3, CVSS v2
- base
Score Double - The base score is a function of the base metric scores.
- confidentiality
Impact CVSSConfidentialityImpact - Defined in CVSS v3, CVSS v2
- exploitability
Score Double - impact
Score Double - integrity
Impact CVSSIntegrityImpact - Defined in CVSS v3, CVSS v2
- privileges
Required CVSSPrivilegesRequired - Defined in CVSS v3
- scope CVSSScope
- Defined in CVSS v3
- user
Interaction CVSSUserInteraction - Defined in CVSS v3
- attack
Complexity CVSSAttackComplexity - Defined in CVSS v3, CVSS v2
- attack
Vector CVSSAttackVector - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication CVSSAuthentication
- Defined in CVSS v2
- availability
Impact CVSSAvailabilityImpact - Defined in CVSS v3, CVSS v2
- base
Score number - The base score is a function of the base metric scores.
- confidentiality
Impact CVSSConfidentialityImpact - Defined in CVSS v3, CVSS v2
- exploitability
Score number - impact
Score number - integrity
Impact CVSSIntegrityImpact - Defined in CVSS v3, CVSS v2
- privileges
Required CVSSPrivilegesRequired - Defined in CVSS v3
- scope CVSSScope
- Defined in CVSS v3
- user
Interaction CVSSUserInteraction - Defined in CVSS v3
- attack_
complexity CVSSAttackComplexity - Defined in CVSS v3, CVSS v2
- attack_
vector CVSSAttackVector - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication CVSSAuthentication
- Defined in CVSS v2
- availability_
impact CVSSAvailabilityImpact - Defined in CVSS v3, CVSS v2
- base_
score float - The base score is a function of the base metric scores.
- confidentiality_
impact CVSSConfidentialityImpact - Defined in CVSS v3, CVSS v2
- exploitability_
score float - impact_
score float - integrity_
impact CVSSIntegrityImpact - Defined in CVSS v3, CVSS v2
- privileges_
required CVSSPrivilegesRequired - Defined in CVSS v3
- scope CVSSScope
- Defined in CVSS v3
- user_
interaction CVSSUserInteraction - Defined in CVSS v3
- attack
Complexity "ATTACK_COMPLEXITY_UNSPECIFIED" | "ATTACK_COMPLEXITY_LOW" | "ATTACK_COMPLEXITY_HIGH" | "ATTACK_COMPLEXITY_MEDIUM" - Defined in CVSS v3, CVSS v2
- attack
Vector "ATTACK_VECTOR_UNSPECIFIED" | "ATTACK_VECTOR_NETWORK" | "ATTACK_VECTOR_ADJACENT" | "ATTACK_VECTOR_LOCAL" | "ATTACK_VECTOR_PHYSICAL" - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication "AUTHENTICATION_UNSPECIFIED" | "AUTHENTICATION_MULTIPLE" | "AUTHENTICATION_SINGLE" | "AUTHENTICATION_NONE"
- Defined in CVSS v2
- availability
Impact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE" - Defined in CVSS v3, CVSS v2
- base
Score Number - The base score is a function of the base metric scores.
- confidentiality
Impact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE" - Defined in CVSS v3, CVSS v2
- exploitability
Score Number - impact
Score Number - integrity
Impact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE" - Defined in CVSS v3, CVSS v2
- privileges
Required "PRIVILEGES_REQUIRED_UNSPECIFIED" | "PRIVILEGES_REQUIRED_NONE" | "PRIVILEGES_REQUIRED_LOW" | "PRIVILEGES_REQUIRED_HIGH" - Defined in CVSS v3
- scope "SCOPE_UNSPECIFIED" | "SCOPE_UNCHANGED" | "SCOPE_CHANGED"
- Defined in CVSS v3
- user
Interaction "USER_INTERACTION_UNSPECIFIED" | "USER_INTERACTION_NONE" | "USER_INTERACTION_REQUIRED" - Defined in CVSS v3
CVSSAttackComplexity, CVSSAttackComplexityArgs
- Attack
Complexity Unspecified - ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Attack
Complexity Low - ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
- Attack
Complexity High - ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
- Attack
Complexity Medium - ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
- CVSSAttack
Complexity Attack Complexity Unspecified - ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- CVSSAttack
Complexity Attack Complexity Low - ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
- CVSSAttack
Complexity Attack Complexity High - ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
- CVSSAttack
Complexity Attack Complexity Medium - ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
- Attack
Complexity Unspecified - ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Attack
Complexity Low - ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
- Attack
Complexity High - ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
- Attack
Complexity Medium - ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
- Attack
Complexity Unspecified - ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Attack
Complexity Low - ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
- Attack
Complexity High - ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
- Attack
Complexity Medium - ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
- ATTACK_COMPLEXITY_UNSPECIFIED
- ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- ATTACK_COMPLEXITY_LOW
- ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
- ATTACK_COMPLEXITY_HIGH
- ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
- ATTACK_COMPLEXITY_MEDIUM
- ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
- "ATTACK_COMPLEXITY_UNSPECIFIED"
- ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- "ATTACK_COMPLEXITY_LOW"
- ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
- "ATTACK_COMPLEXITY_HIGH"
- ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
- "ATTACK_COMPLEXITY_MEDIUM"
- ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
CVSSAttackVector, CVSSAttackVectorArgs
- Attack
Vector Unspecified - ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Attack
Vector Network - ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
- Attack
Vector Adjacent - ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
- Attack
Vector Local - ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
- Attack
Vector Physical - ATTACK_VECTOR_PHYSICALDefined in CVSS v3
- CVSSAttack
Vector Attack Vector Unspecified - ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- CVSSAttack
Vector Attack Vector Network - ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
- CVSSAttack
Vector Attack Vector Adjacent - ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
- CVSSAttack
Vector Attack Vector Local - ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
- CVSSAttack
Vector Attack Vector Physical - ATTACK_VECTOR_PHYSICALDefined in CVSS v3
- Attack
Vector Unspecified - ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Attack
Vector Network - ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
- Attack
Vector Adjacent - ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
- Attack
Vector Local - ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
- Attack
Vector Physical - ATTACK_VECTOR_PHYSICALDefined in CVSS v3
- Attack
Vector Unspecified - ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Attack
Vector Network - ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
- Attack
Vector Adjacent - ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
- Attack
Vector Local - ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
- Attack
Vector Physical - ATTACK_VECTOR_PHYSICALDefined in CVSS v3
- ATTACK_VECTOR_UNSPECIFIED
- ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- ATTACK_VECTOR_NETWORK
- ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
- ATTACK_VECTOR_ADJACENT
- ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
- ATTACK_VECTOR_LOCAL
- ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
- ATTACK_VECTOR_PHYSICAL
- ATTACK_VECTOR_PHYSICALDefined in CVSS v3
- "ATTACK_VECTOR_UNSPECIFIED"
- ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- "ATTACK_VECTOR_NETWORK"
- ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
- "ATTACK_VECTOR_ADJACENT"
- ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
- "ATTACK_VECTOR_LOCAL"
- ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
- "ATTACK_VECTOR_PHYSICAL"
- ATTACK_VECTOR_PHYSICALDefined in CVSS v3
CVSSAuthentication, CVSSAuthenticationArgs
- Authentication
Unspecified - AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
- Authentication
Multiple - AUTHENTICATION_MULTIPLEDefined in CVSS v2
- Authentication
Single - AUTHENTICATION_SINGLEDefined in CVSS v2
- Authentication
None - AUTHENTICATION_NONEDefined in CVSS v2
- CVSSAuthentication
Authentication Unspecified - AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
- CVSSAuthentication
Authentication Multiple - AUTHENTICATION_MULTIPLEDefined in CVSS v2
- CVSSAuthentication
Authentication Single - AUTHENTICATION_SINGLEDefined in CVSS v2
- CVSSAuthentication
Authentication None - AUTHENTICATION_NONEDefined in CVSS v2
- Authentication
Unspecified - AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
- Authentication
Multiple - AUTHENTICATION_MULTIPLEDefined in CVSS v2
- Authentication
Single - AUTHENTICATION_SINGLEDefined in CVSS v2
- Authentication
None - AUTHENTICATION_NONEDefined in CVSS v2
- Authentication
Unspecified - AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
- Authentication
Multiple - AUTHENTICATION_MULTIPLEDefined in CVSS v2
- Authentication
Single - AUTHENTICATION_SINGLEDefined in CVSS v2
- Authentication
None - AUTHENTICATION_NONEDefined in CVSS v2
- AUTHENTICATION_UNSPECIFIED
- AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
- AUTHENTICATION_MULTIPLE
- AUTHENTICATION_MULTIPLEDefined in CVSS v2
- AUTHENTICATION_SINGLE
- AUTHENTICATION_SINGLEDefined in CVSS v2
- AUTHENTICATION_NONE
- AUTHENTICATION_NONEDefined in CVSS v2
- "AUTHENTICATION_UNSPECIFIED"
- AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
- "AUTHENTICATION_MULTIPLE"
- AUTHENTICATION_MULTIPLEDefined in CVSS v2
- "AUTHENTICATION_SINGLE"
- AUTHENTICATION_SINGLEDefined in CVSS v2
- "AUTHENTICATION_NONE"
- AUTHENTICATION_NONEDefined in CVSS v2
CVSSAvailabilityImpact, CVSSAvailabilityImpactArgs
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- CVSSAvailability
Impact Impact Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- CVSSAvailability
Impact Impact High - IMPACT_HIGHDefined in CVSS v3
- CVSSAvailability
Impact Impact Low - IMPACT_LOWDefined in CVSS v3
- CVSSAvailability
Impact Impact None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- CVSSAvailability
Impact Impact Partial - IMPACT_PARTIALDefined in CVSS v2
- CVSSAvailability
Impact Impact Complete - IMPACT_COMPLETEDefined in CVSS v2
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- IMPACT_UNSPECIFIED
- IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- IMPACT_HIGH
- IMPACT_HIGHDefined in CVSS v3
- IMPACT_LOW
- IMPACT_LOWDefined in CVSS v3
- IMPACT_NONE
- IMPACT_NONEDefined in CVSS v3, CVSS v2
- IMPACT_PARTIAL
- IMPACT_PARTIALDefined in CVSS v2
- IMPACT_COMPLETE
- IMPACT_COMPLETEDefined in CVSS v2
- "IMPACT_UNSPECIFIED"
- IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- "IMPACT_HIGH"
- IMPACT_HIGHDefined in CVSS v3
- "IMPACT_LOW"
- IMPACT_LOWDefined in CVSS v3
- "IMPACT_NONE"
- IMPACT_NONEDefined in CVSS v3, CVSS v2
- "IMPACT_PARTIAL"
- IMPACT_PARTIALDefined in CVSS v2
- "IMPACT_COMPLETE"
- IMPACT_COMPLETEDefined in CVSS v2
CVSSConfidentialityImpact, CVSSConfidentialityImpactArgs
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- CVSSConfidentiality
Impact Impact Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- CVSSConfidentiality
Impact Impact High - IMPACT_HIGHDefined in CVSS v3
- CVSSConfidentiality
Impact Impact Low - IMPACT_LOWDefined in CVSS v3
- CVSSConfidentiality
Impact Impact None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- CVSSConfidentiality
Impact Impact Partial - IMPACT_PARTIALDefined in CVSS v2
- CVSSConfidentiality
Impact Impact Complete - IMPACT_COMPLETEDefined in CVSS v2
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- IMPACT_UNSPECIFIED
- IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- IMPACT_HIGH
- IMPACT_HIGHDefined in CVSS v3
- IMPACT_LOW
- IMPACT_LOWDefined in CVSS v3
- IMPACT_NONE
- IMPACT_NONEDefined in CVSS v3, CVSS v2
- IMPACT_PARTIAL
- IMPACT_PARTIALDefined in CVSS v2
- IMPACT_COMPLETE
- IMPACT_COMPLETEDefined in CVSS v2
- "IMPACT_UNSPECIFIED"
- IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- "IMPACT_HIGH"
- IMPACT_HIGHDefined in CVSS v3
- "IMPACT_LOW"
- IMPACT_LOWDefined in CVSS v3
- "IMPACT_NONE"
- IMPACT_NONEDefined in CVSS v3, CVSS v2
- "IMPACT_PARTIAL"
- IMPACT_PARTIALDefined in CVSS v2
- "IMPACT_COMPLETE"
- IMPACT_COMPLETEDefined in CVSS v2
CVSSIntegrityImpact, CVSSIntegrityImpactArgs
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- CVSSIntegrity
Impact Impact Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- CVSSIntegrity
Impact Impact High - IMPACT_HIGHDefined in CVSS v3
- CVSSIntegrity
Impact Impact Low - IMPACT_LOWDefined in CVSS v3
- CVSSIntegrity
Impact Impact None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- CVSSIntegrity
Impact Impact Partial - IMPACT_PARTIALDefined in CVSS v2
- CVSSIntegrity
Impact Impact Complete - IMPACT_COMPLETEDefined in CVSS v2
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- Impact
Unspecified - IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- Impact
High - IMPACT_HIGHDefined in CVSS v3
- Impact
Low - IMPACT_LOWDefined in CVSS v3
- Impact
None - IMPACT_NONEDefined in CVSS v3, CVSS v2
- Impact
Partial - IMPACT_PARTIALDefined in CVSS v2
- Impact
Complete - IMPACT_COMPLETEDefined in CVSS v2
- IMPACT_UNSPECIFIED
- IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- IMPACT_HIGH
- IMPACT_HIGHDefined in CVSS v3
- IMPACT_LOW
- IMPACT_LOWDefined in CVSS v3
- IMPACT_NONE
- IMPACT_NONEDefined in CVSS v3, CVSS v2
- IMPACT_PARTIAL
- IMPACT_PARTIALDefined in CVSS v2
- IMPACT_COMPLETE
- IMPACT_COMPLETEDefined in CVSS v2
- "IMPACT_UNSPECIFIED"
- IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
- "IMPACT_HIGH"
- IMPACT_HIGHDefined in CVSS v3
- "IMPACT_LOW"
- IMPACT_LOWDefined in CVSS v3
- "IMPACT_NONE"
- IMPACT_NONEDefined in CVSS v3, CVSS v2
- "IMPACT_PARTIAL"
- IMPACT_PARTIALDefined in CVSS v2
- "IMPACT_COMPLETE"
- IMPACT_COMPLETEDefined in CVSS v2
CVSSPrivilegesRequired, CVSSPrivilegesRequiredArgs
- Privileges
Required Unspecified - PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
- Privileges
Required None - PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
- Privileges
Required Low - PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
- Privileges
Required High - PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
- CVSSPrivileges
Required Privileges Required Unspecified - PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
- CVSSPrivileges
Required Privileges Required None - PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
- CVSSPrivileges
Required Privileges Required Low - PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
- CVSSPrivileges
Required Privileges Required High - PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
- Privileges
Required Unspecified - PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
- Privileges
Required None - PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
- Privileges
Required Low - PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
- Privileges
Required High - PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
- Privileges
Required Unspecified - PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
- Privileges
Required None - PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
- Privileges
Required Low - PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
- Privileges
Required High - PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
- PRIVILEGES_REQUIRED_UNSPECIFIED
- PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
- PRIVILEGES_REQUIRED_NONE
- PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
- PRIVILEGES_REQUIRED_LOW
- PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
- PRIVILEGES_REQUIRED_HIGH
- PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
- "PRIVILEGES_REQUIRED_UNSPECIFIED"
- PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
- "PRIVILEGES_REQUIRED_NONE"
- PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
- "PRIVILEGES_REQUIRED_LOW"
- PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
- "PRIVILEGES_REQUIRED_HIGH"
- PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
CVSSResponse, CVSSResponseArgs
- Attack
Complexity string - Defined in CVSS v3, CVSS v2
- Attack
Vector string - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- Authentication string
- Defined in CVSS v2
- Availability
Impact string - Defined in CVSS v3, CVSS v2
- Base
Score double - The base score is a function of the base metric scores.
- Confidentiality
Impact string - Defined in CVSS v3, CVSS v2
- Exploitability
Score double - Impact
Score double - Integrity
Impact string - Defined in CVSS v3, CVSS v2
- Privileges
Required string - Defined in CVSS v3
- Scope string
- Defined in CVSS v3
- User
Interaction string - Defined in CVSS v3
- Attack
Complexity string - Defined in CVSS v3, CVSS v2
- Attack
Vector string - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- Authentication string
- Defined in CVSS v2
- Availability
Impact string - Defined in CVSS v3, CVSS v2
- Base
Score float64 - The base score is a function of the base metric scores.
- Confidentiality
Impact string - Defined in CVSS v3, CVSS v2
- Exploitability
Score float64 - Impact
Score float64 - Integrity
Impact string - Defined in CVSS v3, CVSS v2
- Privileges
Required string - Defined in CVSS v3
- Scope string
- Defined in CVSS v3
- User
Interaction string - Defined in CVSS v3
- attack
Complexity String - Defined in CVSS v3, CVSS v2
- attack
Vector String - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication String
- Defined in CVSS v2
- availability
Impact String - Defined in CVSS v3, CVSS v2
- base
Score Double - The base score is a function of the base metric scores.
- confidentiality
Impact String - Defined in CVSS v3, CVSS v2
- exploitability
Score Double - impact
Score Double - integrity
Impact String - Defined in CVSS v3, CVSS v2
- privileges
Required String - Defined in CVSS v3
- scope String
- Defined in CVSS v3
- user
Interaction String - Defined in CVSS v3
- attack
Complexity string - Defined in CVSS v3, CVSS v2
- attack
Vector string - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication string
- Defined in CVSS v2
- availability
Impact string - Defined in CVSS v3, CVSS v2
- base
Score number - The base score is a function of the base metric scores.
- confidentiality
Impact string - Defined in CVSS v3, CVSS v2
- exploitability
Score number - impact
Score number - integrity
Impact string - Defined in CVSS v3, CVSS v2
- privileges
Required string - Defined in CVSS v3
- scope string
- Defined in CVSS v3
- user
Interaction string - Defined in CVSS v3
- attack_
complexity str - Defined in CVSS v3, CVSS v2
- attack_
vector str - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication str
- Defined in CVSS v2
- availability_
impact str - Defined in CVSS v3, CVSS v2
- base_
score float - The base score is a function of the base metric scores.
- confidentiality_
impact str - Defined in CVSS v3, CVSS v2
- exploitability_
score float - impact_
score float - integrity_
impact str - Defined in CVSS v3, CVSS v2
- privileges_
required str - Defined in CVSS v3
- scope str
- Defined in CVSS v3
- user_
interaction str - Defined in CVSS v3
- attack
Complexity String - Defined in CVSS v3, CVSS v2
- attack
Vector String - Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
- authentication String
- Defined in CVSS v2
- availability
Impact String - Defined in CVSS v3, CVSS v2
- base
Score Number - The base score is a function of the base metric scores.
- confidentiality
Impact String - Defined in CVSS v3, CVSS v2
- exploitability
Score Number - impact
Score Number - integrity
Impact String - Defined in CVSS v3, CVSS v2
- privileges
Required String - Defined in CVSS v3
- scope String
- Defined in CVSS v3
- user
Interaction String - Defined in CVSS v3
CVSSScope, CVSSScopeArgs
- Scope
Unspecified - SCOPE_UNSPECIFIEDDefined in CVSS v3
- Scope
Unchanged - SCOPE_UNCHANGEDDefined in CVSS v3
- Scope
Changed - SCOPE_CHANGEDDefined in CVSS v3
- CVSSScope
Scope Unspecified - SCOPE_UNSPECIFIEDDefined in CVSS v3
- CVSSScope
Scope Unchanged - SCOPE_UNCHANGEDDefined in CVSS v3
- CVSSScope
Scope Changed - SCOPE_CHANGEDDefined in CVSS v3
- Scope
Unspecified - SCOPE_UNSPECIFIEDDefined in CVSS v3
- Scope
Unchanged - SCOPE_UNCHANGEDDefined in CVSS v3
- Scope
Changed - SCOPE_CHANGEDDefined in CVSS v3
- Scope
Unspecified - SCOPE_UNSPECIFIEDDefined in CVSS v3
- Scope
Unchanged - SCOPE_UNCHANGEDDefined in CVSS v3
- Scope
Changed - SCOPE_CHANGEDDefined in CVSS v3
- SCOPE_UNSPECIFIED
- SCOPE_UNSPECIFIEDDefined in CVSS v3
- SCOPE_UNCHANGED
- SCOPE_UNCHANGEDDefined in CVSS v3
- SCOPE_CHANGED
- SCOPE_CHANGEDDefined in CVSS v3
- "SCOPE_UNSPECIFIED"
- SCOPE_UNSPECIFIEDDefined in CVSS v3
- "SCOPE_UNCHANGED"
- SCOPE_UNCHANGEDDefined in CVSS v3
- "SCOPE_CHANGED"
- SCOPE_CHANGEDDefined in CVSS v3
CVSSUserInteraction, CVSSUserInteractionArgs
- User
Interaction Unspecified - USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
- User
Interaction None - USER_INTERACTION_NONEDefined in CVSS v3
- User
Interaction Required - USER_INTERACTION_REQUIREDDefined in CVSS v3
- CVSSUser
Interaction User Interaction Unspecified - USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
- CVSSUser
Interaction User Interaction None - USER_INTERACTION_NONEDefined in CVSS v3
- CVSSUser
Interaction User Interaction Required - USER_INTERACTION_REQUIREDDefined in CVSS v3
- User
Interaction Unspecified - USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
- User
Interaction None - USER_INTERACTION_NONEDefined in CVSS v3
- User
Interaction Required - USER_INTERACTION_REQUIREDDefined in CVSS v3
- User
Interaction Unspecified - USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
- User
Interaction None - USER_INTERACTION_NONEDefined in CVSS v3
- User
Interaction Required - USER_INTERACTION_REQUIREDDefined in CVSS v3
- USER_INTERACTION_UNSPECIFIED
- USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
- USER_INTERACTION_NONE
- USER_INTERACTION_NONEDefined in CVSS v3
- USER_INTERACTION_REQUIRED
- USER_INTERACTION_REQUIREDDefined in CVSS v3
- "USER_INTERACTION_UNSPECIFIED"
- USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
- "USER_INTERACTION_NONE"
- USER_INTERACTION_NONEDefined in CVSS v3
- "USER_INTERACTION_REQUIRED"
- USER_INTERACTION_REQUIREDDefined in CVSS v3
Command, CommandArgs
- Args List<string>
- Command-line arguments used when executing this Command.
- Dir string
- Working directory (relative to project source root) used when running this Command.
- Env List<string>
- Environment variables set before running this Command.
- Id string
- Optional unique identifier for this Command, used in wait_for to reference this Command as a dependency.
- Name string
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - Wait
For List<string> - The ID(s) of the Command(s) that this Command depends on.
- Args []string
- Command-line arguments used when executing this Command.
- Dir string
- Working directory (relative to project source root) used when running this Command.
- Env []string
- Environment variables set before running this Command.
- Id string
- Optional unique identifier for this Command, used in wait_for to reference this Command as a dependency.
- Name string
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - Wait
For []string - The ID(s) of the Command(s) that this Command depends on.
- args List<String>
- Command-line arguments used when executing this Command.
- dir String
- Working directory (relative to project source root) used when running this Command.
- env List<String>
- Environment variables set before running this Command.
- id String
- Optional unique identifier for this Command, used in wait_for to reference this Command as a dependency.
- name String
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait
For List<String> - The ID(s) of the Command(s) that this Command depends on.
- args string[]
- Command-line arguments used when executing this Command.
- dir string
- Working directory (relative to project source root) used when running this Command.
- env string[]
- Environment variables set before running this Command.
- id string
- Optional unique identifier for this Command, used in wait_for to reference this Command as a dependency.
- name string
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait
For string[] - The ID(s) of the Command(s) that this Command depends on.
- args Sequence[str]
- Command-line arguments used when executing this Command.
- dir str
- Working directory (relative to project source root) used when running this Command.
- env Sequence[str]
- Environment variables set before running this Command.
- id str
- Optional unique identifier for this Command, used in wait_for to reference this Command as a dependency.
- name str
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait_
for Sequence[str] - The ID(s) of the Command(s) that this Command depends on.
- args List<String>
- Command-line arguments used when executing this Command.
- dir String
- Working directory (relative to project source root) used when running this Command.
- env List<String>
- Environment variables set before running this Command.
- id String
- Optional unique identifier for this Command, used in wait_for to reference this Command as a dependency.
- name String
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait
For List<String> - The ID(s) of the Command(s) that this Command depends on.
