Resource: Occurrence
An instance of an analysis type that has been found on a resource.
JSON representation |
---|
{ "name" : string , "resourceUri" : string , "noteName" : string , "kind" : enum ( |
name
string
Output only. The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]
.
resourceUri
string
Required. Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc
for a Docker image.
noteName
string
Required. Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]
. This field can be used as a filter in list requests.
kind
enum (
NoteKind
)
Output only. This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
remediation
string
A description of actions that can be taken to remedy the note.
createTime
string (
Timestamp
format)
Output only. The time this occurrence was created.
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z"
, "2014-10-02T15:01:23.045123456Z"
or "2014-10-02T15:01:23+05:30"
.
updateTime
string (
Timestamp
format)
Output only. The time this occurrence was last updated.
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z"
, "2014-10-02T15:01:23.045123456Z"
or "2014-10-02T15:01:23+05:30"
.
envelope
details
. Required. Immutable. Describes the details of the note kind found on this resource. details
can be only one of the following:vulnerability
object (
VulnerabilityOccurrence
)
Describes a security vulnerability.
build
object (
BuildOccurrence
)
Describes a verifiable build.
image
object (
ImageOccurrence
)
Describes how this resource derives from the basis in the associated note.
package
object (
PackageOccurrence
)
Describes the installation of a package on the linked resource.
deployment
object (
DeploymentOccurrence
)
Describes the deployment of an artifact on a runtime.
discovery
object (
DiscoveryOccurrence
)
Describes when a resource was discovered.
attestation
object (
AttestationOccurrence
)
Describes an attestation of an artifact.
upgrade
object (
UpgradeOccurrence
)
Describes an available package upgrade on the linked resource.
compliance
object (
ComplianceOccurrence
)
Describes a compliance violation on a linked resource.
dsseAttestation
object (
DSSEAttestationOccurrence
)
Describes an attestation of an artifact using dsse.
sbomReference
object (
SBOMReferenceOccurrence
)
Describes a specific SBOM reference occurrences.
secret
object (
SecretOccurrence
)
Describes a secret.
Methods |
|
---|---|
|
Creates new occurrences in batch. |
|
Creates a new occurrence. |
|
Deletes the specified occurrence. |
|
Gets the specified occurrence. |
|
Gets the access control policy for a note or an occurrence resource. |
|
Gets the note attached to the specified occurrence. |
|
Gets a summary of the number and severity of occurrences. |
|
Lists occurrences for the specified project. |
|
Updates the specified occurrence. |
|
Sets the access control policy on the specified note or occurrence. |
|
Returns the permissions that a caller has on the specified note or occurrence. |