Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. containeranalysis
  5. containeranalysis/v1alpha1
  6. Note

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.containeranalysis/v1alpha1.Note

Explore with Pulumi AI

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

Creates a new Note.

Create Note Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Note(name: string, args?: NoteArgs, opts?: CustomResourceOptions);
@overload
def Note(resource_name: str,
         args: Optional[NoteArgs] = None,
         opts: Optional[ResourceOptions] = None)

@overload
def Note(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         attestation_authority: Optional[AttestationAuthorityArgs] = None,
         base_image: Optional[BasisArgs] = None,
         build_type: Optional[BuildTypeArgs] = None,
         compliance: Optional[ComplianceNoteArgs] = None,
         deployable: Optional[DeployableArgs] = None,
         discovery: Optional[DiscoveryArgs] = None,
         dsse_attestation: Optional[DSSEAttestationNoteArgs] = None,
         expiration_time: Optional[str] = None,
         long_description: Optional[str] = None,
         name: Optional[str] = None,
         note_id: Optional[str] = None,
         package: Optional[PackageArgs] = None,
         project: Optional[str] = None,
         related_url: Optional[Sequence[RelatedUrlArgs]] = None,
         sbom: Optional[DocumentNoteArgs] = None,
         sbom_reference: Optional[SBOMReferenceNoteArgs] = None,
         short_description: Optional[str] = None,
         spdx_file: Optional[FileNoteArgs] = None,
         spdx_package: Optional[PackageInfoNoteArgs] = None,
         spdx_relationship: Optional[RelationshipNoteArgs] = None,
         upgrade: Optional[UpgradeNoteArgs] = None,
         vulnerability_assessment: Optional[VulnerabilityAssessmentNoteArgs] = None,
         vulnerability_type: Optional[VulnerabilityTypeArgs] = None)
func NewNote(ctx *Context, name string, args *NoteArgs, opts ...ResourceOption) (*Note, error)
public Note(string name, NoteArgs? args = null, CustomResourceOptions? opts = null)
public Note(String name, NoteArgs args)
public Note(String name, NoteArgs args, CustomResourceOptions options)

type: google-native:containeranalysis/v1alpha1:Note
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args NoteArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args NoteArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args NoteArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args NoteArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. NoteArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var google_nativeNoteResource = new GoogleNative.ContainerAnalysis.V1Alpha1.Note("google-nativeNoteResource", new()
{
    AttestationAuthority = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AttestationAuthorityArgs
    {
        Hint = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AttestationAuthorityHintArgs
        {
            HumanReadableName = "string",
        },
    },
    BaseImage = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BasisArgs
    {
        Fingerprint = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FingerprintArgs
        {
            V1Name = "string",
            V2Blob = new[]
            {
                "string",
            },
        },
        ResourceUrl = "string",
    },
    BuildType = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildTypeArgs
    {
        BuilderVersion = "string",
        Signature = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildSignatureArgs
        {
            KeyId = "string",
            KeyType = GoogleNative.ContainerAnalysis.V1Alpha1.BuildSignatureKeyType.KeyTypeUnspecified,
            PublicKey = "string",
            Signature = "string",
        },
    },
    Compliance = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ComplianceNoteArgs
    {
        CisBenchmark = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CisBenchmarkArgs
        {
            ProfileLevel = 0,
            Severity = GoogleNative.ContainerAnalysis.V1Alpha1.CisBenchmarkSeverity.SeverityUnspecified,
        },
        Description = "string",
        Rationale = "string",
        Remediation = "string",
        ScanInstructions = "string",
        Title = "string",
        Version = new[]
        {
            new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ComplianceVersionArgs
            {
                BenchmarkDocument = "string",
                CpeUri = "string",
                Version = "string",
            },
        },
    },
    Deployable = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DeployableArgs
    {
        ResourceUri = new[]
        {
            "string",
        },
    },
    Discovery = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DiscoveryArgs
    {
        AnalysisKind = GoogleNative.ContainerAnalysis.V1Alpha1.DiscoveryAnalysisKind.KindUnspecified,
    },
    DsseAttestation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DSSEAttestationNoteArgs
    {
        Hint = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DSSEHintArgs
        {
            HumanReadableName = "string",
        },
    },
    ExpirationTime = "string",
    LongDescription = "string",
    Name = "string",
    NoteId = "string",
    Package = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PackageArgs
    {
        Architecture = GoogleNative.ContainerAnalysis.V1Alpha1.PackageArchitecture.ArchitectureUnspecified,
        CpeUri = "string",
        Description = "string",
        Digest = new[]
        {
            new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DigestArgs
            {
                Algo = "string",
                DigestBytes = "string",
            },
        },
        Distribution = new[]
        {
            new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DistributionArgs
            {
                Architecture = GoogleNative.ContainerAnalysis.V1Alpha1.DistributionArchitecture.ArchitectureUnspecified,
                CpeUri = "string",
                Description = "string",
                LatestVersion = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
                {
                    Epoch = 0,
                    Inclusive = false,
                    Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
                    Name = "string",
                    Revision = "string",
                },
                Maintainer = "string",
                Url = "string",
            },
        },
        License = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseArgs
        {
            Comments = "string",
            Expression = "string",
        },
        Maintainer = "string",
        Name = "string",
        PackageType = "string",
        Url = "string",
        Version = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
        {
            Epoch = 0,
            Inclusive = false,
            Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
            Name = "string",
            Revision = "string",
        },
    },
    Project = "string",
    RelatedUrl = new[]
    {
        new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RelatedUrlArgs
        {
            Label = "string",
            Url = "string",
        },
    },
    Sbom = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DocumentNoteArgs
    {
        DataLicence = "string",
        SpdxVersion = "string",
    },
    SbomReference = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SBOMReferenceNoteArgs
    {
        Format = "string",
        Version = "string",
    },
    ShortDescription = "string",
    SpdxFile = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileNoteArgs
    {
        Checksum = new[]
        {
            "string",
        },
        FileType = GoogleNative.ContainerAnalysis.V1Alpha1.FileNoteFileType.FileTypeUnspecified,
        Title = "string",
    },
    SpdxPackage = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PackageInfoNoteArgs
    {
        Analyzed = false,
        Attribution = "string",
        Checksum = "string",
        Copyright = "string",
        DetailedDescription = "string",
        DownloadLocation = "string",
        ExternalRefs = new[]
        {
            new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ExternalRefArgs
            {
                Category = GoogleNative.ContainerAnalysis.V1Alpha1.ExternalRefCategory.CategoryUnspecified,
                Comment = "string",
                Locator = "string",
                Type = "string",
            },
        },
        FilesLicenseInfo = new[]
        {
            "string",
        },
        HomePage = "string",
        LicenseDeclared = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseArgs
        {
            Comments = "string",
            Expression = "string",
        },
        Originator = "string",
        PackageType = "string",
        SummaryDescription = "string",
        Supplier = "string",
        Title = "string",
        VerificationCode = "string",
        Version = "string",
    },
    SpdxRelationship = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RelationshipNoteArgs
    {
        Type = GoogleNative.ContainerAnalysis.V1Alpha1.RelationshipNoteType.RelationshipTypeUnspecified,
    },
    Upgrade = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeNoteArgs
    {
        Distributions = new[]
        {
            new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeDistributionArgs
            {
                Classification = "string",
                CpeUri = "string",
                Cve = new[]
                {
                    "string",
                },
                Severity = "string",
            },
        },
        Package = "string",
        Version = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
        {
            Epoch = 0,
            Inclusive = false,
            Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
            Name = "string",
            Revision = "string",
        },
    },
    VulnerabilityAssessment = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityAssessmentNoteArgs
    {
        Assessment = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AssessmentArgs
        {
            Cve = "string",
            Impacts = new[]
            {
                "string",
            },
            Justification = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.JustificationArgs
            {
                Details = "string",
                JustificationType = GoogleNative.ContainerAnalysis.V1Alpha1.JustificationJustificationType.JustificationTypeUnspecified,
            },
            LongDescription = "string",
            RelatedUris = new[]
            {
                new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URIArgs
                {
                    Label = "string",
                    Uri = "string",
                },
            },
            Remediations = new[]
            {
                new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RemediationArgs
                {
                    Details = "string",
                    RemediationType = GoogleNative.ContainerAnalysis.V1Alpha1.RemediationRemediationType.RemediationTypeUnspecified,
                    RemediationUri = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URIArgs
                    {
                        Label = "string",
                        Uri = "string",
                    },
                },
            },
            ShortDescription = "string",
            State = GoogleNative.ContainerAnalysis.V1Alpha1.AssessmentState.StateUnspecified,
            VulnerabilityId = "string",
        },
        LanguageCode = "string",
        LongDescription = "string",
        Product = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ProductArgs
        {
            Id = "string",
            IdentifierHelper = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.IdentifierHelperArgs
            {
                Field = GoogleNative.ContainerAnalysis.V1Alpha1.IdentifierHelperField.IdentifierHelperFieldUnspecified,
                GenericUri = "string",
            },
            Name = "string",
        },
        Publisher = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PublisherArgs
        {
            IssuingAuthority = "string",
            Name = "string",
            PublisherNamespace = "string",
        },
        ShortDescription = "string",
        Title = "string",
    },
    VulnerabilityType = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityTypeArgs
    {
        CvssScore = 0,
        CvssV2 = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CVSSArgs
        {
            AttackComplexity = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackComplexity.AttackComplexityUnspecified,
            AttackVector = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackVector.AttackVectorUnspecified,
            Authentication = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAuthentication.AuthenticationUnspecified,
            AvailabilityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAvailabilityImpact.ImpactUnspecified,
            BaseScore = 0,
            ConfidentialityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSConfidentialityImpact.ImpactUnspecified,
            ExploitabilityScore = 0,
            ImpactScore = 0,
            IntegrityImpact = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSIntegrityImpact.ImpactUnspecified,
            PrivilegesRequired = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
            Scope = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSScope.ScopeUnspecified,
            UserInteraction = GoogleNative.ContainerAnalysis.V1Alpha1.CVSSUserInteraction.UserInteractionUnspecified,
        },
        CvssVersion = GoogleNative.ContainerAnalysis.V1Alpha1.VulnerabilityTypeCvssVersion.CvssVersionUnspecified,
        Cwe = new[]
        {
            "string",
        },
        Details = new[]
        {
            new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DetailArgs
            {
                CpeUri = "string",
                Description = "string",
                FixedLocation = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityLocationArgs
                {
                    CpeUri = "string",
                    FileLocation = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileLocationArgs
                        {
                            FilePath = "string",
                        },
                    },
                    Package = "string",
                    Version = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
                    {
                        Epoch = 0,
                        Inclusive = false,
                        Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
                        Name = "string",
                        Revision = "string",
                    },
                },
                IsObsolete = false,
                MaxAffectedVersion = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
                {
                    Epoch = 0,
                    Inclusive = false,
                    Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
                    Name = "string",
                    Revision = "string",
                },
                MinAffectedVersion = new GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionArgs
                {
                    Epoch = 0,
                    Inclusive = false,
                    Kind = GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind.Normal,
                    Name = "string",
                    Revision = "string",
                },
                Package = "string",
                PackageType = "string",
                SeverityName = "string",
                Source = "string",
                Vendor = "string",
            },
        },
        Severity = GoogleNative.ContainerAnalysis.V1Alpha1.VulnerabilityTypeSeverity.SeverityUnspecified,
    },
});
Copy
example, err := containeranalysisv1alpha1.NewNote(ctx, "google-nativeNoteResource", &containeranalysisv1alpha1.NoteArgs{
	AttestationAuthority: &containeranalysis.AttestationAuthorityArgs{
		Hint: &containeranalysis.AttestationAuthorityHintArgs{
			HumanReadableName: pulumi.String("string"),
		},
	},
	BaseImage: &containeranalysis.BasisArgs{
		Fingerprint: &containeranalysis.FingerprintArgs{
			V1Name: pulumi.String("string"),
			V2Blob: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		ResourceUrl: pulumi.String("string"),
	},
	BuildType: &containeranalysis.BuildTypeArgs{
		BuilderVersion: pulumi.String("string"),
		Signature: &containeranalysis.BuildSignatureArgs{
			KeyId:     pulumi.String("string"),
			KeyType:   containeranalysisv1alpha1.BuildSignatureKeyTypeKeyTypeUnspecified,
			PublicKey: pulumi.String("string"),
			Signature: pulumi.String("string"),
		},
	},
	Compliance: &containeranalysis.ComplianceNoteArgs{
		CisBenchmark: &containeranalysis.CisBenchmarkArgs{
			ProfileLevel: pulumi.Int(0),
			Severity:     containeranalysisv1alpha1.CisBenchmarkSeveritySeverityUnspecified,
		},
		Description:      pulumi.String("string"),
		Rationale:        pulumi.String("string"),
		Remediation:      pulumi.String("string"),
		ScanInstructions: pulumi.String("string"),
		Title:            pulumi.String("string"),
		Version: containeranalysis.ComplianceVersionArray{
			&containeranalysis.ComplianceVersionArgs{
				BenchmarkDocument: pulumi.String("string"),
				CpeUri:            pulumi.String("string"),
				Version:           pulumi.String("string"),
			},
		},
	},
	Deployable: &containeranalysis.DeployableArgs{
		ResourceUri: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Discovery: &containeranalysis.DiscoveryArgs{
		AnalysisKind: containeranalysisv1alpha1.DiscoveryAnalysisKindKindUnspecified,
	},
	DsseAttestation: &containeranalysis.DSSEAttestationNoteArgs{
		Hint: &containeranalysis.DSSEHintArgs{
			HumanReadableName: pulumi.String("string"),
		},
	},
	ExpirationTime:  pulumi.String("string"),
	LongDescription: pulumi.String("string"),
	Name:            pulumi.String("string"),
	NoteId:          pulumi.String("string"),
	Package: &containeranalysis.PackageArgs{
		Architecture: containeranalysisv1alpha1.PackageArchitectureArchitectureUnspecified,
		CpeUri:       pulumi.String("string"),
		Description:  pulumi.String("string"),
		Digest: containeranalysis.DigestArray{
			&containeranalysis.DigestArgs{
				Algo:        pulumi.String("string"),
				DigestBytes: pulumi.String("string"),
			},
		},
		Distribution: containeranalysis.DistributionArray{
			&containeranalysis.DistributionArgs{
				Architecture: containeranalysisv1alpha1.DistributionArchitectureArchitectureUnspecified,
				CpeUri:       pulumi.String("string"),
				Description:  pulumi.String("string"),
				LatestVersion: &containeranalysis.VersionArgs{
					Epoch:     pulumi.Int(0),
					Inclusive: pulumi.Bool(false),
					Kind:      containeranalysisv1alpha1.VersionKindNormal,
					Name:      pulumi.String("string"),
					Revision:  pulumi.String("string"),
				},
				Maintainer: pulumi.String("string"),
				Url:        pulumi.String("string"),
			},
		},
		License: &containeranalysis.LicenseArgs{
			Comments:   pulumi.String("string"),
			Expression: pulumi.String("string"),
		},
		Maintainer:  pulumi.String("string"),
		Name:        pulumi.String("string"),
		PackageType: pulumi.String("string"),
		Url:         pulumi.String("string"),
		Version: &containeranalysis.VersionArgs{
			Epoch:     pulumi.Int(0),
			Inclusive: pulumi.Bool(false),
			Kind:      containeranalysisv1alpha1.VersionKindNormal,
			Name:      pulumi.String("string"),
			Revision:  pulumi.String("string"),
		},
	},
	Project: pulumi.String("string"),
	RelatedUrl: containeranalysis.RelatedUrlArray{
		&containeranalysis.RelatedUrlArgs{
			Label: pulumi.String("string"),
			Url:   pulumi.String("string"),
		},
	},
	Sbom: &containeranalysis.DocumentNoteArgs{
		DataLicence: pulumi.String("string"),
		SpdxVersion: pulumi.String("string"),
	},
	SbomReference: &containeranalysis.SBOMReferenceNoteArgs{
		Format:  pulumi.String("string"),
		Version: pulumi.String("string"),
	},
	ShortDescription: pulumi.String("string"),
	SpdxFile: &containeranalysis.FileNoteArgs{
		Checksum: pulumi.StringArray{
			pulumi.String("string"),
		},
		FileType: containeranalysisv1alpha1.FileNoteFileTypeFileTypeUnspecified,
		Title:    pulumi.String("string"),
	},
	SpdxPackage: &containeranalysis.PackageInfoNoteArgs{
		Analyzed:            pulumi.Bool(false),
		Attribution:         pulumi.String("string"),
		Checksum:            pulumi.String("string"),
		Copyright:           pulumi.String("string"),
		DetailedDescription: pulumi.String("string"),
		DownloadLocation:    pulumi.String("string"),
		ExternalRefs: containeranalysis.ExternalRefArray{
			&containeranalysis.ExternalRefArgs{
				Category: containeranalysisv1alpha1.ExternalRefCategoryCategoryUnspecified,
				Comment:  pulumi.String("string"),
				Locator:  pulumi.String("string"),
				Type:     pulumi.String("string"),
			},
		},
		FilesLicenseInfo: pulumi.StringArray{
			pulumi.String("string"),
		},
		HomePage: pulumi.String("string"),
		LicenseDeclared: &containeranalysis.LicenseArgs{
			Comments:   pulumi.String("string"),
			Expression: pulumi.String("string"),
		},
		Originator:         pulumi.String("string"),
		PackageType:        pulumi.String("string"),
		SummaryDescription: pulumi.String("string"),
		Supplier:           pulumi.String("string"),
		Title:              pulumi.String("string"),
		VerificationCode:   pulumi.String("string"),
		Version:            pulumi.String("string"),
	},
	SpdxRelationship: &containeranalysis.RelationshipNoteArgs{
		Type: containeranalysisv1alpha1.RelationshipNoteTypeRelationshipTypeUnspecified,
	},
	Upgrade: &containeranalysis.UpgradeNoteArgs{
		Distributions: containeranalysis.UpgradeDistributionArray{
			&containeranalysis.UpgradeDistributionArgs{
				Classification: pulumi.String("string"),
				CpeUri:         pulumi.String("string"),
				Cve: pulumi.StringArray{
					pulumi.String("string"),
				},
				Severity: pulumi.String("string"),
			},
		},
		Package: pulumi.String("string"),
		Version: &containeranalysis.VersionArgs{
			Epoch:     pulumi.Int(0),
			Inclusive: pulumi.Bool(false),
			Kind:      containeranalysisv1alpha1.VersionKindNormal,
			Name:      pulumi.String("string"),
			Revision:  pulumi.String("string"),
		},
	},
	VulnerabilityAssessment: &containeranalysis.VulnerabilityAssessmentNoteArgs{
		Assessment: &containeranalysis.AssessmentArgs{
			Cve: pulumi.String("string"),
			Impacts: pulumi.StringArray{
				pulumi.String("string"),
			},
			Justification: &containeranalysis.JustificationArgs{
				Details:           pulumi.String("string"),
				JustificationType: containeranalysisv1alpha1.JustificationJustificationTypeJustificationTypeUnspecified,
			},
			LongDescription: pulumi.String("string"),
			RelatedUris: containeranalysis.URIArray{
				&containeranalysis.URIArgs{
					Label: pulumi.String("string"),
					Uri:   pulumi.String("string"),
				},
			},
			Remediations: containeranalysis.RemediationArray{
				&containeranalysis.RemediationArgs{
					Details:         pulumi.String("string"),
					RemediationType: containeranalysisv1alpha1.RemediationRemediationTypeRemediationTypeUnspecified,
					RemediationUri: &containeranalysis.URIArgs{
						Label: pulumi.String("string"),
						Uri:   pulumi.String("string"),
					},
				},
			},
			ShortDescription: pulumi.String("string"),
			State:            containeranalysisv1alpha1.AssessmentStateStateUnspecified,
			VulnerabilityId:  pulumi.String("string"),
		},
		LanguageCode:    pulumi.String("string"),
		LongDescription: pulumi.String("string"),
		Product: &containeranalysis.ProductArgs{
			Id: pulumi.String("string"),
			IdentifierHelper: &containeranalysis.IdentifierHelperArgs{
				Field:      containeranalysisv1alpha1.IdentifierHelperFieldIdentifierHelperFieldUnspecified,
				GenericUri: pulumi.String("string"),
			},
			Name: pulumi.String("string"),
		},
		Publisher: &containeranalysis.PublisherArgs{
			IssuingAuthority:   pulumi.String("string"),
			Name:               pulumi.String("string"),
			PublisherNamespace: pulumi.String("string"),
		},
		ShortDescription: pulumi.String("string"),
		Title:            pulumi.String("string"),
	},
	VulnerabilityType: &containeranalysis.VulnerabilityTypeArgs{
		CvssScore: pulumi.Float64(0),
		CvssV2: &containeranalysis.CVSSArgs{
			AttackComplexity:      containeranalysisv1alpha1.CVSSAttackComplexityAttackComplexityUnspecified,
			AttackVector:          containeranalysisv1alpha1.CVSSAttackVectorAttackVectorUnspecified,
			Authentication:        containeranalysisv1alpha1.CVSSAuthenticationAuthenticationUnspecified,
			AvailabilityImpact:    containeranalysisv1alpha1.CVSSAvailabilityImpactImpactUnspecified,
			BaseScore:             pulumi.Float64(0),
			ConfidentialityImpact: containeranalysisv1alpha1.CVSSConfidentialityImpactImpactUnspecified,
			ExploitabilityScore:   pulumi.Float64(0),
			ImpactScore:           pulumi.Float64(0),
			IntegrityImpact:       containeranalysisv1alpha1.CVSSIntegrityImpactImpactUnspecified,
			PrivilegesRequired:    containeranalysisv1alpha1.CVSSPrivilegesRequiredPrivilegesRequiredUnspecified,
			Scope:                 containeranalysisv1alpha1.CVSSScopeScopeUnspecified,
			UserInteraction:       containeranalysisv1alpha1.CVSSUserInteractionUserInteractionUnspecified,
		},
		CvssVersion: containeranalysisv1alpha1.VulnerabilityTypeCvssVersionCvssVersionUnspecified,
		Cwe: pulumi.StringArray{
			pulumi.String("string"),
		},
		Details: containeranalysis.DetailArray{
			&containeranalysis.DetailArgs{
				CpeUri:      pulumi.String("string"),
				Description: pulumi.String("string"),
				FixedLocation: &containeranalysis.VulnerabilityLocationArgs{
					CpeUri: pulumi.String("string"),
					FileLocation: containeranalysis.FileLocationArray{
						&containeranalysis.FileLocationArgs{
							FilePath: pulumi.String("string"),
						},
					},
					Package: pulumi.String("string"),
					Version: &containeranalysis.VersionArgs{
						Epoch:     pulumi.Int(0),
						Inclusive: pulumi.Bool(false),
						Kind:      containeranalysisv1alpha1.VersionKindNormal,
						Name:      pulumi.String("string"),
						Revision:  pulumi.String("string"),
					},
				},
				IsObsolete: pulumi.Bool(false),
				MaxAffectedVersion: &containeranalysis.VersionArgs{
					Epoch:     pulumi.Int(0),
					Inclusive: pulumi.Bool(false),
					Kind:      containeranalysisv1alpha1.VersionKindNormal,
					Name:      pulumi.String("string"),
					Revision:  pulumi.String("string"),
				},
				MinAffectedVersion: &containeranalysis.VersionArgs{
					Epoch:     pulumi.Int(0),
					Inclusive: pulumi.Bool(false),
					Kind:      containeranalysisv1alpha1.VersionKindNormal,
					Name:      pulumi.String("string"),
					Revision:  pulumi.String("string"),
				},
				Package:      pulumi.String("string"),
				PackageType:  pulumi.String("string"),
				SeverityName: pulumi.String("string"),
				Source:       pulumi.String("string"),
				Vendor:       pulumi.String("string"),
			},
		},
		Severity: containeranalysisv1alpha1.VulnerabilityTypeSeveritySeverityUnspecified,
	},
})
Copy
var google_nativeNoteResource = new Note("google-nativeNoteResource", NoteArgs.builder()
    .attestationAuthority(AttestationAuthorityArgs.builder()
        .hint(AttestationAuthorityHintArgs.builder()
            .humanReadableName("string")
            .build())
        .build())
    .baseImage(BasisArgs.builder()
        .fingerprint(FingerprintArgs.builder()
            .v1Name("string")
            .v2Blob("string")
            .build())
        .resourceUrl("string")
        .build())
    .buildType(BuildTypeArgs.builder()
        .builderVersion("string")
        .signature(BuildSignatureArgs.builder()
            .keyId("string")
            .keyType("KEY_TYPE_UNSPECIFIED")
            .publicKey("string")
            .signature("string")
            .build())
        .build())
    .compliance(ComplianceNoteArgs.builder()
        .cisBenchmark(CisBenchmarkArgs.builder()
            .profileLevel(0)
            .severity("SEVERITY_UNSPECIFIED")
            .build())
        .description("string")
        .rationale("string")
        .remediation("string")
        .scanInstructions("string")
        .title("string")
        .version(ComplianceVersionArgs.builder()
            .benchmarkDocument("string")
            .cpeUri("string")
            .version("string")
            .build())
        .build())
    .deployable(DeployableArgs.builder()
        .resourceUri("string")
        .build())
    .discovery(DiscoveryArgs.builder()
        .analysisKind("KIND_UNSPECIFIED")
        .build())
    .dsseAttestation(DSSEAttestationNoteArgs.builder()
        .hint(DSSEHintArgs.builder()
            .humanReadableName("string")
            .build())
        .build())
    .expirationTime("string")
    .longDescription("string")
    .name("string")
    .noteId("string")
    .package_(PackageArgs.builder()
        .architecture("ARCHITECTURE_UNSPECIFIED")
        .cpeUri("string")
        .description("string")
        .digest(DigestArgs.builder()
            .algo("string")
            .digestBytes("string")
            .build())
        .distribution(DistributionArgs.builder()
            .architecture("ARCHITECTURE_UNSPECIFIED")
            .cpeUri("string")
            .description("string")
            .latestVersion(VersionArgs.builder()
                .epoch(0)
                .inclusive(false)
                .kind("NORMAL")
                .name("string")
                .revision("string")
                .build())
            .maintainer("string")
            .url("string")
            .build())
        .license(LicenseArgs.builder()
            .comments("string")
            .expression("string")
            .build())
        .maintainer("string")
        .name("string")
        .packageType("string")
        .url("string")
        .version(VersionArgs.builder()
            .epoch(0)
            .inclusive(false)
            .kind("NORMAL")
            .name("string")
            .revision("string")
            .build())
        .build())
    .project("string")
    .relatedUrl(RelatedUrlArgs.builder()
        .label("string")
        .url("string")
        .build())
    .sbom(DocumentNoteArgs.builder()
        .dataLicence("string")
        .spdxVersion("string")
        .build())
    .sbomReference(SBOMReferenceNoteArgs.builder()
        .format("string")
        .version("string")
        .build())
    .shortDescription("string")
    .spdxFile(FileNoteArgs.builder()
        .checksum("string")
        .fileType("FILE_TYPE_UNSPECIFIED")
        .title("string")
        .build())
    .spdxPackage(PackageInfoNoteArgs.builder()
        .analyzed(false)
        .attribution("string")
        .checksum("string")
        .copyright("string")
        .detailedDescription("string")
        .downloadLocation("string")
        .externalRefs(ExternalRefArgs.builder()
            .category("CATEGORY_UNSPECIFIED")
            .comment("string")
            .locator("string")
            .type("string")
            .build())
        .filesLicenseInfo("string")
        .homePage("string")
        .licenseDeclared(LicenseArgs.builder()
            .comments("string")
            .expression("string")
            .build())
        .originator("string")
        .packageType("string")
        .summaryDescription("string")
        .supplier("string")
        .title("string")
        .verificationCode("string")
        .version("string")
        .build())
    .spdxRelationship(RelationshipNoteArgs.builder()
        .type("RELATIONSHIP_TYPE_UNSPECIFIED")
        .build())
    .upgrade(UpgradeNoteArgs.builder()
        .distributions(UpgradeDistributionArgs.builder()
            .classification("string")
            .cpeUri("string")
            .cve("string")
            .severity("string")
            .build())
        .package_("string")
        .version(VersionArgs.builder()
            .epoch(0)
            .inclusive(false)
            .kind("NORMAL")
            .name("string")
            .revision("string")
            .build())
        .build())
    .vulnerabilityAssessment(VulnerabilityAssessmentNoteArgs.builder()
        .assessment(AssessmentArgs.builder()
            .cve("string")
            .impacts("string")
            .justification(JustificationArgs.builder()
                .details("string")
                .justificationType("JUSTIFICATION_TYPE_UNSPECIFIED")
                .build())
            .longDescription("string")
            .relatedUris(URIArgs.builder()
                .label("string")
                .uri("string")
                .build())
            .remediations(RemediationArgs.builder()
                .details("string")
                .remediationType("REMEDIATION_TYPE_UNSPECIFIED")
                .remediationUri(URIArgs.builder()
                    .label("string")
                    .uri("string")
                    .build())
                .build())
            .shortDescription("string")
            .state("STATE_UNSPECIFIED")
            .vulnerabilityId("string")
            .build())
        .languageCode("string")
        .longDescription("string")
        .product(ProductArgs.builder()
            .id("string")
            .identifierHelper(IdentifierHelperArgs.builder()
                .field("IDENTIFIER_HELPER_FIELD_UNSPECIFIED")
                .genericUri("string")
                .build())
            .name("string")
            .build())
        .publisher(PublisherArgs.builder()
            .issuingAuthority("string")
            .name("string")
            .publisherNamespace("string")
            .build())
        .shortDescription("string")
        .title("string")
        .build())
    .vulnerabilityType(VulnerabilityTypeArgs.builder()
        .cvssScore(0)
        .cvssV2(CVSSArgs.builder()
            .attackComplexity("ATTACK_COMPLEXITY_UNSPECIFIED")
            .attackVector("ATTACK_VECTOR_UNSPECIFIED")
            .authentication("AUTHENTICATION_UNSPECIFIED")
            .availabilityImpact("IMPACT_UNSPECIFIED")
            .baseScore(0)
            .confidentialityImpact("IMPACT_UNSPECIFIED")
            .exploitabilityScore(0)
            .impactScore(0)
            .integrityImpact("IMPACT_UNSPECIFIED")
            .privilegesRequired("PRIVILEGES_REQUIRED_UNSPECIFIED")
            .scope("SCOPE_UNSPECIFIED")
            .userInteraction("USER_INTERACTION_UNSPECIFIED")
            .build())
        .cvssVersion("CVSS_VERSION_UNSPECIFIED")
        .cwe("string")
        .details(DetailArgs.builder()
            .cpeUri("string")
            .description("string")
            .fixedLocation(VulnerabilityLocationArgs.builder()
                .cpeUri("string")
                .fileLocation(FileLocationArgs.builder()
                    .filePath("string")
                    .build())
                .package_("string")
                .version(VersionArgs.builder()
                    .epoch(0)
                    .inclusive(false)
                    .kind("NORMAL")
                    .name("string")
                    .revision("string")
                    .build())
                .build())
            .isObsolete(false)
            .maxAffectedVersion(VersionArgs.builder()
                .epoch(0)
                .inclusive(false)
                .kind("NORMAL")
                .name("string")
                .revision("string")
                .build())
            .minAffectedVersion(VersionArgs.builder()
                .epoch(0)
                .inclusive(false)
                .kind("NORMAL")
                .name("string")
                .revision("string")
                .build())
            .package_("string")
            .packageType("string")
            .severityName("string")
            .source("string")
            .vendor("string")
            .build())
        .severity("SEVERITY_UNSPECIFIED")
        .build())
    .build());
Copy
google_native_note_resource = google_native.containeranalysis.v1alpha1.Note("google-nativeNoteResource",
    attestation_authority={
        "hint": {
            "human_readable_name": "string",
        },
    },
    base_image={
        "fingerprint": {
            "v1_name": "string",
            "v2_blob": ["string"],
        },
        "resource_url": "string",
    },
    build_type={
        "builder_version": "string",
        "signature": {
            "key_id": "string",
            "key_type": google_native.containeranalysis.v1alpha1.BuildSignatureKeyType.KEY_TYPE_UNSPECIFIED,
            "public_key": "string",
            "signature": "string",
        },
    },
    compliance={
        "cis_benchmark": {
            "profile_level": 0,
            "severity": google_native.containeranalysis.v1alpha1.CisBenchmarkSeverity.SEVERITY_UNSPECIFIED,
        },
        "description": "string",
        "rationale": "string",
        "remediation": "string",
        "scan_instructions": "string",
        "title": "string",
        "version": [{
            "benchmark_document": "string",
            "cpe_uri": "string",
            "version": "string",
        }],
    },
    deployable={
        "resource_uri": ["string"],
    },
    discovery={
        "analysis_kind": google_native.containeranalysis.v1alpha1.DiscoveryAnalysisKind.KIND_UNSPECIFIED,
    },
    dsse_attestation={
        "hint": {
            "human_readable_name": "string",
        },
    },
    expiration_time="string",
    long_description="string",
    name="string",
    note_id="string",
    package={
        "architecture": google_native.containeranalysis.v1alpha1.PackageArchitecture.ARCHITECTURE_UNSPECIFIED,
        "cpe_uri": "string",
        "description": "string",
        "digest": [{
            "algo": "string",
            "digest_bytes": "string",
        }],
        "distribution": [{
            "architecture": google_native.containeranalysis.v1alpha1.DistributionArchitecture.ARCHITECTURE_UNSPECIFIED,
            "cpe_uri": "string",
            "description": "string",
            "latest_version": {
                "epoch": 0,
                "inclusive": False,
                "kind": google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
                "name": "string",
                "revision": "string",
            },
            "maintainer": "string",
            "url": "string",
        }],
        "license": {
            "comments": "string",
            "expression": "string",
        },
        "maintainer": "string",
        "name": "string",
        "package_type": "string",
        "url": "string",
        "version": {
            "epoch": 0,
            "inclusive": False,
            "kind": google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
            "name": "string",
            "revision": "string",
        },
    },
    project="string",
    related_url=[{
        "label": "string",
        "url": "string",
    }],
    sbom={
        "data_licence": "string",
        "spdx_version": "string",
    },
    sbom_reference={
        "format": "string",
        "version": "string",
    },
    short_description="string",
    spdx_file={
        "checksum": ["string"],
        "file_type": google_native.containeranalysis.v1alpha1.FileNoteFileType.FILE_TYPE_UNSPECIFIED,
        "title": "string",
    },
    spdx_package={
        "analyzed": False,
        "attribution": "string",
        "checksum": "string",
        "copyright": "string",
        "detailed_description": "string",
        "download_location": "string",
        "external_refs": [{
            "category": google_native.containeranalysis.v1alpha1.ExternalRefCategory.CATEGORY_UNSPECIFIED,
            "comment": "string",
            "locator": "string",
            "type": "string",
        }],
        "files_license_info": ["string"],
        "home_page": "string",
        "license_declared": {
            "comments": "string",
            "expression": "string",
        },
        "originator": "string",
        "package_type": "string",
        "summary_description": "string",
        "supplier": "string",
        "title": "string",
        "verification_code": "string",
        "version": "string",
    },
    spdx_relationship={
        "type": google_native.containeranalysis.v1alpha1.RelationshipNoteType.RELATIONSHIP_TYPE_UNSPECIFIED,
    },
    upgrade={
        "distributions": [{
            "classification": "string",
            "cpe_uri": "string",
            "cve": ["string"],
            "severity": "string",
        }],
        "package": "string",
        "version": {
            "epoch": 0,
            "inclusive": False,
            "kind": google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
            "name": "string",
            "revision": "string",
        },
    },
    vulnerability_assessment={
        "assessment": {
            "cve": "string",
            "impacts": ["string"],
            "justification": {
                "details": "string",
                "justification_type": google_native.containeranalysis.v1alpha1.JustificationJustificationType.JUSTIFICATION_TYPE_UNSPECIFIED,
            },
            "long_description": "string",
            "related_uris": [{
                "label": "string",
                "uri": "string",
            }],
            "remediations": [{
                "details": "string",
                "remediation_type": google_native.containeranalysis.v1alpha1.RemediationRemediationType.REMEDIATION_TYPE_UNSPECIFIED,
                "remediation_uri": {
                    "label": "string",
                    "uri": "string",
                },
            }],
            "short_description": "string",
            "state": google_native.containeranalysis.v1alpha1.AssessmentState.STATE_UNSPECIFIED,
            "vulnerability_id": "string",
        },
        "language_code": "string",
        "long_description": "string",
        "product": {
            "id": "string",
            "identifier_helper": {
                "field": google_native.containeranalysis.v1alpha1.IdentifierHelperField.IDENTIFIER_HELPER_FIELD_UNSPECIFIED,
                "generic_uri": "string",
            },
            "name": "string",
        },
        "publisher": {
            "issuing_authority": "string",
            "name": "string",
            "publisher_namespace": "string",
        },
        "short_description": "string",
        "title": "string",
    },
    vulnerability_type={
        "cvss_score": 0,
        "cvss_v2": {
            "attack_complexity": google_native.containeranalysis.v1alpha1.CVSSAttackComplexity.ATTACK_COMPLEXITY_UNSPECIFIED,
            "attack_vector": google_native.containeranalysis.v1alpha1.CVSSAttackVector.ATTACK_VECTOR_UNSPECIFIED,
            "authentication": google_native.containeranalysis.v1alpha1.CVSSAuthentication.AUTHENTICATION_UNSPECIFIED,
            "availability_impact": google_native.containeranalysis.v1alpha1.CVSSAvailabilityImpact.IMPACT_UNSPECIFIED,
            "base_score": 0,
            "confidentiality_impact": google_native.containeranalysis.v1alpha1.CVSSConfidentialityImpact.IMPACT_UNSPECIFIED,
            "exploitability_score": 0,
            "impact_score": 0,
            "integrity_impact": google_native.containeranalysis.v1alpha1.CVSSIntegrityImpact.IMPACT_UNSPECIFIED,
            "privileges_required": google_native.containeranalysis.v1alpha1.CVSSPrivilegesRequired.PRIVILEGES_REQUIRED_UNSPECIFIED,
            "scope": google_native.containeranalysis.v1alpha1.CVSSScope.SCOPE_UNSPECIFIED,
            "user_interaction": google_native.containeranalysis.v1alpha1.CVSSUserInteraction.USER_INTERACTION_UNSPECIFIED,
        },
        "cvss_version": google_native.containeranalysis.v1alpha1.VulnerabilityTypeCvssVersion.CVSS_VERSION_UNSPECIFIED,
        "cwe": ["string"],
        "details": [{
            "cpe_uri": "string",
            "description": "string",
            "fixed_location": {
                "cpe_uri": "string",
                "file_location": [{
                    "file_path": "string",
                }],
                "package": "string",
                "version": {
                    "epoch": 0,
                    "inclusive": False,
                    "kind": google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
                    "name": "string",
                    "revision": "string",
                },
            },
            "is_obsolete": False,
            "max_affected_version": {
                "epoch": 0,
                "inclusive": False,
                "kind": google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
                "name": "string",
                "revision": "string",
            },
            "min_affected_version": {
                "epoch": 0,
                "inclusive": False,
                "kind": google_native.containeranalysis.v1alpha1.VersionKind.NORMAL,
                "name": "string",
                "revision": "string",
            },
            "package": "string",
            "package_type": "string",
            "severity_name": "string",
            "source": "string",
            "vendor": "string",
        }],
        "severity": google_native.containeranalysis.v1alpha1.VulnerabilityTypeSeverity.SEVERITY_UNSPECIFIED,
    })
Copy
const google_nativeNoteResource = new google_native.containeranalysis.v1alpha1.Note("google-nativeNoteResource", {
    attestationAuthority: {
        hint: {
            humanReadableName: "string",
        },
    },
    baseImage: {
        fingerprint: {
            v1Name: "string",
            v2Blob: ["string"],
        },
        resourceUrl: "string",
    },
    buildType: {
        builderVersion: "string",
        signature: {
            keyId: "string",
            keyType: google_native.containeranalysis.v1alpha1.BuildSignatureKeyType.KeyTypeUnspecified,
            publicKey: "string",
            signature: "string",
        },
    },
    compliance: {
        cisBenchmark: {
            profileLevel: 0,
            severity: google_native.containeranalysis.v1alpha1.CisBenchmarkSeverity.SeverityUnspecified,
        },
        description: "string",
        rationale: "string",
        remediation: "string",
        scanInstructions: "string",
        title: "string",
        version: [{
            benchmarkDocument: "string",
            cpeUri: "string",
            version: "string",
        }],
    },
    deployable: {
        resourceUri: ["string"],
    },
    discovery: {
        analysisKind: google_native.containeranalysis.v1alpha1.DiscoveryAnalysisKind.KindUnspecified,
    },
    dsseAttestation: {
        hint: {
            humanReadableName: "string",
        },
    },
    expirationTime: "string",
    longDescription: "string",
    name: "string",
    noteId: "string",
    "package": {
        architecture: google_native.containeranalysis.v1alpha1.PackageArchitecture.ArchitectureUnspecified,
        cpeUri: "string",
        description: "string",
        digest: [{
            algo: "string",
            digestBytes: "string",
        }],
        distribution: [{
            architecture: google_native.containeranalysis.v1alpha1.DistributionArchitecture.ArchitectureUnspecified,
            cpeUri: "string",
            description: "string",
            latestVersion: {
                epoch: 0,
                inclusive: false,
                kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
                name: "string",
                revision: "string",
            },
            maintainer: "string",
            url: "string",
        }],
        license: {
            comments: "string",
            expression: "string",
        },
        maintainer: "string",
        name: "string",
        packageType: "string",
        url: "string",
        version: {
            epoch: 0,
            inclusive: false,
            kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
            name: "string",
            revision: "string",
        },
    },
    project: "string",
    relatedUrl: [{
        label: "string",
        url: "string",
    }],
    sbom: {
        dataLicence: "string",
        spdxVersion: "string",
    },
    sbomReference: {
        format: "string",
        version: "string",
    },
    shortDescription: "string",
    spdxFile: {
        checksum: ["string"],
        fileType: google_native.containeranalysis.v1alpha1.FileNoteFileType.FileTypeUnspecified,
        title: "string",
    },
    spdxPackage: {
        analyzed: false,
        attribution: "string",
        checksum: "string",
        copyright: "string",
        detailedDescription: "string",
        downloadLocation: "string",
        externalRefs: [{
            category: google_native.containeranalysis.v1alpha1.ExternalRefCategory.CategoryUnspecified,
            comment: "string",
            locator: "string",
            type: "string",
        }],
        filesLicenseInfo: ["string"],
        homePage: "string",
        licenseDeclared: {
            comments: "string",
            expression: "string",
        },
        originator: "string",
        packageType: "string",
        summaryDescription: "string",
        supplier: "string",
        title: "string",
        verificationCode: "string",
        version: "string",
    },
    spdxRelationship: {
        type: google_native.containeranalysis.v1alpha1.RelationshipNoteType.RelationshipTypeUnspecified,
    },
    upgrade: {
        distributions: [{
            classification: "string",
            cpeUri: "string",
            cve: ["string"],
            severity: "string",
        }],
        "package": "string",
        version: {
            epoch: 0,
            inclusive: false,
            kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
            name: "string",
            revision: "string",
        },
    },
    vulnerabilityAssessment: {
        assessment: {
            cve: "string",
            impacts: ["string"],
            justification: {
                details: "string",
                justificationType: google_native.containeranalysis.v1alpha1.JustificationJustificationType.JustificationTypeUnspecified,
            },
            longDescription: "string",
            relatedUris: [{
                label: "string",
                uri: "string",
            }],
            remediations: [{
                details: "string",
                remediationType: google_native.containeranalysis.v1alpha1.RemediationRemediationType.RemediationTypeUnspecified,
                remediationUri: {
                    label: "string",
                    uri: "string",
                },
            }],
            shortDescription: "string",
            state: google_native.containeranalysis.v1alpha1.AssessmentState.StateUnspecified,
            vulnerabilityId: "string",
        },
        languageCode: "string",
        longDescription: "string",
        product: {
            id: "string",
            identifierHelper: {
                field: google_native.containeranalysis.v1alpha1.IdentifierHelperField.IdentifierHelperFieldUnspecified,
                genericUri: "string",
            },
            name: "string",
        },
        publisher: {
            issuingAuthority: "string",
            name: "string",
            publisherNamespace: "string",
        },
        shortDescription: "string",
        title: "string",
    },
    vulnerabilityType: {
        cvssScore: 0,
        cvssV2: {
            attackComplexity: google_native.containeranalysis.v1alpha1.CVSSAttackComplexity.AttackComplexityUnspecified,
            attackVector: google_native.containeranalysis.v1alpha1.CVSSAttackVector.AttackVectorUnspecified,
            authentication: google_native.containeranalysis.v1alpha1.CVSSAuthentication.AuthenticationUnspecified,
            availabilityImpact: google_native.containeranalysis.v1alpha1.CVSSAvailabilityImpact.ImpactUnspecified,
            baseScore: 0,
            confidentialityImpact: google_native.containeranalysis.v1alpha1.CVSSConfidentialityImpact.ImpactUnspecified,
            exploitabilityScore: 0,
            impactScore: 0,
            integrityImpact: google_native.containeranalysis.v1alpha1.CVSSIntegrityImpact.ImpactUnspecified,
            privilegesRequired: google_native.containeranalysis.v1alpha1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
            scope: google_native.containeranalysis.v1alpha1.CVSSScope.ScopeUnspecified,
            userInteraction: google_native.containeranalysis.v1alpha1.CVSSUserInteraction.UserInteractionUnspecified,
        },
        cvssVersion: google_native.containeranalysis.v1alpha1.VulnerabilityTypeCvssVersion.CvssVersionUnspecified,
        cwe: ["string"],
        details: [{
            cpeUri: "string",
            description: "string",
            fixedLocation: {
                cpeUri: "string",
                fileLocation: [{
                    filePath: "string",
                }],
                "package": "string",
                version: {
                    epoch: 0,
                    inclusive: false,
                    kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
                    name: "string",
                    revision: "string",
                },
            },
            isObsolete: false,
            maxAffectedVersion: {
                epoch: 0,
                inclusive: false,
                kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
                name: "string",
                revision: "string",
            },
            minAffectedVersion: {
                epoch: 0,
                inclusive: false,
                kind: google_native.containeranalysis.v1alpha1.VersionKind.Normal,
                name: "string",
                revision: "string",
            },
            "package": "string",
            packageType: "string",
            severityName: "string",
            source: "string",
            vendor: "string",
        }],
        severity: google_native.containeranalysis.v1alpha1.VulnerabilityTypeSeverity.SeverityUnspecified,
    },
});
Copy
type: google-native:containeranalysis/v1alpha1:Note
properties:
    attestationAuthority:
        hint:
            humanReadableName: string
    baseImage:
        fingerprint:
            v1Name: string
            v2Blob:
                - string
        resourceUrl: string
    buildType:
        builderVersion: string
        signature:
            keyId: string
            keyType: KEY_TYPE_UNSPECIFIED
            publicKey: string
            signature: string
    compliance:
        cisBenchmark:
            profileLevel: 0
            severity: SEVERITY_UNSPECIFIED
        description: string
        rationale: string
        remediation: string
        scanInstructions: string
        title: string
        version:
            - benchmarkDocument: string
              cpeUri: string
              version: string
    deployable:
        resourceUri:
            - string
    discovery:
        analysisKind: KIND_UNSPECIFIED
    dsseAttestation:
        hint:
            humanReadableName: string
    expirationTime: string
    longDescription: string
    name: string
    noteId: string
    package:
        architecture: ARCHITECTURE_UNSPECIFIED
        cpeUri: string
        description: string
        digest:
            - algo: string
              digestBytes: string
        distribution:
            - architecture: ARCHITECTURE_UNSPECIFIED
              cpeUri: string
              description: string
              latestVersion:
                epoch: 0
                inclusive: false
                kind: NORMAL
                name: string
                revision: string
              maintainer: string
              url: string
        license:
            comments: string
            expression: string
        maintainer: string
        name: string
        packageType: string
        url: string
        version:
            epoch: 0
            inclusive: false
            kind: NORMAL
            name: string
            revision: string
    project: string
    relatedUrl:
        - label: string
          url: string
    sbom:
        dataLicence: string
        spdxVersion: string
    sbomReference:
        format: string
        version: string
    shortDescription: string
    spdxFile:
        checksum:
            - string
        fileType: FILE_TYPE_UNSPECIFIED
        title: string
    spdxPackage:
        analyzed: false
        attribution: string
        checksum: string
        copyright: string
        detailedDescription: string
        downloadLocation: string
        externalRefs:
            - category: CATEGORY_UNSPECIFIED
              comment: string
              locator: string
              type: string
        filesLicenseInfo:
            - string
        homePage: string
        licenseDeclared:
            comments: string
            expression: string
        originator: string
        packageType: string
        summaryDescription: string
        supplier: string
        title: string
        verificationCode: string
        version: string
    spdxRelationship:
        type: RELATIONSHIP_TYPE_UNSPECIFIED
    upgrade:
        distributions:
            - classification: string
              cpeUri: string
              cve:
                - string
              severity: string
        package: string
        version:
            epoch: 0
            inclusive: false
            kind: NORMAL
            name: string
            revision: string
    vulnerabilityAssessment:
        assessment:
            cve: string
            impacts:
                - string
            justification:
                details: string
                justificationType: JUSTIFICATION_TYPE_UNSPECIFIED
            longDescription: string
            relatedUris:
                - label: string
                  uri: string
            remediations:
                - details: string
                  remediationType: REMEDIATION_TYPE_UNSPECIFIED
                  remediationUri:
                    label: string
                    uri: string
            shortDescription: string
            state: STATE_UNSPECIFIED
            vulnerabilityId: string
        languageCode: string
        longDescription: string
        product:
            id: string
            identifierHelper:
                field: IDENTIFIER_HELPER_FIELD_UNSPECIFIED
                genericUri: string
            name: string
        publisher:
            issuingAuthority: string
            name: string
            publisherNamespace: string
        shortDescription: string
        title: string
    vulnerabilityType:
        cvssScore: 0
        cvssV2:
            attackComplexity: ATTACK_COMPLEXITY_UNSPECIFIED
            attackVector: ATTACK_VECTOR_UNSPECIFIED
            authentication: AUTHENTICATION_UNSPECIFIED
            availabilityImpact: IMPACT_UNSPECIFIED
            baseScore: 0
            confidentialityImpact: IMPACT_UNSPECIFIED
            exploitabilityScore: 0
            impactScore: 0
            integrityImpact: IMPACT_UNSPECIFIED
            privilegesRequired: PRIVILEGES_REQUIRED_UNSPECIFIED
            scope: SCOPE_UNSPECIFIED
            userInteraction: USER_INTERACTION_UNSPECIFIED
        cvssVersion: CVSS_VERSION_UNSPECIFIED
        cwe:
            - string
        details:
            - cpeUri: string
              description: string
              fixedLocation:
                cpeUri: string
                fileLocation:
                    - filePath: string
                package: string
                version:
                    epoch: 0
                    inclusive: false
                    kind: NORMAL
                    name: string
                    revision: string
              isObsolete: false
              maxAffectedVersion:
                epoch: 0
                inclusive: false
                kind: NORMAL
                name: string
                revision: string
              minAffectedVersion:
                epoch: 0
                inclusive: false
                kind: NORMAL
                name: string
                revision: string
              package: string
              packageType: string
              severityName: string
              source: string
              vendor: string
        severity: SEVERITY_UNSPECIFIED
Copy