CommandResponse, CommandResponseArgs
- Args List<string>
- Command-line arguments used when executing this Command.
- Dir string
- Working directory (relative to project source root) used when running this Command.
- Env List<string>
- Environment variables set before running this Command.
- Name string
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - Wait
For List<string> - The ID(s) of the Command(s) that this Command depends on.
- Args []string
- Command-line arguments used when executing this Command.
- Dir string
- Working directory (relative to project source root) used when running this Command.
- Env []string
- Environment variables set before running this Command.
- Name string
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - Wait
For []string - The ID(s) of the Command(s) that this Command depends on.
- args List<String>
- Command-line arguments used when executing this Command.
- dir String
- Working directory (relative to project source root) used when running this Command.
- env List<String>
- Environment variables set before running this Command.
- name String
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait
For List<String> - The ID(s) of the Command(s) that this Command depends on.
- args string[]
- Command-line arguments used when executing this Command.
- dir string
- Working directory (relative to project source root) used when running this Command.
- env string[]
- Environment variables set before running this Command.
- name string
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait
For string[] - The ID(s) of the Command(s) that this Command depends on.
- args Sequence[str]
- Command-line arguments used when executing this Command.
- dir str
- Working directory (relative to project source root) used when running this Command.
- env Sequence[str]
- Environment variables set before running this Command.
- name str
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait_
for Sequence[str] - The ID(s) of the Command(s) that this Command depends on.
- args List<String>
- Command-line arguments used when executing this Command.
- dir String
- Working directory (relative to project source root) used when running this Command.
- env List<String>
- Environment variables set before running this Command.
- name String
- Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to
docker pull. - wait
For List<String> - The ID(s) of the Command(s) that this Command depends on.
Completeness, CompletenessArgs
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
CompletenessResponse, CompletenessResponseArgs
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
ComplianceOccurrence, ComplianceOccurrenceArgs
- Non
Compliance stringReason - The reason for non compliance of these files.
- Non
Compliant List<Pulumi.Files Google Native. Container Analysis. V1Alpha1. Inputs. Non Compliant File> - A list of files which are violating compliance checks.
- Non
Compliance stringReason - The reason for non compliance of these files.
- Non
Compliant []NonFiles Compliant File - A list of files which are violating compliance checks.
- non
Compliance StringReason - The reason for non compliance of these files.
- non
Compliant List<NonFiles Compliant File> - A list of files which are violating compliance checks.
- non
Compliance stringReason - The reason for non compliance of these files.
- non
Compliant NonFiles Compliant File[] - A list of files which are violating compliance checks.
- non_
compliance_ strreason - The reason for non compliance of these files.
- non_
compliant_ Sequence[Nonfiles Compliant File] - A list of files which are violating compliance checks.
- non
Compliance StringReason - The reason for non compliance of these files.
- non
Compliant List<Property Map>Files - A list of files which are violating compliance checks.
ComplianceOccurrenceResponse, ComplianceOccurrenceResponseArgs
- Non
Compliance stringReason - The reason for non compliance of these files.
- Non
Compliant List<Pulumi.Files Google Native. Container Analysis. V1Alpha1. Inputs. Non Compliant File Response> - A list of files which are violating compliance checks.
- Non
Compliance stringReason - The reason for non compliance of these files.
- Non
Compliant []NonFiles Compliant File Response - A list of files which are violating compliance checks.
- non
Compliance StringReason - The reason for non compliance of these files.
- non
Compliant List<NonFiles Compliant File Response> - A list of files which are violating compliance checks.
- non
Compliance stringReason - The reason for non compliance of these files.
- non
Compliant NonFiles Compliant File Response[] - A list of files which are violating compliance checks.
- non_
compliance_ strreason - The reason for non compliance of these files.
- non_
compliant_ Sequence[Nonfiles Compliant File Response] - A list of files which are violating compliance checks.
- non
Compliance StringReason - The reason for non compliance of these files.
- non
Compliant List<Property Map>Files - A list of files which are violating compliance checks.
DSSEAttestationOccurrence, DSSEAttestationOccurrenceArgs
- Envelope
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope - If doing something security critical, make sure to verify the signatures in this metadata.
- Statement
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Statement
- Envelope Envelope
- If doing something security critical, make sure to verify the signatures in this metadata.
- Statement
In
Toto Statement
- envelope Envelope
- If doing something security critical, make sure to verify the signatures in this metadata.
- statement
In
Toto Statement
- envelope Envelope
- If doing something security critical, make sure to verify the signatures in this metadata.
- statement
In
Toto Statement
- envelope Envelope
- If doing something security critical, make sure to verify the signatures in this metadata.
- statement
In
Toto Statement
- envelope Property Map
- If doing something security critical, make sure to verify the signatures in this metadata.
- statement Property Map
DSSEAttestationOccurrenceResponse, DSSEAttestationOccurrenceResponseArgs
- Envelope
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope Response - If doing something security critical, make sure to verify the signatures in this metadata.
- Statement
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Statement Response
- Envelope
Envelope
Response - If doing something security critical, make sure to verify the signatures in this metadata.
- Statement
In
Toto Statement Response
- envelope
Envelope
Response - If doing something security critical, make sure to verify the signatures in this metadata.
- statement
In
Toto Statement Response
- envelope
Envelope
Response - If doing something security critical, make sure to verify the signatures in this metadata.
- statement
In
Toto Statement Response
- envelope
Envelope
Response - If doing something security critical, make sure to verify the signatures in this metadata.
- statement
In
Toto Statement Response
- envelope Property Map
- If doing something security critical, make sure to verify the signatures in this metadata.
- statement Property Map
Deployment, DeploymentArgs
- Address string
- Address of the runtime element hosting this deployment.
- Config string
- Configuration used to create this deployment.
- Deploy
Time string - Beginning of the lifetime of this deployment.
- Platform
Pulumi.
Google Native. Container Analysis. V1Alpha1. Deployment Platform - Platform hosting this deployment.
- Resource
Uri List<string> - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- Undeploy
Time string - End of the lifetime of this deployment.
- User
Email string - Identity of the user that triggered this deployment.
- Address string
- Address of the runtime element hosting this deployment.
- Config string
- Configuration used to create this deployment.
- Deploy
Time string - Beginning of the lifetime of this deployment.
- Platform
Deployment
Platform - Platform hosting this deployment.
- Resource
Uri []string - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- Undeploy
Time string - End of the lifetime of this deployment.
- User
Email string - Identity of the user that triggered this deployment.
- address String
- Address of the runtime element hosting this deployment.
- config String
- Configuration used to create this deployment.
- deploy
Time String - Beginning of the lifetime of this deployment.
- platform
Deployment
Platform - Platform hosting this deployment.
- resource
Uri List<String> - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy
Time String - End of the lifetime of this deployment.
- user
Email String - Identity of the user that triggered this deployment.
- address string
- Address of the runtime element hosting this deployment.
- config string
- Configuration used to create this deployment.
- deploy
Time string - Beginning of the lifetime of this deployment.
- platform
Deployment
Platform - Platform hosting this deployment.
- resource
Uri string[] - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy
Time string - End of the lifetime of this deployment.
- user
Email string - Identity of the user that triggered this deployment.
- address str
- Address of the runtime element hosting this deployment.
- config str
- Configuration used to create this deployment.
- deploy_
time str - Beginning of the lifetime of this deployment.
- platform
Deployment
Platform - Platform hosting this deployment.
- resource_
uri Sequence[str] - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy_
time str - End of the lifetime of this deployment.
- user_
email str - Identity of the user that triggered this deployment.
- address String
- Address of the runtime element hosting this deployment.
- config String
- Configuration used to create this deployment.
- deploy
Time String - Beginning of the lifetime of this deployment.
- platform "PLATFORM_UNSPECIFIED" | "GKE" | "FLEX" | "CUSTOM"
- Platform hosting this deployment.
- resource
Uri List<String> - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy
Time String - End of the lifetime of this deployment.
- user
Email String - Identity of the user that triggered this deployment.
DeploymentPlatform, DeploymentPlatformArgs
- Platform
Unspecified - PLATFORM_UNSPECIFIEDUnknown
- Gke
- GKEGoogle Container Engine
- Flex
- FLEXGoogle App Engine: Flexible Environment
- Custom
- CUSTOMCustom user-defined platform
- Deployment
Platform Platform Unspecified - PLATFORM_UNSPECIFIEDUnknown
- Deployment
Platform Gke - GKEGoogle Container Engine
- Deployment
Platform Flex - FLEXGoogle App Engine: Flexible Environment
- Deployment
Platform Custom - CUSTOMCustom user-defined platform
- Platform
Unspecified - PLATFORM_UNSPECIFIEDUnknown
- Gke
- GKEGoogle Container Engine
- Flex
- FLEXGoogle App Engine: Flexible Environment
- Custom
- CUSTOMCustom user-defined platform
- Platform
Unspecified - PLATFORM_UNSPECIFIEDUnknown
- Gke
- GKEGoogle Container Engine
- Flex
- FLEXGoogle App Engine: Flexible Environment
- Custom
- CUSTOMCustom user-defined platform
- PLATFORM_UNSPECIFIED
- PLATFORM_UNSPECIFIEDUnknown
- GKE
- GKEGoogle Container Engine
- FLEX
- FLEXGoogle App Engine: Flexible Environment
- CUSTOM
- CUSTOMCustom user-defined platform
- "PLATFORM_UNSPECIFIED"
- PLATFORM_UNSPECIFIEDUnknown
- "GKE"
- GKEGoogle Container Engine
- "FLEX"
- FLEXGoogle App Engine: Flexible Environment
- "CUSTOM"
- CUSTOMCustom user-defined platform
DeploymentResponse, DeploymentResponseArgs
- Address string
- Address of the runtime element hosting this deployment.
- Config string
- Configuration used to create this deployment.
- Deploy
Time string - Beginning of the lifetime of this deployment.
- Platform string
- Platform hosting this deployment.
- Resource
Uri List<string> - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- Undeploy
Time string - End of the lifetime of this deployment.
- User
Email string - Identity of the user that triggered this deployment.
- Address string
- Address of the runtime element hosting this deployment.
- Config string
- Configuration used to create this deployment.
- Deploy
Time string - Beginning of the lifetime of this deployment.
- Platform string
- Platform hosting this deployment.
- Resource
Uri []string - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- Undeploy
Time string - End of the lifetime of this deployment.
- User
Email string - Identity of the user that triggered this deployment.
- address String
- Address of the runtime element hosting this deployment.
- config String
- Configuration used to create this deployment.
- deploy
Time String - Beginning of the lifetime of this deployment.
- platform String
- Platform hosting this deployment.
- resource
Uri List<String> - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy
Time String - End of the lifetime of this deployment.
- user
Email String - Identity of the user that triggered this deployment.
- address string
- Address of the runtime element hosting this deployment.
- config string
- Configuration used to create this deployment.
- deploy
Time string - Beginning of the lifetime of this deployment.
- platform string
- Platform hosting this deployment.
- resource
Uri string[] - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy
Time string - End of the lifetime of this deployment.
- user
Email string - Identity of the user that triggered this deployment.
- address str
- Address of the runtime element hosting this deployment.
- config str
- Configuration used to create this deployment.
- deploy_
time str - Beginning of the lifetime of this deployment.
- platform str
- Platform hosting this deployment.
- resource_
uri Sequence[str] - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy_
time str - End of the lifetime of this deployment.
- user_
email str - Identity of the user that triggered this deployment.
- address String
- Address of the runtime element hosting this deployment.
- config String
- Configuration used to create this deployment.
- deploy
Time String - Beginning of the lifetime of this deployment.
- platform String
- Platform hosting this deployment.
- resource
Uri List<String> - Resource URI for the artifact being deployed taken from the deployable field with the same name.
- undeploy
Time String - End of the lifetime of this deployment.
- user
Email String - Identity of the user that triggered this deployment.
Derived, DerivedArgs
- Fingerprint
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Fingerprint - The fingerprint of the derived image.
- Layer
Info List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Layer> - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- Fingerprint Fingerprint
- The fingerprint of the derived image.
- Layer
Info []Layer - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- fingerprint Fingerprint
- The fingerprint of the derived image.
- layer
Info List<Layer> - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- fingerprint Fingerprint
- The fingerprint of the derived image.
- layer
Info Layer[] - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- fingerprint Fingerprint
- The fingerprint of the derived image.
- layer_
info Sequence[Layer] - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- fingerprint Property Map
- The fingerprint of the derived image.
- layer
Info List<Property Map> - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
DerivedResponse, DerivedResponseArgs
- Base
Resource stringUrl - This contains the base image URL for the derived image occurrence.
- Distance int
- The number of layers by which this image differs from the associated image basis.
- Fingerprint
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Fingerprint Response - The fingerprint of the derived image.
- Layer
Info List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Layer Response> - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- Base
Resource stringUrl - This contains the base image URL for the derived image occurrence.
- Distance int
- The number of layers by which this image differs from the associated image basis.
- Fingerprint
Fingerprint
Response - The fingerprint of the derived image.
- Layer
Info []LayerResponse - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- base
Resource StringUrl - This contains the base image URL for the derived image occurrence.
- distance Integer
- The number of layers by which this image differs from the associated image basis.
- fingerprint
Fingerprint
Response - The fingerprint of the derived image.
- layer
Info List<LayerResponse> - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- base
Resource stringUrl - This contains the base image URL for the derived image occurrence.
- distance number
- The number of layers by which this image differs from the associated image basis.
- fingerprint
Fingerprint
Response - The fingerprint of the derived image.
- layer
Info LayerResponse[] - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- base_
resource_ strurl - This contains the base image URL for the derived image occurrence.
- distance int
- The number of layers by which this image differs from the associated image basis.
- fingerprint
Fingerprint
Response - The fingerprint of the derived image.
- layer_
info Sequence[LayerResponse] - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
- base
Resource StringUrl - This contains the base image URL for the derived image occurrence.
- distance Number
- The number of layers by which this image differs from the associated image basis.
- fingerprint Property Map
- The fingerprint of the derived image.
- layer
Info List<Property Map> - This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
Discovered, DiscoveredArgs
- Analysis
Completed Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Analysis Completed - The list of analysis that were completed for a resource.
- Analysis
Error List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Status> - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- Analysis
Status Pulumi.Google Native. Container Analysis. V1Alpha1. Discovered Analysis Status - The status of discovery for the resource.
- Analysis
Status Pulumi.Error Google Native. Container Analysis. V1Alpha1. Inputs. Status - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- Archive
Time string - The time occurrences related to this discovery occurrence were archived.
- Continuous
Analysis Pulumi.Google Native. Container Analysis. V1Alpha1. Discovered Continuous Analysis - Whether the resource is continuously analyzed.
- Cpe string
- The CPE of the resource being scanned.
- Last
Scan stringTime - The last time this resource was scanned.
- Analysis
Completed AnalysisCompleted - The list of analysis that were completed for a resource.
- Analysis
Error []Status - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- Analysis
Status DiscoveredAnalysis Status - The status of discovery for the resource.
- Analysis
Status StatusError - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- Archive
Time string - The time occurrences related to this discovery occurrence were archived.
- Continuous
Analysis DiscoveredContinuous Analysis - Whether the resource is continuously analyzed.
- Cpe string
- The CPE of the resource being scanned.
- Last
Scan stringTime - The last time this resource was scanned.
- analysis
Completed AnalysisCompleted - The list of analysis that were completed for a resource.
- analysis
Error List<Status> - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis
Status DiscoveredAnalysis Status - The status of discovery for the resource.
- analysis
Status StatusError - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive
Time String - The time occurrences related to this discovery occurrence were archived.
- continuous
Analysis DiscoveredContinuous Analysis - Whether the resource is continuously analyzed.
- cpe String
- The CPE of the resource being scanned.
- last
Scan StringTime - The last time this resource was scanned.
- analysis
Completed AnalysisCompleted - The list of analysis that were completed for a resource.
- analysis
Error Status[] - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis
Status DiscoveredAnalysis Status - The status of discovery for the resource.
- analysis
Status StatusError - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive
Time string - The time occurrences related to this discovery occurrence were archived.
- continuous
Analysis DiscoveredContinuous Analysis - Whether the resource is continuously analyzed.
- cpe string
- The CPE of the resource being scanned.
- last
Scan stringTime - The last time this resource was scanned.
- analysis_
completed AnalysisCompleted - The list of analysis that were completed for a resource.
- analysis_
error Sequence[Status] - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis_
status DiscoveredAnalysis Status - The status of discovery for the resource.
- analysis_
status_ Statuserror - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive_
time str - The time occurrences related to this discovery occurrence were archived.
- continuous_
analysis DiscoveredContinuous Analysis - Whether the resource is continuously analyzed.
- cpe str
- The CPE of the resource being scanned.
- last_
scan_ strtime - The last time this resource was scanned.
- analysis
Completed Property Map - The list of analysis that were completed for a resource.
- analysis
Error List<Property Map> - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis
Status "ANALYSIS_STATUS_UNSPECIFIED" | "PENDING" | "SCANNING" | "COMPLETE" | "FINISHED_SUCCESS" | "FINISHED_FAILED" | "FINISHED_UNSUPPORTED" - The status of discovery for the resource.
- analysis
Status Property MapError - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive
Time String - The time occurrences related to this discovery occurrence were archived.
- continuous
Analysis "CONTINUOUS_ANALYSIS_UNSPECIFIED" | "ACTIVE" | "INACTIVE" - Whether the resource is continuously analyzed.
- cpe String
- The CPE of the resource being scanned.
- last
Scan StringTime - The last time this resource was scanned.
DiscoveredAnalysisStatus, DiscoveredAnalysisStatusArgs
- Analysis
Status Unspecified - ANALYSIS_STATUS_UNSPECIFIEDUnknown
- Pending
- PENDINGResource is known but no action has been taken yet.
- Scanning
- SCANNINGResource is being analyzed.
- Complete
- COMPLETEAnalysis has completed
- Finished
Success - FINISHED_SUCCESSAnalysis has finished successfully.
- Finished
Failed - FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
- Finished
Unsupported - FINISHED_UNSUPPORTEDThe resource is known not to be supported.
- Discovered
Analysis Status Analysis Status Unspecified - ANALYSIS_STATUS_UNSPECIFIEDUnknown
- Discovered
Analysis Status Pending - PENDINGResource is known but no action has been taken yet.
- Discovered
Analysis Status Scanning - SCANNINGResource is being analyzed.
- Discovered
Analysis Status Complete - COMPLETEAnalysis has completed
- Discovered
Analysis Status Finished Success - FINISHED_SUCCESSAnalysis has finished successfully.
- Discovered
Analysis Status Finished Failed - FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
- Discovered
Analysis Status Finished Unsupported - FINISHED_UNSUPPORTEDThe resource is known not to be supported.
- Analysis
Status Unspecified - ANALYSIS_STATUS_UNSPECIFIEDUnknown
- Pending
- PENDINGResource is known but no action has been taken yet.
- Scanning
- SCANNINGResource is being analyzed.
- Complete
- COMPLETEAnalysis has completed
- Finished
Success - FINISHED_SUCCESSAnalysis has finished successfully.
- Finished
Failed - FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
- Finished
Unsupported - FINISHED_UNSUPPORTEDThe resource is known not to be supported.
- Analysis
Status Unspecified - ANALYSIS_STATUS_UNSPECIFIEDUnknown
- Pending
- PENDINGResource is known but no action has been taken yet.
- Scanning
- SCANNINGResource is being analyzed.
- Complete
- COMPLETEAnalysis has completed
- Finished
Success - FINISHED_SUCCESSAnalysis has finished successfully.
- Finished
Failed - FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
- Finished
Unsupported - FINISHED_UNSUPPORTEDThe resource is known not to be supported.
- ANALYSIS_STATUS_UNSPECIFIED
- ANALYSIS_STATUS_UNSPECIFIEDUnknown
- PENDING
- PENDINGResource is known but no action has been taken yet.
- SCANNING
- SCANNINGResource is being analyzed.
- COMPLETE
- COMPLETEAnalysis has completed
- FINISHED_SUCCESS
- FINISHED_SUCCESSAnalysis has finished successfully.
- FINISHED_FAILED
- FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
- FINISHED_UNSUPPORTED
- FINISHED_UNSUPPORTEDThe resource is known not to be supported.
- "ANALYSIS_STATUS_UNSPECIFIED"
- ANALYSIS_STATUS_UNSPECIFIEDUnknown
- "PENDING"
- PENDINGResource is known but no action has been taken yet.
- "SCANNING"
- SCANNINGResource is being analyzed.
- "COMPLETE"
- COMPLETEAnalysis has completed
- "FINISHED_SUCCESS"
- FINISHED_SUCCESSAnalysis has finished successfully.
- "FINISHED_FAILED"
- FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
- "FINISHED_UNSUPPORTED"
- FINISHED_UNSUPPORTEDThe resource is known not to be supported.
DiscoveredContinuousAnalysis, DiscoveredContinuousAnalysisArgs
- Continuous
Analysis Unspecified - CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown
- Active
- ACTIVEThe resource is continuously analyzed.
- Inactive
- INACTIVEThe resource is ignored for continuous analysis.
- Discovered
Continuous Analysis Continuous Analysis Unspecified - CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown
- Discovered
Continuous Analysis Active - ACTIVEThe resource is continuously analyzed.
- Discovered
Continuous Analysis Inactive - INACTIVEThe resource is ignored for continuous analysis.
- Continuous
Analysis Unspecified - CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown
- Active
- ACTIVEThe resource is continuously analyzed.
- Inactive
- INACTIVEThe resource is ignored for continuous analysis.
- Continuous
Analysis Unspecified - CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown
- Active
- ACTIVEThe resource is continuously analyzed.
- Inactive
- INACTIVEThe resource is ignored for continuous analysis.
- CONTINUOUS_ANALYSIS_UNSPECIFIED
- CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown
- ACTIVE
- ACTIVEThe resource is continuously analyzed.
- INACTIVE
- INACTIVEThe resource is ignored for continuous analysis.
- "CONTINUOUS_ANALYSIS_UNSPECIFIED"
- CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown
- "ACTIVE"
- ACTIVEThe resource is continuously analyzed.
- "INACTIVE"
- INACTIVEThe resource is ignored for continuous analysis.
DiscoveredResponse, DiscoveredResponseArgs
- Analysis
Completed Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Analysis Completed Response - The list of analysis that were completed for a resource.
- Analysis
Error List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Status Response> - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- Analysis
Status string - The status of discovery for the resource.
- Analysis
Status Pulumi.Error Google Native. Container Analysis. V1Alpha1. Inputs. Status Response - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- Archive
Time string - The time occurrences related to this discovery occurrence were archived.
- Continuous
Analysis string - Whether the resource is continuously analyzed.
- Cpe string
- The CPE of the resource being scanned.
- Last
Scan stringTime - The last time this resource was scanned.
- Operation
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Operation Response - An operation that indicates the status of the current scan. This field is deprecated, do not use.
- Sbom
Status Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. SBOMStatus Response - The status of an SBOM generation.
- Analysis
Completed AnalysisCompleted Response - The list of analysis that were completed for a resource.
- Analysis
Error []StatusResponse - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- Analysis
Status string - The status of discovery for the resource.
- Analysis
Status StatusError Response - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- Archive
Time string - The time occurrences related to this discovery occurrence were archived.
- Continuous
Analysis string - Whether the resource is continuously analyzed.
- Cpe string
- The CPE of the resource being scanned.
- Last
Scan stringTime - The last time this resource was scanned.
- Operation
Operation
Response - An operation that indicates the status of the current scan. This field is deprecated, do not use.
- Sbom
Status SBOMStatusResponse - The status of an SBOM generation.
- analysis
Completed AnalysisCompleted Response - The list of analysis that were completed for a resource.
- analysis
Error List<StatusResponse> - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis
Status String - The status of discovery for the resource.
- analysis
Status StatusError Response - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive
Time String - The time occurrences related to this discovery occurrence were archived.
- continuous
Analysis String - Whether the resource is continuously analyzed.
- cpe String
- The CPE of the resource being scanned.
- last
Scan StringTime - The last time this resource was scanned.
- operation
Operation
Response - An operation that indicates the status of the current scan. This field is deprecated, do not use.
- sbom
Status SBOMStatusResponse - The status of an SBOM generation.
- analysis
Completed AnalysisCompleted Response - The list of analysis that were completed for a resource.
- analysis
Error StatusResponse[] - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis
Status string - The status of discovery for the resource.
