Google Cloud Native v0.32.0, Nov 29 23

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

pulumi/pulumi-google-native

google-native.containeranalysis/v1beta1.getOccurrence

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

pulumi/pulumi-google-native

Using getOccurrence

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getOccurrence(args: GetOccurrenceArgs, opts?: InvokeOptions): Promise<GetOccurrenceResult>
function getOccurrenceOutput(args: GetOccurrenceOutputArgs, opts?: InvokeOptions): Output<GetOccurrenceResult>

def get_occurrence(occurrence_id: Optional[str] = None,
                   project: Optional[str] = None,
                   opts: Optional[InvokeOptions] = None) -> GetOccurrenceResult
def get_occurrence_output(occurrence_id: Optional[pulumi.Input[str]] = None,
                   project: Optional[pulumi.Input[str]] = None,
                   opts: Optional[InvokeOptions] = None) -> Output[GetOccurrenceResult]

func LookupOccurrence(ctx *Context, args *LookupOccurrenceArgs, opts ...InvokeOption) (*LookupOccurrenceResult, error)
func LookupOccurrenceOutput(ctx *Context, args *LookupOccurrenceOutputArgs, opts ...InvokeOption) LookupOccurrenceResultOutput

> Note: This function is named LookupOccurrence in the Go SDK.

public static class GetOccurrence 
{
    public static Task<GetOccurrenceResult> InvokeAsync(GetOccurrenceArgs args, InvokeOptions? opts = null)
    public static Output<GetOccurrenceResult> Invoke(GetOccurrenceInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetOccurrenceResult> getOccurrence(GetOccurrenceArgs args, InvokeOptions options)
public static Output<GetOccurrenceResult> getOccurrence(GetOccurrenceArgs args, InvokeOptions options)

fn::invoke:
  function: google-native:containeranalysis/v1beta1:getOccurrence
  arguments:
    # arguments dictionary

The following arguments are supported:

OccurrenceId string
Project string

OccurrenceId string
Project string

occurrenceId String
project String

occurrenceId string
project string

occurrence_id str
project str

occurrenceId String
project String

getOccurrence Result

The following output properties are available:

Attestation Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.DetailsResponse: Describes an attestation of an artifact.
Build Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1BuildDetailsResponse: Describes a verifiable build.
CreateTime string: The time this occurrence was created.
Deployment Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1DeploymentDetailsResponse: Describes the deployment of an artifact on a runtime.
DerivedImage Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1ImageDetailsResponse: Describes how this resource derives from the basis in the associated note.
Discovered Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1DiscoveryDetailsResponse: Describes when a resource was discovered.
Envelope Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.EnvelopeResponse: https://github.com/secure-systems-lab/dsse
Installation Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1PackageDetailsResponse: Describes the installation of a package on the linked resource.
Intoto Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1IntotoDetailsResponse: Describes a specific in-toto link.
Kind string: This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
Name string: The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
NoteName string: Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
Remediation string: A description of actions that can be taken to remedy the note.
Resource Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.ResourceResponse: Immutable. The resource for which the occurrence applies.
Sbom Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.DocumentOccurrenceResponse: Describes a specific software bill of materials document.
SbomReference Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.SBOMReferenceOccurrenceResponse: Describes a specific SBOM reference occurrences.
SpdxFile Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.FileOccurrenceResponse: Describes a specific SPDX File.
SpdxPackage Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.PackageInfoOccurrenceResponse: Describes a specific SPDX Package.
SpdxRelationship Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.RelationshipOccurrenceResponse: Describes a specific SPDX Relationship.
UpdateTime string: The time this occurrence was last updated.
Vulnerability Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Outputs.GrafeasV1beta1VulnerabilityDetailsResponse: Describes a security vulnerability.

Attestation DetailsResponse: Describes an attestation of an artifact.
Build GrafeasV1beta1BuildDetailsResponse: Describes a verifiable build.
CreateTime string: The time this occurrence was created.
Deployment GrafeasV1beta1DeploymentDetailsResponse: Describes the deployment of an artifact on a runtime.
DerivedImage GrafeasV1beta1ImageDetailsResponse: Describes how this resource derives from the basis in the associated note.
Discovered GrafeasV1beta1DiscoveryDetailsResponse: Describes when a resource was discovered.
Envelope EnvelopeResponse: https://github.com/secure-systems-lab/dsse
Installation GrafeasV1beta1PackageDetailsResponse: Describes the installation of a package on the linked resource.
Intoto GrafeasV1beta1IntotoDetailsResponse: Describes a specific in-toto link.
Kind string: This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
Name string: The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
NoteName string: Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
Remediation string: A description of actions that can be taken to remedy the note.
Resource ResourceResponse: Immutable. The resource for which the occurrence applies.
Sbom DocumentOccurrenceResponse: Describes a specific software bill of materials document.
SbomReference SBOMReferenceOccurrenceResponse: Describes a specific SBOM reference occurrences.
SpdxFile FileOccurrenceResponse: Describes a specific SPDX File.
SpdxPackage PackageInfoOccurrenceResponse: Describes a specific SPDX Package.
SpdxRelationship RelationshipOccurrenceResponse: Describes a specific SPDX Relationship.
UpdateTime string: The time this occurrence was last updated.
Vulnerability GrafeasV1beta1VulnerabilityDetailsResponse: Describes a security vulnerability.

attestation DetailsResponse: Describes an attestation of an artifact.
build GrafeasV1beta1BuildDetailsResponse: Describes a verifiable build.
createTime String: The time this occurrence was created.
deployment GrafeasV1beta1DeploymentDetailsResponse: Describes the deployment of an artifact on a runtime.
derivedImage GrafeasV1beta1ImageDetailsResponse: Describes how this resource derives from the basis in the associated note.
discovered GrafeasV1beta1DiscoveryDetailsResponse: Describes when a resource was discovered.
envelope EnvelopeResponse: https://github.com/secure-systems-lab/dsse
installation GrafeasV1beta1PackageDetailsResponse: Describes the installation of a package on the linked resource.
intoto GrafeasV1beta1IntotoDetailsResponse: Describes a specific in-toto link.
kind String: This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
name String: The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
noteName String: Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
remediation String: A description of actions that can be taken to remedy the note.
resource ResourceResponse: Immutable. The resource for which the occurrence applies.
sbom DocumentOccurrenceResponse: Describes a specific software bill of materials document.
sbomReference SBOMReferenceOccurrenceResponse: Describes a specific SBOM reference occurrences.
spdxFile FileOccurrenceResponse: Describes a specific SPDX File.
spdxPackage PackageInfoOccurrenceResponse: Describes a specific SPDX Package.
spdxRelationship RelationshipOccurrenceResponse: Describes a specific SPDX Relationship.
updateTime String: The time this occurrence was last updated.
vulnerability GrafeasV1beta1VulnerabilityDetailsResponse: Describes a security vulnerability.

attestation DetailsResponse: Describes an attestation of an artifact.
build GrafeasV1beta1BuildDetailsResponse: Describes a verifiable build.
createTime string: The time this occurrence was created.
deployment GrafeasV1beta1DeploymentDetailsResponse: Describes the deployment of an artifact on a runtime.
derivedImage GrafeasV1beta1ImageDetailsResponse: Describes how this resource derives from the basis in the associated note.
discovered GrafeasV1beta1DiscoveryDetailsResponse: Describes when a resource was discovered.
envelope EnvelopeResponse: https://github.com/secure-systems-lab/dsse
installation GrafeasV1beta1PackageDetailsResponse: Describes the installation of a package on the linked resource.
intoto GrafeasV1beta1IntotoDetailsResponse: Describes a specific in-toto link.
kind string: This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
name string: The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
noteName string: Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
remediation string: A description of actions that can be taken to remedy the note.
resource ResourceResponse: Immutable. The resource for which the occurrence applies.
sbom DocumentOccurrenceResponse: Describes a specific software bill of materials document.
sbomReference SBOMReferenceOccurrenceResponse: Describes a specific SBOM reference occurrences.
spdxFile FileOccurrenceResponse: Describes a specific SPDX File.
spdxPackage PackageInfoOccurrenceResponse: Describes a specific SPDX Package.
spdxRelationship RelationshipOccurrenceResponse: Describes a specific SPDX Relationship.
updateTime string: The time this occurrence was last updated.
vulnerability GrafeasV1beta1VulnerabilityDetailsResponse: Describes a security vulnerability.

attestation DetailsResponse: Describes an attestation of an artifact.
build GrafeasV1beta1BuildDetailsResponse: Describes a verifiable build.
create_time str: The time this occurrence was created.
deployment GrafeasV1beta1DeploymentDetailsResponse: Describes the deployment of an artifact on a runtime.
derived_image GrafeasV1beta1ImageDetailsResponse: Describes how this resource derives from the basis in the associated note.
discovered GrafeasV1beta1DiscoveryDetailsResponse: Describes when a resource was discovered.
envelope EnvelopeResponse: https://github.com/secure-systems-lab/dsse
installation GrafeasV1beta1PackageDetailsResponse: Describes the installation of a package on the linked resource.
intoto GrafeasV1beta1IntotoDetailsResponse: Describes a specific in-toto link.
kind str: This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
name str: The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
note_name str: Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
remediation str: A description of actions that can be taken to remedy the note.
resource ResourceResponse: Immutable. The resource for which the occurrence applies.
sbom DocumentOccurrenceResponse: Describes a specific software bill of materials document.
sbom_reference SBOMReferenceOccurrenceResponse: Describes a specific SBOM reference occurrences.
spdx_file FileOccurrenceResponse: Describes a specific SPDX File.
spdx_package PackageInfoOccurrenceResponse: Describes a specific SPDX Package.
spdx_relationship RelationshipOccurrenceResponse: Describes a specific SPDX Relationship.
update_time str: The time this occurrence was last updated.
vulnerability GrafeasV1beta1VulnerabilityDetailsResponse: Describes a security vulnerability.

attestation Property Map: Describes an attestation of an artifact.
build Property Map: Describes a verifiable build.
createTime String: The time this occurrence was created.
deployment Property Map: Describes the deployment of an artifact on a runtime.
derivedImage Property Map: Describes how this resource derives from the basis in the associated note.
discovered Property Map: Describes when a resource was discovered.
envelope Property Map: https://github.com/secure-systems-lab/dsse
installation Property Map: Describes the installation of a package on the linked resource.
intoto Property Map: Describes a specific in-toto link.
kind String: This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
name String: The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
noteName String: Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
remediation String: A description of actions that can be taken to remedy the note.
resource Property Map: Immutable. The resource for which the occurrence applies.
sbom Property Map: Describes a specific software bill of materials document.
sbomReference Property Map: Describes a specific SBOM reference occurrences.
spdxFile Property Map: Describes a specific SPDX File.
spdxPackage Property Map: Describes a specific SPDX Package.
spdxRelationship Property Map: Describes a specific SPDX Relationship.
updateTime String: The time this occurrence was last updated.
vulnerability Property Map: Describes a security vulnerability.

Supporting Types

AliasContextResponse

Kind string: The alias kind.
Name string: The alias name.

Kind string: The alias kind.
Name string: The alias name.

kind String: The alias kind.
name String: The alias name.

kind string: The alias kind.
name string: The alias name.

kind str: The alias kind.
name str: The alias name.

kind String: The alias kind.
name String: The alias name.