Note Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Note resource accepts the following input properties:

AttestationAuthority Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AttestationAuthority
A note describing an attestation role.
BaseImage Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Basis
A note describing a base image.
BuildType Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildType
Build provenance type for a verifiable build.
Compliance Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ComplianceNote
A note describing a compliance check.
Deployable Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Deployable
A note describing something that can be deployed.
Discovery Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Discovery
A note describing a provider/analysis type.
DsseAttestation Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DSSEAttestationNote
A note describing a dsse attestation note.
ExpirationTime string
Time of expiration for this note, null if note does not expire.
LongDescription string
A detailed description of this Note.
Name string
The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}"
NoteId string
The ID to use for this note.
Package Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Package
A note describing a package hosted by various package managers.
Project Changes to this property will trigger replacement. string
RelatedUrl List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RelatedUrl>
URLs associated with this note
Sbom Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DocumentNote
A note describing a software bill of materials.
SbomReference Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.SBOMReferenceNote
A note describing a reference to an SBOM.
ShortDescription string
A one sentence description of this Note.
SpdxFile Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileNote
A note describing an SPDX File.
SpdxPackage Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PackageInfoNote
A note describing an SPDX Package.
SpdxRelationship Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RelationshipNote
A note describing a relationship between SPDX elements.
Upgrade Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeNote
A note describing an upgrade.
VulnerabilityAssessment Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityAssessmentNote
A note describing a vulnerability assessment.
VulnerabilityType Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityType
A package vulnerability type of note.
AttestationAuthority AttestationAuthorityArgs
A note describing an attestation role.
BaseImage BasisArgs
A note describing a base image.
BuildType BuildTypeArgs
Build provenance type for a verifiable build.
Compliance ComplianceNoteArgs
A note describing a compliance check.
Deployable DeployableArgs
A note describing something that can be deployed.
Discovery DiscoveryArgs
A note describing a provider/analysis type.
DsseAttestation DSSEAttestationNoteArgs
A note describing a dsse attestation note.
ExpirationTime string
Time of expiration for this note, null if note does not expire.
LongDescription string
A detailed description of this Note.
Name string
The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}"
NoteId string
The ID to use for this note.
Package PackageArgs
A note describing a package hosted by various package managers.
Project Changes to this property will trigger replacement. string
RelatedUrl []RelatedUrlArgs
URLs associated with this note
Sbom DocumentNoteArgs
A note describing a software bill of materials.
SbomReference SBOMReferenceNoteArgs
A note describing a reference to an SBOM.
ShortDescription string
A one sentence description of this Note.
SpdxFile FileNoteArgs
A note describing an SPDX File.
SpdxPackage PackageInfoNoteArgs
A note describing an SPDX Package.
SpdxRelationship RelationshipNoteArgs
A note describing a relationship between SPDX elements.
Upgrade UpgradeNoteArgs
A note describing an upgrade.
VulnerabilityAssessment VulnerabilityAssessmentNoteArgs
A note describing a vulnerability assessment.
VulnerabilityType VulnerabilityTypeArgs
A package vulnerability type of note.
attestationAuthority AttestationAuthority
A note describing an attestation role.
baseImage Basis
A note describing a base image.
buildType BuildType
Build provenance type for a verifiable build.
compliance ComplianceNote
A note describing a compliance check.
deployable Deployable
A note describing something that can be deployed.
discovery Discovery
A note describing a provider/analysis type.
dsseAttestation DSSEAttestationNote
A note describing a dsse attestation note.
expirationTime String
Time of expiration for this note, null if note does not expire.
longDescription String
A detailed description of this Note.
name String
The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}"
noteId String
The ID to use for this note.
package_ Package
A note describing a package hosted by various package managers.
project Changes to this property will trigger replacement. String
relatedUrl List<RelatedUrl>
URLs associated with this note
sbom DocumentNote
A note describing a software bill of materials.
sbomReference SBOMReferenceNote
A note describing a reference to an SBOM.
shortDescription String
A one sentence description of this Note.
spdxFile FileNote
A note describing an SPDX File.
spdxPackage PackageInfoNote
A note describing an SPDX Package.
spdxRelationship RelationshipNote
A note describing a relationship between SPDX elements.
upgrade UpgradeNote
A note describing an upgrade.
vulnerabilityAssessment VulnerabilityAssessmentNote
A note describing a vulnerability assessment.
vulnerabilityType VulnerabilityType
A package vulnerability type of note.
attestationAuthority AttestationAuthority
A note describing an attestation role.
baseImage Basis
A note describing a base image.
buildType BuildType
Build provenance type for a verifiable build.
compliance ComplianceNote
A note describing a compliance check.
deployable Deployable
A note describing something that can be deployed.
discovery Discovery
A note describing a provider/analysis type.
dsseAttestation DSSEAttestationNote
A note describing a dsse attestation note.
expirationTime string
Time of expiration for this note, null if note does not expire.
longDescription string
A detailed description of this Note.
name string
The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}"
noteId string
The ID to use for this note.
package Package
A note describing a package hosted by various package managers.
project Changes to this property will trigger replacement. string
relatedUrl RelatedUrl[]
URLs associated with this note
sbom DocumentNote
A note describing a software bill of materials.
sbomReference SBOMReferenceNote
A note describing a reference to an SBOM.
shortDescription string
A one sentence description of this Note.
spdxFile FileNote
A note describing an SPDX File.
spdxPackage PackageInfoNote
A note describing an SPDX Package.
spdxRelationship RelationshipNote
A note describing a relationship between SPDX elements.
upgrade UpgradeNote
A note describing an upgrade.
vulnerabilityAssessment VulnerabilityAssessmentNote
A note describing a vulnerability assessment.
vulnerabilityType VulnerabilityType
A package vulnerability type of note.
attestation_authority AttestationAuthorityArgs
A note describing an attestation role.
base_image BasisArgs
A note describing a base image.
build_type BuildTypeArgs
Build provenance type for a verifiable build.
compliance ComplianceNoteArgs
A note describing a compliance check.
deployable DeployableArgs
A note describing something that can be deployed.
discovery DiscoveryArgs
A note describing a provider/analysis type.
dsse_attestation DSSEAttestationNoteArgs
A note describing a dsse attestation note.
expiration_time str
Time of expiration for this note, null if note does not expire.
long_description str
A detailed description of this Note.
name str
The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}"
note_id str
The ID to use for this note.
package PackageArgs
A note describing a package hosted by various package managers.
project Changes to this property will trigger replacement. str
related_url Sequence[RelatedUrlArgs]
URLs associated with this note
sbom DocumentNoteArgs
A note describing a software bill of materials.
sbom_reference SBOMReferenceNoteArgs
A note describing a reference to an SBOM.
short_description str
A one sentence description of this Note.
spdx_file FileNoteArgs
A note describing an SPDX File.
spdx_package PackageInfoNoteArgs
A note describing an SPDX Package.
spdx_relationship RelationshipNoteArgs
A note describing a relationship between SPDX elements.
upgrade UpgradeNoteArgs
A note describing an upgrade.
vulnerability_assessment VulnerabilityAssessmentNoteArgs
A note describing a vulnerability assessment.
vulnerability_type VulnerabilityTypeArgs
A package vulnerability type of note.
attestationAuthority Property Map
A note describing an attestation role.
baseImage Property Map
A note describing a base image.
buildType Property Map
Build provenance type for a verifiable build.
compliance Property Map
A note describing a compliance check.
deployable Property Map
A note describing something that can be deployed.
discovery Property Map
A note describing a provider/analysis type.
dsseAttestation Property Map
A note describing a dsse attestation note.
expirationTime String
Time of expiration for this note, null if note does not expire.
longDescription String
A detailed description of this Note.
name String
The name of the note in the form "projects/{provider_project_id}/notes/{NOTE_ID}"
noteId String
The ID to use for this note.
package Property Map
A note describing a package hosted by various package managers.
project Changes to this property will trigger replacement. String
relatedUrl List<Property Map>
URLs associated with this note
sbom Property Map
A note describing a software bill of materials.
sbomReference Property Map
A note describing a reference to an SBOM.
shortDescription String
A one sentence description of this Note.
spdxFile Property Map
A note describing an SPDX File.
spdxPackage Property Map
A note describing an SPDX Package.
spdxRelationship Property Map
A note describing a relationship between SPDX elements.
upgrade Property Map
A note describing an upgrade.
vulnerabilityAssessment Property Map
A note describing a vulnerability assessment.
vulnerabilityType Property Map
A package vulnerability type of note.

Outputs

All input properties are implicitly available as output properties. Additionally, the Note resource produces the following output properties:

CreateTime string
The time this note was created. This field can be used as a filter in list requests.
Id string
The provider-assigned unique ID for this managed resource.
Kind string
This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests.
UpdateTime string
The time this note was last updated. This field can be used as a filter in list requests.
CreateTime string
The time this note was created. This field can be used as a filter in list requests.
Id string
The provider-assigned unique ID for this managed resource.
Kind string
This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests.
UpdateTime string
The time this note was last updated. This field can be used as a filter in list requests.
createTime String
The time this note was created. This field can be used as a filter in list requests.
id String
The provider-assigned unique ID for this managed resource.
kind String
This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests.
updateTime String
The time this note was last updated. This field can be used as a filter in list requests.
createTime string
The time this note was created. This field can be used as a filter in list requests.
id string
The provider-assigned unique ID for this managed resource.
kind string
This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests.
updateTime string
The time this note was last updated. This field can be used as a filter in list requests.
create_time str
The time this note was created. This field can be used as a filter in list requests.
id str
The provider-assigned unique ID for this managed resource.
kind str
This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests.
update_time str
The time this note was last updated. This field can be used as a filter in list requests.
createTime String
The time this note was created. This field can be used as a filter in list requests.
id String
The provider-assigned unique ID for this managed resource.
kind String
This explicitly denotes which kind of note is specified. This field can be used as a filter in list requests.
updateTime String
The time this note was last updated. This field can be used as a filter in list requests.