- analysis
Status StatusError Response - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive
Time string - The time occurrences related to this discovery occurrence were archived.
- continuous
Analysis string - Whether the resource is continuously analyzed.
- cpe string
- The CPE of the resource being scanned.
- last
Scan stringTime - The last time this resource was scanned.
- operation
Operation
Response - An operation that indicates the status of the current scan. This field is deprecated, do not use.
- sbom
Status SBOMStatusResponse - The status of an SBOM generation.
- analysis_
completed AnalysisCompleted Response - The list of analysis that were completed for a resource.
- analysis_
error Sequence[StatusResponse] - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis_
status str - The status of discovery for the resource.
- analysis_
status_ Statuserror Response - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive_
time str - The time occurrences related to this discovery occurrence were archived.
- continuous_
analysis str - Whether the resource is continuously analyzed.
- cpe str
- The CPE of the resource being scanned.
- last_
scan_ strtime - The last time this resource was scanned.
- operation
Operation
Response - An operation that indicates the status of the current scan. This field is deprecated, do not use.
- sbom_
status SBOMStatusResponse - The status of an SBOM generation.
- analysis
Completed Property Map - The list of analysis that were completed for a resource.
- analysis
Error List<Property Map> - Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
- analysis
Status String - The status of discovery for the resource.
- analysis
Status Property MapError - When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage output only and populated by the API.
- archive
Time String - The time occurrences related to this discovery occurrence were archived.
- continuous
Analysis String - Whether the resource is continuously analyzed.
- cpe String
- The CPE of the resource being scanned.
- last
Scan StringTime - The last time this resource was scanned.
- operation Property Map
- An operation that indicates the status of the current scan. This field is deprecated, do not use.
- sbom
Status Property Map - The status of an SBOM generation.
DocumentOccurrence, DocumentOccurrenceArgs
- Create
Time string - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- Creator
Comment string - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- Creators List<string>
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- Document
Comment string - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- External
Document List<string>Refs - Identify any external SPDX documents referenced within this SPDX document
- Id string
- Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
- License
List stringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- Namespace string
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- Title string
- Identify name of this document as designated by creator
- Create
Time string - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- Creator
Comment string - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- Creators []string
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- Document
Comment string - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- External
Document []stringRefs - Identify any external SPDX documents referenced within this SPDX document
- Id string
- Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
- License
List stringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- Namespace string
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- Title string
- Identify name of this document as designated by creator
- create
Time String - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator
Comment String - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators List<String>
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document
Comment String - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external
Document List<String>Refs - Identify any external SPDX documents referenced within this SPDX document
- id String
- Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
- license
List StringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace String
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title String
- Identify name of this document as designated by creator
- create
Time string - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator
Comment string - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators string[]
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document
Comment string - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external
Document string[]Refs - Identify any external SPDX documents referenced within this SPDX document
- id string
- Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
- license
List stringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace string
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title string
- Identify name of this document as designated by creator
- create_
time str - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator_
comment str - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators Sequence[str]
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document_
comment str - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external_
document_ Sequence[str]refs - Identify any external SPDX documents referenced within this SPDX document
- id str
- Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
- license_
list_ strversion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace str
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title str
- Identify name of this document as designated by creator
- create
Time String - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator
Comment String - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators List<String>
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document
Comment String - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external
Document List<String>Refs - Identify any external SPDX documents referenced within this SPDX document
- id String
- Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
- license
List StringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace String
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title String
- Identify name of this document as designated by creator
DocumentOccurrenceResponse, DocumentOccurrenceResponseArgs
- Create
Time string - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- Creator
Comment string - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- Creators List<string>
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- Document
Comment string - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- External
Document List<string>Refs - Identify any external SPDX documents referenced within this SPDX document
- License
List stringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- Namespace string
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- Title string
- Identify name of this document as designated by creator
- Create
Time string - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- Creator
Comment string - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- Creators []string
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- Document
Comment string - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- External
Document []stringRefs - Identify any external SPDX documents referenced within this SPDX document
- License
List stringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- Namespace string
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- Title string
- Identify name of this document as designated by creator
- create
Time String - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator
Comment String - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators List<String>
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document
Comment String - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external
Document List<String>Refs - Identify any external SPDX documents referenced within this SPDX document
- license
List StringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace String
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title String
- Identify name of this document as designated by creator
- create
Time string - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator
Comment string - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators string[]
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document
Comment string - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external
Document string[]Refs - Identify any external SPDX documents referenced within this SPDX document
- license
List stringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace string
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title string
- Identify name of this document as designated by creator
- create_
time str - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator_
comment str - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators Sequence[str]
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document_
comment str - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external_
document_ Sequence[str]refs - Identify any external SPDX documents referenced within this SPDX document
- license_
list_ strversion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace str
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title str
- Identify name of this document as designated by creator
- create
Time String - Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
- creator
Comment String - A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
- creators List<String>
- Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
- document
Comment String - A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
- external
Document List<String>Refs - Identify any external SPDX documents referenced within this SPDX document
- license
List StringVersion - A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
- namespace String
- Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
- title String
- Identify name of this document as designated by creator
Envelope, EnvelopeArgs
- Payload string
- The bytes being signed
- Payload
Type string - The type of payload being signed
- Signatures
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope Signature> - The signatures over the payload
- Payload string
- The bytes being signed
- Payload
Type string - The type of payload being signed
- Signatures
[]Envelope
Signature - The signatures over the payload
- payload String
- The bytes being signed
- payload
Type String - The type of payload being signed
- signatures
List<Envelope
Signature> - The signatures over the payload
- payload string
- The bytes being signed
- payload
Type string - The type of payload being signed
- signatures
Envelope
Signature[] - The signatures over the payload
- payload str
- The bytes being signed
- payload_
type str - The type of payload being signed
- signatures
Sequence[Envelope
Signature] - The signatures over the payload
- payload String
- The bytes being signed
- payload
Type String - The type of payload being signed
- signatures List<Property Map>
- The signatures over the payload
EnvelopeResponse, EnvelopeResponseArgs
- Payload string
- The bytes being signed
- Payload
Type string - The type of payload being signed
- Signatures
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope Signature Response> - The signatures over the payload
- Payload string
- The bytes being signed
- Payload
Type string - The type of payload being signed
- Signatures
[]Envelope
Signature Response - The signatures over the payload
- payload String
- The bytes being signed
- payload
Type String - The type of payload being signed
- signatures
List<Envelope
Signature Response> - The signatures over the payload
- payload string
- The bytes being signed
- payload
Type string - The type of payload being signed
- signatures
Envelope
Signature Response[] - The signatures over the payload
- payload str
- The bytes being signed
- payload_
type str - The type of payload being signed
- signatures
Sequence[Envelope
Signature Response] - The signatures over the payload
- payload String
- The bytes being signed
- payload
Type String - The type of payload being signed
- signatures List<Property Map>
- The signatures over the payload
EnvelopeSignature, EnvelopeSignatureArgs
EnvelopeSignatureResponse, EnvelopeSignatureResponseArgs
FileLocation, FileLocationArgs
- File
Path string - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- File
Path string - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file
Path String - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file
Path string - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file_
path str - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file
Path String - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
FileLocationResponse, FileLocationResponseArgs
- File
Path string - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- File
Path string - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file
Path String - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file
Path string - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file_
path str - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
- file
Path String - For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
FileOccurrence, FileOccurrenceArgs
- Attributions List<string>
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- Comment string
- This field provides a place for the SPDX file creator to record any general comments about the file
- Contributors List<string>
- This field provides a place for the SPDX file creator to record file contributors
- Copyright string
- Identify the copyright holder of the file, as well as any dates present
- Files
License List<string>Info - This field contains the license information actually found in the file, if any
- Id string
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- License
Concluded Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. License - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- Notice string
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- Attributions []string
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- Comment string
- This field provides a place for the SPDX file creator to record any general comments about the file
- Contributors []string
- This field provides a place for the SPDX file creator to record file contributors
- Copyright string
- Identify the copyright holder of the file, as well as any dates present
- Files
License []stringInfo - This field contains the license information actually found in the file, if any
- Id string
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- License
Concluded License - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- Notice string
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions List<String>
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment String
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors List<String>
- This field provides a place for the SPDX file creator to record file contributors
- copyright String
- Identify the copyright holder of the file, as well as any dates present
- files
License List<String>Info - This field contains the license information actually found in the file, if any
- id String
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license
Concluded License - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice String
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions string[]
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment string
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors string[]
- This field provides a place for the SPDX file creator to record file contributors
- copyright string
- Identify the copyright holder of the file, as well as any dates present
- files
License string[]Info - This field contains the license information actually found in the file, if any
- id string
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license
Concluded License - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice string
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions Sequence[str]
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment str
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors Sequence[str]
- This field provides a place for the SPDX file creator to record file contributors
- copyright str
- Identify the copyright holder of the file, as well as any dates present
- files_
license_ Sequence[str]info - This field contains the license information actually found in the file, if any
- id str
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license_
concluded License - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice str
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions List<String>
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment String
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors List<String>
- This field provides a place for the SPDX file creator to record file contributors
- copyright String
- Identify the copyright holder of the file, as well as any dates present
- files
License List<String>Info - This field contains the license information actually found in the file, if any
- id String
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license
Concluded Property Map - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice String
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
FileOccurrenceResponse, FileOccurrenceResponseArgs
- Attributions List<string>
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- Comment string
- This field provides a place for the SPDX file creator to record any general comments about the file
- Contributors List<string>
- This field provides a place for the SPDX file creator to record file contributors
- Copyright string
- Identify the copyright holder of the file, as well as any dates present
- Files
License List<string>Info - This field contains the license information actually found in the file, if any
- License
Concluded Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. License Response - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- Notice string
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- Attributions []string
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- Comment string
- This field provides a place for the SPDX file creator to record any general comments about the file
- Contributors []string
- This field provides a place for the SPDX file creator to record file contributors
- Copyright string
- Identify the copyright holder of the file, as well as any dates present
- Files
License []stringInfo - This field contains the license information actually found in the file, if any
- License
Concluded LicenseResponse - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- Notice string
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions List<String>
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment String
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors List<String>
- This field provides a place for the SPDX file creator to record file contributors
- copyright String
- Identify the copyright holder of the file, as well as any dates present
- files
License List<String>Info - This field contains the license information actually found in the file, if any
- license
Concluded LicenseResponse - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice String
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions string[]
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment string
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors string[]
- This field provides a place for the SPDX file creator to record file contributors
- copyright string
- Identify the copyright holder of the file, as well as any dates present
- files
License string[]Info - This field contains the license information actually found in the file, if any
- license
Concluded LicenseResponse - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice string
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions Sequence[str]
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment str
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors Sequence[str]
- This field provides a place for the SPDX file creator to record file contributors
- copyright str
- Identify the copyright holder of the file, as well as any dates present
- files_
license_ Sequence[str]info - This field contains the license information actually found in the file, if any
- license_
concluded LicenseResponse - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice str
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
- attributions List<String>
- This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
- comment String
- This field provides a place for the SPDX file creator to record any general comments about the file
- contributors List<String>
- This field provides a place for the SPDX file creator to record file contributors
- copyright String
- Identify the copyright holder of the file, as well as any dates present
- files
License List<String>Info - This field contains the license information actually found in the file, if any
- license
Concluded Property Map - This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
- notice String
- This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
Fingerprint, FingerprintArgs
FingerprintResponse, FingerprintResponseArgs
- V1Name string
- The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
- V2Blob List<string>
- The ordered list of v2 blobs that represent a given image.
- V2Name string
- The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
- V1Name string
- The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
- V2Blob []string
- The ordered list of v2 blobs that represent a given image.
- V2Name string
- The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
- v1Name String
- The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
- v2Blob List<String>
- The ordered list of v2 blobs that represent a given image.
- v2Name String
- The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
- v1Name string
- The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
- v2Blob string[]
- The ordered list of v2 blobs that represent a given image.
- v2Name string
- The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
- v1_
name str - The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
- v2_
blob Sequence[str] - The ordered list of v2 blobs that represent a given image.
- v2_
name str - The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
- v1Name String
- The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
- v2Blob List<String>
- The ordered list of v2 blobs that represent a given image.
- v2Name String
- The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
GoogleDevtoolsContaineranalysisV1alpha1AliasContext, GoogleDevtoolsContaineranalysisV1alpha1AliasContextArgs
- Kind
Pulumi.
Google Native. Container Analysis. V1Alpha1. Google Devtools Containeranalysis V1alpha1Alias Context Kind - The alias kind.
- Name string
- The alias name.
- Kind
Google
Devtools Containeranalysis V1alpha1Alias Context Kind - The alias kind.
- Name string
- The alias name.
- kind
Google
Devtools Containeranalysis V1alpha1Alias Context Kind - The alias kind.
- name String
- The alias name.
- kind
Google
Devtools Containeranalysis V1alpha1Alias Context Kind - The alias kind.
- name string
- The alias name.
- kind
Google
Devtools Containeranalysis V1alpha1Alias Context Kind - The alias kind.
- name str
- The alias name.
- kind "KIND_UNSPECIFIED" | "FIXED" | "MOVABLE" | "OTHER"
- The alias kind.
- name String
- The alias name.
GoogleDevtoolsContaineranalysisV1alpha1AliasContextKind, GoogleDevtoolsContaineranalysisV1alpha1AliasContextKindArgs
- Kind
Unspecified - KIND_UNSPECIFIEDUnknown.
- Fixed
- FIXEDGit tag.
- Movable
- MOVABLEGit branch.
- Other
- OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
- Google
Devtools Containeranalysis V1alpha1Alias Context Kind Kind Unspecified - KIND_UNSPECIFIEDUnknown.
- Google
Devtools Containeranalysis V1alpha1Alias Context Kind Fixed - FIXEDGit tag.
- Google
Devtools Containeranalysis V1alpha1Alias Context Kind Movable - MOVABLEGit branch.
- Google
Devtools Containeranalysis V1alpha1Alias Context Kind Other - OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
- Kind
Unspecified - KIND_UNSPECIFIEDUnknown.
- Fixed
- FIXEDGit tag.
- Movable
- MOVABLEGit branch.
- Other
- OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
- Kind
Unspecified - KIND_UNSPECIFIEDUnknown.
- Fixed
- FIXEDGit tag.
- Movable
- MOVABLEGit branch.
- Other
- OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
- KIND_UNSPECIFIED
- KIND_UNSPECIFIEDUnknown.
- FIXED
- FIXEDGit tag.
- MOVABLE
- MOVABLEGit branch.
- OTHER
- OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
- "KIND_UNSPECIFIED"
- KIND_UNSPECIFIEDUnknown.
- "FIXED"
- FIXEDGit tag.
- "MOVABLE"
- MOVABLEGit branch.
- "OTHER"
- OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
GoogleDevtoolsContaineranalysisV1alpha1AliasContextResponse, GoogleDevtoolsContaineranalysisV1alpha1AliasContextResponseArgs
GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContext, GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextArgs
- Alias
Context Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- Repo
Id Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Repo Id - The ID of the repo.
- Revision
Id string - A revision ID.
- Alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- Repo
Id GoogleDevtools Containeranalysis V1alpha1Repo Id - The ID of the repo.
- Revision
Id string - A revision ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- repo
Id GoogleDevtools Containeranalysis V1alpha1Repo Id - The ID of the repo.
- revision
Id String - A revision ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- repo
Id GoogleDevtools Containeranalysis V1alpha1Repo Id - The ID of the repo.
- revision
Id string - A revision ID.
- alias_
context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- repo_
id GoogleDevtools Containeranalysis V1alpha1Repo Id - The ID of the repo.
- revision_
id str - A revision ID.
- alias
Context Property Map - An alias, which may be a branch or tag.
- repo
Id Property Map - The ID of the repo.
- revision
Id String - A revision ID.
GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextResponse, GoogleDevtoolsContaineranalysisV1alpha1CloudRepoSourceContextResponseArgs
- Alias
Context Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- Repo
Id Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Repo Id Response - The ID of the repo.
- Revision
Id string - A revision ID.
- Alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- Repo
Id GoogleDevtools Containeranalysis V1alpha1Repo Id Response - The ID of the repo.
- Revision
Id string - A revision ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- repo
Id GoogleDevtools Containeranalysis V1alpha1Repo Id Response - The ID of the repo.
- revision
Id String - A revision ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- repo
Id GoogleDevtools Containeranalysis V1alpha1Repo Id Response - The ID of the repo.
- revision
Id string - A revision ID.
- alias_
context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- repo_
id GoogleDevtools Containeranalysis V1alpha1Repo Id Response - The ID of the repo.
- revision_
id str - A revision ID.
- alias
Context Property Map - An alias, which may be a branch or tag.
- repo
Id Property Map - The ID of the repo.
- revision
Id String - A revision ID.
GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContext, GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextArgs
- Alias
Context Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- Gerrit
Project string - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- Host
Uri string - The URI of a running Gerrit instance.
- Revision
Id string - A revision (commit) ID.
- Alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- Gerrit
Project string - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- Host
Uri string - The URI of a running Gerrit instance.
- Revision
Id string - A revision (commit) ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- gerrit
Project String - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host
Uri String - The URI of a running Gerrit instance.
- revision
Id String - A revision (commit) ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- gerrit
Project string - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host
Uri string - The URI of a running Gerrit instance.
- revision
Id string - A revision (commit) ID.
- alias_
context GoogleDevtools Containeranalysis V1alpha1Alias Context - An alias, which may be a branch or tag.
- gerrit_
project str - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host_
uri str - The URI of a running Gerrit instance.
- revision_
id str - A revision (commit) ID.
- alias
Context Property Map - An alias, which may be a branch or tag.
- gerrit
Project String - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host
Uri String - The URI of a running Gerrit instance.
- revision
Id String - A revision (commit) ID.
GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextResponse, GoogleDevtoolsContaineranalysisV1alpha1GerritSourceContextResponseArgs
- Alias
Context Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- Gerrit
Project string - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- Host
Uri string - The URI of a running Gerrit instance.
- Revision
Id string - A revision (commit) ID.
- Alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- Gerrit
Project string - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- Host
Uri string - The URI of a running Gerrit instance.
- Revision
Id string - A revision (commit) ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- gerrit
Project String - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host
Uri String - The URI of a running Gerrit instance.
- revision
Id String - A revision (commit) ID.
- alias
Context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- gerrit
Project string - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host
Uri string - The URI of a running Gerrit instance.
- revision
Id string - A revision (commit) ID.
- alias_
context GoogleDevtools Containeranalysis V1alpha1Alias Context Response - An alias, which may be a branch or tag.
- gerrit_
project str - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host_
uri str - The URI of a running Gerrit instance.
- revision_
id str - A revision (commit) ID.
- alias
Context Property Map - An alias, which may be a branch or tag.
- gerrit
Project String - The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
- host
Uri String - The URI of a running Gerrit instance.
- revision
Id String - A revision (commit) ID.
GoogleDevtoolsContaineranalysisV1alpha1GitSourceContext, GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextArgs
- Revision
Id string - Git commit hash.
- Url string
- Git repository URL.
- Revision
Id string - Git commit hash.
- Url string
- Git repository URL.
- revision
Id String - Git commit hash.
- url String
- Git repository URL.
- revision
Id string - Git commit hash.
- url string
- Git repository URL.
- revision_
id str - Git commit hash.
- url str
- Git repository URL.
- revision
Id String - Git commit hash.
- url String
- Git repository URL.
GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextResponse, GoogleDevtoolsContaineranalysisV1alpha1GitSourceContextResponseArgs
- Revision
Id string - Git commit hash.
- Url string
- Git repository URL.
- Revision
Id string - Git commit hash.
- Url string
- Git repository URL.
- revision
Id String - Git commit hash.
- url String
- Git repository URL.
- revision
Id string - Git commit hash.
- url string
- Git repository URL.
- revision_
id str - Git commit hash.
- url str
- Git repository URL.
- revision
Id String - Git commit hash.
- url String
- Git repository URL.
GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoId, GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdArgs
GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdResponse, GoogleDevtoolsContaineranalysisV1alpha1ProjectRepoIdResponseArgs
GoogleDevtoolsContaineranalysisV1alpha1RepoId, GoogleDevtoolsContaineranalysisV1alpha1RepoIdArgs
- Project
Repo Pulumi.Id Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Project Repo Id - A combination of a project ID and a repo name.
- Uid string
- A server-assigned, globally unique identifier.
- Project
Repo GoogleId Devtools Containeranalysis V1alpha1Project Repo Id - A combination of a project ID and a repo name.
- Uid string
- A server-assigned, globally unique identifier.
- project
Repo GoogleId Devtools Containeranalysis V1alpha1Project Repo Id - A combination of a project ID and a repo name.
- uid String
- A server-assigned, globally unique identifier.
- project
Repo GoogleId Devtools Containeranalysis V1alpha1Project Repo Id - A combination of a project ID and a repo name.
- uid string
- A server-assigned, globally unique identifier.
- project_
repo_ Googleid Devtools Containeranalysis V1alpha1Project Repo Id - A combination of a project ID and a repo name.
- uid str
- A server-assigned, globally unique identifier.
- project
Repo Property MapId - A combination of a project ID and a repo name.
- uid String
- A server-assigned, globally unique identifier.
GoogleDevtoolsContaineranalysisV1alpha1RepoIdResponse, GoogleDevtoolsContaineranalysisV1alpha1RepoIdResponseArgs
- Project
Repo Pulumi.Id Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Project Repo Id Response - A combination of a project ID and a repo name.
- Uid string
- A server-assigned, globally unique identifier.
- Project
Repo GoogleId Devtools Containeranalysis V1alpha1Project Repo Id Response - A combination of a project ID and a repo name.
- Uid string
- A server-assigned, globally unique identifier.
- project
Repo GoogleId Devtools Containeranalysis V1alpha1Project Repo Id Response - A combination of a project ID and a repo name.
- uid String
- A server-assigned, globally unique identifier.
- project
Repo GoogleId Devtools Containeranalysis V1alpha1Project Repo Id Response - A combination of a project ID and a repo name.
- uid string
- A server-assigned, globally unique identifier.
- project_
repo_ Googleid Devtools Containeranalysis V1alpha1Project Repo Id Response - A combination of a project ID and a repo name.
- uid str
- A server-assigned, globally unique identifier.
- project
Repo Property MapId - A combination of a project ID and a repo name.
- uid String
- A server-assigned, globally unique identifier.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilder, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaBuilderArgs
- Id string
- URI indicating the builder’s identity.
- Id string
- URI indicating the builder’s identity.
- id String
- URI indicating the builder’s identity.
- id string
- URI indicating the builder’s identity.
- id str
- URI indicating the builder’s identity.
- id String
- URI indicating the builder’s identity.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompleteness, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessArgs
- Environment bool
- If true, the builder claims that invocation.environment is complete.
- Materials bool
- If true, the builder claims that materials is complete.
- Parameters bool
- If true, the builder claims that invocation.parameters is complete.
- Environment bool
- If true, the builder claims that invocation.environment is complete.
- Materials bool
- If true, the builder claims that materials is complete.
- Parameters bool
- If true, the builder claims that invocation.parameters is complete.
- environment Boolean
- If true, the builder claims that invocation.environment is complete.
- materials Boolean
- If true, the builder claims that materials is complete.
- parameters Boolean
- If true, the builder claims that invocation.parameters is complete.
- environment boolean
- If true, the builder claims that invocation.environment is complete.
- materials boolean
- If true, the builder claims that materials is complete.
- parameters boolean
- If true, the builder claims that invocation.parameters is complete.
- environment bool
- If true, the builder claims that invocation.environment is complete.
- materials bool
- If true, the builder claims that materials is complete.
- parameters bool
- If true, the builder claims that invocation.parameters is complete.
- environment Boolean
- If true, the builder claims that invocation.environment is complete.
- materials Boolean
- If true, the builder claims that materials is complete.
- parameters Boolean
- If true, the builder claims that invocation.parameters is complete.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessResponse, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaCompletenessResponseArgs
- Environment bool
- If true, the builder claims that invocation.environment is complete.
- Materials bool
- If true, the builder claims that materials is complete.
- Parameters bool
- If true, the builder claims that invocation.parameters is complete.
- Environment bool
- If true, the builder claims that invocation.environment is complete.
- Materials bool
- If true, the builder claims that materials is complete.
- Parameters bool
- If true, the builder claims that invocation.parameters is complete.
- environment Boolean
- If true, the builder claims that invocation.environment is complete.
- materials Boolean
- If true, the builder claims that materials is complete.
