public sealed class VulnerabilityOccurrence : IMessage<VulnerabilityOccurrence>, IEquatable<VulnerabilityOccurrence>, IDeepCloneable<VulnerabilityOccurrence>, IBufferMessage, IMessage
Reference documentation and code samples for the Grafeas v1 API class VulnerabilityOccurrence.
An occurrence of a severity vulnerability on a resource.
Implements
IMessage VulnerabilityOccurrence , IEquatable VulnerabilityOccurrence , IDeepCloneable VulnerabilityOccurrence , IBufferMessage , IMessageNamespace
Grafeas.V1Assembly
Grafeas.V1.dll
Constructors
VulnerabilityOccurrence()
public VulnerabilityOccurrence()
VulnerabilityOccurrence(VulnerabilityOccurrence)
public VulnerabilityOccurrence(VulnerabilityOccurrence other)
Properties
CvssScore
public float CvssScore { get; set; }
Output only. The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
CvssV2
public CVSS CvssV2 { get; set; }
The cvss v2 score for the vulnerability.
Cvssv3
public CVSS Cvssv3 { get; set; }
The cvss v3 score for the vulnerability.
CvssVersion
public CVSSVersion CvssVersion { get; set; }
Output only. CVSS version used to populate cvss_score and severity.
EffectiveSeverity
public Severity EffectiveSeverity { get; set; }
The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity.
When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
FixAvailable
public bool FixAvailable { get; set; }
Output only. Whether at least one of the affected packages has a fix available.
LongDescription
public string LongDescription { get; set; }
Output only. A detailed description of this vulnerability.
PackageIssue
public RepeatedField<VulnerabilityOccurrence.Types.PackageIssue> PackageIssue { get; }
Required. The set of affected locations and their fixes (if available) within the associated resource.
RelatedUrls
public RepeatedField<RelatedUrl> RelatedUrls { get; }
Output only. URLs related to this vulnerability.
Severity
public Severity Severity { get; set; }
Output only. The note provider assigned severity of this vulnerability.
ShortDescription
public string ShortDescription { get; set; }
Output only. A one sentence description of this vulnerability.
Type
public string Type { get; set; }
The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
VexAssessment
public VulnerabilityOccurrence.Types.VexAssessment VexAssessment { get; set; }