AnalysisCompletedResponse

AnalysisType List<string>

AnalysisType []string

analysisType List<String>

analysisType string[]

analysis_type Sequence[str]

analysisType List<String>

ArtifactHashesResponse

Sha256 string

Sha256 string

sha256 String

sha256 string

sha256 str

sha256 String

ArtifactResponse

Checksum string: Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
Names List<string>: Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

Checksum string: Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
Names []string: Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

checksum String: Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
names List<String>: Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

checksum string: Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
names string[]: Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

checksum str: Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
names Sequence[str]: Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

checksum String: Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
names List<String>: Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

BuildProvenanceResponse

BuildOptions Dictionary<string, string>: Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
BuilderVersion string: Version string of the builder at the time this build was executed.
BuiltArtifacts List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ArtifactResponse>: Output of the build.
Commands List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.CommandResponse>: Commands requested by the build.
CreateTime string: Time at which the build was created.
Creator string: E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
EndTime string: Time at which execution of the build was finished.
LogsUri string: URI where any logs for this provenance were written.
Project string: ID of the project.
SourceProvenance Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SourceResponse: Details of the Source input to the build.
StartTime string: Time at which execution of the build was started.
TriggerId string: Trigger identifier if the build was triggered automatically; empty if not.

BuildOptions map[string]string: Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
BuilderVersion string: Version string of the builder at the time this build was executed.
BuiltArtifacts []ArtifactResponse: Output of the build.
Commands []CommandResponse: Commands requested by the build.
CreateTime string: Time at which the build was created.
Creator string: E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
EndTime string: Time at which execution of the build was finished.
LogsUri string: URI where any logs for this provenance were written.
Project string: ID of the project.
SourceProvenance SourceResponse: Details of the Source input to the build.
StartTime string: Time at which execution of the build was started.
TriggerId string: Trigger identifier if the build was triggered automatically; empty if not.

buildOptions Map<String,String>: Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
builderVersion String: Version string of the builder at the time this build was executed.
builtArtifacts List<ArtifactResponse>: Output of the build.
commands List<CommandResponse>: Commands requested by the build.
createTime String: Time at which the build was created.
creator String: E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
endTime String: Time at which execution of the build was finished.
logsUri String: URI where any logs for this provenance were written.
project String: ID of the project.
sourceProvenance SourceResponse: Details of the Source input to the build.
startTime String: Time at which execution of the build was started.
triggerId String: Trigger identifier if the build was triggered automatically; empty if not.

buildOptions {[key: string]: string}: Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
builderVersion string: Version string of the builder at the time this build was executed.
builtArtifacts ArtifactResponse[]: Output of the build.
commands CommandResponse[]: Commands requested by the build.
createTime string: Time at which the build was created.
creator string: E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
endTime string: Time at which execution of the build was finished.
logsUri string: URI where any logs for this provenance were written.
project string: ID of the project.
sourceProvenance SourceResponse: Details of the Source input to the build.
startTime string: Time at which execution of the build was started.
triggerId string: Trigger identifier if the build was triggered automatically; empty if not.

build_options Mapping[str, str]: Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
builder_version str: Version string of the builder at the time this build was executed.
built_artifacts Sequence[ArtifactResponse]: Output of the build.
commands Sequence[CommandResponse]: Commands requested by the build.
create_time str: Time at which the build was created.
creator str: E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
end_time str: Time at which execution of the build was finished.
logs_uri str: URI where any logs for this provenance were written.
project str: ID of the project.
source_provenance SourceResponse: Details of the Source input to the build.
start_time str: Time at which execution of the build was started.
trigger_id str: Trigger identifier if the build was triggered automatically; empty if not.

buildOptions Map<String>: Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
builderVersion String: Version string of the builder at the time this build was executed.
builtArtifacts List<Property Map>: Output of the build.
commands List<Property Map>: Commands requested by the build.
createTime String: Time at which the build was created.
creator String: E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
endTime String: Time at which execution of the build was finished.
logsUri String: URI where any logs for this provenance were written.
project String: ID of the project.
sourceProvenance Property Map: Details of the Source input to the build.
startTime String: Time at which execution of the build was started.
triggerId String: Trigger identifier if the build was triggered automatically; empty if not.

ByProductsResponse

CustomValues Dictionary<string, string>

CustomValues map[string]string

customValues Map<String,String>

customValues {[key: string]: string}

custom_values Mapping[str, str]

customValues Map<String>

CVSSResponse

AttackComplexity string: Defined in CVSS v3, CVSS v2
AttackVector string: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
Authentication string: Defined in CVSS v2
AvailabilityImpact string: Defined in CVSS v3, CVSS v2
BaseScore double: The base score is a function of the base metric scores.
ConfidentialityImpact string: Defined in CVSS v3, CVSS v2
ExploitabilityScore double
ImpactScore double
IntegrityImpact string: Defined in CVSS v3, CVSS v2
PrivilegesRequired string: Defined in CVSS v3
Scope string: Defined in CVSS v3
UserInteraction string: Defined in CVSS v3

AttackComplexity string: Defined in CVSS v3, CVSS v2
AttackVector string: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
Authentication string: Defined in CVSS v2
AvailabilityImpact string: Defined in CVSS v3, CVSS v2
BaseScore float64: The base score is a function of the base metric scores.
ConfidentialityImpact string: Defined in CVSS v3, CVSS v2
ExploitabilityScore float64
ImpactScore float64
IntegrityImpact string: Defined in CVSS v3, CVSS v2
PrivilegesRequired string: Defined in CVSS v3
Scope string: Defined in CVSS v3
UserInteraction string: Defined in CVSS v3

attackComplexity String: Defined in CVSS v3, CVSS v2
attackVector String: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication String: Defined in CVSS v2
availabilityImpact String: Defined in CVSS v3, CVSS v2
baseScore Double: The base score is a function of the base metric scores.
confidentialityImpact String: Defined in CVSS v3, CVSS v2
exploitabilityScore Double
impactScore Double
integrityImpact String: Defined in CVSS v3, CVSS v2
privilegesRequired String: Defined in CVSS v3
scope String: Defined in CVSS v3
userInteraction String: Defined in CVSS v3

attackComplexity string: Defined in CVSS v3, CVSS v2
attackVector string: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication string: Defined in CVSS v2
availabilityImpact string: Defined in CVSS v3, CVSS v2
baseScore number: The base score is a function of the base metric scores.
confidentialityImpact string: Defined in CVSS v3, CVSS v2
exploitabilityScore number
impactScore number
integrityImpact string: Defined in CVSS v3, CVSS v2
privilegesRequired string: Defined in CVSS v3
scope string: Defined in CVSS v3
userInteraction string: Defined in CVSS v3

attack_complexity str: Defined in CVSS v3, CVSS v2
attack_vector str: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication str: Defined in CVSS v2
availability_impact str: Defined in CVSS v3, CVSS v2
base_score float: The base score is a function of the base metric scores.
confidentiality_impact str: Defined in CVSS v3, CVSS v2
exploitability_score float
impact_score float
integrity_impact str: Defined in CVSS v3, CVSS v2
privileges_required str: Defined in CVSS v3
scope str: Defined in CVSS v3
user_interaction str: Defined in CVSS v3

attackComplexity String: Defined in CVSS v3, CVSS v2
attackVector String: Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication String: Defined in CVSS v2
availabilityImpact String: Defined in CVSS v3, CVSS v2
baseScore Number: The base score is a function of the base metric scores.
confidentialityImpact String: Defined in CVSS v3, CVSS v2
exploitabilityScore Number
impactScore Number
integrityImpact String: Defined in CVSS v3, CVSS v2
privilegesRequired String: Defined in CVSS v3
scope String: Defined in CVSS v3
userInteraction String: Defined in CVSS v3

CloudRepoSourceContextResponse

AliasContext Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.AliasContextResponse: An alias, which may be a branch or tag.
RepoId Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.RepoIdResponse: The ID of the repo.
RevisionId string: A revision ID.

AliasContext AliasContextResponse: An alias, which may be a branch or tag.
RepoId RepoIdResponse: The ID of the repo.
RevisionId string: A revision ID.

aliasContext AliasContextResponse: An alias, which may be a branch or tag.
repoId RepoIdResponse: The ID of the repo.
revisionId String: A revision ID.

aliasContext AliasContextResponse: An alias, which may be a branch or tag.
repoId RepoIdResponse: The ID of the repo.
revisionId string: A revision ID.

alias_context AliasContextResponse: An alias, which may be a branch or tag.
repo_id RepoIdResponse: The ID of the repo.
revision_id str: A revision ID.

aliasContext Property Map: An alias, which may be a branch or tag.
repoId Property Map: The ID of the repo.
revisionId String: A revision ID.

CommandResponse

Args List<string>: Command-line arguments used when executing this command.
Dir string: Working directory (relative to project source root) used when running this command.
Env List<string>: Environment variables set before running this command.
Name string: Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
WaitFor List<string>: The ID(s) of the command(s) that this command depends on.

Args []string: Command-line arguments used when executing this command.
Dir string: Working directory (relative to project source root) used when running this command.
Env []string: Environment variables set before running this command.
Name string: Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
WaitFor []string: The ID(s) of the command(s) that this command depends on.

args List<String>: Command-line arguments used when executing this command.
dir String: Working directory (relative to project source root) used when running this command.
env List<String>: Environment variables set before running this command.
name String: Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
waitFor List<String>: The ID(s) of the command(s) that this command depends on.

args string[]: Command-line arguments used when executing this command.
dir string: Working directory (relative to project source root) used when running this command.
env string[]: Environment variables set before running this command.
name string: Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
waitFor string[]: The ID(s) of the command(s) that this command depends on.

args Sequence[str]: Command-line arguments used when executing this command.
dir str: Working directory (relative to project source root) used when running this command.
env Sequence[str]: Environment variables set before running this command.
name str: Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
wait_for Sequence[str]: The ID(s) of the command(s) that this command depends on.

args List<String>: Command-line arguments used when executing this command.
dir String: Working directory (relative to project source root) used when running this command.
env List<String>: Environment variables set before running this command.
name String: Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
waitFor List<String>: The ID(s) of the command(s) that this command depends on.

DeploymentResponse

Address string: Address of the runtime element hosting this deployment.
Config string: Configuration used to create this deployment.
DeployTime string: Beginning of the lifetime of this deployment.
Platform string: Platform hosting this deployment.
ResourceUri List<string>: Resource URI for the artifact being deployed taken from the deployable field with the same name.
UndeployTime string: End of the lifetime of this deployment.
UserEmail string: Identity of the user that triggered this deployment.

Address string: Address of the runtime element hosting this deployment.
Config string: Configuration used to create this deployment.
DeployTime string: Beginning of the lifetime of this deployment.
Platform string: Platform hosting this deployment.
ResourceUri []string: Resource URI for the artifact being deployed taken from the deployable field with the same name.
UndeployTime string: End of the lifetime of this deployment.
UserEmail string: Identity of the user that triggered this deployment.

address String: Address of the runtime element hosting this deployment.
config String: Configuration used to create this deployment.
deployTime String: Beginning of the lifetime of this deployment.
platform String: Platform hosting this deployment.
resourceUri List<String>: Resource URI for the artifact being deployed taken from the deployable field with the same name.
undeployTime String: End of the lifetime of this deployment.
userEmail String: Identity of the user that triggered this deployment.

address string: Address of the runtime element hosting this deployment.
config string: Configuration used to create this deployment.
deployTime string: Beginning of the lifetime of this deployment.
platform string: Platform hosting this deployment.
resourceUri string[]: Resource URI for the artifact being deployed taken from the deployable field with the same name.
undeployTime string: End of the lifetime of this deployment.
userEmail string: Identity of the user that triggered this deployment.

address str: Address of the runtime element hosting this deployment.
config str: Configuration used to create this deployment.
deploy_time str: Beginning of the lifetime of this deployment.
platform str: Platform hosting this deployment.
resource_uri Sequence[str]: Resource URI for the artifact being deployed taken from the deployable field with the same name.
undeploy_time str: End of the lifetime of this deployment.
user_email str: Identity of the user that triggered this deployment.

address String: Address of the runtime element hosting this deployment.
config String: Configuration used to create this deployment.
deployTime String: Beginning of the lifetime of this deployment.
platform String: Platform hosting this deployment.
resourceUri List<String>: Resource URI for the artifact being deployed taken from the deployable field with the same name.
undeployTime String: End of the lifetime of this deployment.
userEmail String: Identity of the user that triggered this deployment.

DerivedResponse

BaseResourceUrl string: This contains the base image URL for the derived image occurrence.
Distance int: The number of layers by which this image differs from the associated image basis.
Fingerprint Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.FingerprintResponse: The fingerprint of the derived image.
LayerInfo List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.LayerResponse>: This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

BaseResourceUrl string: This contains the base image URL for the derived image occurrence.
Distance int: The number of layers by which this image differs from the associated image basis.
Fingerprint FingerprintResponse: The fingerprint of the derived image.
LayerInfo []LayerResponse: This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

baseResourceUrl String: This contains the base image URL for the derived image occurrence.
distance Integer: The number of layers by which this image differs from the associated image basis.
fingerprint FingerprintResponse: The fingerprint of the derived image.
layerInfo List<LayerResponse>: This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

baseResourceUrl string: This contains the base image URL for the derived image occurrence.
distance number: The number of layers by which this image differs from the associated image basis.
fingerprint FingerprintResponse: The fingerprint of the derived image.
layerInfo LayerResponse[]: This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

base_resource_url str: This contains the base image URL for the derived image occurrence.
distance int: The number of layers by which this image differs from the associated image basis.
fingerprint FingerprintResponse: The fingerprint of the derived image.
layer_info Sequence[LayerResponse]: This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

baseResourceUrl String: This contains the base image URL for the derived image occurrence.
distance Number: The number of layers by which this image differs from the associated image basis.
fingerprint Property Map: The fingerprint of the derived image.
layerInfo List<Property Map>: This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

DetailsResponse

Attestation Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.AttestationResponse: Attestation for the resource.

Attestation AttestationResponse: Attestation for the resource.

attestation AttestationResponse: Attestation for the resource.

attestation AttestationResponse: Attestation for the resource.

attestation AttestationResponse: Attestation for the resource.

attestation Property Map: Attestation for the resource.

DiscoveredResponse

AnalysisCompleted Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.AnalysisCompletedResponse
AnalysisError List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.StatusResponse>: Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
AnalysisStatus string: The status of discovery for the resource.
AnalysisStatusError Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.StatusResponse: When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
ContinuousAnalysis string: Whether the resource is continuously analyzed.
LastAnalysisTime string: The last time continuous analysis was done for this resource. Deprecated, do not use.
Deprecated: The last time continuous analysis was done for this resource. Deprecated, do not use.
LastScanTime string: The last time this resource was scanned.
SbomStatus Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SBOMStatusResponse: The status of an SBOM generation.

AnalysisCompleted AnalysisCompletedResponse
AnalysisError []StatusResponse: Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
AnalysisStatus string: The status of discovery for the resource.
AnalysisStatusError StatusResponse: When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
ContinuousAnalysis string: Whether the resource is continuously analyzed.
LastAnalysisTime string: The last time continuous analysis was done for this resource. Deprecated, do not use.
Deprecated: The last time continuous analysis was done for this resource. Deprecated, do not use.
LastScanTime string: The last time this resource was scanned.
SbomStatus SBOMStatusResponse: The status of an SBOM generation.

analysisCompleted AnalysisCompletedResponse
analysisError List<StatusResponse>: Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
analysisStatus String: The status of discovery for the resource.
analysisStatusError StatusResponse: When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
continuousAnalysis String: Whether the resource is continuously analyzed.
lastAnalysisTime String: The last time continuous analysis was done for this resource. Deprecated, do not use.
Deprecated: The last time continuous analysis was done for this resource. Deprecated, do not use.
lastScanTime String: The last time this resource was scanned.
sbomStatus SBOMStatusResponse: The status of an SBOM generation.

analysisCompleted AnalysisCompletedResponse
analysisError StatusResponse[]: Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
analysisStatus string: The status of discovery for the resource.
analysisStatusError StatusResponse: When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
continuousAnalysis string: Whether the resource is continuously analyzed.
lastAnalysisTime string: The last time continuous analysis was done for this resource. Deprecated, do not use.
Deprecated: The last time continuous analysis was done for this resource. Deprecated, do not use.
lastScanTime string: The last time this resource was scanned.
sbomStatus SBOMStatusResponse: The status of an SBOM generation.

analysis_completed AnalysisCompletedResponse
analysis_error Sequence[StatusResponse]: Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
analysis_status str: The status of discovery for the resource.
analysis_status_error StatusResponse: When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
continuous_analysis str: Whether the resource is continuously analyzed.
last_analysis_time str: The last time continuous analysis was done for this resource. Deprecated, do not use.
Deprecated: The last time continuous analysis was done for this resource. Deprecated, do not use.
last_scan_time str: The last time this resource was scanned.
sbom_status SBOMStatusResponse: The status of an SBOM generation.

analysisCompleted Property Map
analysisError List<Property Map>: Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
analysisStatus String: The status of discovery for the resource.
analysisStatusError Property Map: When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
continuousAnalysis String: Whether the resource is continuously analyzed.
lastAnalysisTime String: The last time continuous analysis was done for this resource. Deprecated, do not use.
Deprecated: The last time continuous analysis was done for this resource. Deprecated, do not use.
lastScanTime String: The last time this resource was scanned.
sbomStatus Property Map: The status of an SBOM generation.

DocumentOccurrenceResponse

CreateTime string: Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
CreatorComment string: A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
Creators List<string>: Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
DocumentComment string: A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
ExternalDocumentRefs List<string>: Identify any external SPDX documents referenced within this SPDX document
LicenseListVersion string: A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
Namespace string: Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
Title string: Identify name of this document as designated by creator

CreateTime string: Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
CreatorComment string: A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
Creators []string: Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
DocumentComment string: A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
ExternalDocumentRefs []string: Identify any external SPDX documents referenced within this SPDX document
LicenseListVersion string: A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
Namespace string: Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
Title string: Identify name of this document as designated by creator

createTime String: Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
creatorComment String: A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
creators List<String>: Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
documentComment String: A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
externalDocumentRefs List<String>: Identify any external SPDX documents referenced within this SPDX document
licenseListVersion String: A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
namespace String: Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
title String: Identify name of this document as designated by creator

createTime string: Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
creatorComment string: A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
creators string[]: Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
documentComment string: A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
externalDocumentRefs string[]: Identify any external SPDX documents referenced within this SPDX document
licenseListVersion string: A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
namespace string: Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
title string: Identify name of this document as designated by creator

create_time str: Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
creator_comment str: A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
creators Sequence[str]: Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
document_comment str: A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
external_document_refs Sequence[str]: Identify any external SPDX documents referenced within this SPDX document
license_list_version str: A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
namespace str: Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
title str: Identify name of this document as designated by creator

createTime String: Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
creatorComment String: A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
creators List<String>: Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
documentComment String: A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
externalDocumentRefs List<String>: Identify any external SPDX documents referenced within this SPDX document
licenseListVersion String: A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
namespace String: Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
title String: Identify name of this document as designated by creator

EnvelopeResponse

Payload string
PayloadType string
Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.EnvelopeSignatureResponse>

Payload string
PayloadType string
Signatures []EnvelopeSignatureResponse

payload String
payloadType String
signatures List<EnvelopeSignatureResponse>

payload string
payloadType string
signatures EnvelopeSignatureResponse[]

payload str
payload_type str
signatures Sequence[EnvelopeSignatureResponse]

payload String
payloadType String
signatures List<Property Map>

EnvelopeSignatureResponse

Keyid string
Sig string

Keyid string
Sig string

keyid String
sig String

keyid string
sig string

keyid str
sig str

keyid String
sig String

EnvironmentResponse

CustomValues Dictionary<string, string>

CustomValues map[string]string

customValues Map<String,String>

customValues {[key: string]: string}

custom_values Mapping[str, str]

customValues Map<String>

FileOccurrenceResponse

Attributions List<string>: This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
Comment string: This field provides a place for the SPDX file creator to record any general comments about the file
Contributors List<string>: This field provides a place for the SPDX file creator to record file contributors
Copyright string: Identify the copyright holder of the file, as well as any dates present
FilesLicenseInfo List<string>: This field contains the license information actually found in the file, if any
LicenseConcluded Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.LicenseResponse: This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
Notice string: This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file

Attributions []string: This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
Comment string: This field provides a place for the SPDX file creator to record any general comments about the file
Contributors []string: This field provides a place for the SPDX file creator to record file contributors
Copyright string: Identify the copyright holder of the file, as well as any dates present
FilesLicenseInfo []string: This field contains the license information actually found in the file, if any
LicenseConcluded LicenseResponse: This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
Notice string: This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file

attributions List<String>: This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
comment String: This field provides a place for the SPDX file creator to record any general comments about the file
contributors List<String>: This field provides a place for the SPDX file creator to record file contributors
copyright String: Identify the copyright holder of the file, as well as any dates present
filesLicenseInfo List<String>: This field contains the license information actually found in the file, if any
licenseConcluded LicenseResponse: This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
notice String: This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file

attributions string[]: This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
comment string: This field provides a place for the SPDX file creator to record any general comments about the file
contributors string[]: This field provides a place for the SPDX file creator to record file contributors
copyright string: Identify the copyright holder of the file, as well as any dates present
filesLicenseInfo string[]: This field contains the license information actually found in the file, if any
licenseConcluded LicenseResponse: This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
notice string: This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file

attributions Sequence[str]: This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
comment str: This field provides a place for the SPDX file creator to record any general comments about the file
contributors Sequence[str]: This field provides a place for the SPDX file creator to record file contributors
copyright str: Identify the copyright holder of the file, as well as any dates present
files_license_info Sequence[str]: This field contains the license information actually found in the file, if any
license_concluded LicenseResponse: This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
notice str: This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file

attributions List<String>: This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
comment String: This field provides a place for the SPDX file creator to record any general comments about the file
contributors List<String>: This field provides a place for the SPDX file creator to record file contributors
copyright String: Identify the copyright holder of the file, as well as any dates present
filesLicenseInfo List<String>: This field contains the license information actually found in the file, if any
licenseConcluded Property Map: This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
notice String: This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file

FingerprintResponse

V1Name string: The layer ID of the final layer in the Docker image's v1 representation.
V2Blob List<string>: The ordered list of v2 blobs that represent a given image.
V2Name string: The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

V1Name string: The layer ID of the final layer in the Docker image's v1 representation.
V2Blob []string: The ordered list of v2 blobs that represent a given image.
V2Name string: The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

v1Name String: The layer ID of the final layer in the Docker image's v1 representation.
v2Blob List<String>: The ordered list of v2 blobs that represent a given image.
v2Name String: The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

v1Name string: The layer ID of the final layer in the Docker image's v1 representation.
v2Blob string[]: The ordered list of v2 blobs that represent a given image.
v2Name string: The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

v1_name str: The layer ID of the final layer in the Docker image's v1 representation.
v2_blob Sequence[str]: The ordered list of v2 blobs that represent a given image.
v2_name str: The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

v1Name String: The layer ID of the final layer in the Docker image's v1 representation.
v2Blob List<String>: The ordered list of v2 blobs that represent a given image.
v2Name String: The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

GenericSignedAttestationResponse

ContentType string: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
SerializedPayload string: The serialized payload that is verified by one or more signatures. The encoding and semantic meaning of this payload must match what is set in content_type.
Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SignatureResponse>: One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

ContentType string: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
SerializedPayload string: The serialized payload that is verified by one or more signatures. The encoding and semantic meaning of this payload must match what is set in content_type.
Signatures []SignatureResponse: One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

contentType String: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
serializedPayload String: The serialized payload that is verified by one or more signatures. The encoding and semantic meaning of this payload must match what is set in content_type.
signatures List<SignatureResponse>: One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

contentType string: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
serializedPayload string: The serialized payload that is verified by one or more signatures. The encoding and semantic meaning of this payload must match what is set in content_type.
signatures SignatureResponse[]: One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

content_type str: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
serialized_payload str: The serialized payload that is verified by one or more signatures. The encoding and semantic meaning of this payload must match what is set in content_type.
signatures Sequence[SignatureResponse]: One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

contentType String: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
serializedPayload String: The serialized payload that is verified by one or more signatures. The encoding and semantic meaning of this payload must match what is set in content_type.
signatures List<Property Map>: One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

GerritSourceContextResponse

AliasContext Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.AliasContextResponse: An alias, which may be a branch or tag.
GerritProject string: The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
HostUri string: The URI of a running Gerrit instance.
RevisionId string: A revision (commit) ID.

AliasContext AliasContextResponse: An alias, which may be a branch or tag.
GerritProject string: The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
HostUri string: The URI of a running Gerrit instance.
RevisionId string: A revision (commit) ID.

aliasContext AliasContextResponse: An alias, which may be a branch or tag.
gerritProject String: The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
hostUri String: The URI of a running Gerrit instance.
revisionId String: A revision (commit) ID.

aliasContext AliasContextResponse: An alias, which may be a branch or tag.
gerritProject string: The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
hostUri string: The URI of a running Gerrit instance.
revisionId string: A revision (commit) ID.

alias_context AliasContextResponse: An alias, which may be a branch or tag.
gerrit_project str: The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
host_uri str: The URI of a running Gerrit instance.
revision_id str: A revision (commit) ID.

aliasContext Property Map: An alias, which may be a branch or tag.
gerritProject String: The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
hostUri String: The URI of a running Gerrit instance.
revisionId String: A revision (commit) ID.

GitSourceContextResponse

RevisionId string: Git commit hash.
Url string: Git repository URL.

RevisionId string: Git commit hash.
Url string: Git repository URL.

revisionId String: Git commit hash.
url String: Git repository URL.

revisionId string: Git commit hash.
url string: Git repository URL.

revision_id str: Git commit hash.
url str: Git repository URL.

revisionId String: Git commit hash.
url String: Git repository URL.

GrafeasV1beta1BuildDetailsResponse

InTotoSlsaProvenanceV1 Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.InTotoSlsaProvenanceV1Response
Provenance Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.BuildProvenanceResponse: The actual provenance for the build.
ProvenanceBytes string: Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

InTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1Response
Provenance BuildProvenanceResponse: The actual provenance for the build.
ProvenanceBytes string: Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

inTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1Response
provenance BuildProvenanceResponse: The actual provenance for the build.
provenanceBytes String: Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

inTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1Response
provenance BuildProvenanceResponse: The actual provenance for the build.
provenanceBytes string: Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

in_toto_slsa_provenance_v1 InTotoSlsaProvenanceV1Response
provenance BuildProvenanceResponse: The actual provenance for the build.
provenance_bytes str: Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

inTotoSlsaProvenanceV1 Property Map
provenance Property Map: The actual provenance for the build.
provenanceBytes String: Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

GrafeasV1beta1DeploymentDetailsResponse

Deployment Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.DeploymentResponse: Deployment history for the resource.

Deployment DeploymentResponse: Deployment history for the resource.

deployment DeploymentResponse: Deployment history for the resource.

deployment DeploymentResponse: Deployment history for the resource.

deployment DeploymentResponse: Deployment history for the resource.

deployment Property Map: Deployment history for the resource.

GrafeasV1beta1DiscoveryDetailsResponse

Discovered Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.DiscoveredResponse: Analysis status for the discovered resource.

Discovered DiscoveredResponse: Analysis status for the discovered resource.

discovered DiscoveredResponse: Analysis status for the discovered resource.

discovered DiscoveredResponse: Analysis status for the discovered resource.

discovered DiscoveredResponse: Analysis status for the discovered resource.

discovered Property Map: Analysis status for the discovered resource.

GrafeasV1beta1ImageDetailsResponse

DerivedImage Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.DerivedResponse: Immutable. The child image derived from the base image.

DerivedImage DerivedResponse: Immutable. The child image derived from the base image.

derivedImage DerivedResponse: Immutable. The child image derived from the base image.

derivedImage DerivedResponse: Immutable. The child image derived from the base image.

derived_image DerivedResponse: Immutable. The child image derived from the base image.

derivedImage Property Map: Immutable. The child image derived from the base image.

GrafeasV1beta1IntotoArtifactResponse

Hashes Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ArtifactHashesResponse
ResourceUri string

Hashes ArtifactHashesResponse
ResourceUri string

hashes ArtifactHashesResponse
resourceUri String

hashes ArtifactHashesResponse
resourceUri string

hashes ArtifactHashesResponse
resource_uri str

hashes Property Map
resourceUri String

GrafeasV1beta1IntotoDetailsResponse

Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.GrafeasV1beta1IntotoSignatureResponse>
Signed Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.LinkResponse

Signatures []GrafeasV1beta1IntotoSignatureResponse
Signed LinkResponse

signatures List<GrafeasV1beta1IntotoSignatureResponse>
signed LinkResponse

signatures GrafeasV1beta1IntotoSignatureResponse[]
signed LinkResponse

signatures Sequence[GrafeasV1beta1IntotoSignatureResponse]
signed LinkResponse

signatures List<Property Map>
signed Property Map

GrafeasV1beta1IntotoSignatureResponse

Keyid string
Sig string

Keyid string
Sig string

keyid String
sig String

keyid string
sig string

keyid str
sig str

keyid String
sig String

GrafeasV1beta1PackageDetailsResponse

Installation Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.InstallationResponse: Where the package was installed.

Installation InstallationResponse: Where the package was installed.

installation InstallationResponse: Where the package was installed.

installation InstallationResponse: Where the package was installed.

installation InstallationResponse: Where the package was installed.

installation Property Map: Where the package was installed.

GrafeasV1beta1VulnerabilityDetailsResponse

CvssScore double: The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
CvssV2 Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.CVSSResponse: The cvss v2 score for the vulnerability.
CvssV3 Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.CVSSResponse: The cvss v3 score for the vulnerability.
CvssVersion string: CVSS version used to populate cvss_score and severity.
EffectiveSeverity string: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
ExtraDetails string: Occurrence-specific extra details about the vulnerability.
LongDescription string: A detailed description of this vulnerability.
PackageIssue List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.PackageIssueResponse>: The set of affected locations and their fixes (if available) within the associated resource.
RelatedUrls List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.RelatedUrlResponse>: URLs related to this vulnerability.
Severity string: The note provider assigned Severity of the vulnerability.
ShortDescription string: A one sentence description of this vulnerability.
Type string: The type of package; whether native or non native(ruby gems, node.js packages etc)
VexAssessment Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.VexAssessmentResponse

CvssScore float64: The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
CvssV2 CVSSResponse: The cvss v2 score for the vulnerability.
CvssV3 CVSSResponse: The cvss v3 score for the vulnerability.
CvssVersion string: CVSS version used to populate cvss_score and severity.
EffectiveSeverity string: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
ExtraDetails string: Occurrence-specific extra details about the vulnerability.
LongDescription string: A detailed description of this vulnerability.
PackageIssue []PackageIssueResponse: The set of affected locations and their fixes (if available) within the associated resource.
RelatedUrls []RelatedUrlResponse: URLs related to this vulnerability.
Severity string: The note provider assigned Severity of the vulnerability.
ShortDescription string: A one sentence description of this vulnerability.
Type string: The type of package; whether native or non native(ruby gems, node.js packages etc)
VexAssessment VexAssessmentResponse

cvssScore Double: The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
cvssV2 CVSSResponse: The cvss v2 score for the vulnerability.
cvssV3 CVSSResponse: The cvss v3 score for the vulnerability.
cvssVersion String: CVSS version used to populate cvss_score and severity.
effectiveSeverity String: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
extraDetails String: Occurrence-specific extra details about the vulnerability.
longDescription String: A detailed description of this vulnerability.
packageIssue List<PackageIssueResponse>: The set of affected locations and their fixes (if available) within the associated resource.
relatedUrls List<RelatedUrlResponse>: URLs related to this vulnerability.
severity String: The note provider assigned Severity of the vulnerability.
shortDescription String: A one sentence description of this vulnerability.
type String: The type of package; whether native or non native(ruby gems, node.js packages etc)
vexAssessment VexAssessmentResponse

cvssScore number: The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
cvssV2 CVSSResponse: The cvss v2 score for the vulnerability.
cvssV3 CVSSResponse: The cvss v3 score for the vulnerability.
cvssVersion string: CVSS version used to populate cvss_score and severity.
effectiveSeverity string: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
extraDetails string: Occurrence-specific extra details about the vulnerability.
longDescription string: A detailed description of this vulnerability.
packageIssue PackageIssueResponse[]: The set of affected locations and their fixes (if available) within the associated resource.
relatedUrls RelatedUrlResponse[]: URLs related to this vulnerability.
severity string: The note provider assigned Severity of the vulnerability.
shortDescription string: A one sentence description of this vulnerability.
type string: The type of package; whether native or non native(ruby gems, node.js packages etc)
vexAssessment VexAssessmentResponse

cvss_score float: The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
cvss_v2 CVSSResponse: The cvss v2 score for the vulnerability.
cvss_v3 CVSSResponse: The cvss v3 score for the vulnerability.
cvss_version str: CVSS version used to populate cvss_score and severity.
effective_severity str: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
extra_details str: Occurrence-specific extra details about the vulnerability.
long_description str: A detailed description of this vulnerability.
package_issue Sequence[PackageIssueResponse]: The set of affected locations and their fixes (if available) within the associated resource.
related_urls Sequence[RelatedUrlResponse]: URLs related to this vulnerability.
severity str: The note provider assigned Severity of the vulnerability.
short_description str: A one sentence description of this vulnerability.
type str: The type of package; whether native or non native(ruby gems, node.js packages etc)
vex_assessment VexAssessmentResponse

cvssScore Number: The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity.
cvssV2 Property Map: The cvss v2 score for the vulnerability.
cvssV3 Property Map: The cvss v3 score for the vulnerability.
cvssVersion String: CVSS version used to populate cvss_score and severity.
effectiveSeverity String: The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
extraDetails String: Occurrence-specific extra details about the vulnerability.
longDescription String: A detailed description of this vulnerability.
packageIssue List<Property Map>: The set of affected locations and their fixes (if available) within the associated resource.
relatedUrls List<Property Map>: URLs related to this vulnerability.
severity String: The note provider assigned Severity of the vulnerability.
shortDescription String: A one sentence description of this vulnerability.
type String: The type of package; whether native or non native(ruby gems, node.js packages etc)
vexAssessment Property Map

HashResponse

Type string: The type of hash that was performed.
Value string: The hash value.

Type string: The type of hash that was performed.
Value string: The hash value.

type String: The type of hash that was performed.
value String: The hash value.

type string: The type of hash that was performed.
value string: The hash value.

type str: The type of hash that was performed.
value str: The hash value.

type String: The type of hash that was performed.
value String: The hash value.

InTotoSlsaProvenanceV1Response

Predicate Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SlsaProvenanceV1Response
PredicateType string
Subject List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SubjectResponse>
Type string: InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

Predicate SlsaProvenanceV1Response
PredicateType string
Subject []SubjectResponse
Type string: InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

predicate SlsaProvenanceV1Response
predicateType String
subject List<SubjectResponse>
type String: InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

predicate SlsaProvenanceV1Response
predicateType string
subject SubjectResponse[]
type string: InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

predicate SlsaProvenanceV1Response
predicate_type str
subject Sequence[SubjectResponse]
type str: InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

predicate Property Map
predicateType String
subject List<Property Map>
type String: InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

InstallationResponse

Architecture string: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
CpeUri string: The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
License Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.LicenseResponse: Licenses that have been declared by the authors of the package.
Location List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.LocationResponse>: All of the places within the filesystem versions of this package have been found.
Name string: The name of the installed package.
PackageType string: The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
Version Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.VersionResponse: The version of the package.

Architecture string: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
CpeUri string: The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
License LicenseResponse: Licenses that have been declared by the authors of the package.
Location []LocationResponse: All of the places within the filesystem versions of this package have been found.
Name string: The name of the installed package.
PackageType string: The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
Version VersionResponse: The version of the package.

architecture String: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri String: The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
license LicenseResponse: Licenses that have been declared by the authors of the package.
location List<LocationResponse>: All of the places within the filesystem versions of this package have been found.
name String: The name of the installed package.
packageType String: The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
version VersionResponse: The version of the package.

architecture string: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri string: The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
license LicenseResponse: Licenses that have been declared by the authors of the package.
location LocationResponse[]: All of the places within the filesystem versions of this package have been found.
name string: The name of the installed package.
packageType string: The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
version VersionResponse: The version of the package.

architecture str: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpe_uri str: The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
license LicenseResponse: Licenses that have been declared by the authors of the package.
location Sequence[LocationResponse]: All of the places within the filesystem versions of this package have been found.
name str: The name of the installed package.
package_type str: The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
version VersionResponse: The version of the package.

architecture String: The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri String: The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
license Property Map: Licenses that have been declared by the authors of the package.
location List<Property Map>: All of the places within the filesystem versions of this package have been found.
name String: The name of the installed package.
packageType String: The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
version Property Map: The version of the package.

JustificationResponse

Details string: Additional details on why this justification was chosen.
JustificationType string: The justification type for this vulnerability.

Details string: Additional details on why this justification was chosen.
JustificationType string: The justification type for this vulnerability.

details String: Additional details on why this justification was chosen.
justificationType String: The justification type for this vulnerability.

details string: Additional details on why this justification was chosen.
justificationType string: The justification type for this vulnerability.

details str: Additional details on why this justification was chosen.
justification_type str: The justification type for this vulnerability.

details String: Additional details on why this justification was chosen.
justificationType String: The justification type for this vulnerability.

LayerResponse

Arguments string: The recovered arguments to the Dockerfile directive.
Directive string: The recovered Dockerfile directive used to construct this layer.

Arguments string: The recovered arguments to the Dockerfile directive.
Directive string: The recovered Dockerfile directive used to construct this layer.

arguments String: The recovered arguments to the Dockerfile directive.
directive String: The recovered Dockerfile directive used to construct this layer.

arguments string: The recovered arguments to the Dockerfile directive.
directive string: The recovered Dockerfile directive used to construct this layer.

arguments str: The recovered arguments to the Dockerfile directive.
directive str: The recovered Dockerfile directive used to construct this layer.

arguments String: The recovered arguments to the Dockerfile directive.
directive String: The recovered Dockerfile directive used to construct this layer.

LicenseResponse

Comments string: Comments
Expression string: Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

Comments string: Comments
Expression string: Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

comments String: Comments
expression String: Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

comments string: Comments
expression string: Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

comments str: Comments
expression str: Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

comments String: Comments
expression String: Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

LinkResponse

Byproducts Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ByProductsResponse: ByProducts are data generated as part of a software supply chain step, but are not the actual result of the step.
Command List<string>: This field contains the full command executed for the step. This can also be empty if links are generated for operations that aren't directly mapped to a specific command. Each term in the command is an independent string in the list. An example of a command in the in-toto metadata field is: "command": ["git", "clone", "https://github.com/in-toto/demo-project.git"]
Environment Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.EnvironmentResponse: This is a field that can be used to capture information about the environment. It is suggested for this field to contain information that details environment variables, filesystem information, and the present working directory. The recommended structure of this field is: "environment": { "custom_values": { "variables": "", "filesystem": "", "workdir": "", "": "..." } }
Materials List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.GrafeasV1beta1IntotoArtifactResponse>: Materials are the supply chain artifacts that go into the step and are used for the operation performed. The key of the map is the path of the artifact and the structure contains the recorded hash information. An example is: "materials": [ { "resource_uri": "foo/bar", "hashes": { "sha256": "ebebf...", : } } ]
Products List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.GrafeasV1beta1IntotoArtifactResponse>: Products are the supply chain artifacts generated as a result of the step. The structure is identical to that of materials.

Byproducts ByProductsResponse: ByProducts are data generated as part of a software supply chain step, but are not the actual result of the step.
Command []string: This field contains the full command executed for the step. This can also be empty if links are generated for operations that aren't directly mapped to a specific command. Each term in the command is an independent string in the list. An example of a command in the in-toto metadata field is: "command": ["git", "clone", "https://github.com/in-toto/demo-project.git"]
Environment EnvironmentResponse: This is a field that can be used to capture information about the environment. It is suggested for this field to contain information that details environment variables, filesystem information, and the present working directory. The recommended structure of this field is: "environment": { "custom_values": { "variables": "", "filesystem": "", "workdir": "", "": "..." } }
Materials []GrafeasV1beta1IntotoArtifactResponse: Materials are the supply chain artifacts that go into the step and are used for the operation performed. The key of the map is the path of the artifact and the structure contains the recorded hash information. An example is: "materials": [ { "resource_uri": "foo/bar", "hashes": { "sha256": "ebebf...", : } } ]
Products []GrafeasV1beta1IntotoArtifactResponse: Products are the supply chain artifacts generated as a result of the step. The structure is identical to that of materials.

byproducts ByProductsResponse: ByProducts are data generated as part of a software supply chain step, but are not the actual result of the step.
command List<String>: This field contains the full command executed for the step. This can also be empty if links are generated for operations that aren't directly mapped to a specific command. Each term in the command is an independent string in the list. An example of a command in the in-toto metadata field is: "command": ["git", "clone", "https://github.com/in-toto/demo-project.git"]
environment EnvironmentResponse: This is a field that can be used to capture information about the environment. It is suggested for this field to contain information that details environment variables, filesystem information, and the present working directory. The recommended structure of this field is: "environment": { "custom_values": { "variables": "", "filesystem": "", "workdir": "", "": "..." } }
materials List<GrafeasV1beta1IntotoArtifactResponse>: Materials are the supply chain artifacts that go into the step and are used for the operation performed. The key of the map is the path of the artifact and the structure contains the recorded hash information. An example is: "materials": [ { "resource_uri": "foo/bar", "hashes": { "sha256": "ebebf...", : } } ]
products List<GrafeasV1beta1IntotoArtifactResponse>: Products are the supply chain artifacts generated as a result of the step. The structure is identical to that of materials.

byproducts ByProductsResponse: ByProducts are data generated as part of a software supply chain step, but are not the actual result of the step.
command string[]: This field contains the full command executed for the step. This can also be empty if links are generated for operations that aren't directly mapped to a specific command. Each term in the command is an independent string in the list. An example of a command in the in-toto metadata field is: "command": ["git", "clone", "https://github.com/in-toto/demo-project.git"]
environment EnvironmentResponse: This is a field that can be used to capture information about the environment. It is suggested for this field to contain information that details environment variables, filesystem information, and the present working directory. The recommended structure of this field is: "environment": { "custom_values": { "variables": "", "filesystem": "", "workdir": "", "": "..." } }
materials GrafeasV1beta1IntotoArtifactResponse[]: Materials are the supply chain artifacts that go into the step and are used for the operation performed. The key of the map is the path of the artifact and the structure contains the recorded hash information. An example is: "materials": [ { "resource_uri": "foo/bar", "hashes": { "sha256": "ebebf...", : } } ]
products GrafeasV1beta1IntotoArtifactResponse[]: Products are the supply chain artifacts generated as a result of the step. The structure is identical to that of materials.

byproducts ByProductsResponse: ByProducts are data generated as part of a software supply chain step, but are not the actual result of the step.
command Sequence[str]: This field contains the full command executed for the step. This can also be empty if links are generated for operations that aren't directly mapped to a specific command. Each term in the command is an independent string in the list. An example of a command in the in-toto metadata field is: "command": ["git", "clone", "https://github.com/in-toto/demo-project.git"]
environment EnvironmentResponse: This is a field that can be used to capture information about the environment. It is suggested for this field to contain information that details environment variables, filesystem information, and the present working directory. The recommended structure of this field is: "environment": { "custom_values": { "variables": "", "filesystem": "", "workdir": "", "": "..." } }
materials Sequence[GrafeasV1beta1IntotoArtifactResponse]: Materials are the supply chain artifacts that go into the step and are used for the operation performed. The key of the map is the path of the artifact and the structure contains the recorded hash information. An example is: "materials": [ { "resource_uri": "foo/bar", "hashes": { "sha256": "ebebf...", : } } ]
products Sequence[GrafeasV1beta1IntotoArtifactResponse]: Products are the supply chain artifacts generated as a result of the step. The structure is identical to that of materials.

byproducts Property Map: ByProducts are data generated as part of a software supply chain step, but are not the actual result of the step.
command List<String>: This field contains the full command executed for the step. This can also be empty if links are generated for operations that aren't directly mapped to a specific command. Each term in the command is an independent string in the list. An example of a command in the in-toto metadata field is: "command": ["git", "clone", "https://github.com/in-toto/demo-project.git"]
environment Property Map: This is a field that can be used to capture information about the environment. It is suggested for this field to contain information that details environment variables, filesystem information, and the present working directory. The recommended structure of this field is: "environment": { "custom_values": { "variables": "", "filesystem": "", "workdir": "", "": "..." } }
materials List<Property Map>: Materials are the supply chain artifacts that go into the step and are used for the operation performed. The key of the map is the path of the artifact and the structure contains the recorded hash information. An example is: "materials": [ { "resource_uri": "foo/bar", "hashes": { "sha256": "ebebf...", : } } ]
products List<Property Map>: Products are the supply chain artifacts generated as a result of the step. The structure is identical to that of materials.

LocationResponse

CpeUri string: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Deprecated: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Path string: The path from which we gathered that this package/version is installed.
Version Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.VersionResponse: Deprecated. The version installed at this location.
Deprecated: Deprecated. The version installed at this location.

CpeUri string: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Deprecated: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Path string: The path from which we gathered that this package/version is installed.
Version VersionResponse: Deprecated. The version installed at this location.
Deprecated: Deprecated. The version installed at this location.

cpeUri String: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Deprecated: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
path String: The path from which we gathered that this package/version is installed.
version VersionResponse: Deprecated. The version installed at this location.
Deprecated: Deprecated. The version installed at this location.

cpeUri string: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Deprecated: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
path string: The path from which we gathered that this package/version is installed.
version VersionResponse: Deprecated. The version installed at this location.
Deprecated: Deprecated. The version installed at this location.

cpe_uri str: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Deprecated: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
path str: The path from which we gathered that this package/version is installed.
version VersionResponse: Deprecated. The version installed at this location.
Deprecated: Deprecated. The version installed at this location.

cpeUri String: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
Deprecated: Deprecated. The CPE URI in CPE format denoting the package manager version distributing a package.
path String: The path from which we gathered that this package/version is installed.
version Property Map: Deprecated. The version installed at this location.
Deprecated: Deprecated. The version installed at this location.

PackageInfoOccurrenceResponse

Comment string: A place for the SPDX file creator to record any general comments about the package being described
Filename string: Provide the actual file name of the package, or path of the directory being treated as a package
HomePage string: Provide a place for the SPDX file creator to record a web site that serves as the package's home page
LicenseConcluded Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.LicenseResponse: package or alternative values, if the governing license cannot be determined
PackageType string: The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
SourceInfo string: Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
SummaryDescription string: A short description of the package
Title string: Identify the full name of the package as given by the Package Originator
Version string: Identify the version of the package

Comment string: A place for the SPDX file creator to record any general comments about the package being described
Filename string: Provide the actual file name of the package, or path of the directory being treated as a package
HomePage string: Provide a place for the SPDX file creator to record a web site that serves as the package's home page
LicenseConcluded LicenseResponse: package or alternative values, if the governing license cannot be determined
PackageType string: The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
SourceInfo string: Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
SummaryDescription string: A short description of the package
Title string: Identify the full name of the package as given by the Package Originator
Version string: Identify the version of the package

comment String: A place for the SPDX file creator to record any general comments about the package being described
filename String: Provide the actual file name of the package, or path of the directory being treated as a package
homePage String: Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseConcluded LicenseResponse: package or alternative values, if the governing license cannot be determined
packageType String: The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
sourceInfo String: Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
summaryDescription String: A short description of the package
title String: Identify the full name of the package as given by the Package Originator
version String: Identify the version of the package

comment string: A place for the SPDX file creator to record any general comments about the package being described
filename string: Provide the actual file name of the package, or path of the directory being treated as a package
homePage string: Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseConcluded LicenseResponse: package or alternative values, if the governing license cannot be determined
packageType string: The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
sourceInfo string: Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
summaryDescription string: A short description of the package
title string: Identify the full name of the package as given by the Package Originator
version string: Identify the version of the package

comment str: A place for the SPDX file creator to record any general comments about the package being described
filename str: Provide the actual file name of the package, or path of the directory being treated as a package
home_page str: Provide a place for the SPDX file creator to record a web site that serves as the package's home page
license_concluded LicenseResponse: package or alternative values, if the governing license cannot be determined
package_type str: The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
source_info str: Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
summary_description str: A short description of the package
title str: Identify the full name of the package as given by the Package Originator
version str: Identify the version of the package

comment String: A place for the SPDX file creator to record any general comments about the package being described
filename String: Provide the actual file name of the package, or path of the directory being treated as a package
homePage String: Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseConcluded Property Map: package or alternative values, if the governing license cannot be determined
packageType String: The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
sourceInfo String: Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
summaryDescription String: A short description of the package
title String: Identify the full name of the package as given by the Package Originator
version String: Identify the version of the package

PackageIssueResponse

AffectedLocation Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.VulnerabilityLocationResponse: The location of the vulnerability.
EffectiveSeverity string: The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
FixedLocation Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.VulnerabilityLocationResponse: The location of the available fix for vulnerability.
PackageType string: The type of package (e.g. OS, MAVEN, GO).
SeverityName string: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.
Deprecated: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.

AffectedLocation VulnerabilityLocationResponse: The location of the vulnerability.
EffectiveSeverity string: The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
FixedLocation VulnerabilityLocationResponse: The location of the available fix for vulnerability.
PackageType string: The type of package (e.g. OS, MAVEN, GO).
SeverityName string: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.
Deprecated: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.

affectedLocation VulnerabilityLocationResponse: The location of the vulnerability.
effectiveSeverity String: The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
fixedLocation VulnerabilityLocationResponse: The location of the available fix for vulnerability.
packageType String: The type of package (e.g. OS, MAVEN, GO).
severityName String: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.
Deprecated: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.

affectedLocation VulnerabilityLocationResponse: The location of the vulnerability.
effectiveSeverity string: The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
fixedLocation VulnerabilityLocationResponse: The location of the available fix for vulnerability.
packageType string: The type of package (e.g. OS, MAVEN, GO).
severityName string: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.
Deprecated: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.

affected_location VulnerabilityLocationResponse: The location of the vulnerability.
effective_severity str: The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
fixed_location VulnerabilityLocationResponse: The location of the available fix for vulnerability.
package_type str: The type of package (e.g. OS, MAVEN, GO).
severity_name str: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.
Deprecated: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.

affectedLocation Property Map: The location of the vulnerability.
effectiveSeverity String: The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
fixedLocation Property Map: The location of the available fix for vulnerability.
packageType String: The type of package (e.g. OS, MAVEN, GO).
severityName String: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.
Deprecated: Deprecated, use Details.effective_severity instead The severity (e.g., distro assigned severity) for this vulnerability.

PgpSignedAttestationResponse

ContentType string: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
PgpKeyId string: The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the fpr field returned when calling --list-keys with --with-colons. For example: gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: Above, the fingerprint is 24FF6481B76AC91E66A00AC657A93A81EF3AE6FB.
Signature string: The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (--armor to gpg), non-clearsigned (--sign rather than --clearsign to gpg) are supported. Concretely, gpg --sign --armor --output=signature.gpg payload.json will create the signature content expected in this field in signature.gpg for the payload.json attestation payload.

ContentType string: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
PgpKeyId string: The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the fpr field returned when calling --list-keys with --with-colons. For example: gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: Above, the fingerprint is 24FF6481B76AC91E66A00AC657A93A81EF3AE6FB.
Signature string: The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (--armor to gpg), non-clearsigned (--sign rather than --clearsign to gpg) are supported. Concretely, gpg --sign --armor --output=signature.gpg payload.json will create the signature content expected in this field in signature.gpg for the payload.json attestation payload.

contentType String: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
pgpKeyId String: The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the fpr field returned when calling --list-keys with --with-colons. For example: gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: Above, the fingerprint is 24FF6481B76AC91E66A00AC657A93A81EF3AE6FB.
signature String: The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (--armor to gpg), non-clearsigned (--sign rather than --clearsign to gpg) are supported. Concretely, gpg --sign --armor --output=signature.gpg payload.json will create the signature content expected in this field in signature.gpg for the payload.json attestation payload.

contentType string: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
pgpKeyId string: The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the fpr field returned when calling --list-keys with --with-colons. For example: gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: Above, the fingerprint is 24FF6481B76AC91E66A00AC657A93A81EF3AE6FB.
signature string: The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (--armor to gpg), non-clearsigned (--sign rather than --clearsign to gpg) are supported. Concretely, gpg --sign --armor --output=signature.gpg payload.json will create the signature content expected in this field in signature.gpg for the payload.json attestation payload.

content_type str: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
pgp_key_id str: The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the fpr field returned when calling --list-keys with --with-colons. For example: gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: Above, the fingerprint is 24FF6481B76AC91E66A00AC657A93A81EF3AE6FB.
signature str: The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (--armor to gpg), non-clearsigned (--sign rather than --clearsign to gpg) are supported. Concretely, gpg --sign --armor --output=signature.gpg payload.json will create the signature content expected in this field in signature.gpg for the payload.json attestation payload.

contentType String: Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema).
pgpKeyId String: The cryptographic fingerprint of the key used to generate the signature, as output by, e.g. gpg --list-keys. This should be the version 4, full 160-bit fingerprint, expressed as a 40 character hexadecimal string. See https://tools.ietf.org/html/rfc4880#section-12.2 for details. Implementations may choose to acknowledge "LONG", "SHORT", or other abbreviated key IDs, but only the full fingerprint is guaranteed to work. In gpg, the full fingerprint can be retrieved from the fpr field returned when calling --list-keys with --with-colons. For example: gpg --with-colons --with-fingerprint --force-v4-certs \ --list-keys attester@example.com tru::1:1513631572:0:3:1:5 pub:...... fpr:::::::::24FF6481B76AC91E66A00AC657A93A81EF3AE6FB: Above, the fingerprint is 24FF6481B76AC91E66A00AC657A93A81EF3AE6FB.
signature String: The raw content of the signature, as output by GNU Privacy Guard (GPG) or equivalent. Since this message only supports attached signatures, the payload that was signed must be attached. While the signature format supported is dependent on the verification implementation, currently only ASCII-armored (--armor to gpg), non-clearsigned (--sign rather than --clearsign to gpg) are supported. Concretely, gpg --sign --armor --output=signature.gpg payload.json will create the signature content expected in this field in signature.gpg for the payload.json attestation payload.

ProjectRepoIdResponse

Project string: The ID of the project.
RepoName string: The name of the repo. Leave empty for the default repo.

Project string: The ID of the project.
RepoName string: The name of the repo. Leave empty for the default repo.

project String: The ID of the project.
repoName String: The name of the repo. Leave empty for the default repo.

project string: The ID of the project.
repoName string: The name of the repo. Leave empty for the default repo.

project str: The ID of the project.
repo_name str: The name of the repo. Leave empty for the default repo.

project String: The ID of the project.
repoName String: The name of the repo. Leave empty for the default repo.

ProvenanceBuilderResponse

BuilderDependencies List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ResourceDescriptorResponse>
Version Dictionary<string, string>

BuilderDependencies []ResourceDescriptorResponse
Version map[string]string

builderDependencies List<ResourceDescriptorResponse>
version Map<String,String>

builderDependencies ResourceDescriptorResponse[]
version {[key: string]: string}

builder_dependencies Sequence[ResourceDescriptorResponse]
version Mapping[str, str]

builderDependencies List<Property Map>
version Map<String>

RelatedUrlResponse

Label string: Label to describe usage of the URL.
Url string: Specific URL associated with the resource.

Label string: Label to describe usage of the URL.
Url string: Specific URL associated with the resource.

label String: Label to describe usage of the URL.
url String: Specific URL associated with the resource.

label string: Label to describe usage of the URL.
url string: Specific URL associated with the resource.

label str: Label to describe usage of the URL.
url str: Specific URL associated with the resource.

label String: Label to describe usage of the URL.
url String: Specific URL associated with the resource.

RelationshipOccurrenceResponse

Comment string: A place for the SPDX file creator to record any general comments about the relationship
Source string: Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
Target string: Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
Type string: The type of relationship between the source and target SPDX elements

Comment string: A place for the SPDX file creator to record any general comments about the relationship
Source string: Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
Target string: Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
Type string: The type of relationship between the source and target SPDX elements

comment String: A place for the SPDX file creator to record any general comments about the relationship
source String: Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
target String: Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
type String: The type of relationship between the source and target SPDX elements

comment string: A place for the SPDX file creator to record any general comments about the relationship
source string: Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
target string: Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
type string: The type of relationship between the source and target SPDX elements

comment str: A place for the SPDX file creator to record any general comments about the relationship
source str: Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
target str: Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
type str: The type of relationship between the source and target SPDX elements

comment String: A place for the SPDX file creator to record any general comments about the relationship
source String: Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
target String: Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
type String: The type of relationship between the source and target SPDX elements

RemediationResponse

Details string: Contains a comprehensive human-readable discussion of the remediation.
RemediationType string: The type of remediation that can be applied.
RemediationUri Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.RelatedUrlResponse: Contains the URL where to obtain the remediation.

Details string: Contains a comprehensive human-readable discussion of the remediation.
RemediationType string: The type of remediation that can be applied.
RemediationUri RelatedUrlResponse: Contains the URL where to obtain the remediation.

details String: Contains a comprehensive human-readable discussion of the remediation.
remediationType String: The type of remediation that can be applied.
remediationUri RelatedUrlResponse: Contains the URL where to obtain the remediation.

details string: Contains a comprehensive human-readable discussion of the remediation.
remediationType string: The type of remediation that can be applied.
remediationUri RelatedUrlResponse: Contains the URL where to obtain the remediation.

details str: Contains a comprehensive human-readable discussion of the remediation.
remediation_type str: The type of remediation that can be applied.
remediation_uri RelatedUrlResponse: Contains the URL where to obtain the remediation.

details String: Contains a comprehensive human-readable discussion of the remediation.
remediationType String: The type of remediation that can be applied.
remediationUri Property Map: Contains the URL where to obtain the remediation.

RepoIdResponse

ProjectRepoId Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ProjectRepoIdResponse: A combination of a project ID and a repo name.
Uid string: A server-assigned, globally unique identifier.

ProjectRepoId ProjectRepoIdResponse: A combination of a project ID and a repo name.
Uid string: A server-assigned, globally unique identifier.

projectRepoId ProjectRepoIdResponse: A combination of a project ID and a repo name.
uid String: A server-assigned, globally unique identifier.

projectRepoId ProjectRepoIdResponse: A combination of a project ID and a repo name.
uid string: A server-assigned, globally unique identifier.

project_repo_id ProjectRepoIdResponse: A combination of a project ID and a repo name.
uid str: A server-assigned, globally unique identifier.

projectRepoId Property Map: A combination of a project ID and a repo name.
uid String: A server-assigned, globally unique identifier.

ResourceDescriptorResponse

Annotations Dictionary<string, string>
Content string
Digest Dictionary<string, string>
DownloadLocation string
MediaType string
Name string
Uri string

Annotations map[string]string
Content string
Digest map[string]string
DownloadLocation string
MediaType string
Name string
Uri string

annotations Map<String,String>
content String
digest Map<String,String>
downloadLocation String
mediaType String
name String
uri String

annotations {[key: string]: string}
content string
digest {[key: string]: string}
downloadLocation string
mediaType string
name string
uri string

annotations Mapping[str, str]
content str
digest Mapping[str, str]
download_location str
media_type str
name str
uri str

annotations Map<String>
content String
digest Map<String>
downloadLocation String
mediaType String
name String
uri String

ResourceResponse

ContentHash Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.HashResponse: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Deprecated: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Name string: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Deprecated: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Uri string: The unique URI of the resource. For example, https://gcr.io/project/image@sha256:foo for a Docker image.

ContentHash HashResponse: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Deprecated: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Name string: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Deprecated: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Uri string: The unique URI of the resource. For example, https://gcr.io/project/image@sha256:foo for a Docker image.

contentHash HashResponse: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Deprecated: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
name String: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Deprecated: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
uri String: The unique URI of the resource. For example, https://gcr.io/project/image@sha256:foo for a Docker image.

contentHash HashResponse: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Deprecated: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
name string: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Deprecated: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
uri string: The unique URI of the resource. For example, https://gcr.io/project/image@sha256:foo for a Docker image.

content_hash HashResponse: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Deprecated: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
name str: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Deprecated: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
uri str: The unique URI of the resource. For example, https://gcr.io/project/image@sha256:foo for a Docker image.

contentHash Property Map: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
Deprecated: Deprecated, do not use. Use uri instead. The hash of the resource content. For example, the Docker digest.
name String: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
Deprecated: Deprecated, do not use. Use uri instead. The name of the resource. For example, the name of a Docker image - "Debian".
uri String: The unique URI of the resource. For example, https://gcr.io/project/image@sha256:foo for a Docker image.

RunDetailsResponse

Builder Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ProvenanceBuilderResponse
Byproducts List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.ResourceDescriptorResponse>
Metadata Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.BuildMetadataResponse

Builder ProvenanceBuilderResponse
Byproducts []ResourceDescriptorResponse
Metadata BuildMetadataResponse

builder_ ProvenanceBuilderResponse
byproducts List<ResourceDescriptorResponse>
metadata BuildMetadataResponse

builder ProvenanceBuilderResponse
byproducts ResourceDescriptorResponse[]
metadata BuildMetadataResponse

builder ProvenanceBuilderResponse
byproducts Sequence[ResourceDescriptorResponse]
metadata BuildMetadataResponse

builder Property Map
byproducts List<Property Map>
metadata Property Map

SBOMReferenceOccurrenceResponse

Payload Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SbomReferenceIntotoPayloadResponse: The actual payload that contains the SBOM reference data.
PayloadType string: The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.EnvelopeSignatureResponse>: The signatures over the payload.

Payload SbomReferenceIntotoPayloadResponse: The actual payload that contains the SBOM reference data.
PayloadType string: The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
Signatures []EnvelopeSignatureResponse: The signatures over the payload.

payload SbomReferenceIntotoPayloadResponse: The actual payload that contains the SBOM reference data.
payloadType String: The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
signatures List<EnvelopeSignatureResponse>: The signatures over the payload.

payload SbomReferenceIntotoPayloadResponse: The actual payload that contains the SBOM reference data.
payloadType string: The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
signatures EnvelopeSignatureResponse[]: The signatures over the payload.

payload SbomReferenceIntotoPayloadResponse: The actual payload that contains the SBOM reference data.
payload_type str: The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
signatures Sequence[EnvelopeSignatureResponse]: The signatures over the payload.

payload Property Map: The actual payload that contains the SBOM reference data.
payloadType String: The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
signatures List<Property Map>: The signatures over the payload.

SBOMStatusResponse

Error string: If there was an error generating an SBOM, this will indicate what that error was.
SbomState string: The progress of the SBOM generation.

Error string: If there was an error generating an SBOM, this will indicate what that error was.
SbomState string: The progress of the SBOM generation.

error String: If there was an error generating an SBOM, this will indicate what that error was.
sbomState String: The progress of the SBOM generation.

error string: If there was an error generating an SBOM, this will indicate what that error was.
sbomState string: The progress of the SBOM generation.

error str: If there was an error generating an SBOM, this will indicate what that error was.
sbom_state str: The progress of the SBOM generation.

error String: If there was an error generating an SBOM, this will indicate what that error was.
sbomState String: The progress of the SBOM generation.

SbomReferenceIntotoPayloadResponse

Predicate Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SbomReferenceIntotoPredicateResponse: Additional parameters of the Predicate. Includes the actual data about the SBOM.
PredicateType string: URI identifying the type of the Predicate.
Subject List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SubjectResponse>: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
Type string: Identifier for the schema of the Statement.

Predicate SbomReferenceIntotoPredicateResponse: Additional parameters of the Predicate. Includes the actual data about the SBOM.
PredicateType string: URI identifying the type of the Predicate.
Subject []SubjectResponse: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
Type string: Identifier for the schema of the Statement.

predicate SbomReferenceIntotoPredicateResponse: Additional parameters of the Predicate. Includes the actual data about the SBOM.
predicateType String: URI identifying the type of the Predicate.
subject List<SubjectResponse>: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
type String: Identifier for the schema of the Statement.

predicate SbomReferenceIntotoPredicateResponse: Additional parameters of the Predicate. Includes the actual data about the SBOM.
predicateType string: URI identifying the type of the Predicate.
subject SubjectResponse[]: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
type string: Identifier for the schema of the Statement.

predicate SbomReferenceIntotoPredicateResponse: Additional parameters of the Predicate. Includes the actual data about the SBOM.
predicate_type str: URI identifying the type of the Predicate.
subject Sequence[SubjectResponse]: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
type str: Identifier for the schema of the Statement.

predicate Property Map: Additional parameters of the Predicate. Includes the actual data about the SBOM.
predicateType String: URI identifying the type of the Predicate.
subject List<Property Map>: Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
type String: Identifier for the schema of the Statement.

SbomReferenceIntotoPredicateResponse

Digest Dictionary<string, string>: A map of algorithm to digest of the contents of the SBOM.
Location string: The location of the SBOM.
MimeType string: The mime type of the SBOM.
ReferrerId string: The person or system referring this predicate to the consumer.

Digest map[string]string: A map of algorithm to digest of the contents of the SBOM.
Location string: The location of the SBOM.
MimeType string: The mime type of the SBOM.
ReferrerId string: The person or system referring this predicate to the consumer.

digest Map<String,String>: A map of algorithm to digest of the contents of the SBOM.
location String: The location of the SBOM.
mimeType String: The mime type of the SBOM.
referrerId String: The person or system referring this predicate to the consumer.

digest {[key: string]: string}: A map of algorithm to digest of the contents of the SBOM.
location string: The location of the SBOM.
mimeType string: The mime type of the SBOM.
referrerId string: The person or system referring this predicate to the consumer.

digest Mapping[str, str]: A map of algorithm to digest of the contents of the SBOM.
location str: The location of the SBOM.
mime_type str: The mime type of the SBOM.
referrer_id str: The person or system referring this predicate to the consumer.

digest Map<String>: A map of algorithm to digest of the contents of the SBOM.
location String: The location of the SBOM.
mimeType String: The mime type of the SBOM.
referrerId String: The person or system referring this predicate to the consumer.

SignatureResponse

PublicKeyId string: The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
Signature string: The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

PublicKeyId string: The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
Signature string: The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

publicKeyId String: The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
signature String: The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

publicKeyId string: The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
signature string: The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

public_key_id str: The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
signature str: The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

publicKeyId String: The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
signature String: The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

SlsaProvenanceV1Response

BuildDefinition Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.BuildDefinitionResponse
RunDetails Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.RunDetailsResponse

BuildDefinition BuildDefinitionResponse
RunDetails RunDetailsResponse

buildDefinition BuildDefinitionResponse
runDetails RunDetailsResponse

buildDefinition BuildDefinitionResponse
runDetails RunDetailsResponse

build_definition BuildDefinitionResponse
run_details RunDetailsResponse

buildDefinition Property Map
runDetails Property Map

SourceContextResponse

CloudRepo Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.CloudRepoSourceContextResponse: A SourceContext referring to a revision in a Google Cloud Source Repo.
Gerrit Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
Git Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.GitSourceContextResponse: A SourceContext referring to any third party Git repo (e.g., GitHub).
Labels Dictionary<string, string>: Labels with user defined metadata.

CloudRepo CloudRepoSourceContextResponse: A SourceContext referring to a revision in a Google Cloud Source Repo.
Gerrit GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
Git GitSourceContextResponse: A SourceContext referring to any third party Git repo (e.g., GitHub).
Labels map[string]string: Labels with user defined metadata.

cloudRepo CloudRepoSourceContextResponse: A SourceContext referring to a revision in a Google Cloud Source Repo.
gerrit GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
git GitSourceContextResponse: A SourceContext referring to any third party Git repo (e.g., GitHub).
labels Map<String,String>: Labels with user defined metadata.

cloudRepo CloudRepoSourceContextResponse: A SourceContext referring to a revision in a Google Cloud Source Repo.
gerrit GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
git GitSourceContextResponse: A SourceContext referring to any third party Git repo (e.g., GitHub).
labels {[key: string]: string}: Labels with user defined metadata.

cloud_repo CloudRepoSourceContextResponse: A SourceContext referring to a revision in a Google Cloud Source Repo.
gerrit GerritSourceContextResponse: A SourceContext referring to a Gerrit project.
git GitSourceContextResponse: A SourceContext referring to any third party Git repo (e.g., GitHub).
labels Mapping[str, str]: Labels with user defined metadata.

cloudRepo Property Map: A SourceContext referring to a revision in a Google Cloud Source Repo.
gerrit Property Map: A SourceContext referring to a Gerrit project.
git Property Map: A SourceContext referring to any third party Git repo (e.g., GitHub).
labels Map<String>: Labels with user defined metadata.

SourceResponse

AdditionalContexts List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SourceContextResponse>: If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
ArtifactStorageSourceUri string: If provided, the input binary artifacts for the build came from this location.
Context Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.SourceContextResponse: If provided, the source code used for the build came from this location.
FileHashes Dictionary<string, string>: Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

AdditionalContexts []SourceContextResponse: If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
ArtifactStorageSourceUri string: If provided, the input binary artifacts for the build came from this location.
Context SourceContextResponse: If provided, the source code used for the build came from this location.
FileHashes map[string]string: Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

additionalContexts List<SourceContextResponse>: If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
artifactStorageSourceUri String: If provided, the input binary artifacts for the build came from this location.
context SourceContextResponse: If provided, the source code used for the build came from this location.
fileHashes Map<String,String>: Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

additionalContexts SourceContextResponse[]: If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
artifactStorageSourceUri string: If provided, the input binary artifacts for the build came from this location.
context SourceContextResponse: If provided, the source code used for the build came from this location.
fileHashes {[key: string]: string}: Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

additional_contexts Sequence[SourceContextResponse]: If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
artifact_storage_source_uri str: If provided, the input binary artifacts for the build came from this location.
context SourceContextResponse: If provided, the source code used for the build came from this location.
file_hashes Mapping[str, str]: Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

additionalContexts List<Property Map>: If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
artifactStorageSourceUri String: If provided, the input binary artifacts for the build came from this location.
context Property Map: If provided, the source code used for the build came from this location.
fileHashes Map<String>: Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

StatusResponse

Code int: The status code, which should be an enum value of google.rpc.Code.
Details List<ImmutableDictionary<string, string>>: A list of messages that carry the error details. There is a common set of message types for APIs to use.
Message string: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

Code int: The status code, which should be an enum value of google.rpc.Code.
Details []map[string]string: A list of messages that carry the error details. There is a common set of message types for APIs to use.
Message string: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

code Integer: The status code, which should be an enum value of google.rpc.Code.
details List<Map<String,String>>: A list of messages that carry the error details. There is a common set of message types for APIs to use.
message String: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

code number: The status code, which should be an enum value of google.rpc.Code.
details {[key: string]: string}[]: A list of messages that carry the error details. There is a common set of message types for APIs to use.
message string: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

code int: The status code, which should be an enum value of google.rpc.Code.
details Sequence[Mapping[str, str]]: A list of messages that carry the error details. There is a common set of message types for APIs to use.
message str: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

code Number: The status code, which should be an enum value of google.rpc.Code.
details List<Map<String>>: A list of messages that carry the error details. There is a common set of message types for APIs to use.
message String: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

SubjectResponse

Digest Dictionary<string, string>: "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
Name string: Identifier to distinguish this artifact from others within the subject.

Digest map[string]string: "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
Name string: Identifier to distinguish this artifact from others within the subject.

digest Map<String,String>: "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
name String: Identifier to distinguish this artifact from others within the subject.

digest {[key: string]: string}: "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
name string: Identifier to distinguish this artifact from others within the subject.

digest Mapping[str, str]: "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
name str: Identifier to distinguish this artifact from others within the subject.

digest Map<String>: "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
name String: Identifier to distinguish this artifact from others within the subject.

VersionResponse

Epoch int: Used to correct mistakes in the version numbering scheme.
Inclusive bool: Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
Kind string: Distinguishes between sentinel MIN/MAX versions and normal versions.
Name string: Required only when version kind is NORMAL. The main part of the version name.
Revision string: The iteration of the package build from the above version.

Epoch int: Used to correct mistakes in the version numbering scheme.
Inclusive bool: Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
Kind string: Distinguishes between sentinel MIN/MAX versions and normal versions.
Name string: Required only when version kind is NORMAL. The main part of the version name.
Revision string: The iteration of the package build from the above version.

epoch Integer: Used to correct mistakes in the version numbering scheme.
inclusive Boolean: Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
kind String: Distinguishes between sentinel MIN/MAX versions and normal versions.
name String: Required only when version kind is NORMAL. The main part of the version name.
revision String: The iteration of the package build from the above version.

epoch number: Used to correct mistakes in the version numbering scheme.
inclusive boolean: Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
kind string: Distinguishes between sentinel MIN/MAX versions and normal versions.
name string: Required only when version kind is NORMAL. The main part of the version name.
revision string: The iteration of the package build from the above version.

epoch int: Used to correct mistakes in the version numbering scheme.
inclusive bool: Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
kind str: Distinguishes between sentinel MIN/MAX versions and normal versions.
name str: Required only when version kind is NORMAL. The main part of the version name.
revision str: The iteration of the package build from the above version.

epoch Number: Used to correct mistakes in the version numbering scheme.
inclusive Boolean: Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
kind String: Distinguishes between sentinel MIN/MAX versions and normal versions.
name String: Required only when version kind is NORMAL. The main part of the version name.
revision String: The iteration of the package build from the above version.

VexAssessmentResponse

Cve string: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Impacts List<string>: Contains information about the impact of this vulnerability, this will change with time.
Justification Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.JustificationResponse: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
NoteName string: The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
RelatedUris List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.RelatedUrlResponse>: Holds a list of references associated with this vulnerability item and assessment.
Remediations List<Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.RemediationResponse>: Specifies details on how to handle (and presumably, fix) a vulnerability.
State string: Provides the state of this Vulnerability assessment.
VulnerabilityId string: The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

Cve string: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Impacts []string: Contains information about the impact of this vulnerability, this will change with time.
Justification JustificationResponse: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
NoteName string: The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
RelatedUris []RelatedUrlResponse: Holds a list of references associated with this vulnerability item and assessment.
Remediations []RemediationResponse: Specifies details on how to handle (and presumably, fix) a vulnerability.
State string: Provides the state of this Vulnerability assessment.
VulnerabilityId string: The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

cve String: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
impacts List<String>: Contains information about the impact of this vulnerability, this will change with time.
justification JustificationResponse: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
noteName String: The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
relatedUris List<RelatedUrlResponse>: Holds a list of references associated with this vulnerability item and assessment.
remediations List<RemediationResponse>: Specifies details on how to handle (and presumably, fix) a vulnerability.
state String: Provides the state of this Vulnerability assessment.
vulnerabilityId String: The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

cve string: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
impacts string[]: Contains information about the impact of this vulnerability, this will change with time.
justification JustificationResponse: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
noteName string: The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
relatedUris RelatedUrlResponse[]: Holds a list of references associated with this vulnerability item and assessment.
remediations RemediationResponse[]: Specifies details on how to handle (and presumably, fix) a vulnerability.
state string: Provides the state of this Vulnerability assessment.
vulnerabilityId string: The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

cve str: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
impacts Sequence[str]: Contains information about the impact of this vulnerability, this will change with time.
justification JustificationResponse: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
note_name str: The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
related_uris Sequence[RelatedUrlResponse]: Holds a list of references associated with this vulnerability item and assessment.
remediations Sequence[RemediationResponse]: Specifies details on how to handle (and presumably, fix) a vulnerability.
state str: Provides the state of this Vulnerability assessment.
vulnerability_id str: The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

cve String: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.
impacts List<String>: Contains information about the impact of this vulnerability, this will change with time.
justification Property Map: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
noteName String: The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
relatedUris List<Property Map>: Holds a list of references associated with this vulnerability item and assessment.
remediations List<Property Map>: Specifies details on how to handle (and presumably, fix) a vulnerability.
state String: Provides the state of this Vulnerability assessment.
vulnerabilityId String: The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

VulnerabilityLocationResponse

CpeUri string: The CPE URI in cpe format format. Examples include distro or storage location for vulnerable jar.
Package string: The package being described.
Version Pulumi.GoogleNative.ContainerAnalysis.V1Beta1.Inputs.VersionResponse: The version of the package being described.

CpeUri string: The CPE URI in cpe format format. Examples include distro or storage location for vulnerable jar.
Package string: The package being described.
Version VersionResponse: The version of the package being described.

cpeUri String: The CPE URI in cpe format format. Examples include distro or storage location for vulnerable jar.
package_ String: The package being described.
version VersionResponse: The version of the package being described.

cpeUri string: The CPE URI in cpe format format. Examples include distro or storage location for vulnerable jar.
package string: The package being described.
version VersionResponse: The version of the package being described.

cpe_uri str: The CPE URI in cpe format format. Examples include distro or storage location for vulnerable jar.
package str: The package being described.
version VersionResponse: The version of the package being described.

cpeUri String: The CPE URI in cpe format format. Examples include distro or storage location for vulnerable jar.
package String: The package being described.
version Property Map: The version of the package being described.

Package Details

Repository: Google Cloud Native pulumi/pulumi-google-native
License: Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

pulumi/pulumi-google-native

google-native.containeranalysis/v1beta1.getOccurrence

On this page

On this page

Using getOccurrence

getOccurrence Result

Supporting Types

AliasContextResponse

AnalysisCompletedResponse

ArtifactHashesResponse

ArtifactResponse

AttestationResponse

BuildDefinitionResponse

BuildMetadataResponse

BuildProvenanceResponse

ByProductsResponse

CVSSResponse

CloudRepoSourceContextResponse

CommandResponse

DeploymentResponse

DerivedResponse

DetailsResponse

DiscoveredResponse

DocumentOccurrenceResponse

EnvelopeResponse

EnvelopeSignatureResponse

EnvironmentResponse

FileOccurrenceResponse

FingerprintResponse

GenericSignedAttestationResponse

GerritSourceContextResponse

GitSourceContextResponse

GrafeasV1beta1BuildDetailsResponse

GrafeasV1beta1DeploymentDetailsResponse

GrafeasV1beta1DiscoveryDetailsResponse

GrafeasV1beta1ImageDetailsResponse

GrafeasV1beta1IntotoArtifactResponse

GrafeasV1beta1IntotoDetailsResponse

GrafeasV1beta1IntotoSignatureResponse

GrafeasV1beta1PackageDetailsResponse

GrafeasV1beta1VulnerabilityDetailsResponse

HashResponse

InTotoSlsaProvenanceV1Response

InstallationResponse

JustificationResponse

LayerResponse

LicenseResponse

LinkResponse

LocationResponse

PackageInfoOccurrenceResponse

PackageIssueResponse

PgpSignedAttestationResponse

ProjectRepoIdResponse

ProvenanceBuilderResponse

RelatedUrlResponse

RelationshipOccurrenceResponse

RemediationResponse

RepoIdResponse

ResourceDescriptorResponse

ResourceResponse

RunDetailsResponse

SBOMReferenceOccurrenceResponse

SBOMStatusResponse

SbomReferenceIntotoPayloadResponse

SbomReferenceIntotoPredicateResponse

SignatureResponse

SlsaProvenanceV1Response

SourceContextResponse

SourceResponse

StatusResponse

SubjectResponse

VersionResponse

VexAssessmentResponse

VulnerabilityLocationResponse

Package Details

On this page

On this page