- parameters Boolean
- If true, the builder claims that invocation.parameters is complete.
- environment boolean
- If true, the builder claims that invocation.environment is complete.
- materials boolean
- If true, the builder claims that materials is complete.
- parameters boolean
- If true, the builder claims that invocation.parameters is complete.
- environment bool
- If true, the builder claims that invocation.environment is complete.
- materials bool
- If true, the builder claims that materials is complete.
- parameters bool
- If true, the builder claims that invocation.parameters is complete.
- environment Boolean
- If true, the builder claims that invocation.environment is complete.
- materials Boolean
- If true, the builder claims that materials is complete.
- parameters Boolean
- If true, the builder claims that invocation.parameters is complete.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSource, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceArgs
- Digest Dictionary<string, string>
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- Entry
Point string - String identifying the entry point into the build.
- Uri string
- URI indicating the identity of the source of the config.
- Digest map[string]string
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- Entry
Point string - String identifying the entry point into the build.
- Uri string
- URI indicating the identity of the source of the config.
- digest Map<String,String>
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry
Point String - String identifying the entry point into the build.
- uri String
- URI indicating the identity of the source of the config.
- digest {[key: string]: string}
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry
Point string - String identifying the entry point into the build.
- uri string
- URI indicating the identity of the source of the config.
- digest Mapping[str, str]
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry_
point str - String identifying the entry point into the build.
- uri str
- URI indicating the identity of the source of the config.
- digest Map<String>
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry
Point String - String identifying the entry point into the build.
- uri String
- URI indicating the identity of the source of the config.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceResponse, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaConfigSourceResponseArgs
- Digest Dictionary<string, string>
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- Entry
Point string - String identifying the entry point into the build.
- Uri string
- URI indicating the identity of the source of the config.
- Digest map[string]string
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- Entry
Point string - String identifying the entry point into the build.
- Uri string
- URI indicating the identity of the source of the config.
- digest Map<String,String>
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry
Point String - String identifying the entry point into the build.
- uri String
- URI indicating the identity of the source of the config.
- digest {[key: string]: string}
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry
Point string - String identifying the entry point into the build.
- uri string
- URI indicating the identity of the source of the config.
- digest Mapping[str, str]
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry_
point str - String identifying the entry point into the build.
- uri str
- URI indicating the identity of the source of the config.
- digest Map<String>
- Collection of cryptographic digests for the contents of the artifact specified by invocation.configSource.uri.
- entry
Point String - String identifying the entry point into the build.
- uri String
- URI indicating the identity of the source of the config.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocation, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationArgs
- Config
Source Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source - Describes where the config file that kicked off the build came from.
- Environment Dictionary<string, string>
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- Parameters Dictionary<string, string>
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- Config
Source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source - Describes where the config file that kicked off the build came from.
- Environment map[string]string
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- Parameters map[string]string
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config
Source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source - Describes where the config file that kicked off the build came from.
- environment Map<String,String>
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters Map<String,String>
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config
Source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source - Describes where the config file that kicked off the build came from.
- environment {[key: string]: string}
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters {[key: string]: string}
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config_
source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source - Describes where the config file that kicked off the build came from.
- environment Mapping[str, str]
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters Mapping[str, str]
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config
Source Property Map - Describes where the config file that kicked off the build came from.
- environment Map<String>
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters Map<String>
- Collection of all external inputs that influenced the build on top of invocation.configSource.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationResponse, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaInvocationResponseArgs
- Config
Source Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source Response - Describes where the config file that kicked off the build came from.
- Environment Dictionary<string, string>
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- Parameters Dictionary<string, string>
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- Config
Source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source Response - Describes where the config file that kicked off the build came from.
- Environment map[string]string
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- Parameters map[string]string
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config
Source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source Response - Describes where the config file that kicked off the build came from.
- environment Map<String,String>
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters Map<String,String>
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config
Source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source Response - Describes where the config file that kicked off the build came from.
- environment {[key: string]: string}
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters {[key: string]: string}
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config_
source GoogleDevtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Config Source Response - Describes where the config file that kicked off the build came from.
- environment Mapping[str, str]
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters Mapping[str, str]
- Collection of all external inputs that influenced the build on top of invocation.configSource.
- config
Source Property Map - Describes where the config file that kicked off the build came from.
- environment Map<String>
- Any other builder-controlled inputs necessary for correctly evaluating the build.
- parameters Map<String>
- Collection of all external inputs that influenced the build on top of invocation.configSource.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterial, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialArgs
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialResponse, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMaterialResponseArgs
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadata, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataArgs
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build
Started StringOn - The timestamp of when the build started.
- completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness - Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build
Finished stringOn - The timestamp of when the build completed.
- build
Invocation stringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build
Started stringOn - The timestamp of when the build started.
- completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness - Indicates that the builder claims certain fields in this message to be complete.
- reproducible boolean
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build_
finished_ stron - The timestamp of when the build completed.
- build_
invocation_ strid - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build_
started_ stron - The timestamp of when the build started.
- completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness - Indicates that the builder claims certain fields in this message to be complete.
- reproducible bool
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build
Started StringOn - The timestamp of when the build started.
- completeness Property Map
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataResponse, GoogleDevtoolsContaineranalysisV1alpha1SlsaProvenanceZeroTwoSlsaMetadataResponseArgs
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build
Started StringOn - The timestamp of when the build started.
- completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build
Finished stringOn - The timestamp of when the build completed.
- build
Invocation stringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build
Started stringOn - The timestamp of when the build started.
- completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible boolean
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build_
finished_ stron - The timestamp of when the build completed.
- build_
invocation_ strid - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build_
started_ stron - The timestamp of when the build started.
- completeness
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible bool
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies this particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis.
- build
Started StringOn - The timestamp of when the build started.
- completeness Property Map
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running invocation on materials will produce bit-for-bit identical output.
GoogleDevtoolsContaineranalysisV1alpha1SourceContext, GoogleDevtoolsContaineranalysisV1alpha1SourceContextArgs
- Cloud
Repo Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Cloud Repo Source Context - A SourceContext referring to a revision in a Google Cloud Source Repo.
- Gerrit
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Gerrit Source Context - A SourceContext referring to a Gerrit project.
- Git
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Git Source Context - A SourceContext referring to any third party Git repo (e.g., GitHub).
- Labels Dictionary<string, string>
- Labels with user defined metadata.
- Cloud
Repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context - A SourceContext referring to a revision in a Google Cloud Source Repo.
- Gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context - A SourceContext referring to a Gerrit project.
- Git
Google
Devtools Containeranalysis V1alpha1Git Source Context - A SourceContext referring to any third party Git repo (e.g., GitHub).
- Labels map[string]string
- Labels with user defined metadata.
- cloud
Repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context - A SourceContext referring to a Gerrit project.
- git
Google
Devtools Containeranalysis V1alpha1Git Source Context - A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels Map<String,String>
- Labels with user defined metadata.
- cloud
Repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context - A SourceContext referring to a Gerrit project.
- git
Google
Devtools Containeranalysis V1alpha1Git Source Context - A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels {[key: string]: string}
- Labels with user defined metadata.
- cloud_
repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context - A SourceContext referring to a Gerrit project.
- git
Google
Devtools Containeranalysis V1alpha1Git Source Context - A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels Mapping[str, str]
- Labels with user defined metadata.
- cloud
Repo Property Map - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit Property Map
- A SourceContext referring to a Gerrit project.
- git Property Map
- A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels Map<String>
- Labels with user defined metadata.
GoogleDevtoolsContaineranalysisV1alpha1SourceContextResponse, GoogleDevtoolsContaineranalysisV1alpha1SourceContextResponseArgs
- Cloud
Repo Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Cloud Repo Source Context Response - A SourceContext referring to a revision in a Google Cloud Source Repo.
- Gerrit
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Gerrit Source Context Response - A SourceContext referring to a Gerrit project.
- Git
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Git Source Context Response - A SourceContext referring to any third party Git repo (e.g., GitHub).
- Labels Dictionary<string, string>
- Labels with user defined metadata.
- Cloud
Repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context Response - A SourceContext referring to a revision in a Google Cloud Source Repo.
- Gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context Response - A SourceContext referring to a Gerrit project.
- Git
Google
Devtools Containeranalysis V1alpha1Git Source Context Response - A SourceContext referring to any third party Git repo (e.g., GitHub).
- Labels map[string]string
- Labels with user defined metadata.
- cloud
Repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context Response - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context Response - A SourceContext referring to a Gerrit project.
- git
Google
Devtools Containeranalysis V1alpha1Git Source Context Response - A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels Map<String,String>
- Labels with user defined metadata.
- cloud
Repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context Response - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context Response - A SourceContext referring to a Gerrit project.
- git
Google
Devtools Containeranalysis V1alpha1Git Source Context Response - A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels {[key: string]: string}
- Labels with user defined metadata.
- cloud_
repo GoogleDevtools Containeranalysis V1alpha1Cloud Repo Source Context Response - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit
Google
Devtools Containeranalysis V1alpha1Gerrit Source Context Response - A SourceContext referring to a Gerrit project.
- git
Google
Devtools Containeranalysis V1alpha1Git Source Context Response - A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels Mapping[str, str]
- Labels with user defined metadata.
- cloud
Repo Property Map - A SourceContext referring to a revision in a Google Cloud Source Repo.
- gerrit Property Map
- A SourceContext referring to a Gerrit project.
- git Property Map
- A SourceContext referring to any third party Git repo (e.g., GitHub).
- labels Map<String>
- Labels with user defined metadata.
Hash, HashArgs
- Type
Pulumi.
Google Native. Container Analysis. V1Alpha1. Hash Type - The type of hash that was performed.
- Value string
- The hash value.
- type "NONE" | "SHA256"
- The type of hash that was performed.
- value String
- The hash value.
HashResponse, HashResponseArgs
HashType, HashTypeArgs
- None
- NONENo hash requested.
- Sha256
- SHA256A sha256 hash.
- Hash
Type None - NONENo hash requested.
- Hash
Type Sha256 - SHA256A sha256 hash.
- None
- NONENo hash requested.
- Sha256
- SHA256A sha256 hash.
- None
- NONENo hash requested.
- Sha256
- SHA256A sha256 hash.
- NONE
- NONENo hash requested.
- SHA256
- SHA256A sha256 hash.
- "NONE"
- NONENo hash requested.
- "SHA256"
- SHA256A sha256 hash.
InTotoProvenance, InTotoProvenanceArgs
- Builder
Config Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Builder Config - required
- Materials List<string>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Metadata - Recipe
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Recipe - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- Builder
Config BuilderConfig - required
- Materials []string
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata Metadata
- Recipe Recipe
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder
Config BuilderConfig - required
- materials List<String>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Metadata
- recipe Recipe
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder
Config BuilderConfig - required
- materials string[]
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Metadata
- recipe Recipe
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder_
config BuilderConfig - required
- materials Sequence[str]
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Metadata
- recipe Recipe
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder
Config Property Map - required
- materials List<String>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Property Map
- recipe Property Map
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
InTotoProvenanceResponse, InTotoProvenanceResponseArgs
- Builder
Config Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Builder Config Response - required
- Materials List<string>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Metadata Response - Recipe
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Recipe Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- Builder
Config BuilderConfig Response - required
- Materials []string
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Metadata
Response - Recipe
Recipe
Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder
Config BuilderConfig Response - required
- materials List<String>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Metadata
Response - recipe
Recipe
Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder
Config BuilderConfig Response - required
- materials string[]
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Metadata
Response - recipe
Recipe
Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder_
config BuilderConfig Response - required
- materials Sequence[str]
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Metadata
Response - recipe
Recipe
Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
- builder
Config Property Map - required
- materials List<String>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Property Map
- recipe Property Map
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
InTotoSlsaProvenanceV1, InTotoSlsaProvenanceV1Args
- Predicate
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Provenance V1 - Predicate
Type string - Subject
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Subject> - Type string
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- Predicate
Slsa
Provenance V1 - Predicate
Type string - Subject []Subject
- Type string
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate
Slsa
Provenance V1 - predicate
Type String - subject List<Subject>
- type String
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate
Slsa
Provenance V1 - predicate
Type string - subject Subject[]
- type string
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate
Slsa
Provenance V1 - predicate_
type str - subject Sequence[Subject]
- type str
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate Property Map
- predicate
Type String - subject List<Property Map>
- type String
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
InTotoSlsaProvenanceV1Response, InTotoSlsaProvenanceV1ResponseArgs
- Predicate
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Provenance V1Response - Predicate
Type string - Subject
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Subject Response> - Type string
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- Predicate
Slsa
Provenance V1Response - Predicate
Type string - Subject
[]Subject
Response - Type string
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate
Slsa
Provenance V1Response - predicate
Type String - subject
List<Subject
Response> - type String
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate
Slsa
Provenance V1Response - predicate
Type string - subject
Subject
Response[] - type string
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate
Slsa
Provenance V1Response - predicate_
type str - subject
Sequence[Subject
Response] - type str
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
- predicate Property Map
- predicate
Type String - subject List<Property Map>
- type String
- InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
InTotoStatement, InTotoStatementArgs
- Predicate
Type string - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- Provenance
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Provenance - Generic Grafeas provenance.
- Slsa
Provenance Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Provenance - SLSA 0.1 provenance.
- Slsa
Provenance Pulumi.Zero Two Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Provenance Zero Two - SLSA 0.2 provenance.
- Subject
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Subject> - subject is the subjects of the intoto statement
- Type string
- Always "https://in-toto.io/Statement/v0.1".
- Predicate
Type string - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- Provenance
In
Toto Provenance - Generic Grafeas provenance.
- Slsa
Provenance SlsaProvenance - SLSA 0.1 provenance.
- Slsa
Provenance SlsaZero Two Provenance Zero Two - SLSA 0.2 provenance.
- Subject []Subject
- subject is the subjects of the intoto statement
- Type string
- Always "https://in-toto.io/Statement/v0.1".
- predicate
Type String - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance
In
Toto Provenance - Generic Grafeas provenance.
- slsa
Provenance SlsaProvenance - SLSA 0.1 provenance.
- slsa
Provenance SlsaZero Two Provenance Zero Two - SLSA 0.2 provenance.
- subject List<Subject>
- subject is the subjects of the intoto statement
- type String
- Always "https://in-toto.io/Statement/v0.1".
- predicate
Type string - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance
In
Toto Provenance - Generic Grafeas provenance.
- slsa
Provenance SlsaProvenance - SLSA 0.1 provenance.
- slsa
Provenance SlsaZero Two Provenance Zero Two - SLSA 0.2 provenance.
- subject Subject[]
- subject is the subjects of the intoto statement
- type string
- Always "https://in-toto.io/Statement/v0.1".
- predicate_
type str - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance
In
Toto Provenance - Generic Grafeas provenance.
- slsa_
provenance SlsaProvenance - SLSA 0.1 provenance.
- slsa_
provenance_ Slsazero_ two Provenance Zero Two - SLSA 0.2 provenance.
- subject Sequence[Subject]
- subject is the subjects of the intoto statement
- type str
- Always "https://in-toto.io/Statement/v0.1".
- predicate
Type String - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance Property Map
- Generic Grafeas provenance.
- slsa
Provenance Property Map - SLSA 0.1 provenance.
- slsa
Provenance Property MapZero Two - SLSA 0.2 provenance.
- subject List<Property Map>
- subject is the subjects of the intoto statement
- type String
- Always "https://in-toto.io/Statement/v0.1".
InTotoStatementResponse, InTotoStatementResponseArgs
- Predicate
Type string - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- Provenance
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. In Toto Provenance Response - Generic Grafeas provenance.
- Slsa
Provenance Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Provenance Response - SLSA 0.1 provenance.
- Slsa
Provenance Pulumi.Zero Two Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Provenance Zero Two Response - SLSA 0.2 provenance.
- Subject
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Subject Response> - subject is the subjects of the intoto statement
- Type string
- Always "https://in-toto.io/Statement/v0.1".
- Predicate
Type string - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- Provenance
In
Toto Provenance Response - Generic Grafeas provenance.
- Slsa
Provenance SlsaProvenance Response - SLSA 0.1 provenance.
- Slsa
Provenance SlsaZero Two Provenance Zero Two Response - SLSA 0.2 provenance.
- Subject
[]Subject
Response - subject is the subjects of the intoto statement
- Type string
- Always "https://in-toto.io/Statement/v0.1".
- predicate
Type String - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance
In
Toto Provenance Response - Generic Grafeas provenance.
- slsa
Provenance SlsaProvenance Response - SLSA 0.1 provenance.
- slsa
Provenance SlsaZero Two Provenance Zero Two Response - SLSA 0.2 provenance.
- subject
List<Subject
Response> - subject is the subjects of the intoto statement
- type String
- Always "https://in-toto.io/Statement/v0.1".
- predicate
Type string - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance
In
Toto Provenance Response - Generic Grafeas provenance.
- slsa
Provenance SlsaProvenance Response - SLSA 0.1 provenance.
- slsa
Provenance SlsaZero Two Provenance Zero Two Response - SLSA 0.2 provenance.
- subject
Subject
Response[] - subject is the subjects of the intoto statement
- type string
- Always "https://in-toto.io/Statement/v0.1".
- predicate_
type str - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance
In
Toto Provenance Response - Generic Grafeas provenance.
- slsa_
provenance SlsaProvenance Response - SLSA 0.1 provenance.
- slsa_
provenance_ Slsazero_ two Provenance Zero Two Response - SLSA 0.2 provenance.
- subject
Sequence[Subject
Response] - subject is the subjects of the intoto statement
- type str
- Always "https://in-toto.io/Statement/v0.1".
- predicate
Type String - "https://slsa.dev/provenance/v0.1" for SlsaProvenance.
- provenance Property Map
- Generic Grafeas provenance.
- slsa
Provenance Property Map - SLSA 0.1 provenance.
- slsa
Provenance Property MapZero Two - SLSA 0.2 provenance.
- subject List<Property Map>
- subject is the subjects of the intoto statement
- type String
- Always "https://in-toto.io/Statement/v0.1".
Installation, InstallationArgs
- License
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. License - Licenses that have been declared by the authors of the package.
- Location
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Location> - All of the places within the filesystem versions of this package have been found.
- License License
- Licenses that have been declared by the authors of the package.
- Location []Location
- All of the places within the filesystem versions of this package have been found.
- license License
- Licenses that have been declared by the authors of the package.
- location List<Location>
- All of the places within the filesystem versions of this package have been found.
- license License
- Licenses that have been declared by the authors of the package.
- location Location[]
- All of the places within the filesystem versions of this package have been found.
- license License
- Licenses that have been declared by the authors of the package.
- location Sequence[Location]
- All of the places within the filesystem versions of this package have been found.
- license Property Map
- Licenses that have been declared by the authors of the package.
- location List<Property Map>
- All of the places within the filesystem versions of this package have been found.
InstallationResponse, InstallationResponseArgs
- Architecture string
- The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
- Cpe
Uri string - The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
- License
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. License Response - Licenses that have been declared by the authors of the package.
- Location
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Location Response> - All of the places within the filesystem versions of this package have been found.
- Name string
- The name of the installed package.
- Package
Type string - The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
- Version
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Version Response - The version of the package.
- Architecture string
- The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
- Cpe
Uri string - The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
- License
License
Response - Licenses that have been declared by the authors of the package.
- Location
[]Location
Response - All of the places within the filesystem versions of this package have been found.
- Name string
- The name of the installed package.
- Package
Type string - The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
- Version
Version
Response - The version of the package.
- architecture String
- The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
- cpe
Uri String - The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
- license
License
Response - Licenses that have been declared by the authors of the package.
- location
List<Location
Response> - All of the places within the filesystem versions of this package have been found.
- name String
- The name of the installed package.
- package
Type String - The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
- version
Version
Response - The version of the package.
- architecture string
- The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
- cpe
Uri string - The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
- license
License
Response - Licenses that have been declared by the authors of the package.
- location
Location
Response[] - All of the places within the filesystem versions of this package have been found.
- name string
- The name of the installed package.
- package
Type string - The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
- version
Version
Response - The version of the package.
- architecture str
- The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
- cpe_
uri str - The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
- license
License
Response - Licenses that have been declared by the authors of the package.
- location
Sequence[Location
Response] - All of the places within the filesystem versions of this package have been found.
- name str
- The name of the installed package.
- package_
type str - The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
- version
Version
Response - The version of the package.
- architecture String
- The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
- cpe
Uri String - The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
- license Property Map
- Licenses that have been declared by the authors of the package.
- location List<Property Map>
- All of the places within the filesystem versions of this package have been found.
- name String
- The name of the installed package.
- package
Type String - The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
- version Property Map
- The version of the package.
Justification, JustificationArgs
- Details string
- Additional details on why this justification was chosen.
- Justification
Type Pulumi.Google Native. Container Analysis. V1Alpha1. Justification Justification Type - The justification type for this vulnerability.
- Details string
- Additional details on why this justification was chosen.
- Justification
Type JustificationJustification Type - The justification type for this vulnerability.
- details String
- Additional details on why this justification was chosen.
- justification
Type JustificationJustification Type - The justification type for this vulnerability.
- details string
- Additional details on why this justification was chosen.
- justification
Type JustificationJustification Type - The justification type for this vulnerability.
- details str
- Additional details on why this justification was chosen.
- justification_
type JustificationJustification Type - The justification type for this vulnerability.
- details String
- Additional details on why this justification was chosen.
- justification
Type "JUSTIFICATION_TYPE_UNSPECIFIED" | "COMPONENT_NOT_PRESENT" | "VULNERABLE_CODE_NOT_PRESENT" | "VULNERABLE_CODE_NOT_IN_EXECUTE_PATH" | "VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY" | "INLINE_MITIGATIONS_ALREADY_EXIST" - The justification type for this vulnerability.
JustificationJustificationType, JustificationJustificationTypeArgs
- Justification
Type Unspecified - JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
- Component
Not Present - COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
- Vulnerable
Code Not Present - VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
- Vulnerable
Code Not In Execute Path - VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
- Vulnerable
Code Cannot Be Controlled By Adversary - VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
- Inline
Mitigations Already Exist - INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
- Justification
Justification Type Justification Type Unspecified - JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
- Justification
Justification Type Component Not Present - COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
- Justification
Justification Type Vulnerable Code Not Present - VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
- Justification
Justification Type Vulnerable Code Not In Execute Path - VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
- Justification
Justification Type Vulnerable Code Cannot Be Controlled By Adversary - VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
- Justification
Justification Type Inline Mitigations Already Exist - INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
- Justification
Type Unspecified - JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
- Component
Not Present - COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
- Vulnerable
Code Not Present - VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
- Vulnerable
Code Not In Execute Path - VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
- Vulnerable
Code Cannot Be Controlled By Adversary - VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
- Inline
Mitigations Already Exist - INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
- Justification
Type Unspecified - JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
- Component
Not Present - COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
- Vulnerable
Code Not Present - VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
- Vulnerable
Code Not In Execute Path - VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
- Vulnerable
Code Cannot Be Controlled By Adversary - VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
- Inline
Mitigations Already Exist - INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
- JUSTIFICATION_TYPE_UNSPECIFIED
- JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
- COMPONENT_NOT_PRESENT
- COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
- VULNERABLE_CODE_NOT_PRESENT
- VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
- VULNERABLE_CODE_NOT_IN_EXECUTE_PATH
- VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
- VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY
- VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
- INLINE_MITIGATIONS_ALREADY_EXIST
- INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
- "JUSTIFICATION_TYPE_UNSPECIFIED"
- JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
- "COMPONENT_NOT_PRESENT"
- COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
- "VULNERABLE_CODE_NOT_PRESENT"
- VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
- "VULNERABLE_CODE_NOT_IN_EXECUTE_PATH"
- VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
- "VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY"
- VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
- "INLINE_MITIGATIONS_ALREADY_EXIST"
- INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
JustificationResponse, JustificationResponseArgs
- Details string
- Additional details on why this justification was chosen.
- Justification
Type string - The justification type for this vulnerability.
- Details string
- Additional details on why this justification was chosen.
- Justification
Type string - The justification type for this vulnerability.
- details String
- Additional details on why this justification was chosen.
- justification
Type String - The justification type for this vulnerability.
- details string
- Additional details on why this justification was chosen.
- justification
Type string - The justification type for this vulnerability.
- details str
- Additional details on why this justification was chosen.
- justification_
type str - The justification type for this vulnerability.
- details String
- Additional details on why this justification was chosen.
