Scan OS packages automatically

  import 
  
 com.google.cloud.devtools.containeranalysis.v1. ContainerAnalysisClient 
 
 ; 
 import 
  
 io.grafeas.v1. GrafeasClient 
 
 ; 
 import 
  
 io.grafeas.v1. Occurrence 
 
 ; 
 import 
  
 io.grafeas.v1. ProjectName 
 
 ; 
 import 
  
 java.io.IOException 
 ; 
 import 
  
 java.lang.InterruptedException 
 ; 
 public 
  
 class 
 OccurrencesForImage 
  
 { 
  
 // Retrieves all the Occurrences associated with a specified image 
  
 // Here, all Occurrences are simply printed and counted 
  
 public 
  
 static 
  
 int 
  
 getOccurrencesForImage 
 ( 
 String 
  
 resourceUrl 
 , 
  
 String 
  
 projectId 
 ) 
  
 throws 
  
 IOException 
 , 
  
 InterruptedException 
  
 { 
  
 // String resourceUrl = "https://gcr.io/project/image@sha256:123"; 
  
 // String projectId = "my-project-id"; 
  
 final 
  
 String 
  
 projectName 
  
 = 
  
  ProjectName 
 
 . 
 format 
 ( 
 projectId 
 ); 
  
 final 
  
 String 
  
 filterStr 
  
 = 
  
 String 
 . 
 format 
 ( 
 "resourceUrl=\"%s\"" 
 , 
  
 resourceUrl 
 ); 
  
 // Initialize client that will be used to send requests. After completing all of your requests, 
  
 // call the "close" method on the client to safely clean up any remaining background resources. 
  
  GrafeasClient 
 
  
 client 
  
 = 
  
  ContainerAnalysisClient 
 
 . 
 create 
 (). 
  getGrafeasClient 
 
 (); 
  
 int 
  
 i 
  
 = 
  
 0 
 ; 
  
 for 
  
 ( 
  Occurrence 
 
  
 o 
  
 : 
  
 client 
 . 
  listOccurrences 
 
 ( 
 projectName 
 , 
  
 filterStr 
 ). 
 iterateAll 
 ()) 
  
 { 
  
 // Write custom code to process each Occurrence here 
  
 System 
 . 
 out 
 . 
 println 
 ( 
 o 
 . 
 getName 
 ()); 
  
 i 
  
 = 
  
 i 
  
 + 
  
 1 
 ; 
  
 } 
  
 return 
  
 i 
 ; 
  
 } 
 } 
 

  import 
  
 ( 
  
 "context" 
  
 "fmt" 
  
 "io" 
  
 containeranalysis 
  
 "cloud.google.com/go/containeranalysis/apiv1" 
  
 "google.golang.org/api/iterator" 
  
 grafeaspb 
  
 "google.golang.org/genproto/googleapis/grafeas/v1" 
 ) 
 // getOccurrencesForImage retrieves all the Occurrences associated with a specified image. 
 // Here, all Occurrences are simply printed and counted. 
 func 
  
 getOccurrencesForImage 
 ( 
 w 
  
 io 
 . 
 Writer 
 , 
  
 resourceURL 
 , 
  
 projectID 
  
 string 
 ) 
  
 ( 
 int 
 , 
  
 error 
 ) 
  
 { 
  
 // Use this style of URL when you use Google Container Registry. 
  
 // resourceURL := "https://gcr.io/my-project/my-repo/my-image" 
  
 // Use this style of URL when you use Google Artifact Registry. 
  