Supporting Types

Assessment
, AssessmentArgs

Cve string
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
Impacts List<string>
Contains information about the impact of this vulnerability, this will change with time.
Justification Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Justification
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
LongDescription string
A detailed description of this Vex.
RelatedUris List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URI>
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
Remediations List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Remediation>
Specifies details on how to handle (and presumably, fix) a vulnerability.
ShortDescription string
A one sentence description of this Vex.
State Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.AssessmentState
Provides the state of this Vulnerability assessment.
VulnerabilityId string
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
Cve string
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
Impacts []string
Contains information about the impact of this vulnerability, this will change with time.
Justification Justification
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
LongDescription string
A detailed description of this Vex.
RelatedUris []URI
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
Remediations []Remediation
Specifies details on how to handle (and presumably, fix) a vulnerability.
ShortDescription string
A one sentence description of this Vex.
State AssessmentState
Provides the state of this Vulnerability assessment.
VulnerabilityId string
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve String
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts List<String>
Contains information about the impact of this vulnerability, this will change with time.
justification Justification
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
longDescription String
A detailed description of this Vex.
relatedUris List<URI>
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations List<Remediation>
Specifies details on how to handle (and presumably, fix) a vulnerability.
shortDescription String
A one sentence description of this Vex.
state AssessmentState
Provides the state of this Vulnerability assessment.
vulnerabilityId String
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve string
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts string[]
Contains information about the impact of this vulnerability, this will change with time.
justification Justification
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
longDescription string
A detailed description of this Vex.
relatedUris URI[]
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations Remediation[]
Specifies details on how to handle (and presumably, fix) a vulnerability.
shortDescription string
A one sentence description of this Vex.
state AssessmentState
Provides the state of this Vulnerability assessment.
vulnerabilityId string
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve str
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts Sequence[str]
Contains information about the impact of this vulnerability, this will change with time.
justification Justification
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
long_description str
A detailed description of this Vex.
related_uris Sequence[URI]
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations Sequence[Remediation]
Specifies details on how to handle (and presumably, fix) a vulnerability.
short_description str
A one sentence description of this Vex.
state AssessmentState
Provides the state of this Vulnerability assessment.
vulnerability_id str
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve String
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts List<String>
Contains information about the impact of this vulnerability, this will change with time.
justification Property Map
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
longDescription String
A detailed description of this Vex.
relatedUris List<Property Map>
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations List<Property Map>
Specifies details on how to handle (and presumably, fix) a vulnerability.
shortDescription String
A one sentence description of this Vex.
state "STATE_UNSPECIFIED" | "AFFECTED" | "NOT_AFFECTED" | "FIXED" | "UNDER_INVESTIGATION"
Provides the state of this Vulnerability assessment.
vulnerabilityId String
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

AssessmentResponse
, AssessmentResponseArgs

Cve This property is required. string
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
Impacts This property is required. List<string>
Contains information about the impact of this vulnerability, this will change with time.
Justification This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.JustificationResponse
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
LongDescription This property is required. string
A detailed description of this Vex.
RelatedUris This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URIResponse>
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
Remediations This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.RemediationResponse>
Specifies details on how to handle (and presumably, fix) a vulnerability.
ShortDescription This property is required. string
A one sentence description of this Vex.
State This property is required. string
Provides the state of this Vulnerability assessment.
VulnerabilityId This property is required. string
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
Cve This property is required. string
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
Impacts This property is required. []string
Contains information about the impact of this vulnerability, this will change with time.
Justification This property is required. JustificationResponse
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
LongDescription This property is required. string
A detailed description of this Vex.
RelatedUris This property is required. []URIResponse
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
Remediations This property is required. []RemediationResponse
Specifies details on how to handle (and presumably, fix) a vulnerability.
ShortDescription This property is required. string
A one sentence description of this Vex.
State This property is required. string
Provides the state of this Vulnerability assessment.
VulnerabilityId This property is required. string
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve This property is required. String
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts This property is required. List<String>
Contains information about the impact of this vulnerability, this will change with time.
justification This property is required. JustificationResponse
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
longDescription This property is required. String
A detailed description of this Vex.
relatedUris This property is required. List<URIResponse>
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations This property is required. List<RemediationResponse>
Specifies details on how to handle (and presumably, fix) a vulnerability.
shortDescription This property is required. String
A one sentence description of this Vex.
state This property is required. String
Provides the state of this Vulnerability assessment.
vulnerabilityId This property is required. String
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve This property is required. string
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts This property is required. string[]
Contains information about the impact of this vulnerability, this will change with time.
justification This property is required. JustificationResponse
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
longDescription This property is required. string
A detailed description of this Vex.
relatedUris This property is required. URIResponse[]
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations This property is required. RemediationResponse[]
Specifies details on how to handle (and presumably, fix) a vulnerability.
shortDescription This property is required. string
A one sentence description of this Vex.
state This property is required. string
Provides the state of this Vulnerability assessment.
vulnerabilityId This property is required. string
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve This property is required. str
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts This property is required. Sequence[str]
Contains information about the impact of this vulnerability, this will change with time.
justification This property is required. JustificationResponse
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
long_description This property is required. str
A detailed description of this Vex.
related_uris This property is required. Sequence[URIResponse]
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations This property is required. Sequence[RemediationResponse]
Specifies details on how to handle (and presumably, fix) a vulnerability.
short_description This property is required. str
A one sentence description of this Vex.
state This property is required. str
Provides the state of this Vulnerability assessment.
vulnerability_id This property is required. str
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
cve This property is required. String
Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability.
impacts This property is required. List<String>
Contains information about the impact of this vulnerability, this will change with time.
justification This property is required. Property Map
Justification provides the justification when the state of the assessment if NOT_AFFECTED.
longDescription This property is required. String
A detailed description of this Vex.
relatedUris This property is required. List<Property Map>
Holds a list of references associated with this vulnerability item and assessment. These uris have additional information about the vulnerability and the assessment itself. E.g. Link to a document which details how this assessment concluded the state of this vulnerability.
remediations This property is required. List<Property Map>
Specifies details on how to handle (and presumably, fix) a vulnerability.
shortDescription This property is required. String
A one sentence description of this Vex.
state This property is required. String
Provides the state of this Vulnerability assessment.
vulnerabilityId This property is required. String
The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

AssessmentState
, AssessmentStateArgs

StateUnspecified
STATE_UNSPECIFIEDNo state is specified.
Affected
AFFECTEDThis product is known to be affected by this vulnerability.
NotAffected
NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
Fixed
FIXEDThis product contains a fix for this vulnerability.
UnderInvestigation
UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
AssessmentStateStateUnspecified
STATE_UNSPECIFIEDNo state is specified.
AssessmentStateAffected
AFFECTEDThis product is known to be affected by this vulnerability.
AssessmentStateNotAffected
NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
AssessmentStateFixed
FIXEDThis product contains a fix for this vulnerability.
AssessmentStateUnderInvestigation
UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
StateUnspecified
STATE_UNSPECIFIEDNo state is specified.
Affected
AFFECTEDThis product is known to be affected by this vulnerability.
NotAffected
NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
Fixed
FIXEDThis product contains a fix for this vulnerability.
UnderInvestigation
UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
StateUnspecified
STATE_UNSPECIFIEDNo state is specified.
Affected
AFFECTEDThis product is known to be affected by this vulnerability.
NotAffected
NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
Fixed
FIXEDThis product contains a fix for this vulnerability.
UnderInvestigation
UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
STATE_UNSPECIFIED
STATE_UNSPECIFIEDNo state is specified.
AFFECTED
AFFECTEDThis product is known to be affected by this vulnerability.
NOT_AFFECTED
NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
FIXED
FIXEDThis product contains a fix for this vulnerability.
UNDER_INVESTIGATION
UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
"STATE_UNSPECIFIED"
STATE_UNSPECIFIEDNo state is specified.
"AFFECTED"
AFFECTEDThis product is known to be affected by this vulnerability.
"NOT_AFFECTED"
NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
"FIXED"
FIXEDThis product contains a fix for this vulnerability.
"UNDER_INVESTIGATION"
UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.

AttestationAuthority
, AttestationAuthorityArgs

AttestationAuthorityHint
, AttestationAuthorityHintArgs

HumanReadableName string
The human readable name of this Attestation Authority, for example "qa".
HumanReadableName string
The human readable name of this Attestation Authority, for example "qa".
humanReadableName String
The human readable name of this Attestation Authority, for example "qa".
humanReadableName string
The human readable name of this Attestation Authority, for example "qa".
human_readable_name str
The human readable name of this Attestation Authority, for example "qa".
humanReadableName String
The human readable name of this Attestation Authority, for example "qa".

AttestationAuthorityHintResponse
, AttestationAuthorityHintResponseArgs

HumanReadableName This property is required. string
The human readable name of this Attestation Authority, for example "qa".
HumanReadableName This property is required. string
The human readable name of this Attestation Authority, for example "qa".
humanReadableName This property is required. String
The human readable name of this Attestation Authority, for example "qa".
humanReadableName This property is required. string
The human readable name of this Attestation Authority, for example "qa".
human_readable_name This property is required. str
The human readable name of this Attestation Authority, for example "qa".
humanReadableName This property is required. String
The human readable name of this Attestation Authority, for example "qa".

AttestationAuthorityResponse
, AttestationAuthorityResponseArgs

Hint This property is required. AttestationAuthorityHintResponse
hint This property is required. AttestationAuthorityHintResponse
hint This property is required. AttestationAuthorityHintResponse
hint This property is required. AttestationAuthorityHintResponse
hint This property is required. Property Map

Basis
, BasisArgs

Fingerprint Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Fingerprint
The fingerprint of the base image.
ResourceUrl string
The resource_url for the resource representing the basis of associated occurrence images.
Fingerprint Fingerprint
The fingerprint of the base image.
ResourceUrl string
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint Fingerprint
The fingerprint of the base image.
resourceUrl String
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint Fingerprint
The fingerprint of the base image.
resourceUrl string
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint Fingerprint
The fingerprint of the base image.
resource_url str
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint Property Map
The fingerprint of the base image.
resourceUrl String
The resource_url for the resource representing the basis of associated occurrence images.

BasisResponse
, BasisResponseArgs

Fingerprint This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FingerprintResponse
The fingerprint of the base image.
ResourceUrl This property is required. string
The resource_url for the resource representing the basis of associated occurrence images.
Fingerprint This property is required. FingerprintResponse
The fingerprint of the base image.
ResourceUrl This property is required. string
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint This property is required. FingerprintResponse
The fingerprint of the base image.
resourceUrl This property is required. String
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint This property is required. FingerprintResponse
The fingerprint of the base image.
resourceUrl This property is required. string
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint This property is required. FingerprintResponse
The fingerprint of the base image.
resource_url This property is required. str
The resource_url for the resource representing the basis of associated occurrence images.
fingerprint This property is required. Property Map
The fingerprint of the base image.
resourceUrl This property is required. String
The resource_url for the resource representing the basis of associated occurrence images.

BuildSignature
, BuildSignatureArgs

KeyId string
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
KeyType Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.BuildSignatureKeyType
The type of the key, either stored in public_key or referenced in key_id
PublicKey string
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
Signature string
Signature of the related BuildProvenance, encoded in a base64 string.
KeyId string
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
KeyType BuildSignatureKeyType
The type of the key, either stored in public_key or referenced in key_id
PublicKey string
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
Signature string
Signature of the related BuildProvenance, encoded in a base64 string.
keyId String
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
keyType BuildSignatureKeyType
The type of the key, either stored in public_key or referenced in key_id
publicKey String
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature String
Signature of the related BuildProvenance, encoded in a base64 string.
keyId string
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
keyType BuildSignatureKeyType
The type of the key, either stored in public_key or referenced in key_id
publicKey string
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature string
Signature of the related BuildProvenance, encoded in a base64 string.
key_id str
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
key_type BuildSignatureKeyType
The type of the key, either stored in public_key or referenced in key_id
public_key str
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature str
Signature of the related BuildProvenance, encoded in a base64 string.
keyId String
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
keyType "KEY_TYPE_UNSPECIFIED" | "PGP_ASCII_ARMORED" | "PKIX_PEM"
The type of the key, either stored in public_key or referenced in key_id
publicKey String
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature String
Signature of the related BuildProvenance, encoded in a base64 string.

BuildSignatureKeyType
, BuildSignatureKeyTypeArgs

KeyTypeUnspecified
KEY_TYPE_UNSPECIFIEDKeyType is not set.
PgpAsciiArmored
PGP_ASCII_ARMOREDPGP ASCII Armored public key.
PkixPem
PKIX_PEMPKIX PEM public key.
BuildSignatureKeyTypeKeyTypeUnspecified
KEY_TYPE_UNSPECIFIEDKeyType is not set.
BuildSignatureKeyTypePgpAsciiArmored
PGP_ASCII_ARMOREDPGP ASCII Armored public key.
BuildSignatureKeyTypePkixPem
PKIX_PEMPKIX PEM public key.
KeyTypeUnspecified
KEY_TYPE_UNSPECIFIEDKeyType is not set.
PgpAsciiArmored
PGP_ASCII_ARMOREDPGP ASCII Armored public key.
PkixPem
PKIX_PEMPKIX PEM public key.
KeyTypeUnspecified
KEY_TYPE_UNSPECIFIEDKeyType is not set.
PgpAsciiArmored
PGP_ASCII_ARMOREDPGP ASCII Armored public key.
PkixPem
PKIX_PEMPKIX PEM public key.
KEY_TYPE_UNSPECIFIED
KEY_TYPE_UNSPECIFIEDKeyType is not set.
PGP_ASCII_ARMORED
PGP_ASCII_ARMOREDPGP ASCII Armored public key.
PKIX_PEM
PKIX_PEMPKIX PEM public key.
"KEY_TYPE_UNSPECIFIED"
KEY_TYPE_UNSPECIFIEDKeyType is not set.
"PGP_ASCII_ARMORED"
PGP_ASCII_ARMOREDPGP ASCII Armored public key.
"PKIX_PEM"
PKIX_PEMPKIX PEM public key.

BuildSignatureResponse
, BuildSignatureResponseArgs

KeyId This property is required. string
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
KeyType This property is required. string
The type of the key, either stored in public_key or referenced in key_id
PublicKey This property is required. string
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
Signature This property is required. string
Signature of the related BuildProvenance, encoded in a base64 string.
KeyId This property is required. string
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
KeyType This property is required. string
The type of the key, either stored in public_key or referenced in key_id
PublicKey This property is required. string
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
Signature This property is required. string
Signature of the related BuildProvenance, encoded in a base64 string.
keyId This property is required. String
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
keyType This property is required. String
The type of the key, either stored in public_key or referenced in key_id
publicKey This property is required. String
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature This property is required. String
Signature of the related BuildProvenance, encoded in a base64 string.
keyId This property is required. string
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
keyType This property is required. string
The type of the key, either stored in public_key or referenced in key_id
publicKey This property is required. string
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature This property is required. string
Signature of the related BuildProvenance, encoded in a base64 string.
key_id This property is required. str
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
key_type This property is required. str
The type of the key, either stored in public_key or referenced in key_id
public_key This property is required. str
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature This property is required. str
Signature of the related BuildProvenance, encoded in a base64 string.
keyId This property is required. String
An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
keyType This property is required. String
The type of the key, either stored in public_key or referenced in key_id
publicKey This property is required. String
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
signature This property is required. String
Signature of the related BuildProvenance, encoded in a base64 string.

BuildType
, BuildTypeArgs

BuilderVersion string
Version of the builder which produced this Note.
Signature Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildSignature
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
BuilderVersion string
Version of the builder which produced this Note.
Signature BuildSignature
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builderVersion String
Version of the builder which produced this Note.
signature BuildSignature
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builderVersion string
Version of the builder which produced this Note.
signature BuildSignature
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builder_version str
Version of the builder which produced this Note.
signature BuildSignature
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builderVersion String
Version of the builder which produced this Note.
signature Property Map
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.

BuildTypeResponse
, BuildTypeResponseArgs

BuilderVersion This property is required. string
Version of the builder which produced this Note.
Signature This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.BuildSignatureResponse
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
BuilderVersion This property is required. string
Version of the builder which produced this Note.
Signature This property is required. BuildSignatureResponse
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builderVersion This property is required. String
Version of the builder which produced this Note.
signature This property is required. BuildSignatureResponse
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builderVersion This property is required. string
Version of the builder which produced this Note.
signature This property is required. BuildSignatureResponse
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builder_version This property is required. str
Version of the builder which produced this Note.
signature This property is required. BuildSignatureResponse
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.
builderVersion This property is required. String
Version of the builder which produced this Note.
signature This property is required. Property Map
Signature of the build in Occurrences pointing to the Note containing this BuilderDetails.

CVSS
, CVSSArgs

AttackComplexity Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackComplexity
Defined in CVSS v3, CVSS v2
AttackVector Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAttackVector
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
Authentication Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAuthentication
Defined in CVSS v2
AvailabilityImpact Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSAvailabilityImpact
Defined in CVSS v3, CVSS v2
BaseScore double
The base score is a function of the base metric scores.
ConfidentialityImpact Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSConfidentialityImpact
Defined in CVSS v3, CVSS v2
ExploitabilityScore double
ImpactScore double
IntegrityImpact Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSIntegrityImpact
Defined in CVSS v3, CVSS v2
PrivilegesRequired Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSPrivilegesRequired
Defined in CVSS v3
Scope Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSScope
Defined in CVSS v3
UserInteraction Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CVSSUserInteraction
Defined in CVSS v3
AttackComplexity CVSSAttackComplexity
Defined in CVSS v3, CVSS v2
AttackVector CVSSAttackVector
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
Authentication CVSSAuthentication
Defined in CVSS v2
AvailabilityImpact CVSSAvailabilityImpact
Defined in CVSS v3, CVSS v2
BaseScore float64
The base score is a function of the base metric scores.
ConfidentialityImpact CVSSConfidentialityImpact
Defined in CVSS v3, CVSS v2
ExploitabilityScore float64
ImpactScore float64
IntegrityImpact CVSSIntegrityImpact
Defined in CVSS v3, CVSS v2
PrivilegesRequired CVSSPrivilegesRequired
Defined in CVSS v3
Scope CVSSScope
Defined in CVSS v3
UserInteraction CVSSUserInteraction
Defined in CVSS v3
attackComplexity CVSSAttackComplexity
Defined in CVSS v3, CVSS v2
attackVector CVSSAttackVector
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication CVSSAuthentication
Defined in CVSS v2
availabilityImpact CVSSAvailabilityImpact
Defined in CVSS v3, CVSS v2
baseScore Double
The base score is a function of the base metric scores.
confidentialityImpact CVSSConfidentialityImpact
Defined in CVSS v3, CVSS v2
exploitabilityScore Double
impactScore Double
integrityImpact CVSSIntegrityImpact
Defined in CVSS v3, CVSS v2
privilegesRequired CVSSPrivilegesRequired
Defined in CVSS v3
scope CVSSScope
Defined in CVSS v3
userInteraction CVSSUserInteraction
Defined in CVSS v3
attackComplexity CVSSAttackComplexity
Defined in CVSS v3, CVSS v2
attackVector CVSSAttackVector
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication CVSSAuthentication
Defined in CVSS v2
availabilityImpact CVSSAvailabilityImpact
Defined in CVSS v3, CVSS v2
baseScore number
The base score is a function of the base metric scores.
confidentialityImpact CVSSConfidentialityImpact
Defined in CVSS v3, CVSS v2
exploitabilityScore number
impactScore number
integrityImpact CVSSIntegrityImpact
Defined in CVSS v3, CVSS v2
privilegesRequired CVSSPrivilegesRequired
Defined in CVSS v3
scope CVSSScope
Defined in CVSS v3
userInteraction CVSSUserInteraction
Defined in CVSS v3
attack_complexity CVSSAttackComplexity
Defined in CVSS v3, CVSS v2
attack_vector CVSSAttackVector
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication CVSSAuthentication
Defined in CVSS v2
availability_impact CVSSAvailabilityImpact
Defined in CVSS v3, CVSS v2
base_score float
The base score is a function of the base metric scores.
confidentiality_impact CVSSConfidentialityImpact
Defined in CVSS v3, CVSS v2
exploitability_score float
impact_score float
integrity_impact CVSSIntegrityImpact
Defined in CVSS v3, CVSS v2
privileges_required CVSSPrivilegesRequired
Defined in CVSS v3
scope CVSSScope
Defined in CVSS v3
user_interaction CVSSUserInteraction
Defined in CVSS v3
attackComplexity "ATTACK_COMPLEXITY_UNSPECIFIED" | "ATTACK_COMPLEXITY_LOW" | "ATTACK_COMPLEXITY_HIGH" | "ATTACK_COMPLEXITY_MEDIUM"
Defined in CVSS v3, CVSS v2
attackVector "ATTACK_VECTOR_UNSPECIFIED" | "ATTACK_VECTOR_NETWORK" | "ATTACK_VECTOR_ADJACENT" | "ATTACK_VECTOR_LOCAL" | "ATTACK_VECTOR_PHYSICAL"
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication "AUTHENTICATION_UNSPECIFIED" | "AUTHENTICATION_MULTIPLE" | "AUTHENTICATION_SINGLE" | "AUTHENTICATION_NONE"
Defined in CVSS v2
availabilityImpact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE"
Defined in CVSS v3, CVSS v2
baseScore Number
The base score is a function of the base metric scores.
confidentialityImpact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE"
Defined in CVSS v3, CVSS v2
exploitabilityScore Number
impactScore Number
integrityImpact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE"
Defined in CVSS v3, CVSS v2
privilegesRequired "PRIVILEGES_REQUIRED_UNSPECIFIED" | "PRIVILEGES_REQUIRED_NONE" | "PRIVILEGES_REQUIRED_LOW" | "PRIVILEGES_REQUIRED_HIGH"
Defined in CVSS v3
scope "SCOPE_UNSPECIFIED" | "SCOPE_UNCHANGED" | "SCOPE_CHANGED"
Defined in CVSS v3
userInteraction "USER_INTERACTION_UNSPECIFIED" | "USER_INTERACTION_NONE" | "USER_INTERACTION_REQUIRED"
Defined in CVSS v3

CVSSAttackComplexity
, CVSSAttackComplexityArgs

AttackComplexityUnspecified
ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
AttackComplexityLow
ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
AttackComplexityHigh
ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
AttackComplexityMedium
ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
CVSSAttackComplexityAttackComplexityUnspecified
ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
CVSSAttackComplexityAttackComplexityLow
ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
CVSSAttackComplexityAttackComplexityHigh
ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
CVSSAttackComplexityAttackComplexityMedium
ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
AttackComplexityUnspecified
ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
AttackComplexityLow
ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
AttackComplexityHigh
ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
AttackComplexityMedium
ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
AttackComplexityUnspecified
ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
AttackComplexityLow
ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
AttackComplexityHigh
ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
AttackComplexityMedium
ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
ATTACK_COMPLEXITY_UNSPECIFIED
ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ATTACK_COMPLEXITY_LOW
ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
ATTACK_COMPLEXITY_HIGH
ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
ATTACK_COMPLEXITY_MEDIUM
ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2
"ATTACK_COMPLEXITY_UNSPECIFIED"
ATTACK_COMPLEXITY_UNSPECIFIEDDefined in CVSS v3, CVSS v2
"ATTACK_COMPLEXITY_LOW"
ATTACK_COMPLEXITY_LOWDefined in CVSS v3, CVSS v2
"ATTACK_COMPLEXITY_HIGH"
ATTACK_COMPLEXITY_HIGHDefined in CVSS v3, CVSS v2
"ATTACK_COMPLEXITY_MEDIUM"
ATTACK_COMPLEXITY_MEDIUMDefined in CVSS v2

CVSSAttackVector
, CVSSAttackVectorArgs

AttackVectorUnspecified
ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
AttackVectorNetwork
ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
AttackVectorAdjacent
ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
AttackVectorLocal
ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
AttackVectorPhysical
ATTACK_VECTOR_PHYSICALDefined in CVSS v3
CVSSAttackVectorAttackVectorUnspecified
ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
CVSSAttackVectorAttackVectorNetwork
ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
CVSSAttackVectorAttackVectorAdjacent
ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
CVSSAttackVectorAttackVectorLocal
ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
CVSSAttackVectorAttackVectorPhysical
ATTACK_VECTOR_PHYSICALDefined in CVSS v3
AttackVectorUnspecified
ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
AttackVectorNetwork
ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
AttackVectorAdjacent
ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
AttackVectorLocal
ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
AttackVectorPhysical
ATTACK_VECTOR_PHYSICALDefined in CVSS v3
AttackVectorUnspecified
ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
AttackVectorNetwork
ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
AttackVectorAdjacent
ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
AttackVectorLocal
ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
AttackVectorPhysical
ATTACK_VECTOR_PHYSICALDefined in CVSS v3
ATTACK_VECTOR_UNSPECIFIED
ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ATTACK_VECTOR_NETWORK
ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
ATTACK_VECTOR_ADJACENT
ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
ATTACK_VECTOR_LOCAL
ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
ATTACK_VECTOR_PHYSICAL
ATTACK_VECTOR_PHYSICALDefined in CVSS v3
"ATTACK_VECTOR_UNSPECIFIED"
ATTACK_VECTOR_UNSPECIFIEDDefined in CVSS v3, CVSS v2
"ATTACK_VECTOR_NETWORK"
ATTACK_VECTOR_NETWORKDefined in CVSS v3, CVSS v2
"ATTACK_VECTOR_ADJACENT"
ATTACK_VECTOR_ADJACENTDefined in CVSS v3, CVSS v2
"ATTACK_VECTOR_LOCAL"
ATTACK_VECTOR_LOCALDefined in CVSS v3, CVSS v2
"ATTACK_VECTOR_PHYSICAL"
ATTACK_VECTOR_PHYSICALDefined in CVSS v3

CVSSAuthentication
, CVSSAuthenticationArgs

AuthenticationUnspecified
AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
AuthenticationMultiple
AUTHENTICATION_MULTIPLEDefined in CVSS v2
AuthenticationSingle
AUTHENTICATION_SINGLEDefined in CVSS v2
AuthenticationNone
AUTHENTICATION_NONEDefined in CVSS v2
CVSSAuthenticationAuthenticationUnspecified
AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
CVSSAuthenticationAuthenticationMultiple
AUTHENTICATION_MULTIPLEDefined in CVSS v2
CVSSAuthenticationAuthenticationSingle
AUTHENTICATION_SINGLEDefined in CVSS v2
CVSSAuthenticationAuthenticationNone
AUTHENTICATION_NONEDefined in CVSS v2
AuthenticationUnspecified
AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
AuthenticationMultiple
AUTHENTICATION_MULTIPLEDefined in CVSS v2
AuthenticationSingle
AUTHENTICATION_SINGLEDefined in CVSS v2
AuthenticationNone
AUTHENTICATION_NONEDefined in CVSS v2
AuthenticationUnspecified
AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
AuthenticationMultiple
AUTHENTICATION_MULTIPLEDefined in CVSS v2
AuthenticationSingle
AUTHENTICATION_SINGLEDefined in CVSS v2
AuthenticationNone
AUTHENTICATION_NONEDefined in CVSS v2
AUTHENTICATION_UNSPECIFIED
AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
AUTHENTICATION_MULTIPLE
AUTHENTICATION_MULTIPLEDefined in CVSS v2
AUTHENTICATION_SINGLE
AUTHENTICATION_SINGLEDefined in CVSS v2
AUTHENTICATION_NONE
AUTHENTICATION_NONEDefined in CVSS v2
"AUTHENTICATION_UNSPECIFIED"
AUTHENTICATION_UNSPECIFIEDDefined in CVSS v2
"AUTHENTICATION_MULTIPLE"
AUTHENTICATION_MULTIPLEDefined in CVSS v2
"AUTHENTICATION_SINGLE"
AUTHENTICATION_SINGLEDefined in CVSS v2
"AUTHENTICATION_NONE"
AUTHENTICATION_NONEDefined in CVSS v2

CVSSAvailabilityImpact
, CVSSAvailabilityImpactArgs

ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
CVSSAvailabilityImpactImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
CVSSAvailabilityImpactImpactHigh
IMPACT_HIGHDefined in CVSS v3
CVSSAvailabilityImpactImpactLow
IMPACT_LOWDefined in CVSS v3
CVSSAvailabilityImpactImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
CVSSAvailabilityImpactImpactPartial
IMPACT_PARTIALDefined in CVSS v2
CVSSAvailabilityImpactImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
IMPACT_UNSPECIFIED
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
IMPACT_HIGH
IMPACT_HIGHDefined in CVSS v3
IMPACT_LOW
IMPACT_LOWDefined in CVSS v3
IMPACT_NONE
IMPACT_NONEDefined in CVSS v3, CVSS v2
IMPACT_PARTIAL
IMPACT_PARTIALDefined in CVSS v2
IMPACT_COMPLETE
IMPACT_COMPLETEDefined in CVSS v2
"IMPACT_UNSPECIFIED"
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
"IMPACT_HIGH"
IMPACT_HIGHDefined in CVSS v3
"IMPACT_LOW"
IMPACT_LOWDefined in CVSS v3
"IMPACT_NONE"
IMPACT_NONEDefined in CVSS v3, CVSS v2
"IMPACT_PARTIAL"
IMPACT_PARTIALDefined in CVSS v2
"IMPACT_COMPLETE"
IMPACT_COMPLETEDefined in CVSS v2

CVSSConfidentialityImpact
, CVSSConfidentialityImpactArgs

ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
CVSSConfidentialityImpactImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
CVSSConfidentialityImpactImpactHigh
IMPACT_HIGHDefined in CVSS v3
CVSSConfidentialityImpactImpactLow
IMPACT_LOWDefined in CVSS v3
CVSSConfidentialityImpactImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
CVSSConfidentialityImpactImpactPartial
IMPACT_PARTIALDefined in CVSS v2
CVSSConfidentialityImpactImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
IMPACT_UNSPECIFIED
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
IMPACT_HIGH
IMPACT_HIGHDefined in CVSS v3
IMPACT_LOW
IMPACT_LOWDefined in CVSS v3
IMPACT_NONE
IMPACT_NONEDefined in CVSS v3, CVSS v2
IMPACT_PARTIAL
IMPACT_PARTIALDefined in CVSS v2
IMPACT_COMPLETE
IMPACT_COMPLETEDefined in CVSS v2
"IMPACT_UNSPECIFIED"
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
"IMPACT_HIGH"
IMPACT_HIGHDefined in CVSS v3
"IMPACT_LOW"
IMPACT_LOWDefined in CVSS v3
"IMPACT_NONE"
IMPACT_NONEDefined in CVSS v3, CVSS v2
"IMPACT_PARTIAL"
IMPACT_PARTIALDefined in CVSS v2
"IMPACT_COMPLETE"
IMPACT_COMPLETEDefined in CVSS v2

CVSSIntegrityImpact
, CVSSIntegrityImpactArgs

ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
CVSSIntegrityImpactImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
CVSSIntegrityImpactImpactHigh
IMPACT_HIGHDefined in CVSS v3
CVSSIntegrityImpactImpactLow
IMPACT_LOWDefined in CVSS v3
CVSSIntegrityImpactImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
CVSSIntegrityImpactImpactPartial
IMPACT_PARTIALDefined in CVSS v2
CVSSIntegrityImpactImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
ImpactUnspecified
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
ImpactHigh
IMPACT_HIGHDefined in CVSS v3
ImpactLow
IMPACT_LOWDefined in CVSS v3
ImpactNone
IMPACT_NONEDefined in CVSS v3, CVSS v2
ImpactPartial
IMPACT_PARTIALDefined in CVSS v2
ImpactComplete
IMPACT_COMPLETEDefined in CVSS v2
IMPACT_UNSPECIFIED
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
IMPACT_HIGH
IMPACT_HIGHDefined in CVSS v3
IMPACT_LOW
IMPACT_LOWDefined in CVSS v3
IMPACT_NONE
IMPACT_NONEDefined in CVSS v3, CVSS v2
IMPACT_PARTIAL
IMPACT_PARTIALDefined in CVSS v2
IMPACT_COMPLETE
IMPACT_COMPLETEDefined in CVSS v2
"IMPACT_UNSPECIFIED"
IMPACT_UNSPECIFIEDDefined in CVSS v3, CVSS v2
"IMPACT_HIGH"
IMPACT_HIGHDefined in CVSS v3
"IMPACT_LOW"
IMPACT_LOWDefined in CVSS v3
"IMPACT_NONE"
IMPACT_NONEDefined in CVSS v3, CVSS v2
"IMPACT_PARTIAL"
IMPACT_PARTIALDefined in CVSS v2
"IMPACT_COMPLETE"
IMPACT_COMPLETEDefined in CVSS v2