- justification
Type String - The justification type for this vulnerability.
Layer, LayerArgs
- Arguments string
- The recovered arguments to the Dockerfile directive.
- Directive
Pulumi.
Google Native. Container Analysis. V1Alpha1. Layer Directive - The recovered Dockerfile directive used to construct this layer.
- Arguments string
- The recovered arguments to the Dockerfile directive.
- Directive
Layer
Directive - The recovered Dockerfile directive used to construct this layer.
- arguments String
- The recovered arguments to the Dockerfile directive.
- directive
Layer
Directive - The recovered Dockerfile directive used to construct this layer.
- arguments string
- The recovered arguments to the Dockerfile directive.
- directive
Layer
Directive - The recovered Dockerfile directive used to construct this layer.
- arguments str
- The recovered arguments to the Dockerfile directive.
- directive
Layer
Directive - The recovered Dockerfile directive used to construct this layer.
- arguments String
- The recovered arguments to the Dockerfile directive.
- directive "DIRECTIVE_UNSPECIFIED" | "MAINTAINER" | "RUN" | "CMD" | "LABEL" | "EXPOSE" | "ENV" | "ADD" | "COPY" | "ENTRYPOINT" | "VOLUME" | "USER" | "WORKDIR" | "ARG" | "ONBUILD" | "STOPSIGNAL" | "HEALTHCHECK" | "SHELL"
- The recovered Dockerfile directive used to construct this layer.
LayerDirective, LayerDirectiveArgs
- Directive
Unspecified - DIRECTIVE_UNSPECIFIEDDefault value for unsupported/missing directive
- Maintainer
- MAINTAINERhttps://docs.docker.com/engine/reference/builder/
- Run
- RUNhttps://docs.docker.com/engine/reference/builder/
- Cmd
- CMDhttps://docs.docker.com/engine/reference/builder/
- Label
- LABELhttps://docs.docker.com/engine/reference/builder/
- Expose
- EXPOSEhttps://docs.docker.com/engine/reference/builder/
- Env
- ENVhttps://docs.docker.com/engine/reference/builder/
- Add
- ADDhttps://docs.docker.com/engine/reference/builder/
- Copy
- COPYhttps://docs.docker.com/reference/builder/#copy
- Entrypoint
- ENTRYPOINThttps://docs.docker.com/engine/reference/builder/
- Volume
- VOLUMEhttps://docs.docker.com/engine/reference/builder/
- User
- USERhttps://docs.docker.com/engine/reference/builder/
- Workdir
- WORKDIRhttps://docs.docker.com/engine/reference/builder/
- Arg
- ARGhttps://docs.docker.com/engine/reference/builder/
- Onbuild
- ONBUILDhttps://docs.docker.com/engine/reference/builder/
- Stopsignal
- STOPSIGNALhttps://docs.docker.com/engine/reference/builder/
- Healthcheck
- HEALTHCHECKhttps://docs.docker.com/engine/reference/builder/
- Shell
- SHELLhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Directive Unspecified - DIRECTIVE_UNSPECIFIEDDefault value for unsupported/missing directive
- Layer
Directive Maintainer - MAINTAINERhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Run - RUNhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Cmd - CMDhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Label - LABELhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Expose - EXPOSEhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Env - ENVhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Add - ADDhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Copy - COPYhttps://docs.docker.com/reference/builder/#copy
- Layer
Directive Entrypoint - ENTRYPOINThttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Volume - VOLUMEhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive User - USERhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Workdir - WORKDIRhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Arg - ARGhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Onbuild - ONBUILDhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Stopsignal - STOPSIGNALhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Healthcheck - HEALTHCHECKhttps://docs.docker.com/engine/reference/builder/
- Layer
Directive Shell - SHELLhttps://docs.docker.com/engine/reference/builder/
- Directive
Unspecified - DIRECTIVE_UNSPECIFIEDDefault value for unsupported/missing directive
- Maintainer
- MAINTAINERhttps://docs.docker.com/engine/reference/builder/
- Run
- RUNhttps://docs.docker.com/engine/reference/builder/
- Cmd
- CMDhttps://docs.docker.com/engine/reference/builder/
- Label
- LABELhttps://docs.docker.com/engine/reference/builder/
- Expose
- EXPOSEhttps://docs.docker.com/engine/reference/builder/
- Env
- ENVhttps://docs.docker.com/engine/reference/builder/
- Add
- ADDhttps://docs.docker.com/engine/reference/builder/
- Copy
- COPYhttps://docs.docker.com/reference/builder/#copy
- Entrypoint
- ENTRYPOINThttps://docs.docker.com/engine/reference/builder/
- Volume
- VOLUMEhttps://docs.docker.com/engine/reference/builder/
- User
- USERhttps://docs.docker.com/engine/reference/builder/
- Workdir
- WORKDIRhttps://docs.docker.com/engine/reference/builder/
- Arg
- ARGhttps://docs.docker.com/engine/reference/builder/
- Onbuild
- ONBUILDhttps://docs.docker.com/engine/reference/builder/
- Stopsignal
- STOPSIGNALhttps://docs.docker.com/engine/reference/builder/
- Healthcheck
- HEALTHCHECKhttps://docs.docker.com/engine/reference/builder/
- Shell
- SHELLhttps://docs.docker.com/engine/reference/builder/
- Directive
Unspecified - DIRECTIVE_UNSPECIFIEDDefault value for unsupported/missing directive
- Maintainer
- MAINTAINERhttps://docs.docker.com/engine/reference/builder/
- Run
- RUNhttps://docs.docker.com/engine/reference/builder/
- Cmd
- CMDhttps://docs.docker.com/engine/reference/builder/
- Label
- LABELhttps://docs.docker.com/engine/reference/builder/
- Expose
- EXPOSEhttps://docs.docker.com/engine/reference/builder/
- Env
- ENVhttps://docs.docker.com/engine/reference/builder/
- Add
- ADDhttps://docs.docker.com/engine/reference/builder/
- Copy
- COPYhttps://docs.docker.com/reference/builder/#copy
- Entrypoint
- ENTRYPOINThttps://docs.docker.com/engine/reference/builder/
- Volume
- VOLUMEhttps://docs.docker.com/engine/reference/builder/
- User
- USERhttps://docs.docker.com/engine/reference/builder/
- Workdir
- WORKDIRhttps://docs.docker.com/engine/reference/builder/
- Arg
- ARGhttps://docs.docker.com/engine/reference/builder/
- Onbuild
- ONBUILDhttps://docs.docker.com/engine/reference/builder/
- Stopsignal
- STOPSIGNALhttps://docs.docker.com/engine/reference/builder/
- Healthcheck
- HEALTHCHECKhttps://docs.docker.com/engine/reference/builder/
- Shell
- SHELLhttps://docs.docker.com/engine/reference/builder/
- DIRECTIVE_UNSPECIFIED
- DIRECTIVE_UNSPECIFIEDDefault value for unsupported/missing directive
- MAINTAINER
- MAINTAINERhttps://docs.docker.com/engine/reference/builder/
- RUN
- RUNhttps://docs.docker.com/engine/reference/builder/
- CMD
- CMDhttps://docs.docker.com/engine/reference/builder/
- LABEL
- LABELhttps://docs.docker.com/engine/reference/builder/
- EXPOSE
- EXPOSEhttps://docs.docker.com/engine/reference/builder/
- ENV
- ENVhttps://docs.docker.com/engine/reference/builder/
- ADD
- ADDhttps://docs.docker.com/engine/reference/builder/
- COPY
- COPYhttps://docs.docker.com/reference/builder/#copy
- ENTRYPOINT
- ENTRYPOINThttps://docs.docker.com/engine/reference/builder/
- VOLUME
- VOLUMEhttps://docs.docker.com/engine/reference/builder/
- USER
- USERhttps://docs.docker.com/engine/reference/builder/
- WORKDIR
- WORKDIRhttps://docs.docker.com/engine/reference/builder/
- ARG
- ARGhttps://docs.docker.com/engine/reference/builder/
- ONBUILD
- ONBUILDhttps://docs.docker.com/engine/reference/builder/
- STOPSIGNAL
- STOPSIGNALhttps://docs.docker.com/engine/reference/builder/
- HEALTHCHECK
- HEALTHCHECKhttps://docs.docker.com/engine/reference/builder/
- SHELL
- SHELLhttps://docs.docker.com/engine/reference/builder/
- "DIRECTIVE_UNSPECIFIED"
- DIRECTIVE_UNSPECIFIEDDefault value for unsupported/missing directive
- "MAINTAINER"
- MAINTAINERhttps://docs.docker.com/engine/reference/builder/
- "RUN"
- RUNhttps://docs.docker.com/engine/reference/builder/
- "CMD"
- CMDhttps://docs.docker.com/engine/reference/builder/
- "LABEL"
- LABELhttps://docs.docker.com/engine/reference/builder/
- "EXPOSE"
- EXPOSEhttps://docs.docker.com/engine/reference/builder/
- "ENV"
- ENVhttps://docs.docker.com/engine/reference/builder/
- "ADD"
- ADDhttps://docs.docker.com/engine/reference/builder/
- "COPY"
- COPYhttps://docs.docker.com/reference/builder/#copy
- "ENTRYPOINT"
- ENTRYPOINThttps://docs.docker.com/engine/reference/builder/
- "VOLUME"
- VOLUMEhttps://docs.docker.com/engine/reference/builder/
- "USER"
- USERhttps://docs.docker.com/engine/reference/builder/
- "WORKDIR"
- WORKDIRhttps://docs.docker.com/engine/reference/builder/
- "ARG"
- ARGhttps://docs.docker.com/engine/reference/builder/
- "ONBUILD"
- ONBUILDhttps://docs.docker.com/engine/reference/builder/
- "STOPSIGNAL"
- STOPSIGNALhttps://docs.docker.com/engine/reference/builder/
- "HEALTHCHECK"
- HEALTHCHECKhttps://docs.docker.com/engine/reference/builder/
- "SHELL"
- SHELLhttps://docs.docker.com/engine/reference/builder/
LayerResponse, LayerResponseArgs
License, LicenseArgs
- Comments string
- Comments
- Expression string
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- Comments string
- Comments
- Expression string
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments String
- Comments
- expression String
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments string
- Comments
- expression string
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments str
- Comments
- expression str
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments String
- Comments
- expression String
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
LicenseResponse, LicenseResponseArgs
- Comments string
- Comments
- Expression string
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- Comments string
- Comments
- Expression string
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments String
- Comments
- expression String
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments string
- Comments
- expression string
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments str
- Comments
- expression str
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
- comments String
- Comments
- expression String
- Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
Location, LocationArgs
- Cpe
Uri string - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- Path string
- The path from which we gathered that this package/version is installed.
- Version
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Version - Deprecated. The version installed at this location.
- Cpe
Uri string - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- Path string
- The path from which we gathered that this package/version is installed.
- Version Version
- Deprecated. The version installed at this location.
- cpe
Uri String - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path String
- The path from which we gathered that this package/version is installed.
- version Version
- Deprecated. The version installed at this location.
- cpe
Uri string - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path string
- The path from which we gathered that this package/version is installed.
- version Version
- Deprecated. The version installed at this location.
- cpe_
uri str - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path str
- The path from which we gathered that this package/version is installed.
- version Version
- Deprecated. The version installed at this location.
- cpe
Uri String - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path String
- The path from which we gathered that this package/version is installed.
- version Property Map
- Deprecated. The version installed at this location.
LocationResponse, LocationResponseArgs
- Cpe
Uri string - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- Path string
- The path from which we gathered that this package/version is installed.
- Version
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Version Response - Deprecated. The version installed at this location.
- Cpe
Uri string - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- Path string
- The path from which we gathered that this package/version is installed.
- Version
Version
Response - Deprecated. The version installed at this location.
- cpe
Uri String - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path String
- The path from which we gathered that this package/version is installed.
- version
Version
Response - Deprecated. The version installed at this location.
- cpe
Uri string - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path string
- The path from which we gathered that this package/version is installed.
- version
Version
Response - Deprecated. The version installed at this location.
- cpe_
uri str - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path str
- The path from which we gathered that this package/version is installed.
- version
Version
Response - Deprecated. The version installed at this location.
- cpe
Uri String - Deprecated. The cpe_uri in cpe format denoting the package manager version distributing a package.
- path String
- The path from which we gathered that this package/version is installed.
- version Property Map
- Deprecated. The version installed at this location.
Material, MaterialArgs
MaterialResponse, MaterialResponseArgs
Metadata, MetadataArgs
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Completeness - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness Completeness
- Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness Completeness
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished stringOn - The timestamp of when the build completed.
- build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started stringOn - The timestamp of when the build started.
- completeness Completeness
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build_
finished_ stron - The timestamp of when the build completed.
- build_
invocation_ strid - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build_
started_ stron - The timestamp of when the build started.
- completeness Completeness
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness Property Map
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
MetadataResponse, MetadataResponseArgs
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Completeness
Response - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness
Completeness
Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished stringOn - The timestamp of when the build completed.
- build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started stringOn - The timestamp of when the build started.
- completeness
Completeness
Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build_
finished_ stron - The timestamp of when the build completed.
- build_
invocation_ strid - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build_
started_ stron - The timestamp of when the build started.
- completeness
Completeness
Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness Property Map
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
NonCompliantFile, NonCompliantFileArgs
- Display
Command string - Command to display the non-compliant files.
- Path string
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - Reason string
- Explains why a file is non compliant for a CIS check.
- Display
Command string - Command to display the non-compliant files.
- Path string
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - Reason string
- Explains why a file is non compliant for a CIS check.
- display
Command String - Command to display the non-compliant files.
- path String
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason String
- Explains why a file is non compliant for a CIS check.
- display
Command string - Command to display the non-compliant files.
- path string
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason string
- Explains why a file is non compliant for a CIS check.
- display_
command str - Command to display the non-compliant files.
- path str
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason str
- Explains why a file is non compliant for a CIS check.
- display
Command String - Command to display the non-compliant files.
- path String
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason String
- Explains why a file is non compliant for a CIS check.
NonCompliantFileResponse, NonCompliantFileResponseArgs
- Display
Command string - Command to display the non-compliant files.
- Path string
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - Reason string
- Explains why a file is non compliant for a CIS check.
- Display
Command string - Command to display the non-compliant files.
- Path string
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - Reason string
- Explains why a file is non compliant for a CIS check.
- display
Command String - Command to display the non-compliant files.
- path String
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason String
- Explains why a file is non compliant for a CIS check.
- display
Command string - Command to display the non-compliant files.
- path string
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason string
- Explains why a file is non compliant for a CIS check.
- display_
command str - Command to display the non-compliant files.
- path str
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason str
- Explains why a file is non compliant for a CIS check.
- display
Command String - Command to display the non-compliant files.
- path String
- display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'. Empty if
display_commandis set. - reason String
- Explains why a file is non compliant for a CIS check.
OperationResponse, OperationResponseArgs
- Done bool
- If the value is
false, it means the operation is still in progress. Iftrue, the operation is completed, and eithererrororresponseis available. - Error
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Status Response - The error result of the operation in case of failure or cancellation.
- Metadata Dictionary<string, string>
- Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
- Name string
- The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the
nameshould be a resource name ending withoperations/{unique_id}. - Response Dictionary<string, string>
- The normal, successful response of the operation. If the original method returns no data on success, such as
Delete, the response isgoogle.protobuf.Empty. If the original method is standardGet/Create/Update, the response should be the resource. For other methods, the response should have the typeXxxResponse, whereXxxis the original method name. For example, if the original method name isTakeSnapshot(), the inferred response type isTakeSnapshotResponse.
- Done bool
- If the value is
false, it means the operation is still in progress. Iftrue, the operation is completed, and eithererrororresponseis available. - Error
Status
Response - The error result of the operation in case of failure or cancellation.
- Metadata map[string]string
- Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
- Name string
- The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the
nameshould be a resource name ending withoperations/{unique_id}. - Response map[string]string
- The normal, successful response of the operation. If the original method returns no data on success, such as
Delete, the response isgoogle.protobuf.Empty. If the original method is standardGet/Create/Update, the response should be the resource. For other methods, the response should have the typeXxxResponse, whereXxxis the original method name. For example, if the original method name isTakeSnapshot(), the inferred response type isTakeSnapshotResponse.
- done Boolean
- If the value is
false, it means the operation is still in progress. Iftrue, the operation is completed, and eithererrororresponseis available. - error
Status
Response - The error result of the operation in case of failure or cancellation.
- metadata Map<String,String>
- Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
- name String
- The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the
nameshould be a resource name ending withoperations/{unique_id}. - response Map<String,String>
- The normal, successful response of the operation. If the original method returns no data on success, such as
Delete, the response isgoogle.protobuf.Empty. If the original method is standardGet/Create/Update, the response should be the resource. For other methods, the response should have the typeXxxResponse, whereXxxis the original method name. For example, if the original method name isTakeSnapshot(), the inferred response type isTakeSnapshotResponse.
- done boolean
- If the value is
false, it means the operation is still in progress. Iftrue, the operation is completed, and eithererrororresponseis available. - error
Status
Response - The error result of the operation in case of failure or cancellation.
- metadata {[key: string]: string}
- Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
- name string
- The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the
nameshould be a resource name ending withoperations/{unique_id}. - response {[key: string]: string}
- The normal, successful response of the operation. If the original method returns no data on success, such as
Delete, the response isgoogle.protobuf.Empty. If the original method is standardGet/Create/Update, the response should be the resource. For other methods, the response should have the typeXxxResponse, whereXxxis the original method name. For example, if the original method name isTakeSnapshot(), the inferred response type isTakeSnapshotResponse.
- done bool
- If the value is
false, it means the operation is still in progress. Iftrue, the operation is completed, and eithererrororresponseis available. - error
Status
Response - The error result of the operation in case of failure or cancellation.
- metadata Mapping[str, str]
- Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
- name str
- The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the
nameshould be a resource name ending withoperations/{unique_id}. - response Mapping[str, str]
- The normal, successful response of the operation. If the original method returns no data on success, such as
Delete, the response isgoogle.protobuf.Empty. If the original method is standardGet/Create/Update, the response should be the resource. For other methods, the response should have the typeXxxResponse, whereXxxis the original method name. For example, if the original method name isTakeSnapshot(), the inferred response type isTakeSnapshotResponse.
- done Boolean
- If the value is
false, it means the operation is still in progress. Iftrue, the operation is completed, and eithererrororresponseis available. - error Property Map
- The error result of the operation in case of failure or cancellation.
- metadata Map<String>
- Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
- name String
- The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the
nameshould be a resource name ending withoperations/{unique_id}. - response Map<String>
- The normal, successful response of the operation. If the original method returns no data on success, such as
Delete, the response isgoogle.protobuf.Empty. If the original method is standardGet/Create/Update, the response should be the resource. For other methods, the response should have the typeXxxResponse, whereXxxis the original method name. For example, if the original method name isTakeSnapshot(), the inferred response type isTakeSnapshotResponse.
PackageInfoOccurrence, PackageInfoOccurrenceArgs
- Comment string
- A place for the SPDX file creator to record any general comments about the package being described
- Filename string
- Provide the actual file name of the package, or path of the directory being treated as a package
- Id string
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- License
Concluded Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. License - package or alternative values, if the governing license cannot be determined
- Source
Info string - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- Comment string
- A place for the SPDX file creator to record any general comments about the package being described
- Filename string
- Provide the actual file name of the package, or path of the directory being treated as a package
- Id string
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- License
Concluded License - package or alternative values, if the governing license cannot be determined
- Source
Info string - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- comment String
- A place for the SPDX file creator to record any general comments about the package being described
- filename String
- Provide the actual file name of the package, or path of the directory being treated as a package
- id String
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license
Concluded License - package or alternative values, if the governing license cannot be determined
- source
Info String - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- comment string
- A place for the SPDX file creator to record any general comments about the package being described
- filename string
- Provide the actual file name of the package, or path of the directory being treated as a package
- id string
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license
Concluded License - package or alternative values, if the governing license cannot be determined
- source
Info string - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- comment str
- A place for the SPDX file creator to record any general comments about the package being described
- filename str
- Provide the actual file name of the package, or path of the directory being treated as a package
- id str
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license_
concluded License - package or alternative values, if the governing license cannot be determined
- source_
info str - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- comment String
- A place for the SPDX file creator to record any general comments about the package being described
- filename String
- Provide the actual file name of the package, or path of the directory being treated as a package
- id String
- Uniquely identify any element in an SPDX document which may be referenced by other elements
- license
Concluded Property Map - package or alternative values, if the governing license cannot be determined
- source
Info String - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
PackageInfoOccurrenceResponse, PackageInfoOccurrenceResponseArgs
- Comment string
- A place for the SPDX file creator to record any general comments about the package being described
- Filename string
- Provide the actual file name of the package, or path of the directory being treated as a package
- Home
Page string - Provide a place for the SPDX file creator to record a web site that serves as the package's home page
- License
Concluded Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. License Response - package or alternative values, if the governing license cannot be determined
- Package
Type string - The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
- Source
Info string - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- Summary
Description string - A short description of the package
- Title string
- Identify the full name of the package as given by the Package Originator
- Version string
- Identify the version of the package
- Comment string
- A place for the SPDX file creator to record any general comments about the package being described
- Filename string
- Provide the actual file name of the package, or path of the directory being treated as a package
- Home
Page string - Provide a place for the SPDX file creator to record a web site that serves as the package's home page
- License
Concluded LicenseResponse - package or alternative values, if the governing license cannot be determined
- Package
Type string - The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
- Source
Info string - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- Summary
Description string - A short description of the package
- Title string
- Identify the full name of the package as given by the Package Originator
- Version string
- Identify the version of the package
- comment String
- A place for the SPDX file creator to record any general comments about the package being described
- filename String
- Provide the actual file name of the package, or path of the directory being treated as a package
- home
Page String - Provide a place for the SPDX file creator to record a web site that serves as the package's home page
- license
Concluded LicenseResponse - package or alternative values, if the governing license cannot be determined
- package
Type String - The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
- source
Info String - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- summary
Description String - A short description of the package
- title String
- Identify the full name of the package as given by the Package Originator
- version String
- Identify the version of the package
- comment string
- A place for the SPDX file creator to record any general comments about the package being described
- filename string
- Provide the actual file name of the package, or path of the directory being treated as a package
- home
Page string - Provide a place for the SPDX file creator to record a web site that serves as the package's home page
- license
Concluded LicenseResponse - package or alternative values, if the governing license cannot be determined
- package
Type string - The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
- source
Info string - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- summary
Description string - A short description of the package
- title string
- Identify the full name of the package as given by the Package Originator
- version string
- Identify the version of the package
- comment str
- A place for the SPDX file creator to record any general comments about the package being described
- filename str
- Provide the actual file name of the package, or path of the directory being treated as a package
- home_
page str - Provide a place for the SPDX file creator to record a web site that serves as the package's home page
- license_
concluded LicenseResponse - package or alternative values, if the governing license cannot be determined
- package_
type str - The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
- source_
info str - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- summary_
description str - A short description of the package
- title str
- Identify the full name of the package as given by the Package Originator
- version str
- Identify the version of the package
- comment String
- A place for the SPDX file creator to record any general comments about the package being described
- filename String
- Provide the actual file name of the package, or path of the directory being treated as a package
- home
Page String - Provide a place for the SPDX file creator to record a web site that serves as the package's home page
- license
Concluded Property Map - package or alternative values, if the governing license cannot be determined
- package
Type String - The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
- source
Info String - Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
- summary
Description String - A short description of the package
- title String
- Identify the full name of the package as given by the Package Originator
- version String
- Identify the version of the package
PackageIssue, PackageIssueArgs
- Affected
Location Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vulnerability Location - The location of the vulnerability.
- Fixed
Location Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vulnerability Location - The location of the available fix for vulnerability.
- Package
Type string - The type of package (e.g. OS, MAVEN, GO).
- Severity
Name string
- Affected
Location VulnerabilityLocation - The location of the vulnerability.
- Fixed
Location VulnerabilityLocation - The location of the available fix for vulnerability.
- Package
Type string - The type of package (e.g. OS, MAVEN, GO).
- Severity
Name string
- affected
Location VulnerabilityLocation - The location of the vulnerability.
- fixed
Location VulnerabilityLocation - The location of the available fix for vulnerability.
- package
Type String - The type of package (e.g. OS, MAVEN, GO).
- severity
Name String
- affected
Location VulnerabilityLocation - The location of the vulnerability.
- fixed
Location VulnerabilityLocation - The location of the available fix for vulnerability.