 // resourceURL := "https://LOCATION-docker.pkg.dev/my-project/my-repo/my-image" 
  
 ctx 
  
 := 
  
 context 
 . 
 Background 
 () 
  
 client 
 , 
  
 err 
  
 := 
  
 containeranalysis 
 . 
  NewClient 
 
 ( 
 ctx 
 ) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 - 
 1 
 , 
  
 fmt 
 . 
 Errorf 
 ( 
 "NewClient: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 defer 
  
 client 
 . 
  Close 
 
 () 
  
 req 
  
 := 
  
& grafeaspb 
 . 
  ListOccurrencesRequest 
 
 { 
  
 Parent 
 : 
  
 fmt 
 . 
 Sprintf 
 ( 
 "projects/%s" 
 , 
  
 projectID 
 ), 
  
 Filter 
 : 
  
 fmt 
 . 
 Sprintf 
 ( 
 "resourceUrl=%q" 
 , 
  
 resourceURL 
 ), 
  
 } 
  
 it 
  
 := 
  
 client 
 . 
  GetGrafeasClient 
 
 (). 
 ListOccurrences 
 ( 
 ctx 
 , 
  
 req 
 ) 
  
 count 
  
 := 
  
 0 
  
 for 
  
 { 
  
 occ 
 , 
  
 err 
  
 := 
  
 it 
 . 
 Next 
 () 
  
 if 
  
 err 
  
 == 
  
 iterator 
 . 
 Done 
  
 { 
  
 break 
  
 } 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 - 
 1 
 , 
  
 fmt 
 . 
 Errorf 
 ( 
 "occurrence iteration error: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 // Write custom code to process each Occurrence here. 
  
 fmt 
 . 
 Fprintln 
 ( 
 w 
 , 
  
 occ 
 ) 
  
 count 
  
 = 
  
 count 
  
 + 
  
 1 
  
 } 
  
 return 
  
 count 
 , 
  
 nil 
 } 
 

  /** 
 * TODO(developer): Uncomment these variables before running the sample 
 */ 
 // const projectId = 'your-project-id', // Your GCP Project ID 
 // If you are using Google Container Registry 
 // const imageUrl = 'https://gcr.io/my-project/my-repo/my-image@sha256:123' // Image to attach metadata to 
 // If you are using Google Artifact Registry 
 // const imageUrl = 'https://LOCATION-docker.pkg.dev/my-project/my-repo/my-image@sha256:123' // Image to attach metadata to 
 // Import the library and create a client 
 const 
  
 { 
 ContainerAnalysisClient 
 } 
  
 = 
  
 require 
 ( 
 ' @google-cloud/containeranalysis 
' 
 ); 
 const 
  
 client 
  
 = 
  
 new 
  
  ContainerAnalysisClient 
 
 (); 
 const 
  
 formattedParent 
  
 = 
  
 client 
 . 
  getGrafeasClient 
 
 (). 
  projectPath 
 
 ( 
 projectId 
 ); 
 // Retrieves all the Occurrences associated with a specified image 
 const 
  
 [ 
 occurrences 
 ] 
  
 = 
  
 await 
  
 client 
 . 
  getGrafeasClient 
 
 (). 
 listOccurrences 
 ({ 
  
 parent 
 : 
  
 formattedParent 
 , 
  
 filter 
 : 
  
 `resourceUrl = " 
 ${ 
 imageUrl 
 } 
 "` 
 , 
 }); 
 if 
  
 ( 
 occurrences 
 . 
 length 
 ) 
  
 { 
  
 console 
 . 
 log 
 ( 
 `Occurrences for 
 ${ 
 imageUrl 
 } 
 ` 
 ); 
  
 occurrences 
 . 
 forEach 
 ( 
 occurrence 
  
 = 
>  
 { 
  
 console 
 . 
 log 
 ( 
 ` 
 ${ 
 occurrence 
 . 
 name 
 } 
 :` 
 ); 
  
 }); 
 } 
  
 else 
  
 { 
  
 console 
 . 
 log 
 ( 
 'No occurrences found.' 
 ); 
 } 
 

  # resource_url = "The URL of the resource associated with the occurrence." 
 #                # e.g. https://gcr.io/project/image@sha256:123" 
 # project_id   = "The Google Cloud project ID of the occurrences to retrieve" 
 require 
  