CVSSPrivilegesRequired
, CVSSPrivilegesRequiredArgs

PrivilegesRequiredUnspecified
PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
PrivilegesRequiredNone
PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
PrivilegesRequiredLow
PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
PrivilegesRequiredHigh
PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
CVSSPrivilegesRequiredPrivilegesRequiredUnspecified
PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
CVSSPrivilegesRequiredPrivilegesRequiredNone
PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
CVSSPrivilegesRequiredPrivilegesRequiredLow
PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
CVSSPrivilegesRequiredPrivilegesRequiredHigh
PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
PrivilegesRequiredUnspecified
PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
PrivilegesRequiredNone
PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
PrivilegesRequiredLow
PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
PrivilegesRequiredHigh
PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
PrivilegesRequiredUnspecified
PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
PrivilegesRequiredNone
PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
PrivilegesRequiredLow
PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
PrivilegesRequiredHigh
PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
PRIVILEGES_REQUIRED_UNSPECIFIED
PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
PRIVILEGES_REQUIRED_NONE
PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
PRIVILEGES_REQUIRED_LOW
PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
PRIVILEGES_REQUIRED_HIGH
PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3
"PRIVILEGES_REQUIRED_UNSPECIFIED"
PRIVILEGES_REQUIRED_UNSPECIFIEDDefined in CVSS v3
"PRIVILEGES_REQUIRED_NONE"
PRIVILEGES_REQUIRED_NONEDefined in CVSS v3
"PRIVILEGES_REQUIRED_LOW"
PRIVILEGES_REQUIRED_LOWDefined in CVSS v3
"PRIVILEGES_REQUIRED_HIGH"
PRIVILEGES_REQUIRED_HIGHDefined in CVSS v3

CVSSResponse
, CVSSResponseArgs

AttackComplexity This property is required. string
Defined in CVSS v3, CVSS v2
AttackVector This property is required. string
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
Authentication This property is required. string
Defined in CVSS v2
AvailabilityImpact This property is required. string
Defined in CVSS v3, CVSS v2
BaseScore This property is required. double
The base score is a function of the base metric scores.
ConfidentialityImpact This property is required. string
Defined in CVSS v3, CVSS v2
ExploitabilityScore This property is required. double
ImpactScore This property is required. double
IntegrityImpact This property is required. string
Defined in CVSS v3, CVSS v2
PrivilegesRequired This property is required. string
Defined in CVSS v3
Scope This property is required. string
Defined in CVSS v3
UserInteraction This property is required. string
Defined in CVSS v3
AttackComplexity This property is required. string
Defined in CVSS v3, CVSS v2
AttackVector This property is required. string
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
Authentication This property is required. string
Defined in CVSS v2
AvailabilityImpact This property is required. string
Defined in CVSS v3, CVSS v2
BaseScore This property is required. float64
The base score is a function of the base metric scores.
ConfidentialityImpact This property is required. string
Defined in CVSS v3, CVSS v2
ExploitabilityScore This property is required. float64
ImpactScore This property is required. float64
IntegrityImpact This property is required. string
Defined in CVSS v3, CVSS v2
PrivilegesRequired This property is required. string
Defined in CVSS v3
Scope This property is required. string
Defined in CVSS v3
UserInteraction This property is required. string
Defined in CVSS v3
attackComplexity This property is required. String
Defined in CVSS v3, CVSS v2
attackVector This property is required. String
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication This property is required. String
Defined in CVSS v2
availabilityImpact This property is required. String
Defined in CVSS v3, CVSS v2
baseScore This property is required. Double
The base score is a function of the base metric scores.
confidentialityImpact This property is required. String
Defined in CVSS v3, CVSS v2
exploitabilityScore This property is required. Double
impactScore This property is required. Double
integrityImpact This property is required. String
Defined in CVSS v3, CVSS v2
privilegesRequired This property is required. String
Defined in CVSS v3
scope This property is required. String
Defined in CVSS v3
userInteraction This property is required. String
Defined in CVSS v3
attackComplexity This property is required. string
Defined in CVSS v3, CVSS v2
attackVector This property is required. string
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication This property is required. string
Defined in CVSS v2
availabilityImpact This property is required. string
Defined in CVSS v3, CVSS v2
baseScore This property is required. number
The base score is a function of the base metric scores.
confidentialityImpact This property is required. string
Defined in CVSS v3, CVSS v2
exploitabilityScore This property is required. number
impactScore This property is required. number
integrityImpact This property is required. string
Defined in CVSS v3, CVSS v2
privilegesRequired This property is required. string
Defined in CVSS v3
scope This property is required. string
Defined in CVSS v3
userInteraction This property is required. string
Defined in CVSS v3
attack_complexity This property is required. str
Defined in CVSS v3, CVSS v2
attack_vector This property is required. str
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication This property is required. str
Defined in CVSS v2
availability_impact This property is required. str
Defined in CVSS v3, CVSS v2
base_score This property is required. float
The base score is a function of the base metric scores.
confidentiality_impact This property is required. str
Defined in CVSS v3, CVSS v2
exploitability_score This property is required. float
impact_score This property is required. float
integrity_impact This property is required. str
Defined in CVSS v3, CVSS v2
privileges_required This property is required. str
Defined in CVSS v3
scope This property is required. str
Defined in CVSS v3
user_interaction This property is required. str
Defined in CVSS v3
attackComplexity This property is required. String
Defined in CVSS v3, CVSS v2
attackVector This property is required. String
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2
authentication This property is required. String
Defined in CVSS v2
availabilityImpact This property is required. String
Defined in CVSS v3, CVSS v2
baseScore This property is required. Number
The base score is a function of the base metric scores.
confidentialityImpact This property is required. String
Defined in CVSS v3, CVSS v2
exploitabilityScore This property is required. Number
impactScore This property is required. Number
integrityImpact This property is required. String
Defined in CVSS v3, CVSS v2
privilegesRequired This property is required. String
Defined in CVSS v3
scope This property is required. String
Defined in CVSS v3
userInteraction This property is required. String
Defined in CVSS v3

CVSSScope
, CVSSScopeArgs

ScopeUnspecified
SCOPE_UNSPECIFIEDDefined in CVSS v3
ScopeUnchanged
SCOPE_UNCHANGEDDefined in CVSS v3
ScopeChanged
SCOPE_CHANGEDDefined in CVSS v3
CVSSScopeScopeUnspecified
SCOPE_UNSPECIFIEDDefined in CVSS v3
CVSSScopeScopeUnchanged
SCOPE_UNCHANGEDDefined in CVSS v3
CVSSScopeScopeChanged
SCOPE_CHANGEDDefined in CVSS v3
ScopeUnspecified
SCOPE_UNSPECIFIEDDefined in CVSS v3
ScopeUnchanged
SCOPE_UNCHANGEDDefined in CVSS v3
ScopeChanged
SCOPE_CHANGEDDefined in CVSS v3
ScopeUnspecified
SCOPE_UNSPECIFIEDDefined in CVSS v3
ScopeUnchanged
SCOPE_UNCHANGEDDefined in CVSS v3
ScopeChanged
SCOPE_CHANGEDDefined in CVSS v3
SCOPE_UNSPECIFIED
SCOPE_UNSPECIFIEDDefined in CVSS v3
SCOPE_UNCHANGED
SCOPE_UNCHANGEDDefined in CVSS v3
SCOPE_CHANGED
SCOPE_CHANGEDDefined in CVSS v3
"SCOPE_UNSPECIFIED"
SCOPE_UNSPECIFIEDDefined in CVSS v3
"SCOPE_UNCHANGED"
SCOPE_UNCHANGEDDefined in CVSS v3
"SCOPE_CHANGED"
SCOPE_CHANGEDDefined in CVSS v3

CVSSUserInteraction
, CVSSUserInteractionArgs

UserInteractionUnspecified
USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
UserInteractionNone
USER_INTERACTION_NONEDefined in CVSS v3
UserInteractionRequired
USER_INTERACTION_REQUIREDDefined in CVSS v3
CVSSUserInteractionUserInteractionUnspecified
USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
CVSSUserInteractionUserInteractionNone
USER_INTERACTION_NONEDefined in CVSS v3
CVSSUserInteractionUserInteractionRequired
USER_INTERACTION_REQUIREDDefined in CVSS v3
UserInteractionUnspecified
USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
UserInteractionNone
USER_INTERACTION_NONEDefined in CVSS v3
UserInteractionRequired
USER_INTERACTION_REQUIREDDefined in CVSS v3
UserInteractionUnspecified
USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
UserInteractionNone
USER_INTERACTION_NONEDefined in CVSS v3
UserInteractionRequired
USER_INTERACTION_REQUIREDDefined in CVSS v3
USER_INTERACTION_UNSPECIFIED
USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
USER_INTERACTION_NONE
USER_INTERACTION_NONEDefined in CVSS v3
USER_INTERACTION_REQUIRED
USER_INTERACTION_REQUIREDDefined in CVSS v3
"USER_INTERACTION_UNSPECIFIED"
USER_INTERACTION_UNSPECIFIEDDefined in CVSS v3
"USER_INTERACTION_NONE"
USER_INTERACTION_NONEDefined in CVSS v3
"USER_INTERACTION_REQUIRED"
USER_INTERACTION_REQUIREDDefined in CVSS v3

CisBenchmark
, CisBenchmarkArgs

ProfileLevel int
The profile level of this CIS benchmark check.
Severity Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.CisBenchmarkSeverity
The severity level of this CIS benchmark check.
ProfileLevel int
The profile level of this CIS benchmark check.
Severity CisBenchmarkSeverity
The severity level of this CIS benchmark check.
profileLevel Integer
The profile level of this CIS benchmark check.
severity CisBenchmarkSeverity
The severity level of this CIS benchmark check.
profileLevel number
The profile level of this CIS benchmark check.
severity CisBenchmarkSeverity
The severity level of this CIS benchmark check.
profile_level int
The profile level of this CIS benchmark check.
severity CisBenchmarkSeverity
The severity level of this CIS benchmark check.
profileLevel Number
The profile level of this CIS benchmark check.
severity "SEVERITY_UNSPECIFIED" | "MINIMAL" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL"
The severity level of this CIS benchmark check.

CisBenchmarkResponse
, CisBenchmarkResponseArgs

ProfileLevel This property is required. int
The profile level of this CIS benchmark check.
Severity This property is required. string
The severity level of this CIS benchmark check.
ProfileLevel This property is required. int
The profile level of this CIS benchmark check.
Severity This property is required. string
The severity level of this CIS benchmark check.
profileLevel This property is required. Integer
The profile level of this CIS benchmark check.
severity This property is required. String
The severity level of this CIS benchmark check.
profileLevel This property is required. number
The profile level of this CIS benchmark check.
severity This property is required. string
The severity level of this CIS benchmark check.
profile_level This property is required. int
The profile level of this CIS benchmark check.
severity This property is required. str
The severity level of this CIS benchmark check.
profileLevel This property is required. Number
The profile level of this CIS benchmark check.
severity This property is required. String
The severity level of this CIS benchmark check.

CisBenchmarkSeverity
, CisBenchmarkSeverityArgs

SeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
Minimal
MINIMALMinimal Impact
Low
LOWLow Impact
Medium
MEDIUMMedium Impact
High
HIGHHigh Impact
Critical
CRITICALCritical Impact
CisBenchmarkSeveritySeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
CisBenchmarkSeverityMinimal
MINIMALMinimal Impact
CisBenchmarkSeverityLow
LOWLow Impact
CisBenchmarkSeverityMedium
MEDIUMMedium Impact
CisBenchmarkSeverityHigh
HIGHHigh Impact
CisBenchmarkSeverityCritical
CRITICALCritical Impact
SeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
Minimal
MINIMALMinimal Impact
Low
LOWLow Impact
Medium
MEDIUMMedium Impact
High
HIGHHigh Impact
Critical
CRITICALCritical Impact
SeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
Minimal
MINIMALMinimal Impact
Low
LOWLow Impact
Medium
MEDIUMMedium Impact
High
HIGHHigh Impact
Critical
CRITICALCritical Impact
SEVERITY_UNSPECIFIED
SEVERITY_UNSPECIFIEDUnknown Impact
MINIMAL
MINIMALMinimal Impact
LOW
LOWLow Impact
MEDIUM
MEDIUMMedium Impact
HIGH
HIGHHigh Impact
CRITICAL
CRITICALCritical Impact
"SEVERITY_UNSPECIFIED"
SEVERITY_UNSPECIFIEDUnknown Impact
"MINIMAL"
MINIMALMinimal Impact
"LOW"
LOWLow Impact
"MEDIUM"
MEDIUMMedium Impact
"HIGH"
HIGHHigh Impact
"CRITICAL"
CRITICALCritical Impact

ComplianceNote
, ComplianceNoteArgs

CisBenchmark Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CisBenchmark
Right now we only have one compliance type, but we may add additional types in the future.
Description string
A description about this compliance check.
Rationale string
A rationale for the existence of this compliance check.
Remediation string
A description of remediation steps if the compliance check fails.
ScanInstructions string
Serialized scan instructions with a predefined format.
Title string
The title that identifies this compliance check.
Version List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ComplianceVersion>
The OS and config versions the benchmark applies to.
CisBenchmark CisBenchmark
Right now we only have one compliance type, but we may add additional types in the future.
Description string
A description about this compliance check.
Rationale string
A rationale for the existence of this compliance check.
Remediation string
A description of remediation steps if the compliance check fails.
ScanInstructions string
Serialized scan instructions with a predefined format.
Title string
The title that identifies this compliance check.
Version []ComplianceVersion
The OS and config versions the benchmark applies to.
cisBenchmark CisBenchmark
Right now we only have one compliance type, but we may add additional types in the future.
description String
A description about this compliance check.
rationale String
A rationale for the existence of this compliance check.
remediation String
A description of remediation steps if the compliance check fails.
scanInstructions String
Serialized scan instructions with a predefined format.
title String
The title that identifies this compliance check.
version List<ComplianceVersion>
The OS and config versions the benchmark applies to.
cisBenchmark CisBenchmark
Right now we only have one compliance type, but we may add additional types in the future.
description string
A description about this compliance check.
rationale string
A rationale for the existence of this compliance check.
remediation string
A description of remediation steps if the compliance check fails.
scanInstructions string
Serialized scan instructions with a predefined format.
title string
The title that identifies this compliance check.
version ComplianceVersion[]
The OS and config versions the benchmark applies to.
cis_benchmark CisBenchmark
Right now we only have one compliance type, but we may add additional types in the future.
description str
A description about this compliance check.
rationale str
A rationale for the existence of this compliance check.
remediation str
A description of remediation steps if the compliance check fails.
scan_instructions str
Serialized scan instructions with a predefined format.
title str
The title that identifies this compliance check.
version Sequence[ComplianceVersion]
The OS and config versions the benchmark applies to.
cisBenchmark Property Map
Right now we only have one compliance type, but we may add additional types in the future.
description String
A description about this compliance check.
rationale String
A rationale for the existence of this compliance check.
remediation String
A description of remediation steps if the compliance check fails.
scanInstructions String
Serialized scan instructions with a predefined format.
title String
The title that identifies this compliance check.
version List<Property Map>
The OS and config versions the benchmark applies to.

ComplianceNoteResponse
, ComplianceNoteResponseArgs

CisBenchmark This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CisBenchmarkResponse
Right now we only have one compliance type, but we may add additional types in the future.
Description This property is required. string
A description about this compliance check.
Rationale This property is required. string
A rationale for the existence of this compliance check.
Remediation This property is required. string
A description of remediation steps if the compliance check fails.
ScanInstructions This property is required. string
Serialized scan instructions with a predefined format.
Title This property is required. string
The title that identifies this compliance check.
Version This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ComplianceVersionResponse>
The OS and config versions the benchmark applies to.
CisBenchmark This property is required. CisBenchmarkResponse
Right now we only have one compliance type, but we may add additional types in the future.
Description This property is required. string
A description about this compliance check.
Rationale This property is required. string
A rationale for the existence of this compliance check.
Remediation This property is required. string
A description of remediation steps if the compliance check fails.
ScanInstructions This property is required. string
Serialized scan instructions with a predefined format.
Title This property is required. string
The title that identifies this compliance check.
Version This property is required. []ComplianceVersionResponse
The OS and config versions the benchmark applies to.
cisBenchmark This property is required. CisBenchmarkResponse
Right now we only have one compliance type, but we may add additional types in the future.
description This property is required. String
A description about this compliance check.
rationale This property is required. String
A rationale for the existence of this compliance check.
remediation This property is required. String
A description of remediation steps if the compliance check fails.
scanInstructions This property is required. String
Serialized scan instructions with a predefined format.
title This property is required. String
The title that identifies this compliance check.
version This property is required. List<ComplianceVersionResponse>
The OS and config versions the benchmark applies to.
cisBenchmark This property is required. CisBenchmarkResponse
Right now we only have one compliance type, but we may add additional types in the future.
description This property is required. string
A description about this compliance check.
rationale This property is required. string
A rationale for the existence of this compliance check.
remediation This property is required. string
A description of remediation steps if the compliance check fails.
scanInstructions This property is required. string
Serialized scan instructions with a predefined format.
title This property is required. string
The title that identifies this compliance check.
version This property is required. ComplianceVersionResponse[]
The OS and config versions the benchmark applies to.
cis_benchmark This property is required. CisBenchmarkResponse
Right now we only have one compliance type, but we may add additional types in the future.
description This property is required. str
A description about this compliance check.
rationale This property is required. str
A rationale for the existence of this compliance check.
remediation This property is required. str
A description of remediation steps if the compliance check fails.
scan_instructions This property is required. str
Serialized scan instructions with a predefined format.
title This property is required. str
The title that identifies this compliance check.
version This property is required. Sequence[ComplianceVersionResponse]
The OS and config versions the benchmark applies to.
cisBenchmark This property is required. Property Map
Right now we only have one compliance type, but we may add additional types in the future.
description This property is required. String
A description about this compliance check.
rationale This property is required. String
A rationale for the existence of this compliance check.
remediation This property is required. String
A description of remediation steps if the compliance check fails.
scanInstructions This property is required. String
Serialized scan instructions with a predefined format.
title This property is required. String
The title that identifies this compliance check.
version This property is required. List<Property Map>
The OS and config versions the benchmark applies to.

ComplianceVersion
, ComplianceVersionArgs

BenchmarkDocument string
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
CpeUri string
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
Version string
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
BenchmarkDocument string
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
CpeUri string
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
Version string
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmarkDocument String
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpeUri String
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version String
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmarkDocument string
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpeUri string
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version string
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmark_document str
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpe_uri str
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version str
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmarkDocument String
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpeUri String
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version String
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.

ComplianceVersionResponse
, ComplianceVersionResponseArgs

BenchmarkDocument This property is required. string
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
CpeUri This property is required. string
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
Version This property is required. string
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
BenchmarkDocument This property is required. string
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
CpeUri This property is required. string
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
Version This property is required. string
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmarkDocument This property is required. String
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpeUri This property is required. String
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version This property is required. String
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmarkDocument This property is required. string
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpeUri This property is required. string
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version This property is required. string
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmark_document This property is required. str
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpe_uri This property is required. str
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version This property is required. str
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.
benchmarkDocument This property is required. String
The name of the document that defines this benchmark, e.g. "CIS Container-Optimized OS".
cpeUri This property is required. String
The CPE URI (https://cpe.mitre.org/specification/) this benchmark is applicable to.
version This property is required. String
The version of the benchmark. This is set to the version of the OS-specific CIS document the benchmark is defined in.

DSSEAttestationNote
, DSSEAttestationNoteArgs

Hint Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DSSEHint
DSSEHint hints at the purpose of the attestation authority.
Hint DSSEHint
DSSEHint hints at the purpose of the attestation authority.
hint DSSEHint
DSSEHint hints at the purpose of the attestation authority.
hint DSSEHint
DSSEHint hints at the purpose of the attestation authority.
hint DSSEHint
DSSEHint hints at the purpose of the attestation authority.
hint Property Map
DSSEHint hints at the purpose of the attestation authority.

DSSEAttestationNoteResponse
, DSSEAttestationNoteResponseArgs

Hint This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DSSEHintResponse
DSSEHint hints at the purpose of the attestation authority.
Hint This property is required. DSSEHintResponse
DSSEHint hints at the purpose of the attestation authority.
hint This property is required. DSSEHintResponse
DSSEHint hints at the purpose of the attestation authority.
hint This property is required. DSSEHintResponse
DSSEHint hints at the purpose of the attestation authority.
hint This property is required. DSSEHintResponse
DSSEHint hints at the purpose of the attestation authority.
hint This property is required. Property Map
DSSEHint hints at the purpose of the attestation authority.

DSSEHint
, DSSEHintArgs

HumanReadableName This property is required. string
The human readable name of this attestation authority, for example "cloudbuild-prod".
HumanReadableName This property is required. string
The human readable name of this attestation authority, for example "cloudbuild-prod".
humanReadableName This property is required. String
The human readable name of this attestation authority, for example "cloudbuild-prod".
humanReadableName This property is required. string
The human readable name of this attestation authority, for example "cloudbuild-prod".
human_readable_name This property is required. str
The human readable name of this attestation authority, for example "cloudbuild-prod".
humanReadableName This property is required. String
The human readable name of this attestation authority, for example "cloudbuild-prod".

DSSEHintResponse
, DSSEHintResponseArgs

HumanReadableName This property is required. string
The human readable name of this attestation authority, for example "cloudbuild-prod".
HumanReadableName This property is required. string
The human readable name of this attestation authority, for example "cloudbuild-prod".
humanReadableName This property is required. String
The human readable name of this attestation authority, for example "cloudbuild-prod".
humanReadableName This property is required. string
The human readable name of this attestation authority, for example "cloudbuild-prod".
human_readable_name This property is required. str
The human readable name of this attestation authority, for example "cloudbuild-prod".
humanReadableName This property is required. String
The human readable name of this attestation authority, for example "cloudbuild-prod".

Deployable
, DeployableArgs

ResourceUri List<string>
Resource URI for the artifact being deployed.
ResourceUri []string
Resource URI for the artifact being deployed.
resourceUri List<String>
Resource URI for the artifact being deployed.
resourceUri string[]
Resource URI for the artifact being deployed.
resource_uri Sequence[str]
Resource URI for the artifact being deployed.
resourceUri List<String>
Resource URI for the artifact being deployed.

DeployableResponse
, DeployableResponseArgs

ResourceUri This property is required. List<string>
Resource URI for the artifact being deployed.
ResourceUri This property is required. []string
Resource URI for the artifact being deployed.
resourceUri This property is required. List<String>
Resource URI for the artifact being deployed.
resourceUri This property is required. string[]
Resource URI for the artifact being deployed.
resource_uri This property is required. Sequence[str]
Resource URI for the artifact being deployed.
resourceUri This property is required. List<String>
Resource URI for the artifact being deployed.

Detail
, DetailArgs

CpeUri string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
Description string
A vendor-specific description of this note.
FixedLocation Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityLocation
The fix for this specific package version.
IsObsolete bool
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
MaxAffectedVersion Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Version
The max version of the package in which the vulnerability exists.
MinAffectedVersion Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Version
The min version of the package in which the vulnerability exists.
Package string
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
PackageType string
The type of package; whether native or non native(ruby gems, node.js packages etc)
SeverityName string
The severity (eg: distro assigned severity) for this vulnerability.
Source string
The source from which the information in this Detail was obtained.
Vendor string
The vendor of the product. e.g. "google"
CpeUri string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
Description string
A vendor-specific description of this note.
FixedLocation VulnerabilityLocation
The fix for this specific package version.
IsObsolete bool
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
MaxAffectedVersion Version
The max version of the package in which the vulnerability exists.
MinAffectedVersion Version
The min version of the package in which the vulnerability exists.
Package string
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
PackageType string
The type of package; whether native or non native(ruby gems, node.js packages etc)
SeverityName string
The severity (eg: distro assigned severity) for this vulnerability.
Source string
The source from which the information in this Detail was obtained.
Vendor string
The vendor of the product. e.g. "google"
cpeUri String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description String
A vendor-specific description of this note.
fixedLocation VulnerabilityLocation
The fix for this specific package version.
isObsolete Boolean
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
maxAffectedVersion Version
The max version of the package in which the vulnerability exists.
minAffectedVersion Version
The min version of the package in which the vulnerability exists.
packageType String
The type of package; whether native or non native(ruby gems, node.js packages etc)
package_ String
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
severityName String
The severity (eg: distro assigned severity) for this vulnerability.
source String
The source from which the information in this Detail was obtained.
vendor String
The vendor of the product. e.g. "google"
cpeUri string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description string
A vendor-specific description of this note.
fixedLocation VulnerabilityLocation
The fix for this specific package version.
isObsolete boolean
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
maxAffectedVersion Version
The max version of the package in which the vulnerability exists.
minAffectedVersion Version
The min version of the package in which the vulnerability exists.
package string
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
packageType string
The type of package; whether native or non native(ruby gems, node.js packages etc)
severityName string
The severity (eg: distro assigned severity) for this vulnerability.
source string
The source from which the information in this Detail was obtained.
vendor string
The vendor of the product. e.g. "google"
cpe_uri str
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description str
A vendor-specific description of this note.
fixed_location VulnerabilityLocation
The fix for this specific package version.
is_obsolete bool
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
max_affected_version Version
The max version of the package in which the vulnerability exists.
min_affected_version Version
The min version of the package in which the vulnerability exists.
package str
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
package_type str
The type of package; whether native or non native(ruby gems, node.js packages etc)
severity_name str
The severity (eg: distro assigned severity) for this vulnerability.
source str
The source from which the information in this Detail was obtained.
vendor str
The vendor of the product. e.g. "google"
cpeUri String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description String
A vendor-specific description of this note.
fixedLocation Property Map
The fix for this specific package version.
isObsolete Boolean
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
maxAffectedVersion Property Map
The max version of the package in which the vulnerability exists.
minAffectedVersion Property Map
The min version of the package in which the vulnerability exists.
package String
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
packageType String
The type of package; whether native or non native(ruby gems, node.js packages etc)
severityName String
The severity (eg: distro assigned severity) for this vulnerability.
source String
The source from which the information in this Detail was obtained.
vendor String
The vendor of the product. e.g. "google"

DetailResponse
, DetailResponseArgs

CpeUri This property is required. string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
Description This property is required. string
A vendor-specific description of this note.
FixedLocation This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VulnerabilityLocationResponse
The fix for this specific package version.
IsObsolete This property is required. bool
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
MaxAffectedVersion This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionResponse
The max version of the package in which the vulnerability exists.
MinAffectedVersion This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionResponse
The min version of the package in which the vulnerability exists.
Package This property is required. string
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
PackageType This property is required. string
The type of package; whether native or non native(ruby gems, node.js packages etc)
SeverityName This property is required. string
The severity (eg: distro assigned severity) for this vulnerability.
Source This property is required. string
The source from which the information in this Detail was obtained.
Vendor This property is required. string
The vendor of the product. e.g. "google"
CpeUri This property is required. string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
Description This property is required. string
A vendor-specific description of this note.
FixedLocation This property is required. VulnerabilityLocationResponse
The fix for this specific package version.
IsObsolete This property is required. bool
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
MaxAffectedVersion This property is required. VersionResponse
The max version of the package in which the vulnerability exists.
MinAffectedVersion This property is required. VersionResponse
The min version of the package in which the vulnerability exists.
Package This property is required. string
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
PackageType This property is required. string
The type of package; whether native or non native(ruby gems, node.js packages etc)
SeverityName This property is required. string
The severity (eg: distro assigned severity) for this vulnerability.
Source This property is required. string
The source from which the information in this Detail was obtained.
Vendor This property is required. string
The vendor of the product. e.g. "google"
cpeUri This property is required. String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description This property is required. String
A vendor-specific description of this note.
fixedLocation This property is required. VulnerabilityLocationResponse
The fix for this specific package version.
isObsolete This property is required. Boolean
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
maxAffectedVersion This property is required. VersionResponse
The max version of the package in which the vulnerability exists.
minAffectedVersion This property is required. VersionResponse
The min version of the package in which the vulnerability exists.
packageType This property is required. String
The type of package; whether native or non native(ruby gems, node.js packages etc)
package_ This property is required. String
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
severityName This property is required. String
The severity (eg: distro assigned severity) for this vulnerability.
source This property is required. String
The source from which the information in this Detail was obtained.
vendor This property is required. String
The vendor of the product. e.g. "google"
cpeUri This property is required. string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description This property is required. string
A vendor-specific description of this note.
fixedLocation This property is required. VulnerabilityLocationResponse
The fix for this specific package version.
isObsolete This property is required. boolean
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
maxAffectedVersion This property is required. VersionResponse
The max version of the package in which the vulnerability exists.
minAffectedVersion This property is required. VersionResponse
The min version of the package in which the vulnerability exists.
package This property is required. string
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
packageType This property is required. string
The type of package; whether native or non native(ruby gems, node.js packages etc)
severityName This property is required. string
The severity (eg: distro assigned severity) for this vulnerability.
source This property is required. string
The source from which the information in this Detail was obtained.
vendor This property is required. string
The vendor of the product. e.g. "google"
cpe_uri This property is required. str
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description This property is required. str
A vendor-specific description of this note.
fixed_location This property is required. VulnerabilityLocationResponse
The fix for this specific package version.
is_obsolete This property is required. bool
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
max_affected_version This property is required. VersionResponse
The max version of the package in which the vulnerability exists.
min_affected_version This property is required. VersionResponse
The min version of the package in which the vulnerability exists.
package This property is required. str
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
package_type This property is required. str
The type of package; whether native or non native(ruby gems, node.js packages etc)
severity_name This property is required. str
The severity (eg: distro assigned severity) for this vulnerability.
source This property is required. str
The source from which the information in this Detail was obtained.
vendor This property is required. str
The vendor of the product. e.g. "google"
cpeUri This property is required. String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
description This property is required. String
A vendor-specific description of this note.
fixedLocation This property is required. Property Map
The fix for this specific package version.
isObsolete This property is required. Boolean
Whether this Detail is obsolete. Occurrences are expected not to point to obsolete details.
maxAffectedVersion This property is required. Property Map
The max version of the package in which the vulnerability exists.
minAffectedVersion This property is required. Property Map
The min version of the package in which the vulnerability exists.
package This property is required. String
The name of the package where the vulnerability was found. This field can be used as a filter in list requests.
packageType This property is required. String
The type of package; whether native or non native(ruby gems, node.js packages etc)
severityName This property is required. String
The severity (eg: distro assigned severity) for this vulnerability.
source This property is required. String
The source from which the information in this Detail was obtained.
vendor This property is required. String
The vendor of the product. e.g. "google"

Digest
, DigestArgs

Algo string
SHA1, SHA512 etc.
DigestBytes string
Value of the digest.
Algo string
SHA1, SHA512 etc.
DigestBytes string
Value of the digest.
algo String
SHA1, SHA512 etc.
digestBytes String
Value of the digest.
algo string
SHA1, SHA512 etc.
digestBytes string
Value of the digest.
algo str
SHA1, SHA512 etc.
digest_bytes str
Value of the digest.
algo String
SHA1, SHA512 etc.
digestBytes String
Value of the digest.

DigestResponse
, DigestResponseArgs

Algo This property is required. string
SHA1, SHA512 etc.
DigestBytes This property is required. string
Value of the digest.
Algo This property is required. string
SHA1, SHA512 etc.
DigestBytes This property is required. string
Value of the digest.
algo This property is required. String
SHA1, SHA512 etc.
digestBytes This property is required. String
Value of the digest.
algo This property is required. string
SHA1, SHA512 etc.
digestBytes This property is required. string
Value of the digest.
algo This property is required. str
SHA1, SHA512 etc.
digest_bytes This property is required. str
Value of the digest.
algo This property is required. String
SHA1, SHA512 etc.
digestBytes This property is required. String
Value of the digest.

Discovery
, DiscoveryArgs

AnalysisKind Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.DiscoveryAnalysisKind
The kind of analysis that is handled by this discovery.
AnalysisKind DiscoveryAnalysisKind
The kind of analysis that is handled by this discovery.
analysisKind DiscoveryAnalysisKind
The kind of analysis that is handled by this discovery.
analysisKind DiscoveryAnalysisKind
The kind of analysis that is handled by this discovery.
analysis_kind DiscoveryAnalysisKind
The kind of analysis that is handled by this discovery.

DiscoveryAnalysisKind
, DiscoveryAnalysisKindArgs

KindUnspecified
KIND_UNSPECIFIEDUnknown
PackageVulnerability
PACKAGE_VULNERABILITYThe note and occurrence represent a package vulnerability.
BuildDetails
BUILD_DETAILSThe note and occurrence assert build provenance.
ImageBasis
IMAGE_BASISThis represents an image basis relationship.
PackageManager
PACKAGE_MANAGERThis represents a package installed via a package manager.
Deployable
DEPLOYABLEThe note and occurrence track deployment events.
Discovery
DISCOVERYThe note and occurrence track the initial discovery status of a resource.
AttestationAuthority
ATTESTATION_AUTHORITYThis represents a logical "role" that can attest to artifacts.
Upgrade
UPGRADEThis represents an available software upgrade.
Compliance
COMPLIANCEThis represents a compliance check that can be applied to a resource.
Sbom
SBOMThis represents a software bill of materials.
SpdxPackage
SPDX_PACKAGEThis represents an SPDX Package.
SpdxFile
SPDX_FILEThis represents an SPDX File.
SpdxRelationship
SPDX_RELATIONSHIPThis represents an SPDX Relationship.
DsseAttestation
DSSE_ATTESTATIONThis represents a DSSE attestation Note
VulnerabilityAssessment
VULNERABILITY_ASSESSMENTThis represents a Vulnerability Assessment.
SbomReference
SBOM_REFERENCEThis represents a reference to an SBOM.
DiscoveryAnalysisKindKindUnspecified
KIND_UNSPECIFIEDUnknown
DiscoveryAnalysisKindPackageVulnerability
PACKAGE_VULNERABILITYThe note and occurrence represent a package vulnerability.
DiscoveryAnalysisKindBuildDetails
BUILD_DETAILSThe note and occurrence assert build provenance.
DiscoveryAnalysisKindImageBasis
IMAGE_BASISThis represents an image basis relationship.
DiscoveryAnalysisKindPackageManager
PACKAGE_MANAGERThis represents a package installed via a package manager.
DiscoveryAnalysisKindDeployable
DEPLOYABLEThe note and occurrence track deployment events.
DiscoveryAnalysisKindDiscovery
DISCOVERYThe note and occurrence track the initial discovery status of a resource.
DiscoveryAnalysisKindAttestationAuthority
ATTESTATION_AUTHORITYThis represents a logical "role" that can attest to artifacts.
DiscoveryAnalysisKindUpgrade
UPGRADEThis represents an available software upgrade.
DiscoveryAnalysisKindCompliance
COMPLIANCEThis represents a compliance check that can be applied to a resource.
DiscoveryAnalysisKindSbom
SBOMThis represents a software bill of materials.
DiscoveryAnalysisKindSpdxPackage
SPDX_PACKAGEThis represents an SPDX Package.
DiscoveryAnalysisKindSpdxFile
SPDX_FILEThis represents an SPDX File.
DiscoveryAnalysisKindSpdxRelationship
SPDX_RELATIONSHIPThis represents an SPDX Relationship.
DiscoveryAnalysisKindDsseAttestation
DSSE_ATTESTATIONThis represents a DSSE attestation Note
DiscoveryAnalysisKindVulnerabilityAssessment
VULNERABILITY_ASSESSMENTThis represents a Vulnerability Assessment.
DiscoveryAnalysisKindSbomReference
SBOM_REFERENCEThis represents a reference to an SBOM.
KindUnspecified
KIND_UNSPECIFIEDUnknown
PackageVulnerability
PACKAGE_VULNERABILITYThe note and occurrence represent a package vulnerability.
BuildDetails
BUILD_DETAILSThe note and occurrence assert build provenance.
ImageBasis
IMAGE_BASISThis represents an image basis relationship.
PackageManager
PACKAGE_MANAGERThis represents a package installed via a package manager.
Deployable
DEPLOYABLEThe note and occurrence track deployment events.
Discovery
DISCOVERYThe note and occurrence track the initial discovery status of a resource.
AttestationAuthority
ATTESTATION_AUTHORITYThis represents a logical "role" that can attest to artifacts.
Upgrade
UPGRADEThis represents an available software upgrade.
Compliance
COMPLIANCEThis represents a compliance check that can be applied to a resource.
Sbom
SBOMThis represents a software bill of materials.
SpdxPackage
SPDX_PACKAGEThis represents an SPDX Package.
SpdxFile
SPDX_FILEThis represents an SPDX File.
SpdxRelationship
SPDX_RELATIONSHIPThis represents an SPDX Relationship.
DsseAttestation
DSSE_ATTESTATIONThis represents a DSSE attestation Note
VulnerabilityAssessment
VULNERABILITY_ASSESSMENTThis represents a Vulnerability Assessment.
SbomReference
SBOM_REFERENCEThis represents a reference to an SBOM.
KindUnspecified
KIND_UNSPECIFIEDUnknown
PackageVulnerability
PACKAGE_VULNERABILITYThe note and occurrence represent a package vulnerability.
BuildDetails
BUILD_DETAILSThe note and occurrence assert build provenance.
ImageBasis
IMAGE_BASISThis represents an image basis relationship.
PackageManager
PACKAGE_MANAGERThis represents a package installed via a package manager.
Deployable
DEPLOYABLEThe note and occurrence track deployment events.
Discovery
DISCOVERYThe note and occurrence track the initial discovery status of a resource.
AttestationAuthority
ATTESTATION_AUTHORITYThis represents a logical "role" that can attest to artifacts.
Upgrade
UPGRADEThis represents an available software upgrade.
Compliance
COMPLIANCEThis represents a compliance check that can be applied to a resource.
Sbom
SBOMThis represents a software bill of materials.
SpdxPackage
SPDX_PACKAGEThis represents an SPDX Package.
SpdxFile
SPDX_FILEThis represents an SPDX File.
SpdxRelationship
SPDX_RELATIONSHIPThis represents an SPDX Relationship.
DsseAttestation
DSSE_ATTESTATIONThis represents a DSSE attestation Note
VulnerabilityAssessment
VULNERABILITY_ASSESSMENTThis represents a Vulnerability Assessment.
SbomReference
SBOM_REFERENCEThis represents a reference to an SBOM.
KIND_UNSPECIFIED
KIND_UNSPECIFIEDUnknown
PACKAGE_VULNERABILITY
PACKAGE_VULNERABILITYThe note and occurrence represent a package vulnerability.
BUILD_DETAILS
BUILD_DETAILSThe note and occurrence assert build provenance.
IMAGE_BASIS
IMAGE_BASISThis represents an image basis relationship.
PACKAGE_MANAGER
PACKAGE_MANAGERThis represents a package installed via a package manager.
DEPLOYABLE
DEPLOYABLEThe note and occurrence track deployment events.
DISCOVERY
DISCOVERYThe note and occurrence track the initial discovery status of a resource.
ATTESTATION_AUTHORITY
ATTESTATION_AUTHORITYThis represents a logical "role" that can attest to artifacts.
UPGRADE
UPGRADEThis represents an available software upgrade.
COMPLIANCE
COMPLIANCEThis represents a compliance check that can be applied to a resource.
SBOM
SBOMThis represents a software bill of materials.
SPDX_PACKAGE
SPDX_PACKAGEThis represents an SPDX Package.
SPDX_FILE
SPDX_FILEThis represents an SPDX File.
SPDX_RELATIONSHIP
SPDX_RELATIONSHIPThis represents an SPDX Relationship.
DSSE_ATTESTATION
DSSE_ATTESTATIONThis represents a DSSE attestation Note
VULNERABILITY_ASSESSMENT
VULNERABILITY_ASSESSMENTThis represents a Vulnerability Assessment.
SBOM_REFERENCE
SBOM_REFERENCEThis represents a reference to an SBOM.
"KIND_UNSPECIFIED"
KIND_UNSPECIFIEDUnknown
"PACKAGE_VULNERABILITY"
PACKAGE_VULNERABILITYThe note and occurrence represent a package vulnerability.
"BUILD_DETAILS"
BUILD_DETAILSThe note and occurrence assert build provenance.
"IMAGE_BASIS"
IMAGE_BASISThis represents an image basis relationship.
"PACKAGE_MANAGER"
PACKAGE_MANAGERThis represents a package installed via a package manager.
"DEPLOYABLE"
DEPLOYABLEThe note and occurrence track deployment events.
"DISCOVERY"
DISCOVERYThe note and occurrence track the initial discovery status of a resource.
"ATTESTATION_AUTHORITY"
ATTESTATION_AUTHORITYThis represents a logical "role" that can attest to artifacts.
"UPGRADE"
UPGRADEThis represents an available software upgrade.
"COMPLIANCE"
COMPLIANCEThis represents a compliance check that can be applied to a resource.
"SBOM"
SBOMThis represents a software bill of materials.
"SPDX_PACKAGE"
SPDX_PACKAGEThis represents an SPDX Package.
"SPDX_FILE"
SPDX_FILEThis represents an SPDX File.
"SPDX_RELATIONSHIP"
SPDX_RELATIONSHIPThis represents an SPDX Relationship.
"DSSE_ATTESTATION"
DSSE_ATTESTATIONThis represents a DSSE attestation Note
"VULNERABILITY_ASSESSMENT"
VULNERABILITY_ASSESSMENTThis represents a Vulnerability Assessment.
"SBOM_REFERENCE"
SBOM_REFERENCEThis represents a reference to an SBOM.

DiscoveryResponse
, DiscoveryResponseArgs

AnalysisKind This property is required. string
The kind of analysis that is handled by this discovery.
AnalysisKind This property is required. string
The kind of analysis that is handled by this discovery.
analysisKind This property is required. String
The kind of analysis that is handled by this discovery.
analysisKind This property is required. string
The kind of analysis that is handled by this discovery.
analysis_kind This property is required. str
The kind of analysis that is handled by this discovery.
analysisKind This property is required. String
The kind of analysis that is handled by this discovery.

Distribution
, DistributionArgs

Architecture Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.DistributionArchitecture
The CPU architecture for which packages in this distribution channel were built
CpeUri string
The cpe_uri in cpe format denoting the package manager version distributing a package.
Description string
The distribution channel-specific description of this package.
LatestVersion Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Version
The latest available version of this package in this distribution channel.
Maintainer string
A freeform string denoting the maintainer of this package.
Url string
The distribution channel-specific homepage for this package.
Architecture DistributionArchitecture
The CPU architecture for which packages in this distribution channel were built
CpeUri string
The cpe_uri in cpe format denoting the package manager version distributing a package.
Description string
The distribution channel-specific description of this package.
LatestVersion Version
The latest available version of this package in this distribution channel.
Maintainer string
A freeform string denoting the maintainer of this package.
Url string
The distribution channel-specific homepage for this package.
architecture DistributionArchitecture
The CPU architecture for which packages in this distribution channel were built
cpeUri String
The cpe_uri in cpe format denoting the package manager version distributing a package.
description String
The distribution channel-specific description of this package.
latestVersion Version
The latest available version of this package in this distribution channel.
maintainer String
A freeform string denoting the maintainer of this package.
url String
The distribution channel-specific homepage for this package.
architecture DistributionArchitecture
The CPU architecture for which packages in this distribution channel were built
cpeUri string
The cpe_uri in cpe format denoting the package manager version distributing a package.
description string
The distribution channel-specific description of this package.
latestVersion Version
The latest available version of this package in this distribution channel.
maintainer string
A freeform string denoting the maintainer of this package.
url string
The distribution channel-specific homepage for this package.
architecture DistributionArchitecture
The CPU architecture for which packages in this distribution channel were built
cpe_uri str
The cpe_uri in cpe format denoting the package manager version distributing a package.
description str
The distribution channel-specific description of this package.
latest_version Version
The latest available version of this package in this distribution channel.
maintainer str
A freeform string denoting the maintainer of this package.
url str
The distribution channel-specific homepage for this package.
architecture "ARCHITECTURE_UNSPECIFIED" | "X86" | "X64"
The CPU architecture for which packages in this distribution channel were built
cpeUri String
The cpe_uri in cpe format denoting the package manager version distributing a package.
description String
The distribution channel-specific description of this package.
latestVersion Property Map
The latest available version of this package in this distribution channel.
maintainer String
A freeform string denoting the maintainer of this package.
url String
The distribution channel-specific homepage for this package.

DistributionArchitecture
, DistributionArchitectureArgs

ArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
DistributionArchitectureArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
DistributionArchitectureX86
X86X86 architecture
DistributionArchitectureX64
X64X64 architecture
ArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
ArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
ARCHITECTURE_UNSPECIFIED
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
"ARCHITECTURE_UNSPECIFIED"
ARCHITECTURE_UNSPECIFIEDUnknown architecture
"X86"
X86X86 architecture
"X64"
X64X64 architecture

DistributionResponse
, DistributionResponseArgs

Architecture This property is required. string
The CPU architecture for which packages in this distribution channel were built
CpeUri This property is required. string
The cpe_uri in cpe format denoting the package manager version distributing a package.
Description This property is required. string
The distribution channel-specific description of this package.
LatestVersion This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionResponse
The latest available version of this package in this distribution channel.
Maintainer This property is required. string
A freeform string denoting the maintainer of this package.
Url This property is required. string
The distribution channel-specific homepage for this package.
Architecture This property is required. string
The CPU architecture for which packages in this distribution channel were built
CpeUri This property is required. string
The cpe_uri in cpe format denoting the package manager version distributing a package.
Description This property is required. string
The distribution channel-specific description of this package.
LatestVersion This property is required. VersionResponse
The latest available version of this package in this distribution channel.
Maintainer This property is required. string
A freeform string denoting the maintainer of this package.
Url This property is required. string
The distribution channel-specific homepage for this package.
architecture This property is required. String
The CPU architecture for which packages in this distribution channel were built
cpeUri This property is required. String
The cpe_uri in cpe format denoting the package manager version distributing a package.
description This property is required. String
The distribution channel-specific description of this package.
latestVersion This property is required. VersionResponse
The latest available version of this package in this distribution channel.
maintainer This property is required. String
A freeform string denoting the maintainer of this package.
url This property is required. String
The distribution channel-specific homepage for this package.
architecture This property is required. string
The CPU architecture for which packages in this distribution channel were built
cpeUri This property is required. string
The cpe_uri in cpe format denoting the package manager version distributing a package.
description This property is required. string
The distribution channel-specific description of this package.
latestVersion This property is required. VersionResponse
The latest available version of this package in this distribution channel.
maintainer This property is required. string
A freeform string denoting the maintainer of this package.
url This property is required. string
The distribution channel-specific homepage for this package.
architecture This property is required. str
The CPU architecture for which packages in this distribution channel were built
cpe_uri This property is required. str
The cpe_uri in cpe format denoting the package manager version distributing a package.
description This property is required. str
The distribution channel-specific description of this package.
latest_version This property is required. VersionResponse
The latest available version of this package in this distribution channel.
maintainer This property is required. str
A freeform string denoting the maintainer of this package.
url This property is required. str
The distribution channel-specific homepage for this package.
architecture This property is required. String
The CPU architecture for which packages in this distribution channel were built
cpeUri This property is required. String
The cpe_uri in cpe format denoting the package manager version distributing a package.
description This property is required. String
The distribution channel-specific description of this package.
latestVersion This property is required. Property Map
The latest available version of this package in this distribution channel.
maintainer This property is required. String
A freeform string denoting the maintainer of this package.
url This property is required. String
The distribution channel-specific homepage for this package.

DocumentNote
, DocumentNoteArgs

DataLicence string
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
SpdxVersion string
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
DataLicence string
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
SpdxVersion string
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
dataLicence String
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdxVersion String
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
dataLicence string
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdxVersion string
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
data_licence str
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdx_version str
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
dataLicence String
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdxVersion String
Provide a reference number that can be used to understand how to parse and interpret the rest of the file

DocumentNoteResponse
, DocumentNoteResponseArgs

DataLicence This property is required. string
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
SpdxVersion This property is required. string
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
DataLicence This property is required. string
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
SpdxVersion This property is required. string
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
dataLicence This property is required. String
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdxVersion This property is required. String
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
dataLicence This property is required. string
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdxVersion This property is required. string
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
data_licence This property is required. str
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdx_version This property is required. str
Provide a reference number that can be used to understand how to parse and interpret the rest of the file
dataLicence This property is required. String
Compliance with the SPDX specification includes populating the SPDX fields therein with data related to such fields ("SPDX-Metadata")
spdxVersion This property is required. String
Provide a reference number that can be used to understand how to parse and interpret the rest of the file

ExternalRef
, ExternalRefArgs

Category Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.ExternalRefCategory
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
Comment string
Human-readable information about the purpose and target of the reference
Locator string
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
Type string
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
Category ExternalRefCategory
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
Comment string
Human-readable information about the purpose and target of the reference
Locator string
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
Type string
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category ExternalRefCategory
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment String
Human-readable information about the purpose and target of the reference
locator String
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type String
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category ExternalRefCategory
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment string
Human-readable information about the purpose and target of the reference
locator string
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type string
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category ExternalRefCategory
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment str
Human-readable information about the purpose and target of the reference
locator str
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type str
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category "CATEGORY_UNSPECIFIED" | "SECURITY" | "PACKAGE_MANAGER" | "PERSISTENT_ID" | "OTHER"
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment String
Human-readable information about the purpose and target of the reference
locator String
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type String
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)

ExternalRefCategory
, ExternalRefCategoryArgs

CategoryUnspecified
CATEGORY_UNSPECIFIEDUnspecified
Security
SECURITYSecurity (e.g. cpe22Type, cpe23Type)
PackageManager
PACKAGE_MANAGERPackage Manager (e.g. maven-central, npm, nuget, bower, purl)
PersistentId
PERSISTENT_IDPersistent-Id (e.g. swh)
Other
OTHEROther
ExternalRefCategoryCategoryUnspecified
CATEGORY_UNSPECIFIEDUnspecified
ExternalRefCategorySecurity
SECURITYSecurity (e.g. cpe22Type, cpe23Type)
ExternalRefCategoryPackageManager
PACKAGE_MANAGERPackage Manager (e.g. maven-central, npm, nuget, bower, purl)
ExternalRefCategoryPersistentId
PERSISTENT_IDPersistent-Id (e.g. swh)
ExternalRefCategoryOther
OTHEROther
CategoryUnspecified
CATEGORY_UNSPECIFIEDUnspecified
Security
SECURITYSecurity (e.g. cpe22Type, cpe23Type)
PackageManager
PACKAGE_MANAGERPackage Manager (e.g. maven-central, npm, nuget, bower, purl)
PersistentId
PERSISTENT_IDPersistent-Id (e.g. swh)
Other
OTHEROther
CategoryUnspecified
CATEGORY_UNSPECIFIEDUnspecified
Security
SECURITYSecurity (e.g. cpe22Type, cpe23Type)
PackageManager
PACKAGE_MANAGERPackage Manager (e.g. maven-central, npm, nuget, bower, purl)
PersistentId
PERSISTENT_IDPersistent-Id (e.g. swh)
Other
OTHEROther
CATEGORY_UNSPECIFIED
CATEGORY_UNSPECIFIEDUnspecified
SECURITY
SECURITYSecurity (e.g. cpe22Type, cpe23Type)
PACKAGE_MANAGER
PACKAGE_MANAGERPackage Manager (e.g. maven-central, npm, nuget, bower, purl)
PERSISTENT_ID
PERSISTENT_IDPersistent-Id (e.g. swh)
OTHER
OTHEROther
"CATEGORY_UNSPECIFIED"
CATEGORY_UNSPECIFIEDUnspecified
"SECURITY"
SECURITYSecurity (e.g. cpe22Type, cpe23Type)
"PACKAGE_MANAGER"
PACKAGE_MANAGERPackage Manager (e.g. maven-central, npm, nuget, bower, purl)
"PERSISTENT_ID"
PERSISTENT_IDPersistent-Id (e.g. swh)
"OTHER"
OTHEROther

ExternalRefResponse
, ExternalRefResponseArgs

Category This property is required. string
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
Comment This property is required. string
Human-readable information about the purpose and target of the reference
Locator This property is required. string
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
Type This property is required. string
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
Category This property is required. string
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
Comment This property is required. string
Human-readable information about the purpose and target of the reference
Locator This property is required. string
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
Type This property is required. string
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category This property is required. String
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment This property is required. String
Human-readable information about the purpose and target of the reference
locator This property is required. String
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type This property is required. String
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category This property is required. string
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment This property is required. string
Human-readable information about the purpose and target of the reference
locator This property is required. string
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type This property is required. string
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category This property is required. str
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment This property is required. str
Human-readable information about the purpose and target of the reference
locator This property is required. str
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type This property is required. str
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)
category This property is required. String
An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package
comment This property is required. String
Human-readable information about the purpose and target of the reference
locator This property is required. String
The unique string with no spaces necessary to access the package-specific information, metadata, or content within the target location
type This property is required. String
Type of category (e.g. 'npm' for the PACKAGE_MANAGER category)

FileLocation
, FileLocationArgs

FilePath string
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
FilePath string
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
filePath String
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
filePath string
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
file_path str
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
filePath String
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.

FileLocationResponse
, FileLocationResponseArgs

FilePath This property is required. string
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
FilePath This property is required. string
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
filePath This property is required. String
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
filePath This property is required. string
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
file_path This property is required. str
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
filePath This property is required. String
For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.

FileNote
, FileNoteArgs

Checksum List<string>
Provide a unique identifier to match analysis information on each specific file in a package
FileType Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.FileNoteFileType
This field provides information about the type of file identified
Title string
Identify the full path and filename that corresponds to the file information in this section
Checksum []string
Provide a unique identifier to match analysis information on each specific file in a package
FileType FileNoteFileType
This field provides information about the type of file identified
Title string
Identify the full path and filename that corresponds to the file information in this section
checksum List<String>
Provide a unique identifier to match analysis information on each specific file in a package
fileType FileNoteFileType
This field provides information about the type of file identified
title String
Identify the full path and filename that corresponds to the file information in this section
checksum string[]
Provide a unique identifier to match analysis information on each specific file in a package
fileType FileNoteFileType
This field provides information about the type of file identified
title string
Identify the full path and filename that corresponds to the file information in this section
checksum Sequence[str]
Provide a unique identifier to match analysis information on each specific file in a package
file_type FileNoteFileType
This field provides information about the type of file identified
title str
Identify the full path and filename that corresponds to the file information in this section
checksum List<String>
Provide a unique identifier to match analysis information on each specific file in a package
fileType "FILE_TYPE_UNSPECIFIED" | "SOURCE" | "BINARY" | "ARCHIVE" | "APPLICATION" | "AUDIO" | "IMAGE" | "TEXT" | "VIDEO" | "DOCUMENTATION" | "SPDX" | "OTHER"
This field provides information about the type of file identified
title String
Identify the full path and filename that corresponds to the file information in this section

FileNoteFileType
, FileNoteFileTypeArgs

FileTypeUnspecified
FILE_TYPE_UNSPECIFIEDUnspecified
Source
SOURCEThe file is human readable source code (.c, .html, etc.)
Binary
BINARYThe file is a compiled object, target image or binary executable (.o, .a, etc.)
Archive
ARCHIVEThe file represents an archive (.tar, .jar, etc.)
Application
APPLICATIONThe file is associated with a specific application type (MIME type of application/*)
Audio
AUDIOThe file is associated with an audio file (MIME type of audio/* , e.g. .mp3)
Image
IMAGEThe file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif)
Text
TEXTThe file is human readable text file (MIME type of text/*)
Video
VIDEOThe file is associated with a video file type (MIME type of video/*)
Documentation
DOCUMENTATIONThe file serves as documentation
Spdx
SPDXThe file is an SPDX document
Other
OTHERThe file doesn't fit into the above categories (generated artifacts, data files, etc.)
FileNoteFileTypeFileTypeUnspecified
FILE_TYPE_UNSPECIFIEDUnspecified
FileNoteFileTypeSource
SOURCEThe file is human readable source code (.c, .html, etc.)
FileNoteFileTypeBinary
BINARYThe file is a compiled object, target image or binary executable (.o, .a, etc.)
FileNoteFileTypeArchive
ARCHIVEThe file represents an archive (.tar, .jar, etc.)
FileNoteFileTypeApplication
APPLICATIONThe file is associated with a specific application type (MIME type of application/*)
FileNoteFileTypeAudio
AUDIOThe file is associated with an audio file (MIME type of audio/* , e.g. .mp3)
FileNoteFileTypeImage
IMAGEThe file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif)
FileNoteFileTypeText
TEXTThe file is human readable text file (MIME type of text/*)
FileNoteFileTypeVideo
VIDEOThe file is associated with a video file type (MIME type of video/*)
FileNoteFileTypeDocumentation
DOCUMENTATIONThe file serves as documentation
FileNoteFileTypeSpdx
SPDXThe file is an SPDX document
FileNoteFileTypeOther
OTHERThe file doesn't fit into the above categories (generated artifacts, data files, etc.)
FileTypeUnspecified
FILE_TYPE_UNSPECIFIEDUnspecified
Source
SOURCEThe file is human readable source code (.c, .html, etc.)
Binary
BINARYThe file is a compiled object, target image or binary executable (.o, .a, etc.)
Archive
ARCHIVEThe file represents an archive (.tar, .jar, etc.)
Application
APPLICATIONThe file is associated with a specific application type (MIME type of application/*)
Audio
AUDIOThe file is associated with an audio file (MIME type of audio/* , e.g. .mp3)
Image
IMAGEThe file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif)
Text
TEXTThe file is human readable text file (MIME type of text/*)
Video
VIDEOThe file is associated with a video file type (MIME type of video/*)
Documentation
DOCUMENTATIONThe file serves as documentation
Spdx
SPDXThe file is an SPDX document
Other
OTHERThe file doesn't fit into the above categories (generated artifacts, data files, etc.)
FileTypeUnspecified
FILE_TYPE_UNSPECIFIEDUnspecified
Source
SOURCEThe file is human readable source code (.c, .html, etc.)
Binary
BINARYThe file is a compiled object, target image or binary executable (.o, .a, etc.)
Archive
ARCHIVEThe file represents an archive (.tar, .jar, etc.)
Application
APPLICATIONThe file is associated with a specific application type (MIME type of application/*)
Audio
AUDIOThe file is associated with an audio file (MIME type of audio/* , e.g. .mp3)
Image
IMAGEThe file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif)
Text
TEXTThe file is human readable text file (MIME type of text/*)
Video
VIDEOThe file is associated with a video file type (MIME type of video/*)
Documentation
DOCUMENTATIONThe file serves as documentation
Spdx
SPDXThe file is an SPDX document
Other
OTHERThe file doesn't fit into the above categories (generated artifacts, data files, etc.)
FILE_TYPE_UNSPECIFIED
FILE_TYPE_UNSPECIFIEDUnspecified
SOURCE
SOURCEThe file is human readable source code (.c, .html, etc.)
BINARY
BINARYThe file is a compiled object, target image or binary executable (.o, .a, etc.)
ARCHIVE
ARCHIVEThe file represents an archive (.tar, .jar, etc.)
APPLICATION
APPLICATIONThe file is associated with a specific application type (MIME type of application/*)
AUDIO
AUDIOThe file is associated with an audio file (MIME type of audio/* , e.g. .mp3)
IMAGE
IMAGEThe file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif)
TEXT
TEXTThe file is human readable text file (MIME type of text/*)
VIDEO
VIDEOThe file is associated with a video file type (MIME type of video/*)
DOCUMENTATION
DOCUMENTATIONThe file serves as documentation
SPDX
SPDXThe file is an SPDX document
OTHER
OTHERThe file doesn't fit into the above categories (generated artifacts, data files, etc.)
"FILE_TYPE_UNSPECIFIED"
FILE_TYPE_UNSPECIFIEDUnspecified
"SOURCE"
SOURCEThe file is human readable source code (.c, .html, etc.)
"BINARY"
BINARYThe file is a compiled object, target image or binary executable (.o, .a, etc.)
"ARCHIVE"
ARCHIVEThe file represents an archive (.tar, .jar, etc.)
"APPLICATION"
APPLICATIONThe file is associated with a specific application type (MIME type of application/*)
"AUDIO"
AUDIOThe file is associated with an audio file (MIME type of audio/* , e.g. .mp3)
"IMAGE"
IMAGEThe file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif)
"TEXT"
TEXTThe file is human readable text file (MIME type of text/*)
"VIDEO"
VIDEOThe file is associated with a video file type (MIME type of video/*)
"DOCUMENTATION"
DOCUMENTATIONThe file serves as documentation
"SPDX"
SPDXThe file is an SPDX document
"OTHER"
OTHERThe file doesn't fit into the above categories (generated artifacts, data files, etc.)

FileNoteResponse
, FileNoteResponseArgs

Checksum This property is required. List<string>
Provide a unique identifier to match analysis information on each specific file in a package
FileType This property is required. string
This field provides information about the type of file identified
Title This property is required. string
Identify the full path and filename that corresponds to the file information in this section
Checksum This property is required. []string
Provide a unique identifier to match analysis information on each specific file in a package
FileType This property is required. string
This field provides information about the type of file identified
Title This property is required. string
Identify the full path and filename that corresponds to the file information in this section
checksum This property is required. List<String>
Provide a unique identifier to match analysis information on each specific file in a package
fileType This property is required. String
This field provides information about the type of file identified
title This property is required. String
Identify the full path and filename that corresponds to the file information in this section
checksum This property is required. string[]
Provide a unique identifier to match analysis information on each specific file in a package
fileType This property is required. string
This field provides information about the type of file identified
title This property is required. string
Identify the full path and filename that corresponds to the file information in this section
checksum This property is required. Sequence[str]
Provide a unique identifier to match analysis information on each specific file in a package
file_type This property is required. str
This field provides information about the type of file identified
title This property is required. str
Identify the full path and filename that corresponds to the file information in this section
checksum This property is required. List<String>
Provide a unique identifier to match analysis information on each specific file in a package
fileType This property is required. String
This field provides information about the type of file identified
title This property is required. String
Identify the full path and filename that corresponds to the file information in this section

Fingerprint
, FingerprintArgs

V1Name string
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
V2Blob List<string>
The ordered list of v2 blobs that represent a given image.
V1Name string
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
V2Blob []string
The ordered list of v2 blobs that represent a given image.
v1Name String
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2Blob List<String>
The ordered list of v2 blobs that represent a given image.
v1Name string
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2Blob string[]
The ordered list of v2 blobs that represent a given image.
v1_name str
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2_blob Sequence[str]
The ordered list of v2 blobs that represent a given image.
v1Name String
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2Blob List<String>
The ordered list of v2 blobs that represent a given image.

FingerprintResponse
, FingerprintResponseArgs

V1Name This property is required. string
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
V2Blob This property is required. List<string>
The ordered list of v2 blobs that represent a given image.
V2Name This property is required. string
The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
V1Name This property is required. string
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
V2Blob This property is required. []string
The ordered list of v2 blobs that represent a given image.
V2Name This property is required. string
The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
v1Name This property is required. String
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2Blob This property is required. List<String>
The ordered list of v2 blobs that represent a given image.
v2Name This property is required. String
The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
v1Name This property is required. string
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2Blob This property is required. string[]
The ordered list of v2 blobs that represent a given image.
v2Name This property is required. string
The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
v1_name This property is required. str
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2_blob This property is required. Sequence[str]
The ordered list of v2 blobs that represent a given image.
v2_name This property is required. str
The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.
v1Name This property is required. String
The layer-id of the final layer in the Docker image's v1 representation. This field can be used as a filter in list requests.
v2Blob This property is required. List<String>
The ordered list of v2 blobs that represent a given image.
v2Name This property is required. String
The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept. This field can be used as a filter in list requests.

IdentifierHelper
, IdentifierHelperArgs

Field Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.IdentifierHelperField
The field that is set in the API proto.
GenericUri string
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
Field IdentifierHelperField
The field that is set in the API proto.
GenericUri string
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field IdentifierHelperField
The field that is set in the API proto.
genericUri String
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field IdentifierHelperField
The field that is set in the API proto.
genericUri string
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field IdentifierHelperField
The field that is set in the API proto.
generic_uri str
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field "IDENTIFIER_HELPER_FIELD_UNSPECIFIED" | "GENERIC_URI"
The field that is set in the API proto.
genericUri String
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.

IdentifierHelperField
, IdentifierHelperFieldArgs

IdentifierHelperFieldUnspecified
IDENTIFIER_HELPER_FIELD_UNSPECIFIEDThe helper isn't set.
GenericUri
GENERIC_URIThe generic_uri one-of field is set.
IdentifierHelperFieldIdentifierHelperFieldUnspecified
IDENTIFIER_HELPER_FIELD_UNSPECIFIEDThe helper isn't set.
IdentifierHelperFieldGenericUri
GENERIC_URIThe generic_uri one-of field is set.
IdentifierHelperFieldUnspecified
IDENTIFIER_HELPER_FIELD_UNSPECIFIEDThe helper isn't set.
GenericUri
GENERIC_URIThe generic_uri one-of field is set.
IdentifierHelperFieldUnspecified
IDENTIFIER_HELPER_FIELD_UNSPECIFIEDThe helper isn't set.
GenericUri
GENERIC_URIThe generic_uri one-of field is set.
IDENTIFIER_HELPER_FIELD_UNSPECIFIED
IDENTIFIER_HELPER_FIELD_UNSPECIFIEDThe helper isn't set.
GENERIC_URI
GENERIC_URIThe generic_uri one-of field is set.
"IDENTIFIER_HELPER_FIELD_UNSPECIFIED"
IDENTIFIER_HELPER_FIELD_UNSPECIFIEDThe helper isn't set.
"GENERIC_URI"
GENERIC_URIThe generic_uri one-of field is set.

IdentifierHelperResponse
, IdentifierHelperResponseArgs

Field This property is required. string
The field that is set in the API proto.
GenericUri This property is required. string
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
Field This property is required. string
The field that is set in the API proto.
GenericUri This property is required. string
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field This property is required. String
The field that is set in the API proto.
genericUri This property is required. String
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field This property is required. string
The field that is set in the API proto.
genericUri This property is required. string
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field This property is required. str
The field that is set in the API proto.
generic_uri This property is required. str
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.
field This property is required. String
The field that is set in the API proto.
genericUri This property is required. String
Contains a URI which is vendor-specific. Example: The artifact repository URL of an image.

Justification
, JustificationArgs

Details string
Additional details on why this justification was chosen.
JustificationType Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.JustificationJustificationType
The justification type for this vulnerability.
Details string
Additional details on why this justification was chosen.
JustificationType JustificationJustificationType
The justification type for this vulnerability.
details String
Additional details on why this justification was chosen.
justificationType JustificationJustificationType
The justification type for this vulnerability.
details string
Additional details on why this justification was chosen.
justificationType JustificationJustificationType
The justification type for this vulnerability.
details str
Additional details on why this justification was chosen.
justification_type JustificationJustificationType
The justification type for this vulnerability.

JustificationJustificationType
, JustificationJustificationTypeArgs

JustificationTypeUnspecified
JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
ComponentNotPresent
COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
VulnerableCodeNotPresent
VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
VulnerableCodeNotInExecutePath
VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
VulnerableCodeCannotBeControlledByAdversary
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
InlineMitigationsAlreadyExist
INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
JustificationJustificationTypeJustificationTypeUnspecified
JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
JustificationJustificationTypeComponentNotPresent
COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
JustificationJustificationTypeVulnerableCodeNotPresent
VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
JustificationJustificationTypeVulnerableCodeNotInExecutePath
VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
JustificationJustificationTypeVulnerableCodeCannotBeControlledByAdversary
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
JustificationJustificationTypeInlineMitigationsAlreadyExist
INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
JustificationTypeUnspecified
JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
ComponentNotPresent
COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
VulnerableCodeNotPresent
VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
VulnerableCodeNotInExecutePath
VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
VulnerableCodeCannotBeControlledByAdversary
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
InlineMitigationsAlreadyExist
INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
JustificationTypeUnspecified
JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
ComponentNotPresent
COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
VulnerableCodeNotPresent
VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
VulnerableCodeNotInExecutePath
VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
VulnerableCodeCannotBeControlledByAdversary
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
InlineMitigationsAlreadyExist
INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
JUSTIFICATION_TYPE_UNSPECIFIED
JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
COMPONENT_NOT_PRESENT
COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
VULNERABLE_CODE_NOT_PRESENT
VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
VULNERABLE_CODE_NOT_IN_EXECUTE_PATH
VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
INLINE_MITIGATIONS_ALREADY_EXIST
INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
"JUSTIFICATION_TYPE_UNSPECIFIED"
JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
"COMPONENT_NOT_PRESENT"
COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
"VULNERABLE_CODE_NOT_PRESENT"
VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
"VULNERABLE_CODE_NOT_IN_EXECUTE_PATH"
VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
"VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY"
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
"INLINE_MITIGATIONS_ALREADY_EXIST"
INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.

JustificationResponse
, JustificationResponseArgs

Details This property is required. string
Additional details on why this justification was chosen.
JustificationType This property is required. string
The justification type for this vulnerability.
Details This property is required. string
Additional details on why this justification was chosen.
JustificationType This property is required. string
The justification type for this vulnerability.
details This property is required. String
Additional details on why this justification was chosen.
justificationType This property is required. String
The justification type for this vulnerability.
details This property is required. string
Additional details on why this justification was chosen.
justificationType This property is required. string
The justification type for this vulnerability.
details This property is required. str
Additional details on why this justification was chosen.
justification_type This property is required. str
The justification type for this vulnerability.
details This property is required. String
Additional details on why this justification was chosen.
justificationType This property is required. String
The justification type for this vulnerability.

License
, LicenseArgs

Comments string
Comments
Expression string
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
Comments string
Comments
Expression string
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments String
Comments
expression String
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments string
Comments
expression string
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments str
Comments
expression str
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments String
Comments
expression String
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

LicenseResponse
, LicenseResponseArgs

Comments This property is required. string
Comments
Expression This property is required. string
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
Comments This property is required. string
Comments
Expression This property is required. string
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments This property is required. String
Comments
expression This property is required. String
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments This property is required. string
Comments
expression This property is required. string
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments This property is required. str
Comments
expression This property is required. str
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
comments This property is required. String
Comments
expression This property is required. String
Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

Package
, PackageArgs

Architecture Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.PackageArchitecture
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
CpeUri string
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
Description string
The description of this package.
Digest List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Digest>
Hash value, typically a file digest, that allows unique identification a specific package.
Distribution List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Distribution>
The various channels by which a package is distributed.
License Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.License
Licenses that have been declared by the authors of the package.
Maintainer string
A freeform text denoting the maintainer of this package.
Name string
The name of the package.
PackageType string
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
Url string
The homepage for this package.
Version Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Version
The version of the package.
Architecture PackageArchitecture
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
CpeUri string
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
Description string
The description of this package.
Digest []Digest
Hash value, typically a file digest, that allows unique identification a specific package.
Distribution []Distribution
The various channels by which a package is distributed.
License License
Licenses that have been declared by the authors of the package.
Maintainer string
A freeform text denoting the maintainer of this package.
Name string
The name of the package.
PackageType string
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
Url string
The homepage for this package.
Version Version
The version of the package.
architecture PackageArchitecture
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri String
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description String
The description of this package.
digest List<Digest>
Hash value, typically a file digest, that allows unique identification a specific package.
distribution List<Distribution>
The various channels by which a package is distributed.
license License
Licenses that have been declared by the authors of the package.
maintainer String
A freeform text denoting the maintainer of this package.
name String
The name of the package.
packageType String
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url String
The homepage for this package.
version Version
The version of the package.
architecture PackageArchitecture
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri string
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description string
The description of this package.
digest Digest[]
Hash value, typically a file digest, that allows unique identification a specific package.
distribution Distribution[]
The various channels by which a package is distributed.
license License
Licenses that have been declared by the authors of the package.
maintainer string
A freeform text denoting the maintainer of this package.
name string
The name of the package.
packageType string
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url string
The homepage for this package.
version Version
The version of the package.
architecture PackageArchitecture
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpe_uri str
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description str
The description of this package.
digest Sequence[Digest]
Hash value, typically a file digest, that allows unique identification a specific package.
distribution Sequence[Distribution]
The various channels by which a package is distributed.
license License
Licenses that have been declared by the authors of the package.
maintainer str
A freeform text denoting the maintainer of this package.
name str
The name of the package.
package_type str
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url str
The homepage for this package.
version Version
The version of the package.
architecture "ARCHITECTURE_UNSPECIFIED" | "X86" | "X64"
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri String
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description String
The description of this package.
digest List<Property Map>
Hash value, typically a file digest, that allows unique identification a specific package.
distribution List<Property Map>
The various channels by which a package is distributed.
license Property Map
Licenses that have been declared by the authors of the package.
maintainer String
A freeform text denoting the maintainer of this package.
name String
The name of the package.
packageType String
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url String
The homepage for this package.
version Property Map
The version of the package.

PackageArchitecture
, PackageArchitectureArgs

ArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
PackageArchitectureArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
PackageArchitectureX86
X86X86 architecture
PackageArchitectureX64
X64X64 architecture
ArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
ArchitectureUnspecified
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
ARCHITECTURE_UNSPECIFIED
ARCHITECTURE_UNSPECIFIEDUnknown architecture
X86
X86X86 architecture
X64
X64X64 architecture
"ARCHITECTURE_UNSPECIFIED"
ARCHITECTURE_UNSPECIFIEDUnknown architecture
"X86"
X86X86 architecture
"X64"
X64X64 architecture

PackageInfoNote
, PackageInfoNoteArgs

Analyzed bool
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
Attribution string
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
Checksum string
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
Copyright string
Identify the copyright holders of the package, as well as any dates present
DetailedDescription string
A more detailed description of the package
DownloadLocation string
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
ExternalRefs List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ExternalRef>
ExternalRef
FilesLicenseInfo List<string>
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
HomePage string
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
LicenseDeclared Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.License
List the licenses that have been declared by the authors of the package
Originator string
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
PackageType string
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
SummaryDescription string
A short description of the package
Supplier string
Identify the actual distribution source for the package/directory identified in the SPDX file
Title string
Identify the full name of the package as given by the Package Originator
VerificationCode string
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
Version string
Identify the version of the package
Analyzed bool
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
Attribution string
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
Checksum string
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
Copyright string
Identify the copyright holders of the package, as well as any dates present
DetailedDescription string
A more detailed description of the package
DownloadLocation string
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
ExternalRefs []ExternalRef
ExternalRef
FilesLicenseInfo []string
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
HomePage string
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
LicenseDeclared License
List the licenses that have been declared by the authors of the package
Originator string
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
PackageType string
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
SummaryDescription string
A short description of the package
Supplier string
Identify the actual distribution source for the package/directory identified in the SPDX file
Title string
Identify the full name of the package as given by the Package Originator
VerificationCode string
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
Version string
Identify the version of the package
analyzed Boolean
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution String
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum String
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright String
Identify the copyright holders of the package, as well as any dates present
detailedDescription String
A more detailed description of the package
downloadLocation String
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
externalRefs List<ExternalRef>
ExternalRef
filesLicenseInfo List<String>
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
homePage String
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseDeclared License
List the licenses that have been declared by the authors of the package
originator String
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
packageType String
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summaryDescription String
A short description of the package
supplier String
Identify the actual distribution source for the package/directory identified in the SPDX file
title String
Identify the full name of the package as given by the Package Originator
verificationCode String
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version String
Identify the version of the package
analyzed boolean
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution string
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum string
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright string
Identify the copyright holders of the package, as well as any dates present
detailedDescription string
A more detailed description of the package
downloadLocation string
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
externalRefs ExternalRef[]
ExternalRef
filesLicenseInfo string[]
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
homePage string
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseDeclared License
List the licenses that have been declared by the authors of the package
originator string
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
packageType string
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summaryDescription string
A short description of the package
supplier string
Identify the actual distribution source for the package/directory identified in the SPDX file
title string
Identify the full name of the package as given by the Package Originator
verificationCode string
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version string
Identify the version of the package
analyzed bool
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution str
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum str
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright str
Identify the copyright holders of the package, as well as any dates present
detailed_description str
A more detailed description of the package
download_location str
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
external_refs Sequence[ExternalRef]
ExternalRef
files_license_info Sequence[str]
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
home_page str
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
license_declared License
List the licenses that have been declared by the authors of the package
originator str
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
package_type str
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summary_description str
A short description of the package
supplier str
Identify the actual distribution source for the package/directory identified in the SPDX file
title str
Identify the full name of the package as given by the Package Originator
verification_code str
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version str
Identify the version of the package
analyzed Boolean
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution String
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum String
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright String
Identify the copyright holders of the package, as well as any dates present
detailedDescription String
A more detailed description of the package
downloadLocation String
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
externalRefs List<Property Map>
ExternalRef
filesLicenseInfo List<String>
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
homePage String
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseDeclared Property Map
List the licenses that have been declared by the authors of the package
originator String
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
packageType String
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summaryDescription String
A short description of the package
supplier String
Identify the actual distribution source for the package/directory identified in the SPDX file
title String
Identify the full name of the package as given by the Package Originator
verificationCode String
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version String
Identify the version of the package

PackageInfoNoteResponse
, PackageInfoNoteResponseArgs

Analyzed This property is required. bool
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
Attribution This property is required. string
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
Checksum This property is required. string
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
Copyright This property is required. string
Identify the copyright holders of the package, as well as any dates present
DetailedDescription This property is required. string
A more detailed description of the package
DownloadLocation This property is required. string
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
ExternalRefs This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ExternalRefResponse>
ExternalRef
FilesLicenseInfo This property is required. List<string>
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
HomePage This property is required. string
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
LicenseDeclared This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseResponse
List the licenses that have been declared by the authors of the package
Originator This property is required. string
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
PackageType This property is required. string
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
SummaryDescription This property is required. string
A short description of the package
Supplier This property is required. string
Identify the actual distribution source for the package/directory identified in the SPDX file
Title This property is required. string
Identify the full name of the package as given by the Package Originator
VerificationCode This property is required. string
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
Version This property is required. string
Identify the version of the package
Analyzed This property is required. bool
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
Attribution This property is required. string
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
Checksum This property is required. string
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
Copyright This property is required. string
Identify the copyright holders of the package, as well as any dates present
DetailedDescription This property is required. string
A more detailed description of the package
DownloadLocation This property is required. string
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
ExternalRefs This property is required. []ExternalRefResponse
ExternalRef
FilesLicenseInfo This property is required. []string
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
HomePage This property is required. string
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
LicenseDeclared This property is required. LicenseResponse
List the licenses that have been declared by the authors of the package
Originator This property is required. string
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
PackageType This property is required. string
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
SummaryDescription This property is required. string
A short description of the package
Supplier This property is required. string
Identify the actual distribution source for the package/directory identified in the SPDX file
Title This property is required. string
Identify the full name of the package as given by the Package Originator
VerificationCode This property is required. string
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
Version This property is required. string
Identify the version of the package
analyzed This property is required. Boolean
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution This property is required. String
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum This property is required. String
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright This property is required. String
Identify the copyright holders of the package, as well as any dates present
detailedDescription This property is required. String
A more detailed description of the package
downloadLocation This property is required. String
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
externalRefs This property is required. List<ExternalRefResponse>
ExternalRef
filesLicenseInfo This property is required. List<String>
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
homePage This property is required. String
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseDeclared This property is required. LicenseResponse
List the licenses that have been declared by the authors of the package
originator This property is required. String
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
packageType This property is required. String
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summaryDescription This property is required. String
A short description of the package
supplier This property is required. String
Identify the actual distribution source for the package/directory identified in the SPDX file
title This property is required. String
Identify the full name of the package as given by the Package Originator
verificationCode This property is required. String
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version This property is required. String
Identify the version of the package
analyzed This property is required. boolean
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution This property is required. string
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum This property is required. string
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright This property is required. string
Identify the copyright holders of the package, as well as any dates present
detailedDescription This property is required. string
A more detailed description of the package
downloadLocation This property is required. string
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
externalRefs This property is required. ExternalRefResponse[]
ExternalRef
filesLicenseInfo This property is required. string[]
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
homePage This property is required. string
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseDeclared This property is required. LicenseResponse
List the licenses that have been declared by the authors of the package
originator This property is required. string
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
packageType This property is required. string
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summaryDescription This property is required. string
A short description of the package
supplier This property is required. string
Identify the actual distribution source for the package/directory identified in the SPDX file
title This property is required. string
Identify the full name of the package as given by the Package Originator
verificationCode This property is required. string
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version This property is required. string
Identify the version of the package
analyzed This property is required. bool
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution This property is required. str
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum This property is required. str
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright This property is required. str
Identify the copyright holders of the package, as well as any dates present
detailed_description This property is required. str
A more detailed description of the package
download_location This property is required. str
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
external_refs This property is required. Sequence[ExternalRefResponse]
ExternalRef
files_license_info This property is required. Sequence[str]
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
home_page This property is required. str
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
license_declared This property is required. LicenseResponse
List the licenses that have been declared by the authors of the package
originator This property is required. str
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
package_type This property is required. str
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summary_description This property is required. str
A short description of the package
supplier This property is required. str
Identify the actual distribution source for the package/directory identified in the SPDX file
title This property is required. str
Identify the full name of the package as given by the Package Originator
verification_code This property is required. str
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version This property is required. str
Identify the version of the package
analyzed This property is required. Boolean
Indicates whether the file content of this package has been available for or subjected to analysis when creating the SPDX document
attribution This property is required. String
A place for the SPDX data creator to record, at the package level, acknowledgements that may be needed to be communicated in some contexts
checksum This property is required. String
Provide an independently reproducible mechanism that permits unique identification of a specific package that correlates to the data in this SPDX file
copyright This property is required. String
Identify the copyright holders of the package, as well as any dates present
detailedDescription This property is required. String
A more detailed description of the package
downloadLocation This property is required. String
This section identifies the download Universal Resource Locator (URL), or a specific location within a version control system (VCS) for the package at the time that the SPDX file was created
externalRefs This property is required. List<Property Map>
ExternalRef
filesLicenseInfo This property is required. List<String>
Contain the license the SPDX file creator has concluded as governing the This field is to contain a list of all licenses found in the package. The relationship between licenses (i.e., conjunctive, disjunctive) is not specified in this field – it is simply a listing of all licenses found
homePage This property is required. String
Provide a place for the SPDX file creator to record a web site that serves as the package's home page
licenseDeclared This property is required. Property Map
List the licenses that have been declared by the authors of the package
originator This property is required. String
If the package identified in the SPDX file originated from a different person or organization than identified as Package Supplier, this field identifies from where or whom the package originally came
packageType This property is required. String
The type of package: OS, MAVEN, GO, GO_STDLIB, etc.
summaryDescription This property is required. String
A short description of the package
supplier This property is required. String
Identify the actual distribution source for the package/directory identified in the SPDX file
title This property is required. String
Identify the full name of the package as given by the Package Originator
verificationCode This property is required. String
This field provides an independently reproducible mechanism identifying specific contents of a package based on the actual files (except the SPDX file itself, if it is included in the package) that make up each package and that correlates to the data in this SPDX file
version This property is required. String
Identify the version of the package

PackageResponse
, PackageResponseArgs

Architecture This property is required. string
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
CpeUri This property is required. string
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
Description This property is required. string
The description of this package.
Digest This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DigestResponse>
Hash value, typically a file digest, that allows unique identification a specific package.
Distribution This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DistributionResponse>
The various channels by which a package is distributed.
License This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.LicenseResponse
Licenses that have been declared by the authors of the package.
Maintainer This property is required. string
A freeform text denoting the maintainer of this package.
Name This property is required. string
The name of the package.
PackageType This property is required. string
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
Url This property is required. string
The homepage for this package.
Version This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionResponse
The version of the package.
Architecture This property is required. string
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
CpeUri This property is required. string
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
Description This property is required. string
The description of this package.
Digest This property is required. []DigestResponse
Hash value, typically a file digest, that allows unique identification a specific package.
Distribution This property is required. []DistributionResponse
The various channels by which a package is distributed.
License This property is required. LicenseResponse
Licenses that have been declared by the authors of the package.
Maintainer This property is required. string
A freeform text denoting the maintainer of this package.
Name This property is required. string
The name of the package.
PackageType This property is required. string
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
Url This property is required. string
The homepage for this package.
Version This property is required. VersionResponse
The version of the package.
architecture This property is required. String
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri This property is required. String
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description This property is required. String
The description of this package.
digest This property is required. List<DigestResponse>
Hash value, typically a file digest, that allows unique identification a specific package.
distribution This property is required. List<DistributionResponse>
The various channels by which a package is distributed.
license This property is required. LicenseResponse
Licenses that have been declared by the authors of the package.
maintainer This property is required. String
A freeform text denoting the maintainer of this package.
name This property is required. String
The name of the package.
packageType This property is required. String
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url This property is required. String
The homepage for this package.
version This property is required. VersionResponse
The version of the package.
architecture This property is required. string
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri This property is required. string
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description This property is required. string
The description of this package.
digest This property is required. DigestResponse[]
Hash value, typically a file digest, that allows unique identification a specific package.
distribution This property is required. DistributionResponse[]
The various channels by which a package is distributed.
license This property is required. LicenseResponse
Licenses that have been declared by the authors of the package.
maintainer This property is required. string
A freeform text denoting the maintainer of this package.
name This property is required. string
The name of the package.
packageType This property is required. string
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url This property is required. string
The homepage for this package.
version This property is required. VersionResponse
The version of the package.
architecture This property is required. str
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpe_uri This property is required. str
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description This property is required. str
The description of this package.
digest This property is required. Sequence[DigestResponse]
Hash value, typically a file digest, that allows unique identification a specific package.
distribution This property is required. Sequence[DistributionResponse]
The various channels by which a package is distributed.
license This property is required. LicenseResponse
Licenses that have been declared by the authors of the package.
maintainer This property is required. str
A freeform text denoting the maintainer of this package.
name This property is required. str
The name of the package.
package_type This property is required. str
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url This property is required. str
The homepage for this package.
version This property is required. VersionResponse
The version of the package.
architecture This property is required. String
The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
cpeUri This property is required. String
The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
description This property is required. String
The description of this package.
digest This property is required. List<Property Map>
Hash value, typically a file digest, that allows unique identification a specific package.
distribution This property is required. List<Property Map>
The various channels by which a package is distributed.
license This property is required. Property Map
Licenses that have been declared by the authors of the package.
maintainer This property is required. String
A freeform text denoting the maintainer of this package.
name This property is required. String
The name of the package.
packageType This property is required. String
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
url This property is required. String
The homepage for this package.
version This property is required. Property Map
The version of the package.

Product
, ProductArgs

Id string
Token that identifies a product so that it can be referred to from other parts in the document. There is no predefined format as long as it uniquely identifies a group in the context of the current document.
IdentifierHelper Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.IdentifierHelper
Helps in identifying the underlying product.
Name string
Name of the product.
Id string
Token that identifies a product so that it can be referred to from other parts in the document. There is no predefined format as long as it uniquely identifies a group in the context of the current document.
IdentifierHelper IdentifierHelper
Helps in identifying the underlying product.
Name string
Name of the product.
id String
Token that identifies a product so that it can be referred to from other parts in the document. There is no predefined format as long as it uniquely identifies a group in the context of the current document.
identifierHelper IdentifierHelper
Helps in identifying the underlying product.
name String
Name of the product.
id string
Token that identifies a product so that it can be referred to from other parts in the document. There is no predefined format as long as it uniquely identifies a group in the context of the current document.
identifierHelper IdentifierHelper
Helps in identifying the underlying product.
name string
Name of the product.
id str
Token that identifies a product so that it can be referred to from other parts in the document. There is no predefined format as long as it uniquely identifies a group in the context of the current document.
identifier_helper IdentifierHelper
Helps in identifying the underlying product.
name str
Name of the product.
id String
Token that identifies a product so that it can be referred to from other parts in the document. There is no predefined format as long as it uniquely identifies a group in the context of the current document.
identifierHelper Property Map
Helps in identifying the underlying product.
name String
Name of the product.

ProductResponse
, ProductResponseArgs

IdentifierHelper This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.IdentifierHelperResponse
Helps in identifying the underlying product.
Name This property is required. string
Name of the product.
IdentifierHelper This property is required. IdentifierHelperResponse
Helps in identifying the underlying product.
Name This property is required. string
Name of the product.
identifierHelper This property is required. IdentifierHelperResponse
Helps in identifying the underlying product.
name This property is required. String
Name of the product.
identifierHelper This property is required. IdentifierHelperResponse
Helps in identifying the underlying product.
name This property is required. string
Name of the product.
identifier_helper This property is required. IdentifierHelperResponse
Helps in identifying the underlying product.
name This property is required. str
Name of the product.
identifierHelper This property is required. Property Map
Helps in identifying the underlying product.
name This property is required. String
Name of the product.

Publisher
, PublisherArgs

IssuingAuthority string
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
Name string
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
PublisherNamespace string
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
IssuingAuthority string
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
Name string
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
PublisherNamespace string
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuingAuthority String
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name String
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisherNamespace String
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuingAuthority string
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name string
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisherNamespace string
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuing_authority str
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name str
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisher_namespace str
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuingAuthority String
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name String
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisherNamespace String
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io

PublisherResponse
, PublisherResponseArgs

IssuingAuthority This property is required. string
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
Name This property is required. string
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
PublisherNamespace This property is required. string
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
IssuingAuthority This property is required. string
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
Name This property is required. string
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
PublisherNamespace This property is required. string
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuingAuthority This property is required. String
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name This property is required. String
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisherNamespace This property is required. String
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuingAuthority This property is required. string
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name This property is required. string
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisherNamespace This property is required. string
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuing_authority This property is required. str
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name This property is required. str
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisher_namespace This property is required. str
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io
issuingAuthority This property is required. String
Provides information about the authority of the issuing party to release the document, in particular, the party's constituency and responsibilities or other obligations.
name This property is required. String
Name of the publisher. Examples: 'Google', 'Google Cloud Platform'.
publisherNamespace This property is required. String
The context or namespace. Contains a URL which is under control of the issuing party and can be used as a globally unique identifier for that issuing party. Example: https://csaf.io

RelatedUrl
, RelatedUrlArgs

Label string
Label to describe usage of the URL
Url string
Specific URL to associate with the note
Label string
Label to describe usage of the URL
Url string
Specific URL to associate with the note
label String
Label to describe usage of the URL
url String
Specific URL to associate with the note
label string
Label to describe usage of the URL
url string
Specific URL to associate with the note
label str
Label to describe usage of the URL
url str
Specific URL to associate with the note
label String
Label to describe usage of the URL
url String
Specific URL to associate with the note

RelatedUrlResponse
, RelatedUrlResponseArgs

Label This property is required. string
Label to describe usage of the URL
Url This property is required. string
Specific URL to associate with the note
Label This property is required. string
Label to describe usage of the URL
Url This property is required. string
Specific URL to associate with the note
label This property is required. String
Label to describe usage of the URL
url This property is required. String
Specific URL to associate with the note
label This property is required. string
Label to describe usage of the URL
url This property is required. string
Specific URL to associate with the note
label This property is required. str
Label to describe usage of the URL
url This property is required. str
Specific URL to associate with the note
label This property is required. String
Label to describe usage of the URL
url This property is required. String
Specific URL to associate with the note

RelationshipNote
, RelationshipNoteArgs

Type Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.RelationshipNoteType
The type of relationship between the source and target SPDX elements
Type RelationshipNoteType
The type of relationship between the source and target SPDX elements
type RelationshipNoteType
The type of relationship between the source and target SPDX elements
type RelationshipNoteType
The type of relationship between the source and target SPDX elements
type RelationshipNoteType
The type of relationship between the source and target SPDX elements
type "RELATIONSHIP_TYPE_UNSPECIFIED" | "DESCRIBES" | "DESCRIBED_BY" | "CONTAINS" | "CONTAINED_BY" | "DEPENDS_ON" | "DEPENDENCY_OF" | "DEPENDENCY_MANIFEST_OF" | "BUILD_DEPENDENCY_OF" | "DEV_DEPENDENCY_OF" | "OPTIONAL_DEPENDENCY_OF" | "PROVIDED_DEPENDENCY_OF" | "TEST_DEPENDENCY_OF" | "RUNTIME_DEPENDENCY_OF" | "EXAMPLE_OF" | "GENERATES" | "GENERATED_FROM" | "ANCESTOR_OF" | "DESCENDANT_OF" | "VARIANT_OF" | "DISTRIBUTION_ARTIFACT" | "PATCH_FOR" | "PATCH_APPLIED" | "COPY_OF" | "FILE_ADDED" | "FILE_DELETED" | "FILE_MODIFIED" | "EXPANDED_FROM_ARCHIVE" | "DYNAMIC_LINK" | "STATIC_LINK" | "DATA_FILE_OF" | "TEST_CASE_OF" | "BUILD_TOOL_OF" | "DEV_TOOL_OF" | "TEST_OF" | "TEST_TOOL_OF" | "DOCUMENTATION_OF" | "OPTIONAL_COMPONENT_OF" | "METAFILE_OF" | "PACKAGE_OF" | "AMENDS" | "PREREQUISITE_FOR" | "HAS_PREREQUISITE" | "OTHER"
The type of relationship between the source and target SPDX elements

RelationshipNoteResponse
, RelationshipNoteResponseArgs

Type This property is required. string
The type of relationship between the source and target SPDX elements
Type This property is required. string
The type of relationship between the source and target SPDX elements
type This property is required. String
The type of relationship between the source and target SPDX elements
type This property is required. string
The type of relationship between the source and target SPDX elements
type This property is required. str
The type of relationship between the source and target SPDX elements
type This property is required. String
The type of relationship between the source and target SPDX elements

RelationshipNoteType
, RelationshipNoteTypeArgs

RelationshipTypeUnspecified
RELATIONSHIP_TYPE_UNSPECIFIEDUnspecified
Describes
DESCRIBESIs to be used when SPDXRef-DOCUMENT describes SPDXRef-A
DescribedBy
DESCRIBED_BYIs to be used when SPDXRef-A is described by SPDXREF-Document
Contains
CONTAINSIs to be used when SPDXRef-A contains SPDXRef-B
ContainedBy
CONTAINED_BYIs to be used when SPDXRef-A is contained by SPDXRef-B
DependsOn
DEPENDS_ONIs to be used when SPDXRef-A depends on SPDXRef-B
DependencyOf
DEPENDENCY_OFIs to be used when SPDXRef-A is dependency of SPDXRef-B
DependencyManifestOf
DEPENDENCY_MANIFEST_OFIs to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B
BuildDependencyOf
BUILD_DEPENDENCY_OFIs to be used when SPDXRef-A is a build dependency of SPDXRef-B
DevDependencyOf
DEV_DEPENDENCY_OFIs to be used when SPDXRef-A is a development dependency of SPDXRef-B
OptionalDependencyOf
OPTIONAL_DEPENDENCY_OFIs to be used when SPDXRef-A is an optional dependency of SPDXRef-B
ProvidedDependencyOf
PROVIDED_DEPENDENCY_OFIs to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B
TestDependencyOf
TEST_DEPENDENCY_OFIs to be used when SPDXRef-A is a test dependency of SPDXRef-B
RuntimeDependencyOf
RUNTIME_DEPENDENCY_OFIs to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B
ExampleOf
EXAMPLE_OFIs to be used when SPDXRef-A is an example of SPDXRef-B
Generates
GENERATESIs to be used when SPDXRef-A generates SPDXRef-B
GeneratedFrom
GENERATED_FROMIs to be used when SPDXRef-A was generated from SPDXRef-B
AncestorOf
ANCESTOR_OFIs to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B
DescendantOf
DESCENDANT_OFIs to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B
VariantOf
VARIANT_OFIs to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B
DistributionArtifact
DISTRIBUTION_ARTIFACTIs to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed
PatchFor
PATCH_FORIs to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B
PatchApplied
PATCH_APPLIEDIs to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B
CopyOf
COPY_OFIs to be used when SPDXRef-A is an exact copy of SPDXRef-B
FileAdded
FILE_ADDEDIs to be used when SPDXRef-A is a file that was added to SPDXRef-B
FileDeleted
FILE_DELETEDIs to be used when SPDXRef-A is a file that was deleted from SPDXRef-B
FileModified
FILE_MODIFIEDIs to be used when SPDXRef-A is a file that was modified from SPDXRef-B
ExpandedFromArchive
EXPANDED_FROM_ARCHIVEIs to be used when SPDXRef-A is expanded from the archive SPDXRef-B
DynamicLink
DYNAMIC_LINKIs to be used when SPDXRef-A dynamically links to SPDXRef-B
StaticLink
STATIC_LINKIs to be used when SPDXRef-A statically links to SPDXRef-B
DataFileOf
DATA_FILE_OFIs to be used when SPDXRef-A is a data file used in SPDXRef-B
TestCaseOf
TEST_CASE_OFIs to be used when SPDXRef-A is a test case used in testing SPDXRef-B
BuildToolOf
BUILD_TOOL_OFIs to be used when SPDXRef-A is used to build SPDXRef-B
DevToolOf
DEV_TOOL_OFIs to be used when SPDXRef-A is used as a development tool for SPDXRef-B
TestOf
TEST_OFIs to be used when SPDXRef-A is used for testing SPDXRef-B
TestToolOf
TEST_TOOL_OFIs to be used when SPDXRef-A is used as a test tool for SPDXRef-B
DocumentationOf
DOCUMENTATION_OFIs to be used when SPDXRef-A provides documentation of SPDXRef-B
OptionalComponentOf
OPTIONAL_COMPONENT_OFIs to be used when SPDXRef-A is an optional component of SPDXRef-B
MetafileOf
METAFILE_OFIs to be used when SPDXRef-A is a metafile of SPDXRef-B
PackageOf
PACKAGE_OFIs to be used when SPDXRef-A is used as a package as part of SPDXRef-B
Amends
AMENDSIs to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B
PrerequisiteFor
PREREQUISITE_FORIs to be used when SPDXRef-A is a prerequisite for SPDXRef-B
HasPrerequisite
HAS_PREREQUISITEIs to be used when SPDXRef-A has as a prerequisite SPDXRef-B
Other
OTHERIs to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field
RelationshipNoteTypeRelationshipTypeUnspecified
RELATIONSHIP_TYPE_UNSPECIFIEDUnspecified
RelationshipNoteTypeDescribes
DESCRIBESIs to be used when SPDXRef-DOCUMENT describes SPDXRef-A
RelationshipNoteTypeDescribedBy
DESCRIBED_BYIs to be used when SPDXRef-A is described by SPDXREF-Document
RelationshipNoteTypeContains
CONTAINSIs to be used when SPDXRef-A contains SPDXRef-B
RelationshipNoteTypeContainedBy
CONTAINED_BYIs to be used when SPDXRef-A is contained by SPDXRef-B
RelationshipNoteTypeDependsOn
DEPENDS_ONIs to be used when SPDXRef-A depends on SPDXRef-B
RelationshipNoteTypeDependencyOf
DEPENDENCY_OFIs to be used when SPDXRef-A is dependency of SPDXRef-B
RelationshipNoteTypeDependencyManifestOf
DEPENDENCY_MANIFEST_OFIs to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B
RelationshipNoteTypeBuildDependencyOf
BUILD_DEPENDENCY_OFIs to be used when SPDXRef-A is a build dependency of SPDXRef-B
RelationshipNoteTypeDevDependencyOf
DEV_DEPENDENCY_OFIs to be used when SPDXRef-A is a development dependency of SPDXRef-B
RelationshipNoteTypeOptionalDependencyOf
OPTIONAL_DEPENDENCY_OFIs to be used when SPDXRef-A is an optional dependency of SPDXRef-B
RelationshipNoteTypeProvidedDependencyOf
PROVIDED_DEPENDENCY_OFIs to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B
RelationshipNoteTypeTestDependencyOf
TEST_DEPENDENCY_OFIs to be used when SPDXRef-A is a test dependency of SPDXRef-B
RelationshipNoteTypeRuntimeDependencyOf
RUNTIME_DEPENDENCY_OFIs to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B
RelationshipNoteTypeExampleOf
EXAMPLE_OFIs to be used when SPDXRef-A is an example of SPDXRef-B
RelationshipNoteTypeGenerates
GENERATESIs to be used when SPDXRef-A generates SPDXRef-B
RelationshipNoteTypeGeneratedFrom
GENERATED_FROMIs to be used when SPDXRef-A was generated from SPDXRef-B
RelationshipNoteTypeAncestorOf
ANCESTOR_OFIs to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B
RelationshipNoteTypeDescendantOf
DESCENDANT_OFIs to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B
RelationshipNoteTypeVariantOf
VARIANT_OFIs to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B
RelationshipNoteTypeDistributionArtifact
DISTRIBUTION_ARTIFACTIs to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed
RelationshipNoteTypePatchFor
PATCH_FORIs to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B
RelationshipNoteTypePatchApplied
PATCH_APPLIEDIs to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B
RelationshipNoteTypeCopyOf
COPY_OFIs to be used when SPDXRef-A is an exact copy of SPDXRef-B
RelationshipNoteTypeFileAdded
FILE_ADDEDIs to be used when SPDXRef-A is a file that was added to SPDXRef-B
RelationshipNoteTypeFileDeleted
FILE_DELETEDIs to be used when SPDXRef-A is a file that was deleted from SPDXRef-B
RelationshipNoteTypeFileModified
FILE_MODIFIEDIs to be used when SPDXRef-A is a file that was modified from SPDXRef-B
RelationshipNoteTypeExpandedFromArchive
EXPANDED_FROM_ARCHIVEIs to be used when SPDXRef-A is expanded from the archive SPDXRef-B
RelationshipNoteTypeDynamicLink
DYNAMIC_LINKIs to be used when SPDXRef-A dynamically links to SPDXRef-B
RelationshipNoteTypeStaticLink
STATIC_LINKIs to be used when SPDXRef-A statically links to SPDXRef-B
RelationshipNoteTypeDataFileOf
DATA_FILE_OFIs to be used when SPDXRef-A is a data file used in SPDXRef-B
RelationshipNoteTypeTestCaseOf
TEST_CASE_OFIs to be used when SPDXRef-A is a test case used in testing SPDXRef-B
RelationshipNoteTypeBuildToolOf
BUILD_TOOL_OFIs to be used when SPDXRef-A is used to build SPDXRef-B
RelationshipNoteTypeDevToolOf
DEV_TOOL_OFIs to be used when SPDXRef-A is used as a development tool for SPDXRef-B
RelationshipNoteTypeTestOf
TEST_OFIs to be used when SPDXRef-A is used for testing SPDXRef-B
RelationshipNoteTypeTestToolOf
TEST_TOOL_OFIs to be used when SPDXRef-A is used as a test tool for SPDXRef-B
RelationshipNoteTypeDocumentationOf
DOCUMENTATION_OFIs to be used when SPDXRef-A provides documentation of SPDXRef-B
RelationshipNoteTypeOptionalComponentOf
OPTIONAL_COMPONENT_OFIs to be used when SPDXRef-A is an optional component of SPDXRef-B
RelationshipNoteTypeMetafileOf
METAFILE_OFIs to be used when SPDXRef-A is a metafile of SPDXRef-B
RelationshipNoteTypePackageOf
PACKAGE_OFIs to be used when SPDXRef-A is used as a package as part of SPDXRef-B
RelationshipNoteTypeAmends
AMENDSIs to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B
RelationshipNoteTypePrerequisiteFor
PREREQUISITE_FORIs to be used when SPDXRef-A is a prerequisite for SPDXRef-B
RelationshipNoteTypeHasPrerequisite
HAS_PREREQUISITEIs to be used when SPDXRef-A has as a prerequisite SPDXRef-B
RelationshipNoteTypeOther
OTHERIs to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field
RelationshipTypeUnspecified
RELATIONSHIP_TYPE_UNSPECIFIEDUnspecified
Describes
DESCRIBESIs to be used when SPDXRef-DOCUMENT describes SPDXRef-A
DescribedBy
DESCRIBED_BYIs to be used when SPDXRef-A is described by SPDXREF-Document
Contains
CONTAINSIs to be used when SPDXRef-A contains SPDXRef-B
ContainedBy
CONTAINED_BYIs to be used when SPDXRef-A is contained by SPDXRef-B
DependsOn
DEPENDS_ONIs to be used when SPDXRef-A depends on SPDXRef-B
DependencyOf
DEPENDENCY_OFIs to be used when SPDXRef-A is dependency of SPDXRef-B
DependencyManifestOf
DEPENDENCY_MANIFEST_OFIs to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B
BuildDependencyOf
BUILD_DEPENDENCY_OFIs to be used when SPDXRef-A is a build dependency of SPDXRef-B
DevDependencyOf
DEV_DEPENDENCY_OFIs to be used when SPDXRef-A is a development dependency of SPDXRef-B
OptionalDependencyOf
OPTIONAL_DEPENDENCY_OFIs to be used when SPDXRef-A is an optional dependency of SPDXRef-B
ProvidedDependencyOf
PROVIDED_DEPENDENCY_OFIs to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B
TestDependencyOf
TEST_DEPENDENCY_OFIs to be used when SPDXRef-A is a test dependency of SPDXRef-B
RuntimeDependencyOf
RUNTIME_DEPENDENCY_OFIs to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B
ExampleOf
EXAMPLE_OFIs to be used when SPDXRef-A is an example of SPDXRef-B
Generates
GENERATESIs to be used when SPDXRef-A generates SPDXRef-B
GeneratedFrom
GENERATED_FROMIs to be used when SPDXRef-A was generated from SPDXRef-B
AncestorOf
ANCESTOR_OFIs to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B
DescendantOf
DESCENDANT_OFIs to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B
VariantOf
VARIANT_OFIs to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B
DistributionArtifact
DISTRIBUTION_ARTIFACTIs to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed
PatchFor
PATCH_FORIs to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B
PatchApplied
PATCH_APPLIEDIs to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B
CopyOf
COPY_OFIs to be used when SPDXRef-A is an exact copy of SPDXRef-B
FileAdded
FILE_ADDEDIs to be used when SPDXRef-A is a file that was added to SPDXRef-B
FileDeleted
FILE_DELETEDIs to be used when SPDXRef-A is a file that was deleted from SPDXRef-B
FileModified
FILE_MODIFIEDIs to be used when SPDXRef-A is a file that was modified from SPDXRef-B
ExpandedFromArchive
EXPANDED_FROM_ARCHIVEIs to be used when SPDXRef-A is expanded from the archive SPDXRef-B
DynamicLink
DYNAMIC_LINKIs to be used when SPDXRef-A dynamically links to SPDXRef-B
StaticLink
STATIC_LINKIs to be used when SPDXRef-A statically links to SPDXRef-B
DataFileOf
DATA_FILE_OFIs to be used when SPDXRef-A is a data file used in SPDXRef-B
TestCaseOf
TEST_CASE_OFIs to be used when SPDXRef-A is a test case used in testing SPDXRef-B
BuildToolOf
BUILD_TOOL_OFIs to be used when SPDXRef-A is used to build SPDXRef-B
DevToolOf
DEV_TOOL_OFIs to be used when SPDXRef-A is used as a development tool for SPDXRef-B
TestOf
TEST_OFIs to be used when SPDXRef-A is used for testing SPDXRef-B
TestToolOf
TEST_TOOL_OFIs to be used when SPDXRef-A is used as a test tool for SPDXRef-B
DocumentationOf
DOCUMENTATION_OFIs to be used when SPDXRef-A provides documentation of SPDXRef-B
OptionalComponentOf
OPTIONAL_COMPONENT_OFIs to be used when SPDXRef-A is an optional component of SPDXRef-B
MetafileOf
METAFILE_OFIs to be used when SPDXRef-A is a metafile of SPDXRef-B
PackageOf
PACKAGE_OFIs to be used when SPDXRef-A is used as a package as part of SPDXRef-B
Amends
AMENDSIs to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B
PrerequisiteFor
PREREQUISITE_FORIs to be used when SPDXRef-A is a prerequisite for SPDXRef-B
HasPrerequisite
HAS_PREREQUISITEIs to be used when SPDXRef-A has as a prerequisite SPDXRef-B
Other
OTHERIs to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field
RelationshipTypeUnspecified
RELATIONSHIP_TYPE_UNSPECIFIEDUnspecified
Describes
DESCRIBESIs to be used when SPDXRef-DOCUMENT describes SPDXRef-A
DescribedBy
DESCRIBED_BYIs to be used when SPDXRef-A is described by SPDXREF-Document
Contains
CONTAINSIs to be used when SPDXRef-A contains SPDXRef-B
ContainedBy
CONTAINED_BYIs to be used when SPDXRef-A is contained by SPDXRef-B
DependsOn
DEPENDS_ONIs to be used when SPDXRef-A depends on SPDXRef-B
DependencyOf
DEPENDENCY_OFIs to be used when SPDXRef-A is dependency of SPDXRef-B
DependencyManifestOf
DEPENDENCY_MANIFEST_OFIs to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B
BuildDependencyOf
BUILD_DEPENDENCY_OFIs to be used when SPDXRef-A is a build dependency of SPDXRef-B
DevDependencyOf
DEV_DEPENDENCY_OFIs to be used when SPDXRef-A is a development dependency of SPDXRef-B
OptionalDependencyOf
OPTIONAL_DEPENDENCY_OFIs to be used when SPDXRef-A is an optional dependency of SPDXRef-B
ProvidedDependencyOf
PROVIDED_DEPENDENCY_OFIs to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B
TestDependencyOf
TEST_DEPENDENCY_OFIs to be used when SPDXRef-A is a test dependency of SPDXRef-B
RuntimeDependencyOf
RUNTIME_DEPENDENCY_OFIs to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B
ExampleOf
EXAMPLE_OFIs to be used when SPDXRef-A is an example of SPDXRef-B
Generates
GENERATESIs to be used when SPDXRef-A generates SPDXRef-B
GeneratedFrom
GENERATED_FROMIs to be used when SPDXRef-A was generated from SPDXRef-B
AncestorOf
ANCESTOR_OFIs to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B
DescendantOf
DESCENDANT_OFIs to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B
VariantOf
VARIANT_OFIs to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B
DistributionArtifact
DISTRIBUTION_ARTIFACTIs to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed
PatchFor
PATCH_FORIs to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B
PatchApplied
PATCH_APPLIEDIs to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B
CopyOf
COPY_OFIs to be used when SPDXRef-A is an exact copy of SPDXRef-B
FileAdded
FILE_ADDEDIs to be used when SPDXRef-A is a file that was added to SPDXRef-B
FileDeleted
FILE_DELETEDIs to be used when SPDXRef-A is a file that was deleted from SPDXRef-B
FileModified
FILE_MODIFIEDIs to be used when SPDXRef-A is a file that was modified from SPDXRef-B
ExpandedFromArchive
EXPANDED_FROM_ARCHIVEIs to be used when SPDXRef-A is expanded from the archive SPDXRef-B
DynamicLink
DYNAMIC_LINKIs to be used when SPDXRef-A dynamically links to SPDXRef-B
StaticLink
STATIC_LINKIs to be used when SPDXRef-A statically links to SPDXRef-B
DataFileOf
DATA_FILE_OFIs to be used when SPDXRef-A is a data file used in SPDXRef-B
TestCaseOf
TEST_CASE_OFIs to be used when SPDXRef-A is a test case used in testing SPDXRef-B
BuildToolOf
BUILD_TOOL_OFIs to be used when SPDXRef-A is used to build SPDXRef-B
DevToolOf
DEV_TOOL_OFIs to be used when SPDXRef-A is used as a development tool for SPDXRef-B
TestOf
TEST_OFIs to be used when SPDXRef-A is used for testing SPDXRef-B
TestToolOf
TEST_TOOL_OFIs to be used when SPDXRef-A is used as a test tool for SPDXRef-B
DocumentationOf
DOCUMENTATION_OFIs to be used when SPDXRef-A provides documentation of SPDXRef-B
OptionalComponentOf
OPTIONAL_COMPONENT_OFIs to be used when SPDXRef-A is an optional component of SPDXRef-B
MetafileOf
METAFILE_OFIs to be used when SPDXRef-A is a metafile of SPDXRef-B
PackageOf
PACKAGE_OFIs to be used when SPDXRef-A is used as a package as part of SPDXRef-B
Amends
AMENDSIs to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B
PrerequisiteFor
PREREQUISITE_FORIs to be used when SPDXRef-A is a prerequisite for SPDXRef-B
HasPrerequisite
HAS_PREREQUISITEIs to be used when SPDXRef-A has as a prerequisite SPDXRef-B
Other
OTHERIs to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field
RELATIONSHIP_TYPE_UNSPECIFIED
RELATIONSHIP_TYPE_UNSPECIFIEDUnspecified
DESCRIBES
DESCRIBESIs to be used when SPDXRef-DOCUMENT describes SPDXRef-A
DESCRIBED_BY
DESCRIBED_BYIs to be used when SPDXRef-A is described by SPDXREF-Document
CONTAINS
CONTAINSIs to be used when SPDXRef-A contains SPDXRef-B
CONTAINED_BY
CONTAINED_BYIs to be used when SPDXRef-A is contained by SPDXRef-B
DEPENDS_ON
DEPENDS_ONIs to be used when SPDXRef-A depends on SPDXRef-B
DEPENDENCY_OF
DEPENDENCY_OFIs to be used when SPDXRef-A is dependency of SPDXRef-B
DEPENDENCY_MANIFEST_OF
DEPENDENCY_MANIFEST_OFIs to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B
BUILD_DEPENDENCY_OF
BUILD_DEPENDENCY_OFIs to be used when SPDXRef-A is a build dependency of SPDXRef-B
DEV_DEPENDENCY_OF
DEV_DEPENDENCY_OFIs to be used when SPDXRef-A is a development dependency of SPDXRef-B
OPTIONAL_DEPENDENCY_OF
OPTIONAL_DEPENDENCY_OFIs to be used when SPDXRef-A is an optional dependency of SPDXRef-B
PROVIDED_DEPENDENCY_OF
PROVIDED_DEPENDENCY_OFIs to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B
TEST_DEPENDENCY_OF
TEST_DEPENDENCY_OFIs to be used when SPDXRef-A is a test dependency of SPDXRef-B
RUNTIME_DEPENDENCY_OF
RUNTIME_DEPENDENCY_OFIs to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B
EXAMPLE_OF
EXAMPLE_OFIs to be used when SPDXRef-A is an example of SPDXRef-B
GENERATES
GENERATESIs to be used when SPDXRef-A generates SPDXRef-B
GENERATED_FROM
GENERATED_FROMIs to be used when SPDXRef-A was generated from SPDXRef-B
ANCESTOR_OF
ANCESTOR_OFIs to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B
DESCENDANT_OF
DESCENDANT_OFIs to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B
VARIANT_OF
VARIANT_OFIs to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B
DISTRIBUTION_ARTIFACT
DISTRIBUTION_ARTIFACTIs to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed
PATCH_FOR
PATCH_FORIs to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B
PATCH_APPLIED
PATCH_APPLIEDIs to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B
COPY_OF
COPY_OFIs to be used when SPDXRef-A is an exact copy of SPDXRef-B
FILE_ADDED
FILE_ADDEDIs to be used when SPDXRef-A is a file that was added to SPDXRef-B
FILE_DELETED
FILE_DELETEDIs to be used when SPDXRef-A is a file that was deleted from SPDXRef-B
FILE_MODIFIED
FILE_MODIFIEDIs to be used when SPDXRef-A is a file that was modified from SPDXRef-B
EXPANDED_FROM_ARCHIVE
EXPANDED_FROM_ARCHIVEIs to be used when SPDXRef-A is expanded from the archive SPDXRef-B
DYNAMIC_LINK
DYNAMIC_LINKIs to be used when SPDXRef-A dynamically links to SPDXRef-B
STATIC_LINK
STATIC_LINKIs to be used when SPDXRef-A statically links to SPDXRef-B
DATA_FILE_OF
DATA_FILE_OFIs to be used when SPDXRef-A is a data file used in SPDXRef-B
TEST_CASE_OF
TEST_CASE_OFIs to be used when SPDXRef-A is a test case used in testing SPDXRef-B
BUILD_TOOL_OF
BUILD_TOOL_OFIs to be used when SPDXRef-A is used to build SPDXRef-B
DEV_TOOL_OF
DEV_TOOL_OFIs to be used when SPDXRef-A is used as a development tool for SPDXRef-B
TEST_OF
TEST_OFIs to be used when SPDXRef-A is used for testing SPDXRef-B
TEST_TOOL_OF
TEST_TOOL_OFIs to be used when SPDXRef-A is used as a test tool for SPDXRef-B
DOCUMENTATION_OF
DOCUMENTATION_OFIs to be used when SPDXRef-A provides documentation of SPDXRef-B
OPTIONAL_COMPONENT_OF
OPTIONAL_COMPONENT_OFIs to be used when SPDXRef-A is an optional component of SPDXRef-B
METAFILE_OF
METAFILE_OFIs to be used when SPDXRef-A is a metafile of SPDXRef-B
PACKAGE_OF
PACKAGE_OFIs to be used when SPDXRef-A is used as a package as part of SPDXRef-B
AMENDS
AMENDSIs to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B
PREREQUISITE_FOR
PREREQUISITE_FORIs to be used when SPDXRef-A is a prerequisite for SPDXRef-B
HAS_PREREQUISITE
HAS_PREREQUISITEIs to be used when SPDXRef-A has as a prerequisite SPDXRef-B
OTHER
OTHERIs to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field
"RELATIONSHIP_TYPE_UNSPECIFIED"
RELATIONSHIP_TYPE_UNSPECIFIEDUnspecified
"DESCRIBES"
DESCRIBESIs to be used when SPDXRef-DOCUMENT describes SPDXRef-A
"DESCRIBED_BY"
DESCRIBED_BYIs to be used when SPDXRef-A is described by SPDXREF-Document
"CONTAINS"
CONTAINSIs to be used when SPDXRef-A contains SPDXRef-B
"CONTAINED_BY"
CONTAINED_BYIs to be used when SPDXRef-A is contained by SPDXRef-B
"DEPENDS_ON"
DEPENDS_ONIs to be used when SPDXRef-A depends on SPDXRef-B
"DEPENDENCY_OF"
DEPENDENCY_OFIs to be used when SPDXRef-A is dependency of SPDXRef-B
"DEPENDENCY_MANIFEST_OF"
DEPENDENCY_MANIFEST_OFIs to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B
"BUILD_DEPENDENCY_OF"
BUILD_DEPENDENCY_OFIs to be used when SPDXRef-A is a build dependency of SPDXRef-B
"DEV_DEPENDENCY_OF"
DEV_DEPENDENCY_OFIs to be used when SPDXRef-A is a development dependency of SPDXRef-B
"OPTIONAL_DEPENDENCY_OF"
OPTIONAL_DEPENDENCY_OFIs to be used when SPDXRef-A is an optional dependency of SPDXRef-B
"PROVIDED_DEPENDENCY_OF"
PROVIDED_DEPENDENCY_OFIs to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B
"TEST_DEPENDENCY_OF"
TEST_DEPENDENCY_OFIs to be used when SPDXRef-A is a test dependency of SPDXRef-B
"RUNTIME_DEPENDENCY_OF"
RUNTIME_DEPENDENCY_OFIs to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B
"EXAMPLE_OF"
EXAMPLE_OFIs to be used when SPDXRef-A is an example of SPDXRef-B
"GENERATES"
GENERATESIs to be used when SPDXRef-A generates SPDXRef-B
"GENERATED_FROM"
GENERATED_FROMIs to be used when SPDXRef-A was generated from SPDXRef-B
"ANCESTOR_OF"
ANCESTOR_OFIs to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B
"DESCENDANT_OF"
DESCENDANT_OFIs to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B
"VARIANT_OF"
VARIANT_OFIs to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B
"DISTRIBUTION_ARTIFACT"
DISTRIBUTION_ARTIFACTIs to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed
"PATCH_FOR"
PATCH_FORIs to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B
"PATCH_APPLIED"
PATCH_APPLIEDIs to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B
"COPY_OF"
COPY_OFIs to be used when SPDXRef-A is an exact copy of SPDXRef-B
"FILE_ADDED"
FILE_ADDEDIs to be used when SPDXRef-A is a file that was added to SPDXRef-B
"FILE_DELETED"
FILE_DELETEDIs to be used when SPDXRef-A is a file that was deleted from SPDXRef-B
"FILE_MODIFIED"
FILE_MODIFIEDIs to be used when SPDXRef-A is a file that was modified from SPDXRef-B
"EXPANDED_FROM_ARCHIVE"
EXPANDED_FROM_ARCHIVEIs to be used when SPDXRef-A is expanded from the archive SPDXRef-B
"DYNAMIC_LINK"
DYNAMIC_LINKIs to be used when SPDXRef-A dynamically links to SPDXRef-B
"STATIC_LINK"
STATIC_LINKIs to be used when SPDXRef-A statically links to SPDXRef-B
"DATA_FILE_OF"
DATA_FILE_OFIs to be used when SPDXRef-A is a data file used in SPDXRef-B
"TEST_CASE_OF"
TEST_CASE_OFIs to be used when SPDXRef-A is a test case used in testing SPDXRef-B
"BUILD_TOOL_OF"
BUILD_TOOL_OFIs to be used when SPDXRef-A is used to build SPDXRef-B
"DEV_TOOL_OF"
DEV_TOOL_OFIs to be used when SPDXRef-A is used as a development tool for SPDXRef-B
"TEST_OF"
TEST_OFIs to be used when SPDXRef-A is used for testing SPDXRef-B
"TEST_TOOL_OF"
TEST_TOOL_OFIs to be used when SPDXRef-A is used as a test tool for SPDXRef-B
"DOCUMENTATION_OF"
DOCUMENTATION_OFIs to be used when SPDXRef-A provides documentation of SPDXRef-B
"OPTIONAL_COMPONENT_OF"
OPTIONAL_COMPONENT_OFIs to be used when SPDXRef-A is an optional component of SPDXRef-B
"METAFILE_OF"
METAFILE_OFIs to be used when SPDXRef-A is a metafile of SPDXRef-B
"PACKAGE_OF"
PACKAGE_OFIs to be used when SPDXRef-A is used as a package as part of SPDXRef-B
"AMENDS"
AMENDSIs to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B
"PREREQUISITE_FOR"
PREREQUISITE_FORIs to be used when SPDXRef-A is a prerequisite for SPDXRef-B
"HAS_PREREQUISITE"
HAS_PREREQUISITEIs to be used when SPDXRef-A has as a prerequisite SPDXRef-B
"OTHER"
OTHERIs to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field

Remediation
, RemediationArgs

Details string
Contains a comprehensive human-readable discussion of the remediation.
RemediationType Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.RemediationRemediationType
The type of remediation that can be applied.
RemediationUri Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URI
Contains the URL where to obtain the remediation.
Details string
Contains a comprehensive human-readable discussion of the remediation.
RemediationType RemediationRemediationType
The type of remediation that can be applied.
RemediationUri URI
Contains the URL where to obtain the remediation.
details String
Contains a comprehensive human-readable discussion of the remediation.
remediationType RemediationRemediationType
The type of remediation that can be applied.
remediationUri URI
Contains the URL where to obtain the remediation.
details string
Contains a comprehensive human-readable discussion of the remediation.
remediationType RemediationRemediationType
The type of remediation that can be applied.
remediationUri URI
Contains the URL where to obtain the remediation.
details str
Contains a comprehensive human-readable discussion of the remediation.
remediation_type RemediationRemediationType
The type of remediation that can be applied.
remediation_uri URI
Contains the URL where to obtain the remediation.
details String
Contains a comprehensive human-readable discussion of the remediation.
remediationType "REMEDIATION_TYPE_UNSPECIFIED" | "MITIGATION" | "NO_FIX_PLANNED" | "NONE_AVAILABLE" | "VENDOR_FIX" | "WORKAROUND"
The type of remediation that can be applied.
remediationUri Property Map
Contains the URL where to obtain the remediation.