- package
Type string - The type of package (e.g. OS, MAVEN, GO).
- severity
Name string
- affected_
location VulnerabilityLocation - The location of the vulnerability.
- fixed_
location VulnerabilityLocation - The location of the available fix for vulnerability.
- package_
type str - The type of package (e.g. OS, MAVEN, GO).
- severity_
name str
- affected
Location Property Map - The location of the vulnerability.
- fixed
Location Property Map - The location of the available fix for vulnerability.
- package
Type String - The type of package (e.g. OS, MAVEN, GO).
- severity
Name String
PackageIssueResponse, PackageIssueResponseArgs
- Affected
Location Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vulnerability Location Response - The location of the vulnerability.
- Effective
Severity string - The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability.
- Fixed
Location Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vulnerability Location Response - The location of the available fix for vulnerability.
- Package
Type string - The type of package (e.g. OS, MAVEN, GO).
- Severity
Name string
- Affected
Location VulnerabilityLocation Response - The location of the vulnerability.
- Effective
Severity string - The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability.
- Fixed
Location VulnerabilityLocation Response - The location of the available fix for vulnerability.
- Package
Type string - The type of package (e.g. OS, MAVEN, GO).
- Severity
Name string
- affected
Location VulnerabilityLocation Response - The location of the vulnerability.
- effective
Severity String - The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability.
- fixed
Location VulnerabilityLocation Response - The location of the available fix for vulnerability.
- package
Type String - The type of package (e.g. OS, MAVEN, GO).
- severity
Name String
- affected
Location VulnerabilityLocation Response - The location of the vulnerability.
- effective
Severity string - The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability.
- fixed
Location VulnerabilityLocation Response - The location of the available fix for vulnerability.
- package
Type string - The type of package (e.g. OS, MAVEN, GO).
- severity
Name string
- affected_
location VulnerabilityLocation Response - The location of the vulnerability.
- effective_
severity str - The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability.
- fixed_
location VulnerabilityLocation Response - The location of the available fix for vulnerability.
- package_
type str - The type of package (e.g. OS, MAVEN, GO).
- severity_
name str
- affected
Location Property Map - The location of the vulnerability.
- effective
Severity String - The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when distro or language system has not yet assigned a severity for this vulnerability.
- fixed
Location Property Map - The location of the available fix for vulnerability.
- package
Type String - The type of package (e.g. OS, MAVEN, GO).
- severity
Name String
PgpSignedAttestation, PgpSignedAttestationArgs
- Content
Type Pulumi.Google Native. Container Analysis. V1Alpha1. Pgp Signed Attestation Content Type - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- Pgp
Key stringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - Signature string
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- Content
Type PgpSigned Attestation Content Type - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- Pgp
Key stringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - Signature string
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content
Type PgpSigned Attestation Content Type - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp
Key StringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature String
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content
Type PgpSigned Attestation Content Type - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp
Key stringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature string
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content_
type PgpSigned Attestation Content Type - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp_
key_ strid - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature str
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content
Type "CONTENT_TYPE_UNSPECIFIED" | "SIMPLE_SIGNING_JSON" - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp
Key StringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature String
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
PgpSignedAttestationContentType, PgpSignedAttestationContentTypeArgs
- Content
Type Unspecified - CONTENT_TYPE_UNSPECIFIED
ContentTypeis not set. - Simple
Signing Json - SIMPLE_SIGNING_JSONAtomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from
signatureis a JSON blob conforming to the linked schema.
- Pgp
Signed Attestation Content Type Content Type Unspecified - CONTENT_TYPE_UNSPECIFIED
ContentTypeis not set. - Pgp
Signed Attestation Content Type Simple Signing Json - SIMPLE_SIGNING_JSONAtomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from
signatureis a JSON blob conforming to the linked schema.
- Content
Type Unspecified - CONTENT_TYPE_UNSPECIFIED
ContentTypeis not set. - Simple
Signing Json - SIMPLE_SIGNING_JSONAtomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from
signatureis a JSON blob conforming to the linked schema.
- Content
Type Unspecified - CONTENT_TYPE_UNSPECIFIED
ContentTypeis not set. - Simple
Signing Json - SIMPLE_SIGNING_JSONAtomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from
signatureis a JSON blob conforming to the linked schema.
- CONTENT_TYPE_UNSPECIFIED
- CONTENT_TYPE_UNSPECIFIED
ContentTypeis not set. - SIMPLE_SIGNING_JSON
- SIMPLE_SIGNING_JSONAtomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from
signatureis a JSON blob conforming to the linked schema.
- "CONTENT_TYPE_UNSPECIFIED"
- CONTENT_TYPE_UNSPECIFIED
ContentTypeis not set. - "SIMPLE_SIGNING_JSON"
- SIMPLE_SIGNING_JSONAtomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from
signatureis a JSON blob conforming to the linked schema.
PgpSignedAttestationResponse, PgpSignedAttestationResponseArgs
- Content
Type string - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- Pgp
Key stringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - Signature string
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- Content
Type string - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- Pgp
Key stringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - Signature string
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content
Type String - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp
Key StringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature String
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content
Type string - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp
Key stringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature string
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content_
type str - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp_
key_ strid - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature str
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
- content
Type String - Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
- pgp
Key StringId - The cryptographic fingerprint of the key used to generate the signature, as output by, e.g.
gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from thefprfield returned when calling --list-keys with --with-colons. For example:gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB:Above, the fingerprint is24FF6481B76AC91E66A00AC657A93A81EF3AE6FB. - signature String
- The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (
--armorto gpg), non-clearsigned (--signrather than--clearsignto gpg) are supported. Concretely,gpg --sign --armor --output=signature.gpg payload.jsonwill create the signature content expected in this field insignature.gpgfor thepayload.jsonattestation payload.
ProvenanceBuilder, ProvenanceBuilderArgs
- Builder
Dependencies List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Resource Descriptor> - Id string
- Version Dictionary<string, string>
- Builder
Dependencies []ResourceDescriptor - Id string
- Version map[string]string
- builder
Dependencies List<ResourceDescriptor> - id String
- version Map<String,String>
- builder
Dependencies ResourceDescriptor[] - id string
- version {[key: string]: string}
- builder_
dependencies Sequence[ResourceDescriptor] - id str
- version Mapping[str, str]
- builder
Dependencies List<Property Map> - id String
- version Map<String>
ProvenanceBuilderResponse, ProvenanceBuilderResponseArgs
- Builder
Dependencies List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Resource Descriptor Response> - Version Dictionary<string, string>
- Builder
Dependencies []ResourceDescriptor Response - Version map[string]string
- builder
Dependencies List<ResourceDescriptor Response> - version Map<String,String>
- builder
Dependencies ResourceDescriptor Response[] - version {[key: string]: string}
- builder_
dependencies Sequence[ResourceDescriptor Response] - version Mapping[str, str]
- builder
Dependencies List<Property Map> - version Map<String>
Recipe, RecipeArgs
- Arguments
List<Immutable
Dictionary<string, string>> - Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment
List<Immutable
Dictionary<string, string>> - Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- Arguments []map[string]string
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment []map[string]string
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments List<Map<String,String>>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment List<Map<String,String>>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments {[key: string]: string}[]
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment {[key: string]: string}[]
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Sequence[Mapping[str, str]]
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined_
in_ strmaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry_
point str - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Sequence[Mapping[str, str]]
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type str
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments List<Map<String>>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment List<Map<String>>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
RecipeResponse, RecipeResponseArgs
- Arguments
List<Immutable
Dictionary<string, string>> - Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment
List<Immutable
Dictionary<string, string>> - Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- Arguments []map[string]string
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment []map[string]string
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments List<Map<String,String>>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment List<Map<String,String>>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments {[key: string]: string}[]
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment {[key: string]: string}[]
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Sequence[Mapping[str, str]]
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined_
in_ strmaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry_
point str - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Sequence[Mapping[str, str]]
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type str
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments List<Map<String>>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment List<Map<String>>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
RelationshipOccurrence, RelationshipOccurrenceArgs
- Comment string
- A place for the SPDX file creator to record any general comments about the relationship
- Source string
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- Target string
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- Comment string
- A place for the SPDX file creator to record any general comments about the relationship
- Source string
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- Target string
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- comment String
- A place for the SPDX file creator to record any general comments about the relationship
- source String
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target String
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- comment string
- A place for the SPDX file creator to record any general comments about the relationship
- source string
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target string
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- comment str
- A place for the SPDX file creator to record any general comments about the relationship
- source str
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target str
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- comment String
- A place for the SPDX file creator to record any general comments about the relationship
- source String
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target String
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
RelationshipOccurrenceResponse, RelationshipOccurrenceResponseArgs
- Comment string
- A place for the SPDX file creator to record any general comments about the relationship
- Source string
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- Target string
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- Type string
- The type of relationship between the source and target SPDX elements
- Comment string
- A place for the SPDX file creator to record any general comments about the relationship
- Source string
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- Target string
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- Type string
- The type of relationship between the source and target SPDX elements
- comment String
- A place for the SPDX file creator to record any general comments about the relationship
- source String
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target String
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- type String
- The type of relationship between the source and target SPDX elements
- comment string
- A place for the SPDX file creator to record any general comments about the relationship
- source string
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target string
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- type string
- The type of relationship between the source and target SPDX elements
- comment str
- A place for the SPDX file creator to record any general comments about the relationship
- source str
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target str
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- type str
- The type of relationship between the source and target SPDX elements
- comment String
- A place for the SPDX file creator to record any general comments about the relationship
- source String
- Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
- target String
- Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
- type String
- The type of relationship between the source and target SPDX elements
Remediation, RemediationArgs
- Details string
- Contains a comprehensive human-readable discussion of the remediation.
- Remediation
Type Pulumi.Google Native. Container Analysis. V1Alpha1. Remediation Remediation Type - The type of remediation that can be applied.
- Remediation
Uri Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. URI - Contains the URL where to obtain the remediation.
- Details string
- Contains a comprehensive human-readable discussion of the remediation.
- Remediation
Type RemediationRemediation Type - The type of remediation that can be applied.
- Remediation
Uri URI - Contains the URL where to obtain the remediation.
- details String
- Contains a comprehensive human-readable discussion of the remediation.
- remediation
Type RemediationRemediation Type - The type of remediation that can be applied.
- remediation
Uri URI - Contains the URL where to obtain the remediation.
- details string
- Contains a comprehensive human-readable discussion of the remediation.
- remediation
Type RemediationRemediation Type - The type of remediation that can be applied.
- remediation
Uri URI - Contains the URL where to obtain the remediation.
- details str
- Contains a comprehensive human-readable discussion of the remediation.
- remediation_
type RemediationRemediation Type - The type of remediation that can be applied.
- remediation_
uri URI - Contains the URL where to obtain the remediation.
- details String
- Contains a comprehensive human-readable discussion of the remediation.
- remediation
Type "REMEDIATION_TYPE_UNSPECIFIED" | "MITIGATION" | "NO_FIX_PLANNED" | "NONE_AVAILABLE" | "VENDOR_FIX" | "WORKAROUND" - The type of remediation that can be applied.
- remediation
Uri Property Map - Contains the URL where to obtain the remediation.
RemediationRemediationType, RemediationRemediationTypeArgs
- Remediation
Type Unspecified - REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
- Mitigation
- MITIGATIONA MITIGATION is available.
- No
Fix Planned - NO_FIX_PLANNEDNo fix is planned.
- None
Available - NONE_AVAILABLENot available.
- Vendor
Fix - VENDOR_FIXA vendor fix is available.
- Workaround
- WORKAROUNDA workaround is available.
- Remediation
Remediation Type Remediation Type Unspecified - REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
- Remediation
Remediation Type Mitigation - MITIGATIONA MITIGATION is available.
- Remediation
Remediation Type No Fix Planned - NO_FIX_PLANNEDNo fix is planned.
- Remediation
Remediation Type None Available - NONE_AVAILABLENot available.
- Remediation
Remediation Type Vendor Fix - VENDOR_FIXA vendor fix is available.
- Remediation
Remediation Type Workaround - WORKAROUNDA workaround is available.
- Remediation
Type Unspecified - REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
- Mitigation
- MITIGATIONA MITIGATION is available.
- No
Fix Planned - NO_FIX_PLANNEDNo fix is planned.
- None
Available - NONE_AVAILABLENot available.
- Vendor
Fix - VENDOR_FIXA vendor fix is available.
- Workaround
- WORKAROUNDA workaround is available.
- Remediation
Type Unspecified - REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
- Mitigation
- MITIGATIONA MITIGATION is available.
- No
Fix Planned - NO_FIX_PLANNEDNo fix is planned.
- None
Available - NONE_AVAILABLENot available.
- Vendor
Fix - VENDOR_FIXA vendor fix is available.
- Workaround
- WORKAROUNDA workaround is available.
- REMEDIATION_TYPE_UNSPECIFIED
- REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
- MITIGATION
- MITIGATIONA MITIGATION is available.
- NO_FIX_PLANNED
- NO_FIX_PLANNEDNo fix is planned.
- NONE_AVAILABLE
- NONE_AVAILABLENot available.
- VENDOR_FIX
- VENDOR_FIXA vendor fix is available.
- WORKAROUND
- WORKAROUNDA workaround is available.
- "REMEDIATION_TYPE_UNSPECIFIED"
- REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
- "MITIGATION"
- MITIGATIONA MITIGATION is available.
- "NO_FIX_PLANNED"
- NO_FIX_PLANNEDNo fix is planned.
- "NONE_AVAILABLE"
- NONE_AVAILABLENot available.
- "VENDOR_FIX"
- VENDOR_FIXA vendor fix is available.
- "WORKAROUND"
- WORKAROUNDA workaround is available.
RemediationResponse, RemediationResponseArgs
- Details string
- Contains a comprehensive human-readable discussion of the remediation.
- Remediation
Type string - The type of remediation that can be applied.
- Remediation
Uri Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. URIResponse - Contains the URL where to obtain the remediation.
- Details string
- Contains a comprehensive human-readable discussion of the remediation.
- Remediation
Type string - The type of remediation that can be applied.
- Remediation
Uri URIResponse - Contains the URL where to obtain the remediation.
- details String
- Contains a comprehensive human-readable discussion of the remediation.
- remediation
Type String - The type of remediation that can be applied.
- remediation
Uri URIResponse - Contains the URL where to obtain the remediation.
- details string
- Contains a comprehensive human-readable discussion of the remediation.
- remediation
Type string - The type of remediation that can be applied.
- remediation
Uri URIResponse - Contains the URL where to obtain the remediation.
- details str
- Contains a comprehensive human-readable discussion of the remediation.
- remediation_
type str - The type of remediation that can be applied.
- remediation_
uri URIResponse - Contains the URL where to obtain the remediation.
- details String
- Contains a comprehensive human-readable discussion of the remediation.
- remediation
Type String - The type of remediation that can be applied.
- remediation
Uri Property Map - Contains the URL where to obtain the remediation.
RepoSource, RepoSourceArgs
- Branch
Name string - Name of the branch to build.
- Commit
Sha string - Explicit commit SHA to build.
- Project string
- ID of the project that owns the repo.
- Repo
Name string - Name of the repo.
- Tag
Name string - Name of the tag to build.
- Branch
Name string - Name of the branch to build.
- Commit
Sha string - Explicit commit SHA to build.
- Project string
- ID of the project that owns the repo.
- Repo
Name string - Name of the repo.
- Tag
Name string - Name of the tag to build.
- branch
Name String - Name of the branch to build.
- commit
Sha String - Explicit commit SHA to build.
- project String
- ID of the project that owns the repo.
- repo
Name String - Name of the repo.
- tag
Name String - Name of the tag to build.
- branch
Name string - Name of the branch to build.
- commit
Sha string - Explicit commit SHA to build.
- project string
- ID of the project that owns the repo.
- repo
Name string - Name of the repo.
- tag
Name string - Name of the tag to build.
- branch_
name str - Name of the branch to build.
- commit_
sha str - Explicit commit SHA to build.
- project str
- ID of the project that owns the repo.
- repo_
name str - Name of the repo.
- tag_
name str - Name of the tag to build.
- branch
Name String - Name of the branch to build.
- commit
Sha String - Explicit commit SHA to build.
- project String
- ID of the project that owns the repo.
- repo
Name String - Name of the repo.
- tag
Name String - Name of the tag to build.
RepoSourceResponse, RepoSourceResponseArgs
- Branch
Name string - Name of the branch to build.
- Commit
Sha string - Explicit commit SHA to build.
- Project string
- ID of the project that owns the repo.
- Repo
Name string - Name of the repo.
- Tag
Name string - Name of the tag to build.
- Branch
Name string - Name of the branch to build.
- Commit
Sha string - Explicit commit SHA to build.
- Project string
- ID of the project that owns the repo.
- Repo
Name string - Name of the repo.
- Tag
Name string - Name of the tag to build.
- branch
Name String - Name of the branch to build.
- commit
Sha String - Explicit commit SHA to build.
- project String
- ID of the project that owns the repo.
- repo
Name String - Name of the repo.
- tag
Name String - Name of the tag to build.
- branch
Name string - Name of the branch to build.
- commit
Sha string - Explicit commit SHA to build.
- project string
- ID of the project that owns the repo.
- repo
Name string - Name of the repo.
- tag
Name string - Name of the tag to build.
- branch_
name str - Name of the branch to build.
- commit_
sha str - Explicit commit SHA to build.
- project str
- ID of the project that owns the repo.
- repo_
name str - Name of the repo.
- tag_
name str - Name of the tag to build.
- branch
Name String - Name of the branch to build.
- commit
Sha String - Explicit commit SHA to build.
- project String
- ID of the project that owns the repo.
- repo
Name String - Name of the repo.
- tag
Name String - Name of the tag to build.
Resource, ResourceArgs
- Content
Hash Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Hash - The hash of the resource content. E.g., the Docker digest.
- Name string
- The name of the resource. E.g., the name of a Docker image - "Debian".
- Uri string
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- Content
Hash Hash - The hash of the resource content. E.g., the Docker digest.
- Name string
- The name of the resource. E.g., the name of a Docker image - "Debian".
- Uri string
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content
Hash Hash - The hash of the resource content. E.g., the Docker digest.
- name String
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri String
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content
Hash Hash - The hash of the resource content. E.g., the Docker digest.
- name string
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri string
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content_
hash Hash - The hash of the resource content. E.g., the Docker digest.
- name str
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri str
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content
Hash Property Map - The hash of the resource content. E.g., the Docker digest.
- name String
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri String
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
ResourceDescriptor, ResourceDescriptorArgs
- Annotations Dictionary<string, string>
- Content string
- Digest Dictionary<string, string>
- Download
Location string - Media
Type string - Name string
- Uri string
- Annotations map[string]string
- Content string
- Digest map[string]string
- Download
Location string - Media
Type string - Name string
- Uri string
- annotations Map<String,String>
- content String
- digest Map<String,String>
- download
Location String - media
Type String - name String
- uri String
- annotations {[key: string]: string}
- content string
- digest {[key: string]: string}
- download
Location string - media
Type string - name string
- uri string
- annotations Mapping[str, str]
- content str
- digest Mapping[str, str]
- download_
location str - media_
type str - name str
- uri str
- annotations Map<String>
- content String
- digest Map<String>
- download
Location String - media
Type String - name String
- uri String
ResourceDescriptorResponse, ResourceDescriptorResponseArgs
- Annotations Dictionary<string, string>
- Content string
- Digest Dictionary<string, string>
- Download
Location string - Media
Type string - Name string
- Uri string
- Annotations map[string]string
- Content string
- Digest map[string]string
- Download
Location string - Media
Type string - Name string
- Uri string
- annotations Map<String,String>
- content String
- digest Map<String,String>
- download
Location String - media
Type String - name String
- uri String
- annotations {[key: string]: string}
- content string
- digest {[key: string]: string}
- download
Location string - media
Type string - name string
- uri string
- annotations Mapping[str, str]
- content str
- digest Mapping[str, str]
- download_
location str - media_
type str - name str
- uri str
- annotations Map<String>
- content String
- digest Map<String>
- download
Location String - media
Type String - name String
- uri String
ResourceResponse, ResourceResponseArgs
- Content
Hash Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Hash Response - The hash of the resource content. E.g., the Docker digest.
- Name string
- The name of the resource. E.g., the name of a Docker image - "Debian".
- Uri string
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- Content
Hash HashResponse - The hash of the resource content. E.g., the Docker digest.
- Name string
- The name of the resource. E.g., the name of a Docker image - "Debian".
- Uri string
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content
Hash HashResponse - The hash of the resource content. E.g., the Docker digest.
- name String
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri String
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content
Hash HashResponse - The hash of the resource content. E.g., the Docker digest.
- name string
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri string
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content_
hash HashResponse - The hash of the resource content. E.g., the Docker digest.
- name str
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri str
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
- content
Hash Property Map - The hash of the resource content. E.g., the Docker digest.
- name String
- The name of the resource. E.g., the name of a Docker image - "Debian".
- uri String
- The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
RunDetails, RunDetailsArgs
RunDetailsResponse, RunDetailsResponseArgs
SBOMReferenceOccurrence, SBOMReferenceOccurrenceArgs
- Payload
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Sbom Reference Intoto Payload - The actual payload that contains the SBOM reference data.
- Payload
Type string - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- Signatures
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope Signature> - The signatures over the payload.
- Payload
Sbom
Reference Intoto Payload - The actual payload that contains the SBOM reference data.
- Payload
Type string - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- Signatures
[]Envelope
Signature - The signatures over the payload.
- payload
Sbom
Reference Intoto Payload - The actual payload that contains the SBOM reference data.
- payload
Type String - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures
List<Envelope
Signature> - The signatures over the payload.
- payload
Sbom
Reference Intoto Payload - The actual payload that contains the SBOM reference data.
- payload
Type string - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures
Envelope
Signature[] - The signatures over the payload.
- payload
Sbom
Reference Intoto Payload - The actual payload that contains the SBOM reference data.
- payload_
type str - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures
Sequence[Envelope
Signature] - The signatures over the payload.
- payload Property Map
- The actual payload that contains the SBOM reference data.
- payload
Type String - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures List<Property Map>
- The signatures over the payload.
SBOMReferenceOccurrenceResponse, SBOMReferenceOccurrenceResponseArgs
- Payload
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Sbom Reference Intoto Payload Response - The actual payload that contains the SBOM reference data.
- Payload
Type string - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- Signatures
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Envelope Signature Response> - The signatures over the payload.
- Payload
Sbom
Reference Intoto Payload Response - The actual payload that contains the SBOM reference data.
- Payload
Type string - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- Signatures
[]Envelope
Signature Response - The signatures over the payload.
- payload
Sbom
Reference Intoto Payload Response - The actual payload that contains the SBOM reference data.
- payload
Type String - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures
List<Envelope
Signature Response> - The signatures over the payload.
- payload
Sbom
Reference Intoto Payload Response - The actual payload that contains the SBOM reference data.
- payload
Type string - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures
Envelope
Signature Response[] - The signatures over the payload.
- payload
Sbom
Reference Intoto Payload Response - The actual payload that contains the SBOM reference data.
- payload_
type str - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures
Sequence[Envelope
Signature Response] - The signatures over the payload.
- payload Property Map
- The actual payload that contains the SBOM reference data.
- payload
Type String - The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
- signatures List<Property Map>
- The signatures over the payload.
SBOMStatusResponse, SBOMStatusResponseArgs
- error str
- If there was an error generating an SBOM, this will indicate what that error was.
- sbom_
state str - The progress of the SBOM generation.
SbomReferenceIntotoPayload, SbomReferenceIntotoPayloadArgs
- Predicate
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Sbom Reference Intoto Predicate - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- Predicate
Type string - URI identifying the type of the Predicate.
- Subject
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Subject> - Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- Type string
- Identifier for the schema of the Statement.
- Predicate
Sbom
Reference Intoto Predicate - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- Predicate
Type string - URI identifying the type of the Predicate.
- Subject []Subject
- Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- Type string
- Identifier for the schema of the Statement.
- predicate
Sbom
Reference Intoto Predicate - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate
Type String - URI identifying the type of the Predicate.
- subject List<Subject>
- Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type String
- Identifier for the schema of the Statement.
- predicate
Sbom
Reference Intoto Predicate - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate
Type string - URI identifying the type of the Predicate.
- subject Subject[]
- Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type string
- Identifier for the schema of the Statement.
- predicate
Sbom
Reference Intoto Predicate - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate_
type str - URI identifying the type of the Predicate.