 "google/cloud/container_analysis" 
 # Initialize the client 
 client 
  
 = 
  
 Google 
 :: 
 Cloud 
 :: 
  ContainerAnalysis 
 
 . 
  container_analysis 
 
 . 
  grafeas_client 
 
 parent 
  
 = 
  
 client 
 . 
  project_path 
 
  
 project 
 : 
  
 project_id 
 filter 
  
 = 
  
 "resourceUrl = 
 \" 
 #{ 
 resource_url 
 } 
 \" 
 " 
 count 
  
 = 
  
 0 
 client 
 . 
 list_occurrences 
 ( 
 parent 
 : 
  
 parent 
 , 
  
 filter 
 : 
  
 filter 
 ) 
 . 
 each 
  
 do 
  
 | 
 occurrence 
 | 
  
 # Process occurrence here 
  
 puts 
  
 occurrence 
  
 count 
  
 += 
  
 1 
 end 
 puts 
  
 "Found 
 #{ 
 count 
 } 
 occurrences" 
 

  from 
  
 google.cloud.devtools 
  
 import 
  containeranalysis_v1 
 
 def 
  
 get_occurrences_for_image 
 ( 
 resource_url 
 : 
 str 
 , 
 project_id 
 : 
 str 
 ) 
 - 
> int 
 : 
  
 """Retrieves all the occurrences associated with a specified image. 
 Here, all occurrences are simply printed and counted.""" 
 # resource_url = 'https://gcr.io/my-project/my-image@sha256:123' 
 # project_id = 'my-gcp-project' 
 filter_str 
 = 
 f 
 'resourceUrl=" 
 { 
 resource_url 
 } 
 "' 
 client 
 = 
  containeranalysis_v1 
 
 . 
  ContainerAnalysisClient 
 
 () 
 grafeas_client 
 = 
 client 
 . 
 get_grafeas_client 
 () 
 project_name 
 = 
 f 
 "projects/ 
 { 
 project_id 
 } 
 " 
 response 
 = 
 grafeas_client 
 . 
 list_occurrences 
 ( 
 parent 
 = 
 project_name 
 , 
 filter 
 = 
 filter_str 
 ) 
 count 
 = 
 0 
 for 
 o 
 in 
 response 
 : 
 # do something with the retrieved occurrence 
 # in this sample, we will simply count each one 
 count 
 += 
 1 
 return 
 count 
 

  import 
  
 com.google.cloud.devtools.containeranalysis.v1. ContainerAnalysisClient 
 
 ; 
 import 
  
 io.grafeas.v1. GrafeasClient 
 
 ; 
 import 
  
 io.grafeas.v1. Occurrence 
 
 ; 
 import 
  
 io.grafeas.v1. ProjectName 
 
 ; 
 import 
  
 java.io.IOException 
 ; 
 import 
  
 java.lang.InterruptedException 
 ; 
 public 
  
 class 
 GetDiscoveryInfo 
  
 { 
  
 // Retrieves and prints the Discovery Occurrence created for a specified image 
  
 // The Discovery Occurrence contains information about the initial scan on the image 
  
 public 
  
 static 
  
 void 
  
 getDiscoveryInfo 
 ( 
 String 
  
 resourceUrl 
 , 
  
 String 
  
 projectId 
 ) 
  
  
 throws 
  
 IOException 
 , 
  
 InterruptedException 
  
 { 
  
 // String resourceUrl = "https://gcr.io/project/image@sha256:123"; 
  
 // String projectId = "my-project-id"; 
  
 String 
  
 filterStr 
  
 = 
  
 "kind=\"DISCOVERY\" AND resourceUrl=\"" 
  
 + 
  
 resourceUrl 
  
 + 
  
 "\"" 
 ; 
  
 final 
  
 String 
  
 projectName 
  
 = 
  
  ProjectName 
 
 . 
 format 
 ( 
 projectId 
 ); 
  
 // Initialize client that will be used to send requests. After completing all of your requests, 
  
 // call the "close" method on the client to safely clean up any remaining background resources. 
  