RemediationRemediationType
, RemediationRemediationTypeArgs

RemediationTypeUnspecified
REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
Mitigation
MITIGATIONA MITIGATION is available.
NoFixPlanned
NO_FIX_PLANNEDNo fix is planned.
NoneAvailable
NONE_AVAILABLENot available.
VendorFix
VENDOR_FIXA vendor fix is available.
Workaround
WORKAROUNDA workaround is available.
RemediationRemediationTypeRemediationTypeUnspecified
REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
RemediationRemediationTypeMitigation
MITIGATIONA MITIGATION is available.
RemediationRemediationTypeNoFixPlanned
NO_FIX_PLANNEDNo fix is planned.
RemediationRemediationTypeNoneAvailable
NONE_AVAILABLENot available.
RemediationRemediationTypeVendorFix
VENDOR_FIXA vendor fix is available.
RemediationRemediationTypeWorkaround
WORKAROUNDA workaround is available.
RemediationTypeUnspecified
REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
Mitigation
MITIGATIONA MITIGATION is available.
NoFixPlanned
NO_FIX_PLANNEDNo fix is planned.
NoneAvailable
NONE_AVAILABLENot available.
VendorFix
VENDOR_FIXA vendor fix is available.
Workaround
WORKAROUNDA workaround is available.
RemediationTypeUnspecified
REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
Mitigation
MITIGATIONA MITIGATION is available.
NoFixPlanned
NO_FIX_PLANNEDNo fix is planned.
NoneAvailable
NONE_AVAILABLENot available.
VendorFix
VENDOR_FIXA vendor fix is available.
Workaround
WORKAROUNDA workaround is available.
REMEDIATION_TYPE_UNSPECIFIED
REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
MITIGATION
MITIGATIONA MITIGATION is available.
NO_FIX_PLANNED
NO_FIX_PLANNEDNo fix is planned.
NONE_AVAILABLE
NONE_AVAILABLENot available.
VENDOR_FIX
VENDOR_FIXA vendor fix is available.
WORKAROUND
WORKAROUNDA workaround is available.
"REMEDIATION_TYPE_UNSPECIFIED"
REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
"MITIGATION"
MITIGATIONA MITIGATION is available.
"NO_FIX_PLANNED"
NO_FIX_PLANNEDNo fix is planned.
"NONE_AVAILABLE"
NONE_AVAILABLENot available.
"VENDOR_FIX"
VENDOR_FIXA vendor fix is available.
"WORKAROUND"
WORKAROUNDA workaround is available.

RemediationResponse
, RemediationResponseArgs

Details This property is required. string
Contains a comprehensive human-readable discussion of the remediation.
RemediationType This property is required. string
The type of remediation that can be applied.
RemediationUri This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.URIResponse
Contains the URL where to obtain the remediation.
Details This property is required. string
Contains a comprehensive human-readable discussion of the remediation.
RemediationType This property is required. string
The type of remediation that can be applied.
RemediationUri This property is required. URIResponse
Contains the URL where to obtain the remediation.
details This property is required. String
Contains a comprehensive human-readable discussion of the remediation.
remediationType This property is required. String
The type of remediation that can be applied.
remediationUri This property is required. URIResponse
Contains the URL where to obtain the remediation.
details This property is required. string
Contains a comprehensive human-readable discussion of the remediation.
remediationType This property is required. string
The type of remediation that can be applied.
remediationUri This property is required. URIResponse
Contains the URL where to obtain the remediation.
details This property is required. str
Contains a comprehensive human-readable discussion of the remediation.
remediation_type This property is required. str
The type of remediation that can be applied.
remediation_uri This property is required. URIResponse
Contains the URL where to obtain the remediation.
details This property is required. String
Contains a comprehensive human-readable discussion of the remediation.
remediationType This property is required. String
The type of remediation that can be applied.
remediationUri This property is required. Property Map
Contains the URL where to obtain the remediation.

SBOMReferenceNote
, SBOMReferenceNoteArgs

Format string
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
Version string
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
Format string
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
Version string
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format String
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version String
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format string
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version string
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format str
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version str
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format String
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version String
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.

SBOMReferenceNoteResponse
, SBOMReferenceNoteResponseArgs

Format This property is required. string
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
Version This property is required. string
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
Format This property is required. string
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
Version This property is required. string
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format This property is required. String
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version This property is required. String
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format This property is required. string
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version This property is required. string
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format This property is required. str
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version This property is required. str
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.
format This property is required. String
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
version This property is required. String
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.

URI
, URIArgs

Label string
A label for the URI.
Uri string
The unique resource identifier.
Label string
A label for the URI.
Uri string
The unique resource identifier.
label String
A label for the URI.
uri String
The unique resource identifier.
label string
A label for the URI.
uri string
The unique resource identifier.
label str
A label for the URI.
uri str
The unique resource identifier.
label String
A label for the URI.
uri String
The unique resource identifier.

URIResponse
, URIResponseArgs

Label This property is required. string
A label for the URI.
Uri This property is required. string
The unique resource identifier.
Label This property is required. string
A label for the URI.
Uri This property is required. string
The unique resource identifier.
label This property is required. String
A label for the URI.
uri This property is required. String
The unique resource identifier.
label This property is required. string
A label for the URI.
uri This property is required. string
The unique resource identifier.
label This property is required. str
A label for the URI.
uri This property is required. str
The unique resource identifier.
label This property is required. String
A label for the URI.
uri This property is required. String
The unique resource identifier.

UpgradeDistribution
, UpgradeDistributionArgs

Classification string
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
CpeUri string
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
Cve List<string>
The cve that would be resolved by this upgrade.
Severity string
The severity as specified by the upstream operating system.
Classification string
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
CpeUri string
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
Cve []string
The cve that would be resolved by this upgrade.
Severity string
The severity as specified by the upstream operating system.
classification String
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpeUri String
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve List<String>
The cve that would be resolved by this upgrade.
severity String
The severity as specified by the upstream operating system.
classification string
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpeUri string
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve string[]
The cve that would be resolved by this upgrade.
severity string
The severity as specified by the upstream operating system.
classification str
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpe_uri str
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve Sequence[str]
The cve that would be resolved by this upgrade.
severity str
The severity as specified by the upstream operating system.
classification String
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpeUri String
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve List<String>
The cve that would be resolved by this upgrade.
severity String
The severity as specified by the upstream operating system.

UpgradeDistributionResponse
, UpgradeDistributionResponseArgs

Classification This property is required. string
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
CpeUri This property is required. string
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
Cve This property is required. List<string>
The cve that would be resolved by this upgrade.
Severity This property is required. string
The severity as specified by the upstream operating system.
Classification This property is required. string
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
CpeUri This property is required. string
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
Cve This property is required. []string
The cve that would be resolved by this upgrade.
Severity This property is required. string
The severity as specified by the upstream operating system.
classification This property is required. String
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpeUri This property is required. String
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve This property is required. List<String>
The cve that would be resolved by this upgrade.
severity This property is required. String
The severity as specified by the upstream operating system.
classification This property is required. string
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpeUri This property is required. string
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve This property is required. string[]
The cve that would be resolved by this upgrade.
severity This property is required. string
The severity as specified by the upstream operating system.
classification This property is required. str
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpe_uri This property is required. str
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve This property is required. Sequence[str]
The cve that would be resolved by this upgrade.
severity This property is required. str
The severity as specified by the upstream operating system.
classification This property is required. String
The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed.
cpeUri This property is required. String
Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
cve This property is required. List<String>
The cve that would be resolved by this upgrade.
severity This property is required. String
The severity as specified by the upstream operating system.

UpgradeNote
, UpgradeNoteArgs

Distributions List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeDistribution>
Metadata about the upgrade for each specific operating system.
Package string
Required - The package this Upgrade is for.
Version Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Version
Required - The version of the package in machine + human readable form.
Distributions []UpgradeDistribution
Metadata about the upgrade for each specific operating system.
Package string
Required - The package this Upgrade is for.
Version Version
Required - The version of the package in machine + human readable form.
distributions List<UpgradeDistribution>
Metadata about the upgrade for each specific operating system.
package_ String
Required - The package this Upgrade is for.
version Version
Required - The version of the package in machine + human readable form.
distributions UpgradeDistribution[]
Metadata about the upgrade for each specific operating system.
package string
Required - The package this Upgrade is for.
version Version
Required - The version of the package in machine + human readable form.
distributions Sequence[UpgradeDistribution]
Metadata about the upgrade for each specific operating system.
package str
Required - The package this Upgrade is for.
version Version
Required - The version of the package in machine + human readable form.
distributions List<Property Map>
Metadata about the upgrade for each specific operating system.
package String
Required - The package this Upgrade is for.
version Property Map
Required - The version of the package in machine + human readable form.

UpgradeNoteResponse
, UpgradeNoteResponseArgs

Distributions This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.UpgradeDistributionResponse>
Metadata about the upgrade for each specific operating system.
Package This property is required. string
Required - The package this Upgrade is for.
Version This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionResponse
Required - The version of the package in machine + human readable form.
Distributions This property is required. []UpgradeDistributionResponse
Metadata about the upgrade for each specific operating system.
Package This property is required. string
Required - The package this Upgrade is for.
Version This property is required. VersionResponse
Required - The version of the package in machine + human readable form.
distributions This property is required. List<UpgradeDistributionResponse>
Metadata about the upgrade for each specific operating system.
package_ This property is required. String
Required - The package this Upgrade is for.
version This property is required. VersionResponse
Required - The version of the package in machine + human readable form.
distributions This property is required. UpgradeDistributionResponse[]
Metadata about the upgrade for each specific operating system.
package This property is required. string
Required - The package this Upgrade is for.
version This property is required. VersionResponse
Required - The version of the package in machine + human readable form.
distributions This property is required. Sequence[UpgradeDistributionResponse]
Metadata about the upgrade for each specific operating system.
package This property is required. str
Required - The package this Upgrade is for.
version This property is required. VersionResponse
Required - The version of the package in machine + human readable form.
distributions This property is required. List<Property Map>
Metadata about the upgrade for each specific operating system.
package This property is required. String
Required - The package this Upgrade is for.
version This property is required. Property Map
Required - The version of the package in machine + human readable form.

Version
, VersionArgs

Epoch int
Used to correct mistakes in the version numbering scheme.
Inclusive bool
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
Kind Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.VersionKind
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
Name string
The main part of the version name.
Revision string
The iteration of the package build from the above version.
Epoch int
Used to correct mistakes in the version numbering scheme.
Inclusive bool
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
Kind VersionKind
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
Name string
The main part of the version name.
Revision string
The iteration of the package build from the above version.
epoch Integer
Used to correct mistakes in the version numbering scheme.
inclusive Boolean
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind VersionKind
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name String
The main part of the version name.
revision String
The iteration of the package build from the above version.
epoch number
Used to correct mistakes in the version numbering scheme.
inclusive boolean
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind VersionKind
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name string
The main part of the version name.
revision string
The iteration of the package build from the above version.
epoch int
Used to correct mistakes in the version numbering scheme.
inclusive bool
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind VersionKind
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name str
The main part of the version name.
revision str
The iteration of the package build from the above version.
epoch Number
Used to correct mistakes in the version numbering scheme.
inclusive Boolean
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind "NORMAL" | "MINIMUM" | "MAXIMUM"
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name String
The main part of the version name.
revision String
The iteration of the package build from the above version.

VersionKind
, VersionKindArgs

Normal
NORMALA standard package version, defined by the other fields.
Minimum
MINIMUMA special version representing negative infinity, other fields are ignored.
Maximum
MAXIMUMA special version representing positive infinity, other fields are ignored.
VersionKindNormal
NORMALA standard package version, defined by the other fields.
VersionKindMinimum
MINIMUMA special version representing negative infinity, other fields are ignored.
VersionKindMaximum
MAXIMUMA special version representing positive infinity, other fields are ignored.
Normal
NORMALA standard package version, defined by the other fields.
Minimum
MINIMUMA special version representing negative infinity, other fields are ignored.
Maximum
MAXIMUMA special version representing positive infinity, other fields are ignored.
Normal
NORMALA standard package version, defined by the other fields.
Minimum
MINIMUMA special version representing negative infinity, other fields are ignored.
Maximum
MAXIMUMA special version representing positive infinity, other fields are ignored.
NORMAL
NORMALA standard package version, defined by the other fields.
MINIMUM
MINIMUMA special version representing negative infinity, other fields are ignored.
MAXIMUM
MAXIMUMA special version representing positive infinity, other fields are ignored.
"NORMAL"
NORMALA standard package version, defined by the other fields.
"MINIMUM"
MINIMUMA special version representing negative infinity, other fields are ignored.
"MAXIMUM"
MAXIMUMA special version representing positive infinity, other fields are ignored.

VersionResponse
, VersionResponseArgs

Epoch This property is required. int
Used to correct mistakes in the version numbering scheme.
Inclusive This property is required. bool
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
Kind This property is required. string
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
Name This property is required. string
The main part of the version name.
Revision This property is required. string
The iteration of the package build from the above version.
Epoch This property is required. int
Used to correct mistakes in the version numbering scheme.
Inclusive This property is required. bool
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
Kind This property is required. string
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
Name This property is required. string
The main part of the version name.
Revision This property is required. string
The iteration of the package build from the above version.
epoch This property is required. Integer
Used to correct mistakes in the version numbering scheme.
inclusive This property is required. Boolean
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind This property is required. String
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name This property is required. String
The main part of the version name.
revision This property is required. String
The iteration of the package build from the above version.
epoch This property is required. number
Used to correct mistakes in the version numbering scheme.
inclusive This property is required. boolean
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind This property is required. string
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name This property is required. string
The main part of the version name.
revision This property is required. string
The iteration of the package build from the above version.
epoch This property is required. int
Used to correct mistakes in the version numbering scheme.
inclusive This property is required. bool
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind This property is required. str
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name This property is required. str
The main part of the version name.
revision This property is required. str
The iteration of the package build from the above version.
epoch This property is required. Number
Used to correct mistakes in the version numbering scheme.
inclusive This property is required. Boolean
Whether this version is vulnerable, when defining the version bounds. For example, if the minimum version is 2.0, inclusive=true would say 2.0 is vulnerable, while inclusive=false would say it's not
kind This property is required. String
Distinguish between sentinel MIN/MAX versions and normal versions. If kind is not NORMAL, then the other fields are ignored.
name This property is required. String
The main part of the version name.
revision This property is required. String
The iteration of the package build from the above version.

VulnerabilityAssessmentNote
, VulnerabilityAssessmentNoteArgs

Assessment Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Assessment
Represents a vulnerability assessment for the product.
LanguageCode string
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
LongDescription string
A detailed description of this Vex.
Product Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Product
The product affected by this vex.
Publisher Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Publisher
Publisher details of this Note.
ShortDescription string
A one sentence description of this Vex.
Title string
The title of the note. E.g. Vex-Debian-11.4
Assessment Assessment
Represents a vulnerability assessment for the product.
LanguageCode string
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
LongDescription string
A detailed description of this Vex.
Product Product
The product affected by this vex.
Publisher Publisher
Publisher details of this Note.
ShortDescription string
A one sentence description of this Vex.
Title string
The title of the note. E.g. Vex-Debian-11.4
assessment Assessment
Represents a vulnerability assessment for the product.
languageCode String
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
longDescription String
A detailed description of this Vex.
product Product
The product affected by this vex.
publisher Publisher
Publisher details of this Note.
shortDescription String
A one sentence description of this Vex.
title String
The title of the note. E.g. Vex-Debian-11.4
assessment Assessment
Represents a vulnerability assessment for the product.
languageCode string
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
longDescription string
A detailed description of this Vex.
product Product
The product affected by this vex.
publisher Publisher
Publisher details of this Note.
shortDescription string
A one sentence description of this Vex.
title string
The title of the note. E.g. Vex-Debian-11.4
assessment Assessment
Represents a vulnerability assessment for the product.
language_code str
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
long_description str
A detailed description of this Vex.
product Product
The product affected by this vex.
publisher Publisher
Publisher details of this Note.
short_description str
A one sentence description of this Vex.
title str
The title of the note. E.g. Vex-Debian-11.4
assessment Property Map
Represents a vulnerability assessment for the product.
languageCode String
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
longDescription String
A detailed description of this Vex.
product Property Map
The product affected by this vex.
publisher Property Map
Publisher details of this Note.
shortDescription String
A one sentence description of this Vex.
title String
The title of the note. E.g. Vex-Debian-11.4

VulnerabilityAssessmentNoteResponse
, VulnerabilityAssessmentNoteResponseArgs

Assessment This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.AssessmentResponse
Represents a vulnerability assessment for the product.
LanguageCode This property is required. string
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
LongDescription This property is required. string
A detailed description of this Vex.
Product This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.ProductResponse
The product affected by this vex.
Publisher This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.PublisherResponse
Publisher details of this Note.
ShortDescription This property is required. string
A one sentence description of this Vex.
Title This property is required. string
The title of the note. E.g. Vex-Debian-11.4
Assessment This property is required. AssessmentResponse
Represents a vulnerability assessment for the product.
LanguageCode This property is required. string
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
LongDescription This property is required. string
A detailed description of this Vex.
Product This property is required. ProductResponse
The product affected by this vex.
Publisher This property is required. PublisherResponse
Publisher details of this Note.
ShortDescription This property is required. string
A one sentence description of this Vex.
Title This property is required. string
The title of the note. E.g. Vex-Debian-11.4
assessment This property is required. AssessmentResponse
Represents a vulnerability assessment for the product.
languageCode This property is required. String
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
longDescription This property is required. String
A detailed description of this Vex.
product This property is required. ProductResponse
The product affected by this vex.
publisher This property is required. PublisherResponse
Publisher details of this Note.
shortDescription This property is required. String
A one sentence description of this Vex.
title This property is required. String
The title of the note. E.g. Vex-Debian-11.4
assessment This property is required. AssessmentResponse
Represents a vulnerability assessment for the product.
languageCode This property is required. string
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
longDescription This property is required. string
A detailed description of this Vex.
product This property is required. ProductResponse
The product affected by this vex.
publisher This property is required. PublisherResponse
Publisher details of this Note.
shortDescription This property is required. string
A one sentence description of this Vex.
title This property is required. string
The title of the note. E.g. Vex-Debian-11.4
assessment This property is required. AssessmentResponse
Represents a vulnerability assessment for the product.
language_code This property is required. str
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
long_description This property is required. str
A detailed description of this Vex.
product This property is required. ProductResponse
The product affected by this vex.
publisher This property is required. PublisherResponse
Publisher details of this Note.
short_description This property is required. str
A one sentence description of this Vex.
title This property is required. str
The title of the note. E.g. Vex-Debian-11.4
assessment This property is required. Property Map
Represents a vulnerability assessment for the product.
languageCode This property is required. String
Identifies the language used by this document, corresponding to IETF BCP 47 / RFC 5646.
longDescription This property is required. String
A detailed description of this Vex.
product This property is required. Property Map
The product affected by this vex.
publisher This property is required. Property Map
Publisher details of this Note.
shortDescription This property is required. String
A one sentence description of this Vex.
title This property is required. String
The title of the note. E.g. Vex-Debian-11.4

VulnerabilityLocation
, VulnerabilityLocationArgs

CpeUri string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
FileLocation List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileLocation>
The file location at which this package was found.
Package string
The package being described.
Version Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Version
The version of the package being described. This field can be used as a filter in list requests.
CpeUri string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
FileLocation []FileLocation
The file location at which this package was found.
Package string
The package being described.
Version Version
The version of the package being described. This field can be used as a filter in list requests.
cpeUri String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
fileLocation List<FileLocation>
The file location at which this package was found.
package_ String
The package being described.
version Version
The version of the package being described. This field can be used as a filter in list requests.
cpeUri string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
fileLocation FileLocation[]
The file location at which this package was found.
package string
The package being described.
version Version
The version of the package being described. This field can be used as a filter in list requests.
cpe_uri str
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
file_location Sequence[FileLocation]
The file location at which this package was found.
package str
The package being described.
version Version
The version of the package being described. This field can be used as a filter in list requests.
cpeUri String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
fileLocation List<Property Map>
The file location at which this package was found.
package String
The package being described.
version Property Map
The version of the package being described. This field can be used as a filter in list requests.

VulnerabilityLocationResponse
, VulnerabilityLocationResponseArgs

CpeUri This property is required. string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
FileLocation This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.FileLocationResponse>
The file location at which this package was found.
Package This property is required. string
The package being described.
Version This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.VersionResponse
The version of the package being described. This field can be used as a filter in list requests.
CpeUri This property is required. string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
FileLocation This property is required. []FileLocationResponse
The file location at which this package was found.
Package This property is required. string
The package being described.
Version This property is required. VersionResponse
The version of the package being described. This field can be used as a filter in list requests.
cpeUri This property is required. String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
fileLocation This property is required. List<FileLocationResponse>
The file location at which this package was found.
package_ This property is required. String
The package being described.
version This property is required. VersionResponse
The version of the package being described. This field can be used as a filter in list requests.
cpeUri This property is required. string
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
fileLocation This property is required. FileLocationResponse[]
The file location at which this package was found.
package This property is required. string
The package being described.
version This property is required. VersionResponse
The version of the package being described. This field can be used as a filter in list requests.
cpe_uri This property is required. str
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
file_location This property is required. Sequence[FileLocationResponse]
The file location at which this package was found.
package This property is required. str
The package being described.
version This property is required. VersionResponse
The version of the package being described. This field can be used as a filter in list requests.
cpeUri This property is required. String
The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/) format. Examples include distro or storage location for vulnerable jar. This field can be used as a filter in list requests.
fileLocation This property is required. List<Property Map>
The file location at which this package was found.
package This property is required. String
The package being described.
version This property is required. Property Map
The version of the package being described. This field can be used as a filter in list requests.

VulnerabilityType
, VulnerabilityTypeArgs

CvssScore double
The CVSS score for this Vulnerability.
CvssV2 Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CVSS
The full description of the CVSS for version 2.
CvssVersion Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.VulnerabilityTypeCvssVersion
CVSS version used to populate cvss_score and severity.
Cwe List<string>
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
Details List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.Detail>
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
Severity Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.VulnerabilityTypeSeverity
Note provider assigned impact of the vulnerability
CvssScore float64
The CVSS score for this Vulnerability.
CvssV2 CVSS
The full description of the CVSS for version 2.
CvssVersion VulnerabilityTypeCvssVersion
CVSS version used to populate cvss_score and severity.
Cwe []string
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
Details []Detail
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
Severity VulnerabilityTypeSeverity
Note provider assigned impact of the vulnerability
cvssScore Double
The CVSS score for this Vulnerability.
cvssV2 CVSS
The full description of the CVSS for version 2.
cvssVersion VulnerabilityTypeCvssVersion
CVSS version used to populate cvss_score and severity.
cwe List<String>
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details List<Detail>
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity VulnerabilityTypeSeverity
Note provider assigned impact of the vulnerability
cvssScore number
The CVSS score for this Vulnerability.
cvssV2 CVSS
The full description of the CVSS for version 2.
cvssVersion VulnerabilityTypeCvssVersion
CVSS version used to populate cvss_score and severity.
cwe string[]
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details Detail[]
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity VulnerabilityTypeSeverity
Note provider assigned impact of the vulnerability
cvss_score float
The CVSS score for this Vulnerability.
cvss_v2 CVSS
The full description of the CVSS for version 2.
cvss_version VulnerabilityTypeCvssVersion
CVSS version used to populate cvss_score and severity.
cwe Sequence[str]
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details Sequence[Detail]
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity VulnerabilityTypeSeverity
Note provider assigned impact of the vulnerability
cvssScore Number
The CVSS score for this Vulnerability.
cvssV2 Property Map
The full description of the CVSS for version 2.
cvssVersion "CVSS_VERSION_UNSPECIFIED" | "CVSS_VERSION_2" | "CVSS_VERSION_3"
CVSS version used to populate cvss_score and severity.
cwe List<String>
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details List<Property Map>
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity "SEVERITY_UNSPECIFIED" | "MINIMAL" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL"
Note provider assigned impact of the vulnerability

VulnerabilityTypeCvssVersion
, VulnerabilityTypeCvssVersionArgs

CvssVersionUnspecified
CVSS_VERSION_UNSPECIFIEDCVSS Version unspecified.
CvssVersion2
CVSS_VERSION_2CVSS v2.
CvssVersion3
CVSS_VERSION_3CVSS v3.
VulnerabilityTypeCvssVersionCvssVersionUnspecified
CVSS_VERSION_UNSPECIFIEDCVSS Version unspecified.
VulnerabilityTypeCvssVersionCvssVersion2
CVSS_VERSION_2CVSS v2.
VulnerabilityTypeCvssVersionCvssVersion3
CVSS_VERSION_3CVSS v3.
CvssVersionUnspecified
CVSS_VERSION_UNSPECIFIEDCVSS Version unspecified.
CvssVersion2
CVSS_VERSION_2CVSS v2.
CvssVersion3
CVSS_VERSION_3CVSS v3.
CvssVersionUnspecified
CVSS_VERSION_UNSPECIFIEDCVSS Version unspecified.
CvssVersion2
CVSS_VERSION_2CVSS v2.
CvssVersion3
CVSS_VERSION_3CVSS v3.
CVSS_VERSION_UNSPECIFIED
CVSS_VERSION_UNSPECIFIEDCVSS Version unspecified.
CVSS_VERSION2
CVSS_VERSION_2CVSS v2.
CVSS_VERSION3
CVSS_VERSION_3CVSS v3.
"CVSS_VERSION_UNSPECIFIED"
CVSS_VERSION_UNSPECIFIEDCVSS Version unspecified.
"CVSS_VERSION_2"
CVSS_VERSION_2CVSS v2.
"CVSS_VERSION_3"
CVSS_VERSION_3CVSS v3.

VulnerabilityTypeResponse
, VulnerabilityTypeResponseArgs

CvssScore This property is required. double
The CVSS score for this Vulnerability.
CvssV2 This property is required. Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.CVSSResponse
The full description of the CVSS for version 2.
CvssVersion This property is required. string
CVSS version used to populate cvss_score and severity.
Cwe This property is required. List<string>
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
Details This property is required. List<Pulumi.GoogleNative.ContainerAnalysis.V1Alpha1.Inputs.DetailResponse>
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
Severity This property is required. string
Note provider assigned impact of the vulnerability
CvssScore This property is required. float64
The CVSS score for this Vulnerability.
CvssV2 This property is required. CVSSResponse
The full description of the CVSS for version 2.
CvssVersion This property is required. string
CVSS version used to populate cvss_score and severity.
Cwe This property is required. []string
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
Details This property is required. []DetailResponse
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
Severity This property is required. string
Note provider assigned impact of the vulnerability
cvssScore This property is required. Double
The CVSS score for this Vulnerability.
cvssV2 This property is required. CVSSResponse
The full description of the CVSS for version 2.
cvssVersion This property is required. String
CVSS version used to populate cvss_score and severity.
cwe This property is required. List<String>
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details This property is required. List<DetailResponse>
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity This property is required. String
Note provider assigned impact of the vulnerability
cvssScore This property is required. number
The CVSS score for this Vulnerability.
cvssV2 This property is required. CVSSResponse
The full description of the CVSS for version 2.
cvssVersion This property is required. string
CVSS version used to populate cvss_score and severity.
cwe This property is required. string[]
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details This property is required. DetailResponse[]
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity This property is required. string
Note provider assigned impact of the vulnerability
cvss_score This property is required. float
The CVSS score for this Vulnerability.
cvss_v2 This property is required. CVSSResponse
The full description of the CVSS for version 2.
cvss_version This property is required. str
CVSS version used to populate cvss_score and severity.
cwe This property is required. Sequence[str]
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details This property is required. Sequence[DetailResponse]
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity This property is required. str
Note provider assigned impact of the vulnerability
cvssScore This property is required. Number
The CVSS score for this Vulnerability.
cvssV2 This property is required. Property Map
The full description of the CVSS for version 2.
cvssVersion This property is required. String
CVSS version used to populate cvss_score and severity.
cwe This property is required. List<String>
A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html
details This property is required. List<Property Map>
All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.
severity This property is required. String
Note provider assigned impact of the vulnerability

VulnerabilityTypeSeverity
, VulnerabilityTypeSeverityArgs

SeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
Minimal
MINIMALMinimal Impact
Low
LOWLow Impact
Medium
MEDIUMMedium Impact
High
HIGHHigh Impact
Critical
CRITICALCritical Impact
VulnerabilityTypeSeveritySeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
VulnerabilityTypeSeverityMinimal
MINIMALMinimal Impact
VulnerabilityTypeSeverityLow
LOWLow Impact
VulnerabilityTypeSeverityMedium
MEDIUMMedium Impact
VulnerabilityTypeSeverityHigh
HIGHHigh Impact
VulnerabilityTypeSeverityCritical
CRITICALCritical Impact
SeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
Minimal
MINIMALMinimal Impact
Low
LOWLow Impact
Medium
MEDIUMMedium Impact
High
HIGHHigh Impact
Critical
CRITICALCritical Impact
SeverityUnspecified
SEVERITY_UNSPECIFIEDUnknown Impact
Minimal
MINIMALMinimal Impact
Low
LOWLow Impact
Medium
MEDIUMMedium Impact
High
HIGHHigh Impact
Critical
CRITICALCritical Impact
SEVERITY_UNSPECIFIED
SEVERITY_UNSPECIFIEDUnknown Impact
MINIMAL
MINIMALMinimal Impact
LOW
LOWLow Impact
MEDIUM
MEDIUMMedium Impact
HIGH
HIGHHigh Impact
CRITICAL
CRITICALCritical Impact
"SEVERITY_UNSPECIFIED"
SEVERITY_UNSPECIFIEDUnknown Impact
"MINIMAL"
MINIMALMinimal Impact
"LOW"
LOWLow Impact
"MEDIUM"
MEDIUMMedium Impact
"HIGH"
HIGHHigh Impact
"CRITICAL"
CRITICALCritical Impact

Package Details

Repository
Google Cloud Native pulumi/pulumi-google-native
License
Apache-2.0

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native