- subject Sequence[Subject]
- Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type str
- Identifier for the schema of the Statement.
- predicate Property Map
- Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate
Type String - URI identifying the type of the Predicate.
- subject List<Property Map>
- Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type String
- Identifier for the schema of the Statement.
SbomReferenceIntotoPayloadResponse, SbomReferenceIntotoPayloadResponseArgs
- Predicate
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Sbom Reference Intoto Predicate Response - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- Predicate
Type string - URI identifying the type of the Predicate.
- Subject
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Subject Response> - Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- Type string
- Identifier for the schema of the Statement.
- Predicate
Sbom
Reference Intoto Predicate Response - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- Predicate
Type string - URI identifying the type of the Predicate.
- Subject
[]Subject
Response - Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- Type string
- Identifier for the schema of the Statement.
- predicate
Sbom
Reference Intoto Predicate Response - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate
Type String - URI identifying the type of the Predicate.
- subject
List<Subject
Response> - Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type String
- Identifier for the schema of the Statement.
- predicate
Sbom
Reference Intoto Predicate Response - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate
Type string - URI identifying the type of the Predicate.
- subject
Subject
Response[] - Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type string
- Identifier for the schema of the Statement.
- predicate
Sbom
Reference Intoto Predicate Response - Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate_
type str - URI identifying the type of the Predicate.
- subject
Sequence[Subject
Response] - Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type str
- Identifier for the schema of the Statement.
- predicate Property Map
- Additional parameters of the Predicate. Includes the actual data about the SBOM.
- predicate
Type String - URI identifying the type of the Predicate.
- subject List<Property Map>
- Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
- type String
- Identifier for the schema of the Statement.
SbomReferenceIntotoPredicate, SbomReferenceIntotoPredicateArgs
- Digest Dictionary<string, string>
- A map of algorithm to digest of the contents of the SBOM.
- Location string
- The location of the SBOM.
- Mime
Type string - The mime type of the SBOM.
- Referrer
Id string - The person or system referring this predicate to the consumer.
- Digest map[string]string
- A map of algorithm to digest of the contents of the SBOM.
- Location string
- The location of the SBOM.
- Mime
Type string - The mime type of the SBOM.
- Referrer
Id string - The person or system referring this predicate to the consumer.
- digest Map<String,String>
- A map of algorithm to digest of the contents of the SBOM.
- location String
- The location of the SBOM.
- mime
Type String - The mime type of the SBOM.
- referrer
Id String - The person or system referring this predicate to the consumer.
- digest {[key: string]: string}
- A map of algorithm to digest of the contents of the SBOM.
- location string
- The location of the SBOM.
- mime
Type string - The mime type of the SBOM.
- referrer
Id string - The person or system referring this predicate to the consumer.
- digest Mapping[str, str]
- A map of algorithm to digest of the contents of the SBOM.
- location str
- The location of the SBOM.
- mime_
type str - The mime type of the SBOM.
- referrer_
id str - The person or system referring this predicate to the consumer.
- digest Map<String>
- A map of algorithm to digest of the contents of the SBOM.
- location String
- The location of the SBOM.
- mime
Type String - The mime type of the SBOM.
- referrer
Id String - The person or system referring this predicate to the consumer.
SbomReferenceIntotoPredicateResponse, SbomReferenceIntotoPredicateResponseArgs
- Digest Dictionary<string, string>
- A map of algorithm to digest of the contents of the SBOM.
- Location string
- The location of the SBOM.
- Mime
Type string - The mime type of the SBOM.
- Referrer
Id string - The person or system referring this predicate to the consumer.
- Digest map[string]string
- A map of algorithm to digest of the contents of the SBOM.
- Location string
- The location of the SBOM.
- Mime
Type string - The mime type of the SBOM.
- Referrer
Id string - The person or system referring this predicate to the consumer.
- digest Map<String,String>
- A map of algorithm to digest of the contents of the SBOM.
- location String
- The location of the SBOM.
- mime
Type String - The mime type of the SBOM.
- referrer
Id String - The person or system referring this predicate to the consumer.
- digest {[key: string]: string}
- A map of algorithm to digest of the contents of the SBOM.
- location string
- The location of the SBOM.
- mime
Type string - The mime type of the SBOM.
- referrer
Id string - The person or system referring this predicate to the consumer.
- digest Mapping[str, str]
- A map of algorithm to digest of the contents of the SBOM.
- location str
- The location of the SBOM.
- mime_
type str - The mime type of the SBOM.
- referrer_
id str - The person or system referring this predicate to the consumer.
- digest Map<String>
- A map of algorithm to digest of the contents of the SBOM.
- location String
- The location of the SBOM.
- mime
Type String - The mime type of the SBOM.
- referrer
Id String - The person or system referring this predicate to the consumer.
SlsaBuilder, SlsaBuilderArgs
- Id string
- id is the id of the slsa provenance builder
- Id string
- id is the id of the slsa provenance builder
- id String
- id is the id of the slsa provenance builder
- id string
- id is the id of the slsa provenance builder
- id str
- id is the id of the slsa provenance builder
- id String
- id is the id of the slsa provenance builder
SlsaCompleteness, SlsaCompletenessArgs
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
SlsaCompletenessResponse, SlsaCompletenessResponseArgs
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- Arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- Environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- Materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments bool
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment bool
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials bool
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
- arguments Boolean
- If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
- environment Boolean
- If true, the builder claims that recipe.environment is claimed to be complete.
- materials Boolean
- If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
SlsaMetadata, SlsaMetadataArgs
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Completeness - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Slsa
Completeness - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness
Slsa
Completeness - Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished stringOn - The timestamp of when the build completed.
- build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started stringOn - The timestamp of when the build started.
- completeness
Slsa
Completeness - Indicates that the builder claims certain fields in this message to be complete.
- reproducible boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build_
finished_ stron - The timestamp of when the build completed.
- build_
invocation_ strid - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build_
started_ stron - The timestamp of when the build started.
- completeness
Slsa
Completeness - Indicates that the builder claims certain fields in this message to be complete.
- reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness Property Map
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
SlsaMetadataResponse, SlsaMetadataResponseArgs
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- Build
Finished stringOn - The timestamp of when the build completed.
- Build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- Build
Started stringOn - The timestamp of when the build started.
- Completeness
Slsa
Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- Reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness
Slsa
Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished stringOn - The timestamp of when the build completed.
- build
Invocation stringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started stringOn - The timestamp of when the build started.
- completeness
Slsa
Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build_
finished_ stron - The timestamp of when the build completed.
- build_
invocation_ strid - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build_
started_ stron - The timestamp of when the build started.
- completeness
Slsa
Completeness Response - Indicates that the builder claims certain fields in this message to be complete.
- reproducible bool
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
- build
Finished StringOn - The timestamp of when the build completed.
- build
Invocation StringId - Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
- build
Started StringOn - The timestamp of when the build started.
- completeness Property Map
- Indicates that the builder claims certain fields in this message to be complete.
- reproducible Boolean
- If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
SlsaProvenance, SlsaProvenanceArgs
- Builder
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Builder - builder is the builder of this provenance
- Materials
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Material> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Metadata - metadata is the metadata of the provenance
- Recipe
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Recipe - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- Builder
Slsa
Builder - builder is the builder of this provenance
- Materials []Material
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Slsa
Metadata - metadata is the metadata of the provenance
- Recipe
Slsa
Recipe - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder_
Slsa
Builder - builder is the builder of this provenance
- materials List<Material>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Slsa
Metadata - metadata is the metadata of the provenance
- recipe
Slsa
Recipe - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder
Slsa
Builder - builder is the builder of this provenance
- materials Material[]
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Slsa
Metadata - metadata is the metadata of the provenance
- recipe
Slsa
Recipe - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder
Slsa
Builder - builder is the builder of this provenance
- materials Sequence[Material]
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Slsa
Metadata - metadata is the metadata of the provenance
- recipe
Slsa
Recipe - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder Property Map
- builder is the builder of this provenance
- materials List<Property Map>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Property Map
- metadata is the metadata of the provenance
- recipe Property Map
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
SlsaProvenanceResponse, SlsaProvenanceResponseArgs
- Builder
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Builder Response - builder is the builder of this provenance
- Materials
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Material Response> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Metadata Response - metadata is the metadata of the provenance
- Recipe
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Slsa Recipe Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- Builder
Slsa
Builder Response - builder is the builder of this provenance
- Materials
[]Material
Response - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- Metadata
Slsa
Metadata Response - metadata is the metadata of the provenance
- Recipe
Slsa
Recipe Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder_
Slsa
Builder Response - builder is the builder of this provenance
- materials
List<Material
Response> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Slsa
Metadata Response - metadata is the metadata of the provenance
- recipe
Slsa
Recipe Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder
Slsa
Builder Response - builder is the builder of this provenance
- materials
Material
Response[] - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Slsa
Metadata Response - metadata is the metadata of the provenance
- recipe
Slsa
Recipe Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder
Slsa
Builder Response - builder is the builder of this provenance
- materials
Sequence[Material
Response] - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata
Slsa
Metadata Response - metadata is the metadata of the provenance
- recipe
Slsa
Recipe Response - Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
- builder Property Map
- builder is the builder of this provenance
- materials List<Property Map>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
- metadata Property Map
- metadata is the metadata of the provenance
- recipe Property Map
- Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible).
SlsaProvenanceV1, SlsaProvenanceV1Args
SlsaProvenanceV1Response, SlsaProvenanceV1ResponseArgs
SlsaProvenanceZeroTwo, SlsaProvenanceZeroTwoArgs
- Build
Config Dictionary<string, string> - Lists the steps in the build.
- Build
Type string - URI indicating what type of build was performed.
- Builder
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- Invocation
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation - Identifies the event that kicked off the build.
- Materials
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- Metadata
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata - Other properties of the build.
- Build
Config map[string]string - Lists the steps in the build.
- Build
Type string - URI indicating what type of build was performed.
- Builder
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- Invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation - Identifies the event that kicked off the build.
- Materials
[]Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- Metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata - Other properties of the build.
- build
Config Map<String,String> - Lists the steps in the build.
- build
Type String - URI indicating what type of build was performed.
- builder_
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation - Identifies the event that kicked off the build.
- materials
List<Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata - Other properties of the build.
- build
Config {[key: string]: string} - Lists the steps in the build.
- build
Type string - URI indicating what type of build was performed.
- builder
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation - Identifies the event that kicked off the build.
- materials
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material[] - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata - Other properties of the build.
- build_
config Mapping[str, str] - Lists the steps in the build.
- build_
type str - URI indicating what type of build was performed.
- builder
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation - Identifies the event that kicked off the build.
- materials
Sequence[Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material] - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata - Other properties of the build.
- build
Config Map<String> - Lists the steps in the build.
- build
Type String - URI indicating what type of build was performed.
- builder Property Map
- Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation Property Map
- Identifies the event that kicked off the build.
- materials List<Property Map>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata Property Map
- Other properties of the build.
SlsaProvenanceZeroTwoResponse, SlsaProvenanceZeroTwoResponseArgs
- Build
Config Dictionary<string, string> - Lists the steps in the build.
- Build
Type string - URI indicating what type of build was performed.
- Builder
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder Response - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- Invocation
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation Response - Identifies the event that kicked off the build.
- Materials
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material Response> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- Metadata
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata Response - Other properties of the build.
- Build
Config map[string]string - Lists the steps in the build.
- Build
Type string - URI indicating what type of build was performed.
- Builder
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder Response - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- Invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation Response - Identifies the event that kicked off the build.
- Materials
[]Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material Response - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- Metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata Response - Other properties of the build.
- build
Config Map<String,String> - Lists the steps in the build.
- build
Type String - URI indicating what type of build was performed.
- builder_
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder Response - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation Response - Identifies the event that kicked off the build.
- materials
List<Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material Response> - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata Response - Other properties of the build.
- build
Config {[key: string]: string} - Lists the steps in the build.
- build
Type string - URI indicating what type of build was performed.
- builder
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder Response - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation Response - Identifies the event that kicked off the build.
- materials
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material Response[] - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata Response - Other properties of the build.
- build_
config Mapping[str, str] - Lists the steps in the build.
- build_
type str - URI indicating what type of build was performed.
- builder
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Builder Response - Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Invocation Response - Identifies the event that kicked off the build.
- materials
Sequence[Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Material Response] - The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata
Google
Devtools Containeranalysis V1alpha1Slsa Provenance Zero Two Slsa Metadata Response - Other properties of the build.
- build
Config Map<String> - Lists the steps in the build.
- build
Type String - URI indicating what type of build was performed.
- builder Property Map
- Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
- invocation Property Map
- Identifies the event that kicked off the build.
- materials List<Property Map>
- The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
- metadata Property Map
- Other properties of the build.
SlsaRecipe, SlsaRecipeArgs
- Arguments Dictionary<string, string>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment Dictionary<string, string>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- Arguments map[string]string
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment map[string]string
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Map<String,String>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Map<String,String>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments {[key: string]: string}
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment {[key: string]: string}
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Mapping[str, str]
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined_
in_ strmaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry_
point str - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Mapping[str, str]
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type str
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Map<String>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Map<String>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
SlsaRecipeResponse, SlsaRecipeResponseArgs
- Arguments Dictionary<string, string>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment Dictionary<string, string>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- Arguments map[string]string
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- Defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- Entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- Environment map[string]string
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- Type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Map<String,String>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Map<String,String>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments {[key: string]: string}
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined
In stringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point string - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment {[key: string]: string}
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type string
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Mapping[str, str]
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined_
in_ strmaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry_
point str - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Mapping[str, str]
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type str
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
- arguments Map<String>
- Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
- defined
In StringMaterial - Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
- entry
Point String - String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
- environment Map<String>
- Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
- type String
- URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
Source, SourceArgs
- Additional
Contexts List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Source Context> - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- Artifact
Storage Pulumi.Source Google Native. Container Analysis. V1Alpha1. Inputs. Storage Source - If provided, the input binary artifacts for the build came from this location.
- Context
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Source Context - If provided, the source code used for the build came from this location.
- File
Hashes Dictionary<string, string> - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- Repo
Source Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Repo Source - If provided, get source from this location in a Cloud Repo.
- Storage
Source Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Storage Source - If provided, get the source from this location in Google Cloud Storage.
- Additional
Contexts []GoogleDevtools Containeranalysis V1alpha1Source Context - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- Artifact
Storage StorageSource Source - If provided, the input binary artifacts for the build came from this location.
- Context
Google
Devtools Containeranalysis V1alpha1Source Context - If provided, the source code used for the build came from this location.
- File
Hashes map[string]string - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- Repo
Source RepoSource - If provided, get source from this location in a Cloud Repo.
- Storage
Source StorageSource - If provided, get the source from this location in Google Cloud Storage.
- additional
Contexts List<GoogleDevtools Containeranalysis V1alpha1Source Context> - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact
Storage StorageSource Source - If provided, the input binary artifacts for the build came from this location.
- context
Google
Devtools Containeranalysis V1alpha1Source Context - If provided, the source code used for the build came from this location.
- file
Hashes Map<String,String> - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo
Source RepoSource - If provided, get source from this location in a Cloud Repo.
- storage
Source StorageSource - If provided, get the source from this location in Google Cloud Storage.
- additional
Contexts GoogleDevtools Containeranalysis V1alpha1Source Context[] - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact
Storage StorageSource Source - If provided, the input binary artifacts for the build came from this location.
- context
Google
Devtools Containeranalysis V1alpha1Source Context - If provided, the source code used for the build came from this location.
- file
Hashes {[key: string]: string} - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo
Source RepoSource - If provided, get source from this location in a Cloud Repo.
- storage
Source StorageSource - If provided, get the source from this location in Google Cloud Storage.
- additional_
contexts Sequence[GoogleDevtools Containeranalysis V1alpha1Source Context] - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact_
storage_ Storagesource Source - If provided, the input binary artifacts for the build came from this location.
- context
Google
Devtools Containeranalysis V1alpha1Source Context - If provided, the source code used for the build came from this location.
- file_
hashes Mapping[str, str] - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo_
source RepoSource - If provided, get source from this location in a Cloud Repo.
- storage_
source StorageSource - If provided, get the source from this location in Google Cloud Storage.
- additional
Contexts List<Property Map> - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact
Storage Property MapSource - If provided, the input binary artifacts for the build came from this location.
- context Property Map
- If provided, the source code used for the build came from this location.
- file
Hashes Map<String> - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo
Source Property Map - If provided, get source from this location in a Cloud Repo.
- storage
Source Property Map - If provided, get the source from this location in Google Cloud Storage.
SourceResponse, SourceResponseArgs
- Additional
Contexts List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Source Context Response> - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- Artifact
Storage Pulumi.Source Google Native. Container Analysis. V1Alpha1. Inputs. Storage Source Response - If provided, the input binary artifacts for the build came from this location.
- Context
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Google Devtools Containeranalysis V1alpha1Source Context Response - If provided, the source code used for the build came from this location.
- File
Hashes Dictionary<string, string> - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- Repo
Source Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Repo Source Response - If provided, get source from this location in a Cloud Repo.
- Storage
Source Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Storage Source Response - If provided, get the source from this location in Google Cloud Storage.
- Additional
Contexts []GoogleDevtools Containeranalysis V1alpha1Source Context Response - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- Artifact
Storage StorageSource Source Response - If provided, the input binary artifacts for the build came from this location.
- Context
Google
Devtools Containeranalysis V1alpha1Source Context Response - If provided, the source code used for the build came from this location.
- File
Hashes map[string]string - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- Repo
Source RepoSource Response - If provided, get source from this location in a Cloud Repo.
- Storage
Source StorageSource Response - If provided, get the source from this location in Google Cloud Storage.
- additional
Contexts List<GoogleDevtools Containeranalysis V1alpha1Source Context Response> - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact
Storage StorageSource Source Response - If provided, the input binary artifacts for the build came from this location.
- context
Google
Devtools Containeranalysis V1alpha1Source Context Response - If provided, the source code used for the build came from this location.
- file
Hashes Map<String,String> - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo
Source RepoSource Response - If provided, get source from this location in a Cloud Repo.
- storage
Source StorageSource Response - If provided, get the source from this location in Google Cloud Storage.
- additional
Contexts GoogleDevtools Containeranalysis V1alpha1Source Context Response[] - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact
Storage StorageSource Source Response - If provided, the input binary artifacts for the build came from this location.
- context
Google
Devtools Containeranalysis V1alpha1Source Context Response - If provided, the source code used for the build came from this location.
- file
Hashes {[key: string]: string} - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo
Source RepoSource Response - If provided, get source from this location in a Cloud Repo.
- storage
Source StorageSource Response - If provided, get the source from this location in Google Cloud Storage.
- additional_
contexts Sequence[GoogleDevtools Containeranalysis V1alpha1Source Context Response] - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact_
storage_ Storagesource Source Response - If provided, the input binary artifacts for the build came from this location.
- context
Google
Devtools Containeranalysis V1alpha1Source Context Response - If provided, the source code used for the build came from this location.
- file_
hashes Mapping[str, str] - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo_
source RepoSource Response - If provided, get source from this location in a Cloud Repo.
- storage_
source StorageSource Response - If provided, get the source from this location in Google Cloud Storage.
- additional
Contexts List<Property Map> - If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
- artifact
Storage Property MapSource - If provided, the input binary artifacts for the build came from this location.
- context Property Map
- If provided, the source code used for the build came from this location.
- file
Hashes Map<String> - Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
- repo
Source Property Map - If provided, get source from this location in a Cloud Repo.
- storage
Source Property Map - If provided, get the source from this location in Google Cloud Storage.
Status, StatusArgs
- Code int
- The status code, which should be an enum value of google.rpc.Code.
- Details
List<Immutable
Dictionary<string, string>> - A list of messages that carry the error details. There is a common set of message types for APIs to use.
- Message string
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- Code int
- The status code, which should be an enum value of google.rpc.Code.
- Details []map[string]string
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- Message string
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code Integer
- The status code, which should be an enum value of google.rpc.Code.
- details List<Map<String,String>>
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message String
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code number
- The status code, which should be an enum value of google.rpc.Code.
- details {[key: string]: string}[]
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message string
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code int
- The status code, which should be an enum value of google.rpc.Code.
- details Sequence[Mapping[str, str]]
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message str
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code Number
- The status code, which should be an enum value of google.rpc.Code.
- details List<Map<String>>
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message String
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
StatusResponse, StatusResponseArgs
- Code int
- The status code, which should be an enum value of google.rpc.Code.
- Details
List<Immutable
Dictionary<string, string>> - A list of messages that carry the error details. There is a common set of message types for APIs to use.
- Message string
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- Code int
- The status code, which should be an enum value of google.rpc.Code.
- Details []map[string]string
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- Message string
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code Integer
- The status code, which should be an enum value of google.rpc.Code.
- details List<Map<String,String>>
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message String
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code number
- The status code, which should be an enum value of google.rpc.Code.
- details {[key: string]: string}[]
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message string
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code int
- The status code, which should be an enum value of google.rpc.Code.
- details Sequence[Mapping[str, str]]
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message str
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
- code Number
- The status code, which should be an enum value of google.rpc.Code.
- details List<Map<String>>
- A list of messages that carry the error details. There is a common set of message types for APIs to use.
- message String
- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
StorageSource, StorageSourceArgs
- Bucket string
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- Generation string
- Google Cloud Storage generation for the object.
- Object string
- Google Cloud Storage object containing source.
- Bucket string
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- Generation string
- Google Cloud Storage generation for the object.
- Object string
- Google Cloud Storage object containing source.
- bucket String
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation String
- Google Cloud Storage generation for the object.
- object String
- Google Cloud Storage object containing source.
- bucket string
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation string
- Google Cloud Storage generation for the object.
- object string
- Google Cloud Storage object containing source.
- bucket str
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation str
- Google Cloud Storage generation for the object.
- object str
- Google Cloud Storage object containing source.
- bucket String
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation String
- Google Cloud Storage generation for the object.
- object String
- Google Cloud Storage object containing source.
StorageSourceResponse, StorageSourceResponseArgs
- Bucket string
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- Generation string
- Google Cloud Storage generation for the object.
- Object string
- Google Cloud Storage object containing source.
- Bucket string
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- Generation string
- Google Cloud Storage generation for the object.
- Object string
- Google Cloud Storage object containing source.
- bucket String
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation String
- Google Cloud Storage generation for the object.
- object String
- Google Cloud Storage object containing source.
- bucket string
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation string
- Google Cloud Storage generation for the object.
- object string
- Google Cloud Storage object containing source.
- bucket str
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation str
- Google Cloud Storage generation for the object.
- object str
- Google Cloud Storage object containing source.
- bucket String
- Google Cloud Storage bucket containing source (see [Bucket Name Requirements] (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
- generation String
- Google Cloud Storage generation for the object.
- object String
- Google Cloud Storage object containing source.
Subject, SubjectArgs
SubjectResponse, SubjectResponseArgs
URI, URIArgs
URIResponse, URIResponseArgs
UpgradeDistribution, UpgradeDistributionArgs
- Classification string
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- Cpe
Uri string - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- Cve List<string>
- The cve that would be resolved by this upgrade.
- Severity string
- The severity as specified by the upstream operating system.
- Classification string
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- Cpe
Uri string - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- Cve []string
- The cve that would be resolved by this upgrade.
- Severity string
- The severity as specified by the upstream operating system.
- classification String
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe
Uri String - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve List<String>
- The cve that would be resolved by this upgrade.
- severity String
- The severity as specified by the upstream operating system.
- classification string
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe
Uri string - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve string[]
- The cve that would be resolved by this upgrade.
- severity string
- The severity as specified by the upstream operating system.
- classification str
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe_
uri str - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve Sequence[str]
- The cve that would be resolved by this upgrade.
- severity str
- The severity as specified by the upstream operating system.
- classification String
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe
Uri String - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve List<String>
- The cve that would be resolved by this upgrade.
- severity String
- The severity as specified by the upstream operating system.
UpgradeDistributionResponse, UpgradeDistributionResponseArgs
- Classification string
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- Cpe
Uri string - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- Cve List<string>
- The cve that would be resolved by this upgrade.
- Severity string
- The severity as specified by the upstream operating system.
- Classification string
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- Cpe
Uri string - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- Cve []string
- The cve that would be resolved by this upgrade.
- Severity string
- The severity as specified by the upstream operating system.
- classification String
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe
Uri String - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve List<String>
- The cve that would be resolved by this upgrade.
- severity String
- The severity as specified by the upstream operating system.