  GrafeasClient 
 
  
 client 
  
 = 
  
  ContainerAnalysisClient 
 
 . 
 create 
 (). 
  getGrafeasClient 
 
 (); 
  
 for 
  
 ( 
  Occurrence 
 
  
 o 
  
 : 
  
 client 
 . 
  listOccurrences 
 
 ( 
 projectName 
 , 
  
 filterStr 
 ). 
 iterateAll 
 ()) 
  
 { 
  
 System 
 . 
 out 
 . 
 println 
 ( 
 o 
 ); 
  
 } 
  
 } 
 } 
 

  import 
  
 ( 
  
 "context" 
  
 "fmt" 
  
 "io" 
  
 containeranalysis 
  
 "cloud.google.com/go/containeranalysis/apiv1" 
  
 "google.golang.org/api/iterator" 
  
 grafeaspb 
  
 "google.golang.org/genproto/googleapis/grafeas/v1" 
 ) 
 // getDiscoveryInfo retrieves and prints the Discovery Occurrence created for a specified image. 
 // The Discovery Occurrence contains information about the initial scan on the image. 
 func 
  
 getDiscoveryInfo 
 ( 
 w 
  
 io 
 . 
 Writer 
 , 
  
 resourceURL 
 , 
  
 projectID 
  
 string 
 ) 
  
 error 
  
 { 
  
 // Use this style of URL when you use Google Container Registry. 
  
 // resourceURL := "https://gcr.io/my-project/my-repo/my-image" 
  
 // Use this style of URL when you use Google Artifact Registry. 
  
 // resourceURL := "https://LOCATION-docker.pkg.dev/my-project/my-repo/my-image" 
  
 ctx 
  
 := 
  
 context 
 . 
 Background 
 () 
  
 client 
 , 
  
 err 
  
 := 
  
 containeranalysis 
 . 
  NewClient 
 
 ( 
 ctx 
 ) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "NewClient: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 defer 
  
 client 
 . 
  Close 
 
 () 
  
 req 
  
 := 
  
& grafeaspb 
 . 
  ListOccurrencesRequest 
 
 { 
  
 Parent 
 : 
  
 fmt 
 . 
 Sprintf 
 ( 
 "projects/%s" 
 , 
  
 projectID 
 ), 
  
 Filter 
 : 
  
 fmt 
 . 
 Sprintf 
 ( 
 `kind="DISCOVERY" AND resourceUrl=%q` 
 , 
  
 resourceURL 
 ), 
  
 } 
  
 it 
  
 := 
  
 client 
 . 
  GetGrafeasClient 
 
 (). 
 ListOccurrences 
 ( 
 ctx 
 , 
  
 req 
 ) 
  
 for 
  
 { 
  
 occ 
 , 
  
 err 
  
 := 
  
 it 
 . 
 Next 
 () 
  
 if 
  
 err 
  
 == 
  
 iterator 
 . 
 Done 
  
 { 
  
 break 
  
 } 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "occurrence iteration error: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 fmt 
 . 
 Fprintln 
 ( 
 w 
 , 
  
 occ 
 ) 
  
 } 
  
 return 
  
 nil 
 } 
 

  /** 
 * TODO(developer): Uncomment these variables before running the sample 
 */ 
 // const projectId = 'your-project-id', // Your GCP Project ID 
 // If you are using Google Container Registry 
 // const imageUrl = 'https://gcr.io/my-project/my-repo/my-image:123' // Image to attach metadata to 
 // If you are using Google Artifact Registry 
 // const imageUrl = 'https://LOCATION-docker.pkg.dev/my-project/my-repo/my-image:123' // Image to attach metadata to 
 // Import the library and create a client 
 const 
  
 { 
 ContainerAnalysisClient 
 } 
  
 = 
  
 require 
 ( 
 ' @google-cloud/containeranalysis 
' 
 ); 
 const 
  
 client 
  
 = 
  
 new 
  
  ContainerAnalysisClient 
 
 (); 
 const 
  
 formattedParent 
  
 = 
  
 client 
 . 
  getGrafeasClient 
 
 (). 
  projectPath 
 
 ( 
 projectId 
 ); 
 // Retrieves and prints the Discovery Occurrence created for a specified image 
 // The Discovery Occurrence contains information about the initial scan on the image 
 const 
  
 [ 
 occurrences 
 ] 
  
 = 
  
 await 
  
 client 
 . 
  getGrafeasClient 
 
 (). 
 listOccurrences 
 ({ 
  
 parent 
 : 
  
 formattedParent 
 , 
  
 filter 
 : 
  
 `kind = "DISCOVERY" AND resourceUrl = " 
 ${ 
 imageUrl 
 } 
 "` 
 , 
 }); 
 if 
  
 ( 
 occurrences 
 . 
 length 
 > 
 0 
 ) 
  
 { 
  
 console 
 . 
 log 
 ( 
 `Discovery Occurrences for 
 ${ 
 imageUrl 
 } 
 ` 
 ); 
  
 occurrences 
 . 
 forEach 
 ( 
 occurrence 
  
 = 
>  
 { 
  
 console 
 . 
 log 
 ( 
 ` 
 ${ 
 occurrence 
 . 
 name 
 } 
 :` 
 ); 
  
 }); 
 } 
  
 else 
  
 { 
  
 console 
 . 
 log 
 ( 
 'No occurrences found.' 
 ); 
 } 
 

  # resource_url = "The URL of the resource associated with the occurrence." 
 #                # e.g. https://gcr.io/project/image@sha256:123 
 # project_id   = "The Google Cloud project ID of the occurrences to retrieve" 
 require 
  
 "google/cloud/container_analysis" 
 # Initialize the client 
 client 
  
 = 
  
 Google 
 :: 
 Cloud 
 :: 
  ContainerAnalysis 
 
 . 
  container_analysis 
 
 . 
  grafeas_client 
 
 parent 
  
 = 
  
 client 
 . 
  project_path 
 
  
 project 
 : 
  
 project_id 
 filter 
  
 = 
  
 "kind = 
 \" 
 DISCOVERY 
 \" 
 AND resourceUrl = 
 \" 
 #{ 
 resource_url 
 } 
 \" 
 " 
 client 
 . 
 list_occurrences 
 ( 
 parent 
 : 
  
 parent 
 , 
  
 filter 
 : 
  
 filter 
 ) 
 . 
 each 
  
 do 
  
 | 
 occurrence 
 | 
  
 # Process discovery occurrence here 
  
 puts 
  
 occurrence 
 end 
 

  from 
  
 google.cloud.devtools 
  
 import 
  containeranalysis_v1 
 
 def 
  
 get_discovery_info 
 ( 
 resource_url 
 : 
 str 
 , 
 project_id 
 : 
 str 
 ) 
 - 
> None 
 : 
  
 """Retrieves and prints the discovery occurrence created for a specified 
 image. The discovery occurrence contains information about the initial 
 scan on the image.""" 
 # resource_url = 'https://gcr.io/my-project/my-image@sha256:123' 
 # project_id = 'my-gcp-project' 
 filter_str 
 = 
 f 
 'kind="DISCOVERY" AND resourceUrl=" 
 { 
 resource_url 
 } 
 "' 
 client 
 = 
  containeranalysis_v1 
 
 . 
  ContainerAnalysisClient 
 
 () 
 grafeas_client 
 = 
 client 
 . 
 get_grafeas_client 
 () 
 project_name 
 = 
 f 
 "projects/ 
 { 
 project_id 
 } 
 " 
 response 
 = 
 grafeas_client 
 . 
 list_occurrences 
 ( 
 parent 
 = 
 project_name 
 , 
 filter_ 
 = 
 filter_str 
 ) 
 for 
 occ 
 in 
 response 
 : 
 print 
 ( 
 occ 
 )