- classification string
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe
Uri string - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve string[]
- The cve that would be resolved by this upgrade.
- severity string
- The severity as specified by the upstream operating system.
- classification str
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe_
uri str - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve Sequence[str]
- The cve that would be resolved by this upgrade.
- severity str
- The severity as specified by the upstream operating system.
- classification String
- The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
- cpe
Uri String - Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
- cve List<String>
- The cve that would be resolved by this upgrade.
- severity String
- The severity as specified by the upstream operating system.
UpgradeOccurrence, UpgradeOccurrenceArgs
- Distribution
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Upgrade Distribution - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- Package string
- Required - The package this Upgrade is for.
- Parsed
Version Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Version - Required - The version of the package in a machine + human readable form.
- Distribution
Upgrade
Distribution - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- Package string
- Required - The package this Upgrade is for.
- Parsed
Version Version - Required - The version of the package in a machine + human readable form.
- distribution
Upgrade
Distribution - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package_ String
- Required - The package this Upgrade is for.
- parsed
Version Version - Required - The version of the package in a machine + human readable form.
- distribution
Upgrade
Distribution - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package string
- Required - The package this Upgrade is for.
- parsed
Version Version - Required - The version of the package in a machine + human readable form.
- distribution
Upgrade
Distribution - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package str
- Required - The package this Upgrade is for.
- parsed_
version Version - Required - The version of the package in a machine + human readable form.
- distribution Property Map
- Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package String
- Required - The package this Upgrade is for.
- parsed
Version Property Map - Required - The version of the package in a machine + human readable form.
UpgradeOccurrenceResponse, UpgradeOccurrenceResponseArgs
- Distribution
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Upgrade Distribution Response - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- Package string
- Required - The package this Upgrade is for.
- Parsed
Version Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Version Response - Required - The version of the package in a machine + human readable form.
- Distribution
Upgrade
Distribution Response - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- Package string
- Required - The package this Upgrade is for.
- Parsed
Version VersionResponse - Required - The version of the package in a machine + human readable form.
- distribution
Upgrade
Distribution Response - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package_ String
- Required - The package this Upgrade is for.
- parsed
Version VersionResponse - Required - The version of the package in a machine + human readable form.
- distribution
Upgrade
Distribution Response - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package string
- Required - The package this Upgrade is for.
- parsed
Version VersionResponse - Required - The version of the package in a machine + human readable form.
- distribution
Upgrade
Distribution Response - Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package str
- Required - The package this Upgrade is for.
- parsed_
version VersionResponse - Required - The version of the package in a machine + human readable form.
- distribution Property Map
- Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
- package String
- Required - The package this Upgrade is for.
- parsed
Version Property Map - Required - The version of the package in a machine + human readable form.
Version, VersionArgs
- Epoch int
- Used to correct mistakes in the version numbering scheme.
- Inclusive bool
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- Kind
Pulumi.
Google Native. Container Analysis. V1Alpha1. Version Kind - Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- Name string
- The main part of the version name.
- Revision string
- The iteration of the package build from the above version.
- Epoch int
- Used to correct mistakes in the version numbering scheme.
- Inclusive bool
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- Kind
Version
Kind - Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- Name string
- The main part of the version name.
- Revision string
- The iteration of the package build from the above version.
- epoch Integer
- Used to correct mistakes in the version numbering scheme.
- inclusive Boolean
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind
Version
Kind - Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name String
- The main part of the version name.
- revision String
- The iteration of the package build from the above version.
- epoch number
- Used to correct mistakes in the version numbering scheme.
- inclusive boolean
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind
Version
Kind - Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name string
- The main part of the version name.
- revision string
- The iteration of the package build from the above version.
- epoch int
- Used to correct mistakes in the version numbering scheme.
- inclusive bool
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind
Version
Kind - Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name str
- The main part of the version name.
- revision str
- The iteration of the package build from the above version.
- epoch Number
- Used to correct mistakes in the version numbering scheme.
- inclusive Boolean
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind "NORMAL" | "MINIMUM" | "MAXIMUM"
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name String
- The main part of the version name.
- revision String
- The iteration of the package build from the above version.
VersionKind, VersionKindArgs
- Normal
- NORMALA standard package version, defined by the other fields.
- Minimum
- MINIMUMA special version representing negative infinity, other fields are ignored.
- Maximum
- MAXIMUMA special version representing positive infinity, other fields are ignored.
- Version
Kind Normal - NORMALA standard package version, defined by the other fields.
- Version
Kind Minimum - MINIMUMA special version representing negative infinity, other fields are ignored.
- Version
Kind Maximum - MAXIMUMA special version representing positive infinity, other fields are ignored.
- Normal
- NORMALA standard package version, defined by the other fields.
- Minimum
- MINIMUMA special version representing negative infinity, other fields are ignored.
- Maximum
- MAXIMUMA special version representing positive infinity, other fields are ignored.
- Normal
- NORMALA standard package version, defined by the other fields.
- Minimum
- MINIMUMA special version representing negative infinity, other fields are ignored.
- Maximum
- MAXIMUMA special version representing positive infinity, other fields are ignored.
- NORMAL
- NORMALA standard package version, defined by the other fields.
- MINIMUM
- MINIMUMA special version representing negative infinity, other fields are ignored.
- MAXIMUM
- MAXIMUMA special version representing positive infinity, other fields are ignored.
- "NORMAL"
- NORMALA standard package version, defined by the other fields.
- "MINIMUM"
- MINIMUMA special version representing negative infinity, other fields are ignored.
- "MAXIMUM"
- MAXIMUMA special version representing positive infinity, other fields are ignored.
VersionResponse, VersionResponseArgs
- Epoch int
- Used to correct mistakes in the version numbering scheme.
- Inclusive bool
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- Kind string
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- Name string
- The main part of the version name.
- Revision string
- The iteration of the package build from the above version.
- Epoch int
- Used to correct mistakes in the version numbering scheme.
- Inclusive bool
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- Kind string
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- Name string
- The main part of the version name.
- Revision string
- The iteration of the package build from the above version.
- epoch Integer
- Used to correct mistakes in the version numbering scheme.
- inclusive Boolean
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind String
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name String
- The main part of the version name.
- revision String
- The iteration of the package build from the above version.
- epoch number
- Used to correct mistakes in the version numbering scheme.
- inclusive boolean
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind string
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name string
- The main part of the version name.
- revision string
- The iteration of the package build from the above version.
- epoch int
- Used to correct mistakes in the version numbering scheme.
- inclusive bool
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind str
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name str
- The main part of the version name.
- revision str
- The iteration of the package build from the above version.
- epoch Number
- Used to correct mistakes in the version numbering scheme.
- inclusive Boolean
- Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
- kind String
- Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
- name String
- The main part of the version name.
- revision String
- The iteration of the package build from the above version.
VexAssessment, VexAssessmentArgs
- Cve string
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- Impacts List<string>
- Contains information about the impact of this vulnerability, this will change with time.
- Justification
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Justification - Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- Note
Name string - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. -
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. URI> - Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- Remediations
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Remediation> - Specifies details on how to handle (and presumably, fix) a vulnerability.
- State
Pulumi.
Google Native. Container Analysis. V1Alpha1. Vex Assessment State - Provides the state of this Vulnerability assessment.
- Vulnerability
Id string - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- Cve string
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- Impacts []string
- Contains information about the impact of this vulnerability, this will change with time.
- Justification Justification
- Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- Note
Name string - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - []URI
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- Remediations []Remediation
- Specifies details on how to handle (and presumably, fix) a vulnerability.
- State
Vex
Assessment State - Provides the state of this Vulnerability assessment.
- Vulnerability
Id string - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve String
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts List<String>
- Contains information about the impact of this vulnerability, this will change with time.
- justification Justification
- Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note
Name String - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - List<URI>
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations List<Remediation>
- Specifies details on how to handle (and presumably, fix) a vulnerability.
- state
Vex
Assessment State - Provides the state of this Vulnerability assessment.
- vulnerability
Id String - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve string
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts string[]
- Contains information about the impact of this vulnerability, this will change with time.
- justification Justification
- Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note
Name string - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - URI[]
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations Remediation[]
- Specifies details on how to handle (and presumably, fix) a vulnerability.
- state
Vex
Assessment State - Provides the state of this Vulnerability assessment.
- vulnerability
Id string - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve str
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts Sequence[str]
- Contains information about the impact of this vulnerability, this will change with time.
- justification Justification
- Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note_
name str - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - Sequence[URI]
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations Sequence[Remediation]
- Specifies details on how to handle (and presumably, fix) a vulnerability.
- state
Vex
Assessment State - Provides the state of this Vulnerability assessment.
- vulnerability_
id str - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve String
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts List<String>
- Contains information about the impact of this vulnerability, this will change with time.
- justification Property Map
- Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note
Name String - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - List<Property Map>
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations List<Property Map>
- Specifies details on how to handle (and presumably, fix) a vulnerability.
- state "STATE_UNSPECIFIED" | "AFFECTED" | "NOT_AFFECTED" | "FIXED" | "UNDER_INVESTIGATION"
- Provides the state of this Vulnerability assessment.
- vulnerability
Id String - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
VexAssessmentResponse, VexAssessmentResponseArgs
- Cve string
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- Impacts List<string>
- Contains information about the impact of this vulnerability, this will change with time.
- Justification
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Justification Response - Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- Note
Name string - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. -
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. URIResponse> - Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- Remediations
List<Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Remediation Response> - Specifies details on how to handle (and presumably, fix) a vulnerability.
- State string
- Provides the state of this Vulnerability assessment.
- Vulnerability
Id string - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- Cve string
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- Impacts []string
- Contains information about the impact of this vulnerability, this will change with time.
- Justification
Justification
Response - Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- Note
Name string - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - []URIResponse
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- Remediations
[]Remediation
Response - Specifies details on how to handle (and presumably, fix) a vulnerability.
- State string
- Provides the state of this Vulnerability assessment.
- Vulnerability
Id string - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve String
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts List<String>
- Contains information about the impact of this vulnerability, this will change with time.
- justification
Justification
Response - Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note
Name String - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - List<URIResponse>
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations
List<Remediation
Response> - Specifies details on how to handle (and presumably, fix) a vulnerability.
- state String
- Provides the state of this Vulnerability assessment.
- vulnerability
Id String - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve string
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts string[]
- Contains information about the impact of this vulnerability, this will change with time.
- justification
Justification
Response - Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note
Name string - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - URIResponse[]
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations
Remediation
Response[] - Specifies details on how to handle (and presumably, fix) a vulnerability.
- state string
- Provides the state of this Vulnerability assessment.
- vulnerability
Id string - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve str
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts Sequence[str]
- Contains information about the impact of this vulnerability, this will change with time.
- justification
Justification
Response - Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note_
name str - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - Sequence[URIResponse]
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations
Sequence[Remediation
Response] - Specifies details on how to handle (and presumably, fix) a vulnerability.
- state str
- Provides the state of this Vulnerability assessment.
- vulnerability_
id str - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
- cve String
- Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
- impacts List<String>
- Contains information about the impact of this vulnerability, this will change with time.
- justification Property Map
- Justification provides the justification when the state of the assessment if NOT_AFFECTED.
- note
Name String - The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form:
projects/[PROJECT_ID]/notes/[NOTE_ID]. - List<Property Map>
- Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
- remediations List<Property Map>
- Specifies details on how to handle (and presumably, fix) a vulnerability.
- state String
- Provides the state of this Vulnerability assessment.
- vulnerability
Id String - The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
VexAssessmentState, VexAssessmentStateArgs
- State
Unspecified - STATE_UNSPECIFIEDNo state is specified.
- Affected
- AFFECTEDThis product is known to be affected by this vulnerability.
- Not
Affected - NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
- Fixed
- FIXEDThis product contains a fix for this vulnerability.
- Under
Investigation - UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
- Vex
Assessment State State Unspecified - STATE_UNSPECIFIEDNo state is specified.
- Vex
Assessment State Affected - AFFECTEDThis product is known to be affected by this vulnerability.
- Vex
Assessment State Not Affected - NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
- Vex
Assessment State Fixed - FIXEDThis product contains a fix for this vulnerability.
- Vex
Assessment State Under Investigation - UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
- State
Unspecified - STATE_UNSPECIFIEDNo state is specified.
- Affected
- AFFECTEDThis product is known to be affected by this vulnerability.
- Not
Affected - NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
- Fixed
- FIXEDThis product contains a fix for this vulnerability.
- Under
Investigation - UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
- State
Unspecified - STATE_UNSPECIFIEDNo state is specified.
- Affected
- AFFECTEDThis product is known to be affected by this vulnerability.
- Not
Affected - NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
- Fixed
- FIXEDThis product contains a fix for this vulnerability.
- Under
Investigation - UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
- STATE_UNSPECIFIED
- STATE_UNSPECIFIEDNo state is specified.
- AFFECTED
- AFFECTEDThis product is known to be affected by this vulnerability.
- NOT_AFFECTED
- NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
- FIXED
- FIXEDThis product contains a fix for this vulnerability.
- UNDER_INVESTIGATION
- UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
- "STATE_UNSPECIFIED"
- STATE_UNSPECIFIEDNo state is specified.
- "AFFECTED"
- AFFECTEDThis product is known to be affected by this vulnerability.
- "NOT_AFFECTED"
- NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
- "FIXED"
- FIXEDThis product contains a fix for this vulnerability.
- "UNDER_INVESTIGATION"
- UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
VulnerabilityDetails, VulnerabilityDetailsArgs
- Cvss
V2 Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. CVSS - The CVSS v2 score of this vulnerability.
- Cvss
V3 Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. CVSS - The CVSS v3 score of this vulnerability.
- Effective
Severity Pulumi.Google Native. Container Analysis. V1Alpha1. Vulnerability Details Effective Severity - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- Extra
Details string - Occurrence-specific extra details about the vulnerability.
- Package
Issue List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Package Issue> - The set of affected locations and their fixes (if available) within the associated resource.
- Type string
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- Vex
Assessment Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vex Assessment - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- Cvss
V2 CVSS - The CVSS v2 score of this vulnerability.
- Cvss
V3 CVSS - The CVSS v3 score of this vulnerability.
- Effective
Severity VulnerabilityDetails Effective Severity - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- Extra
Details string - Occurrence-specific extra details about the vulnerability.
- Package
Issue []PackageIssue - The set of affected locations and their fixes (if available) within the associated resource.
- Type string
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- Vex
Assessment VexAssessment - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss
V2 CVSS - The CVSS v2 score of this vulnerability.
- cvss
V3 CVSS - The CVSS v3 score of this vulnerability.
- effective
Severity VulnerabilityDetails Effective Severity - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra
Details String - Occurrence-specific extra details about the vulnerability.
- package
Issue List<PackageIssue> - The set of affected locations and their fixes (if available) within the associated resource.
- type String
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex
Assessment VexAssessment - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss
V2 CVSS - The CVSS v2 score of this vulnerability.
- cvss
V3 CVSS - The CVSS v3 score of this vulnerability.
- effective
Severity VulnerabilityDetails Effective Severity - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra
Details string - Occurrence-specific extra details about the vulnerability.
- package
Issue PackageIssue[] - The set of affected locations and their fixes (if available) within the associated resource.
- type string
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex
Assessment VexAssessment - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss_
v2 CVSS - The CVSS v2 score of this vulnerability.
- cvss_
v3 CVSS - The CVSS v3 score of this vulnerability.
- effective_
severity VulnerabilityDetails Effective Severity - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra_
details str - Occurrence-specific extra details about the vulnerability.
- package_
issue Sequence[PackageIssue] - The set of affected locations and their fixes (if available) within the associated resource.
- type str
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex_
assessment VexAssessment - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss
V2 Property Map - The CVSS v2 score of this vulnerability.
- cvss
V3 Property Map - The CVSS v3 score of this vulnerability.
- effective
Severity "SEVERITY_UNSPECIFIED" | "MINIMAL" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra
Details String - Occurrence-specific extra details about the vulnerability.
- package
Issue List<Property Map> - The set of affected locations and their fixes (if available) within the associated resource.
- type String
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex
Assessment Property Map - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
VulnerabilityDetailsEffectiveSeverity, VulnerabilityDetailsEffectiveSeverityArgs
- Severity
Unspecified - SEVERITY_UNSPECIFIEDUnknown Impact
- Minimal
- MINIMALMinimal Impact
- Low
- LOWLow Impact
- Medium
- MEDIUMMedium Impact
- High
- HIGHHigh Impact
- Critical
- CRITICALCritical Impact
- Vulnerability
Details Effective Severity Severity Unspecified - SEVERITY_UNSPECIFIEDUnknown Impact
- Vulnerability
Details Effective Severity Minimal - MINIMALMinimal Impact
- Vulnerability
Details Effective Severity Low - LOWLow Impact
- Vulnerability
Details Effective Severity Medium - MEDIUMMedium Impact
- Vulnerability
Details Effective Severity High - HIGHHigh Impact
- Vulnerability
Details Effective Severity Critical - CRITICALCritical Impact
- Severity
Unspecified - SEVERITY_UNSPECIFIEDUnknown Impact
- Minimal
- MINIMALMinimal Impact
- Low
- LOWLow Impact
- Medium
- MEDIUMMedium Impact
- High
- HIGHHigh Impact
- Critical
- CRITICALCritical Impact
- Severity
Unspecified - SEVERITY_UNSPECIFIEDUnknown Impact
- Minimal
- MINIMALMinimal Impact
- Low
- LOWLow Impact
- Medium
- MEDIUMMedium Impact
- High
- HIGHHigh Impact
- Critical
- CRITICALCritical Impact
- SEVERITY_UNSPECIFIED
- SEVERITY_UNSPECIFIEDUnknown Impact
- MINIMAL
- MINIMALMinimal Impact
- LOW
- LOWLow Impact
- MEDIUM
- MEDIUMMedium Impact
- HIGH
- HIGHHigh Impact
- CRITICAL
- CRITICALCritical Impact
- "SEVERITY_UNSPECIFIED"
- SEVERITY_UNSPECIFIEDUnknown Impact
- "MINIMAL"
- MINIMALMinimal Impact
- "LOW"
- LOWLow Impact
- "MEDIUM"
- MEDIUMMedium Impact
- "HIGH"
- HIGHHigh Impact
- "CRITICAL"
- CRITICALCritical Impact
VulnerabilityDetailsResponse, VulnerabilityDetailsResponseArgs
- Cvss
Score double - The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
- Cvss
V2 Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. CVSSResponse - The CVSS v2 score of this vulnerability.
- Cvss
V3 Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. CVSSResponse - The CVSS v3 score of this vulnerability.
- Cvss
Version string - CVSS version used to populate cvss_score and severity.
- Effective
Severity string - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- Extra
Details string - Occurrence-specific extra details about the vulnerability.
- Package
Issue List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Package Issue Response> - The set of affected locations and their fixes (if available) within the associated resource.
- Severity string
- The note provider assigned Severity of the vulnerability.
- Type string
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- Vex
Assessment Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. Vex Assessment Response - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- Cvss
Score float64 - The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
- Cvss
V2 CVSSResponse - The CVSS v2 score of this vulnerability.
- Cvss
V3 CVSSResponse - The CVSS v3 score of this vulnerability.
- Cvss
Version string - CVSS version used to populate cvss_score and severity.
- Effective
Severity string - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- Extra
Details string - Occurrence-specific extra details about the vulnerability.
- Package
Issue []PackageIssue Response - The set of affected locations and their fixes (if available) within the associated resource.
- Severity string
- The note provider assigned Severity of the vulnerability.
- Type string
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- Vex
Assessment VexAssessment Response - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss
Score Double - The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
- cvss
V2 CVSSResponse - The CVSS v2 score of this vulnerability.
- cvss
V3 CVSSResponse - The CVSS v3 score of this vulnerability.
- cvss
Version String - CVSS version used to populate cvss_score and severity.
- effective
Severity String - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra
Details String - Occurrence-specific extra details about the vulnerability.
- package
Issue List<PackageIssue Response> - The set of affected locations and their fixes (if available) within the associated resource.
- severity String
- The note provider assigned Severity of the vulnerability.
- type String
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex
Assessment VexAssessment Response - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss
Score number - The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
- cvss
V2 CVSSResponse - The CVSS v2 score of this vulnerability.
- cvss
V3 CVSSResponse - The CVSS v3 score of this vulnerability.
- cvss
Version string - CVSS version used to populate cvss_score and severity.
- effective
Severity string - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra
Details string - Occurrence-specific extra details about the vulnerability.
- package
Issue PackageIssue Response[] - The set of affected locations and their fixes (if available) within the associated resource.
- severity string
- The note provider assigned Severity of the vulnerability.
- type string
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex
Assessment VexAssessment Response - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss_
score float - The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
- cvss_
v2 CVSSResponse - The CVSS v2 score of this vulnerability.
- cvss_
v3 CVSSResponse - The CVSS v3 score of this vulnerability.
- cvss_
version str - CVSS version used to populate cvss_score and severity.
- effective_
severity str - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra_
details str - Occurrence-specific extra details about the vulnerability.
- package_
issue Sequence[PackageIssue Response] - The set of affected locations and their fixes (if available) within the associated resource.
- severity str
- The note provider assigned Severity of the vulnerability.
- type str
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex_
assessment VexAssessment Response - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
- cvss
Score Number - The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
- cvss
V2 Property Map - The CVSS v2 score of this vulnerability.
- cvss
V3 Property Map - The CVSS v3 score of this vulnerability.
- cvss
Version String - CVSS version used to populate cvss_score and severity.
- effective
Severity String - The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues.
- extra
Details String - Occurrence-specific extra details about the vulnerability.
- package
Issue List<Property Map> - The set of affected locations and their fixes (if available) within the associated resource.
- severity String
- The note provider assigned Severity of the vulnerability.
- type String
- The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types.
- vex
Assessment Property Map - VexAssessment provides all publisher provided Vex information that is related to this vulnerability for this resource.
VulnerabilityLocation, VulnerabilityLocationArgs
- Cpe
Uri string - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- File
Location List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. File Location> - The file location at which this package was found.
- Package string
- The package being described.
- Version
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Version - The version of the package being described. This field can be used as a filter in list requests.
- Cpe
Uri string - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- File
Location []FileLocation - The file location at which this package was found.
- Package string
- The package being described.
- Version Version
- The version of the package being described. This field can be used as a filter in list requests.
- cpe
Uri String - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file
Location List<FileLocation> - The file location at which this package was found.
- package_ String
- The package being described.
- version Version
- The version of the package being described. This field can be used as a filter in list requests.
- cpe
Uri string - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file
Location FileLocation[] - The file location at which this package was found.
- package string
- The package being described.
- version Version
- The version of the package being described. This field can be used as a filter in list requests.
- cpe_
uri str - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file_
location Sequence[FileLocation] - The file location at which this package was found.
- package str
- The package being described.
- version Version
- The version of the package being described. This field can be used as a filter in list requests.
- cpe
Uri String - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file
Location List<Property Map> - The file location at which this package was found.
- package String
- The package being described.
- version Property Map
- The version of the package being described. This field can be used as a filter in list requests.
VulnerabilityLocationResponse, VulnerabilityLocationResponseArgs
- Cpe
Uri string - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- File
Location List<Pulumi.Google Native. Container Analysis. V1Alpha1. Inputs. File Location Response> - The file location at which this package was found.
- Package string
- The package being described.
- Version
Pulumi.
Google Native. Container Analysis. V1Alpha1. Inputs. Version Response - The version of the package being described. This field can be used as a filter in list requests.
- Cpe
Uri string - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- File
Location []FileLocation Response - The file location at which this package was found.
- Package string
- The package being described.
- Version
Version
Response - The version of the package being described. This field can be used as a filter in list requests.
- cpe
Uri String - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file
Location List<FileLocation Response> - The file location at which this package was found.
- package_ String
- The package being described.
- version
Version
Response - The version of the package being described. This field can be used as a filter in list requests.
- cpe
Uri string - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file
Location FileLocation Response[] - The file location at which this package was found.
- package string
- The package being described.
- version
Version
Response - The version of the package being described. This field can be used as a filter in list requests.
- cpe_
uri str - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file_
location Sequence[FileLocation Response] - The file location at which this package was found.
- package str
- The package being described.
- version
Version
Response - The version of the package being described. This field can be used as a filter in list requests.
- cpe
Uri String - The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
- file
Location List<Property Map> - The file location at which this package was found.
- package String
- The package being described.
- version Property Map
- The version of the package being described. This field can be used as a filter in list requests.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi