pulumi-google-native-kotlin/com.pulumi.googlenative.containeranalysis.v1.kotlin.outputs

Package-level declarations

Types

AliasContextResponse

data class AliasContextResponse(val kind: String, val name: String)

An alias to a repo revision.

AnalysisCompletedResponse

data class AnalysisCompletedResponse(val analysisType: List<String>)

Indicates which analysis completed successfully. Multiple types of analysis can be performed on a single resource.

ArtifactResponse

data class ArtifactResponse(val checksum: String, val names: List<String>)

Artifact describes a build product.

AssessmentResponse

data class AssessmentResponse(val cve: String, val impacts: List<String>, val justification: JustificationResponse, val longDescription: String, val relatedUris: List<RelatedUrlResponse>, val remediations: List<RemediationResponse>, val shortDescription: String, val state: String)

Assessment provides all information that is related to a single vulnerability for this product.

AttestationNoteResponse

data class AttestationNoteResponse(val hint: HintResponse)

Note kind that represents a logical attestation "role" or "authority". For example, an organization might have one Authority for "QA" and one for "build". This note is intended to act strictly as a grouping mechanism for the attached occurrences (Attestations). This grouping mechanism also provides a security boundary, since IAM ACLs gate the ability for a principle to attach an occurrence to a given note. It also provides a single point of lookup to find all attached attestation occurrences, even if they don't all live in the same project.

AttestationOccurrenceResponse

data class AttestationOccurrenceResponse(val jwts: List<JwtResponse>, val serializedPayload: String, val signatures: List<SignatureResponse>)

Occurrence that represents a single "attestation". The authenticity of an attestation can be verified using the attached signature. If the verifier trusts the public key of the signer, then verifying the signature is sufficient to establish trust. In this circumstance, the authority to which this attestation is attached is primarily useful for lookup (how to find this attestation if you already know the authority and artifact to be verified) and intent (for which authority this attestation was intended to sign.

BindingResponse

data class BindingResponse(val condition: ExprResponse, val members: List<String>, val role: String)

Associates members, or principals, with a role.

BuilderConfigResponse

class BuilderConfigResponse

BuildNoteResponse

data class BuildNoteResponse(val builderVersion: String)

Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.

BuildOccurrenceResponse

data class BuildOccurrenceResponse(val intotoProvenance: InTotoProvenanceResponse, val intotoStatement: InTotoStatementResponse, val provenance: BuildProvenanceResponse, val provenanceBytes: String)

Details of a build occurrence.

BuildProvenanceResponse

data class BuildProvenanceResponse(val buildOptions: Map<String, String>, val builderVersion: String, val builtArtifacts: List<ArtifactResponse>, val commands: List<CommandResponse>, val createTime: String, val creator: String, val endTime: String, val logsUri: String, val project: String, val sourceProvenance: SourceResponse, val startTime: String, val triggerId: String)

Provenance of a build. Contains all information needed to verify the full details about the build from source to completion.

CategoryResponse

data class CategoryResponse(val categoryId: String, val name: String)

The category to which the update belongs.

CisBenchmarkResponse

data class CisBenchmarkResponse(val profileLevel: Int, val severity: String)

A compliance check that is a CIS benchmark.

CloudRepoSourceContextResponse

data class CloudRepoSourceContextResponse(val aliasContext: AliasContextResponse, val repoId: RepoIdResponse, val revisionId: String)

A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.

CommandResponse

data class CommandResponse(val args: List<String>, val dir: String, val env: List<String>, val name: String, val waitFor: List<String>)

Command describes a step performed as part of the build pipeline.

CompletenessResponse

data class CompletenessResponse(val arguments: Boolean, val environment: Boolean, val materials: Boolean)

Indicates that the builder claims certain fields in this message to be complete.

ComplianceNoteResponse

data class ComplianceNoteResponse(val cisBenchmark: CisBenchmarkResponse, val description: String, val rationale: String, val remediation: String, val scanInstructions: String, val title: String, val version: List<ComplianceVersionResponse>)

ComplianceOccurrenceResponse

data class ComplianceOccurrenceResponse(val nonComplianceReason: String, val nonCompliantFiles: List<NonCompliantFileResponse>)

An indication that the compliance checks in the associated ComplianceNote were not satisfied for particular resources or a specified reason.

ComplianceVersionResponse

data class ComplianceVersionResponse(val benchmarkDocument: String, val cpeUri: String, val version: String)

Describes the CIS benchmark version that is applicable to a given OS and os version.

CVSSResponse

data class CVSSResponse(val attackComplexity: String, val attackVector: String, val authentication: String, val availabilityImpact: String, val baseScore: Double, val confidentialityImpact: String, val exploitabilityScore: Double, val impactScore: Double, val integrityImpact: String, val privilegesRequired: String, val scope: String, val userInteraction: String)

Common Vulnerability Scoring System. For details, see https://www.first.org/cvss/specification-document This is a message we will try to use for storing various versions of CVSS rather than making a separate proto for storing a specific version.

CVSSv3Response

data class CVSSv3Response(val attackComplexity: String, val attackVector: String, val availabilityImpact: String, val baseScore: Double, val confidentialityImpact: String, val exploitabilityScore: Double, val impactScore: Double, val integrityImpact: String, val privilegesRequired: String, val scope: String, val userInteraction: String)

Common Vulnerability Scoring System version 3. For details, see https://www.first.org/cvss/specification-document

DeploymentNoteResponse

data class DeploymentNoteResponse(val resourceUri: List<String>)

An artifact that can be deployed in some runtime.

DeploymentOccurrenceResponse

data class DeploymentOccurrenceResponse(val address: String, val config: String, val deployTime: String, val platform: String, val resourceUri: List<String>, val undeployTime: String, val userEmail: String)

The period during which some deployable was active in a runtime.

DetailResponse

data class DetailResponse(val affectedCpeUri: String, val affectedPackage: String, val affectedVersionEnd: VersionResponse, val affectedVersionStart: VersionResponse, val description: String, val fixedCpeUri: String, val fixedPackage: String, val fixedVersion: VersionResponse, val isObsolete: Boolean, val packageType: String, val severityName: String, val source: String, val sourceUpdateTime: String, val vendor: String)

A detail for a distro and package affected by this vulnerability and its associated fix (if one is available).

DigestResponse

data class DigestResponse(val algo: String, val digestBytes: String)

Digest information.

DiscoveryNoteResponse

data class DiscoveryNoteResponse(val analysisKind: String)

A note that indicates a type of analysis a provider would perform. This note exists in a provider's project. A Discovery occurrence is created in a consumer's project at the start of analysis.

DiscoveryOccurrenceResponse

data class DiscoveryOccurrenceResponse(val analysisCompleted: AnalysisCompletedResponse, val analysisError: List<StatusResponse>, val analysisStatus: String, val analysisStatusError: StatusResponse, val archiveTime: String, val continuousAnalysis: String, val cpe: String, val lastScanTime: String)

Provides information about the analysis status of a discovered resource.

DistributionResponse

data class DistributionResponse(val architecture: String, val cpeUri: String, val description: String, val latestVersion: VersionResponse, val maintainer: String, val url: String)

This represents a particular channel of distribution for a given package. E.g., Debian's jessie-backports dpkg mirror.

DSSEAttestationNoteResponse

data class DSSEAttestationNoteResponse(val hint: DSSEHintResponse)

DSSEAttestationOccurrenceResponse

data class DSSEAttestationOccurrenceResponse(val envelope: EnvelopeResponse, val statement: InTotoStatementResponse)

Deprecated. Prefer to use a regular Occurrence, and populate the Envelope at the top level of the Occurrence.

DSSEHintResponse

data class DSSEHintResponse(val humanReadableName: String)

This submessage provides human-readable hints about the purpose of the authority. Because the name of a note acts as its resource reference, it is important to disambiguate the canonical name of the Note (which might be a UUID for security purposes) from "readable" names more suitable for debug output. Note that these hints should not be used to look up authorities in security sensitive contexts, such as when looking up attestations to verify.

EnvelopeResponse

data class EnvelopeResponse(val payload: String, val payloadType: String, val signatures: List<EnvelopeSignatureResponse>)

MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. An authenticated message of arbitrary type.

EnvelopeSignatureResponse

data class EnvelopeSignatureResponse(val keyid: String, val sig: String)

ExprResponse

data class ExprResponse(val description: String, val expression: String, val location: String, val title: String)

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

FingerprintResponse

data class FingerprintResponse(val v1Name: String, val v2Blob: List<String>, val v2Name: String)

A set of properties that uniquely identify a given Docker image.

GerritSourceContextResponse

data class GerritSourceContextResponse(val aliasContext: AliasContextResponse, val gerritProject: String, val hostUri: String, val revisionId: String)

A SourceContext referring to a Gerrit project.

GetNoteIamPolicyResult

data class GetNoteIamPolicyResult(val bindings: List<BindingResponse>, val etag: String, val version: Int)

GetNoteResult

data class GetNoteResult(val attestation: AttestationNoteResponse, val build: BuildNoteResponse, val compliance: ComplianceNoteResponse, val createTime: String, val deployment: DeploymentNoteResponse, val discovery: DiscoveryNoteResponse, val dsseAttestation: DSSEAttestationNoteResponse, val expirationTime: String, val image: ImageNoteResponse, val kind: String, val longDescription: String, val name: String, val package: PackageNoteResponse, val relatedNoteNames: List<String>, val relatedUrl: List<RelatedUrlResponse>, val sbomReference: SBOMReferenceNoteResponse, val shortDescription: String, val updateTime: String, val upgrade: UpgradeNoteResponse, val vulnerability: VulnerabilityNoteResponse, val vulnerabilityAssessment: VulnerabilityAssessmentNoteResponse)

GetOccurrenceIamPolicyResult

data class GetOccurrenceIamPolicyResult(val bindings: List<BindingResponse>, val etag: String, val version: Int)

GetOccurrenceResult

GitSourceContextResponse

data class GitSourceContextResponse(val revisionId: String, val url: String)

A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).

GrafeasV1FileLocationResponse

data class GrafeasV1FileLocationResponse(val filePath: String)

Indicates the location at which a package was found.

GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderResponse

class GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderResponse

Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.

GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessResponse

data class GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessResponse(val environment: Boolean, val materials: Boolean, val parameters: Boolean)

Indicates that the builder claims certain fields in this message to be complete.

GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceResponse

data class GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceResponse(val digest: Map<String, String>, val entryPoint: String, val uri: String)

Describes where the config file that kicked off the build came from. This is effectively a pointer to the source where buildConfig came from.

GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationResponse

data class GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationResponse(val configSource: GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceResponse, val environment: Map<String, String>, val parameters: Map<String, String>)

Identifies the event that kicked off the build.

GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialResponse

data class GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialResponse(val digest: Map<String, String>, val uri: String)

The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.

GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataResponse

data class GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataResponse(val buildFinishedOn: String, val buildInvocationId: String, val buildStartedOn: String, val completeness: GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessResponse, val reproducible: Boolean)

Other properties of the build.

HintResponse

data class HintResponse(val humanReadableName: String)

IdentityResponse

data class IdentityResponse(val revision: Int, val updateId: String)

The unique identifier of the update.

ImageNoteResponse

data class ImageNoteResponse(val fingerprint: FingerprintResponse, val resourceUrl: String)

Basis describes the base image portion (Note) of the DockerImage relationship. Linked occurrences are derived from this or an equivalent image via: FROM Or an equivalent reference, e.g., a tag of the resource_url.

ImageOccurrenceResponse

data class ImageOccurrenceResponse(val baseResourceUrl: String, val distance: Int, val fingerprint: FingerprintResponse, val layerInfo: List<LayerResponse>)

Details of the derived image portion of the DockerImage relationship. This image would be produced from a Dockerfile with FROM .

InTotoProvenanceResponse

data class InTotoProvenanceResponse(val builderConfig: BuilderConfigResponse, val materials: List<String>, val metadata: MetadataResponse, val recipe: RecipeResponse)

InTotoStatementResponse

data class InTotoStatementResponse(val predicateType: String, val provenance: InTotoProvenanceResponse, val slsaProvenance: SlsaProvenanceResponse, val slsaProvenanceZeroTwo: SlsaProvenanceZeroTwoResponse, val subject: List<SubjectResponse>, val type: String)

Spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement The serialized InTotoStatement will be stored as Envelope.payload. Envelope.payloadType is always "application/vnd.in-toto+json".

JustificationResponse

data class JustificationResponse(val details: String, val justificationType: String)

Justification provides the justification when the state of the assessment if NOT_AFFECTED.

JwtResponse

data class JwtResponse(val compactJwt: String)

KnowledgeBaseResponse

data class KnowledgeBaseResponse(val name: String, val url: String)

LayerResponse

data class LayerResponse(val arguments: String, val directive: String)

Layer holds metadata specific to a layer of a Docker image.

LicenseResponse

data class LicenseResponse(val comments: String, val expression: String)

License information.

LocationResponse

data class LocationResponse(val cpeUri: String, val path: String, val version: VersionResponse)

An occurrence of a particular package installation found within a system's filesystem. E.g., glibc was found in /var/lib/dpkg/status.

MaterialResponse

data class MaterialResponse(val digest: Map<String, String>, val uri: String)

MetadataResponse

data class MetadataResponse(val buildFinishedOn: String, val buildInvocationId: String, val buildStartedOn: String, val completeness: CompletenessResponse, val reproducible: Boolean)

Other properties of the build.

NonCompliantFileResponse

data class NonCompliantFileResponse(val displayCommand: String, val path: String, val reason: String)

Details about files that caused a compliance check to fail. display_command is a single command that can be used to display a list of non compliant files. When there is no such command, we can also iterate a list of non compliant file using 'path'.

PackageIssueResponse

data class PackageIssueResponse(val affectedCpeUri: String, val affectedPackage: String, val affectedVersion: VersionResponse, val effectiveSeverity: String, val fileLocation: List<GrafeasV1FileLocationResponse>, val fixAvailable: Boolean, val fixedCpeUri: String, val fixedPackage: String, val fixedVersion: VersionResponse, val packageType: String)

A detail for a distro and package this vulnerability occurrence was found in and its associated fix (if one is available).

PackageNoteResponse

data class PackageNoteResponse(val architecture: String, val cpeUri: String, val description: String, val digest: List<DigestResponse>, val distribution: List<DistributionResponse>, val license: LicenseResponse, val maintainer: String, val name: String, val packageType: String, val url: String, val version: VersionResponse)

PackageNote represents a particular package version.

PackageOccurrenceResponse

data class PackageOccurrenceResponse(val architecture: String, val cpeUri: String, val license: LicenseResponse, val location: List<LocationResponse>, val name: String, val packageType: String, val version: VersionResponse)

Details on how a particular software package was installed on a system.

ProductResponse

data class ProductResponse(val genericUri: String, val name: String)

Product contains information about a product and how to uniquely identify it.

ProjectRepoIdResponse

data class ProjectRepoIdResponse(val project: String, val repoName: String)

Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.

PublisherResponse

data class PublisherResponse(val issuingAuthority: String, val name: String, val publisherNamespace: String)

Publisher contains information about the publisher of this Note.

RecipeResponse

data class RecipeResponse(val arguments: List<Map<String, String>>, val definedInMaterial: String, val entryPoint: String, val environment: List<Map<String, String>>, val type: String)

Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.

RelatedUrlResponse

data class RelatedUrlResponse(val label: String, val url: String)

Metadata for any related URL information.

RemediationResponse

data class RemediationResponse(val details: String, val remediationType: String, val remediationUri: RelatedUrlResponse)

Specifies details on how to handle (and presumably, fix) a vulnerability.

RepoIdResponse

data class RepoIdResponse(val projectRepoId: ProjectRepoIdResponse, val uid: String)

A unique identifier for a Cloud Repo.

SbomReferenceIntotoPayloadResponse

data class SbomReferenceIntotoPayloadResponse(val predicate: SbomReferenceIntotoPredicateResponse, val predicateType: String, val subject: List<SubjectResponse>, val type: String)

The actual payload that contains the SBOM Reference data. The payload follows the intoto statement specification. See https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for more details.

SbomReferenceIntotoPredicateResponse

data class SbomReferenceIntotoPredicateResponse(val digest: Map<String, String>, val location: String, val mimeType: String, val referrerId: String)

A predicate which describes the SBOM being referenced.

SBOMReferenceNoteResponse

data class SBOMReferenceNoteResponse(val format: String, val version: String)

The note representing an SBOM reference.

SBOMReferenceOccurrenceResponse

data class SBOMReferenceOccurrenceResponse(val payload: SbomReferenceIntotoPayloadResponse, val payloadType: String, val signatures: List<EnvelopeSignatureResponse>)

The occurrence representing an SBOM reference as applied to a specific resource. The occurrence follows the DSSE specification. See https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more details.

SignatureResponse

data class SignatureResponse(val publicKeyId: String, val signature: String)

Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from public_key_id to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature public_key_id as anything more than a key lookup hint. The public_key_id DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The public_key_id is not recognized by the verifier. * The public key that public_key_id refers to does not verify the signature with respect to the payload. The signature contents SHOULD NOT be "attached" (where the payload is included with the serialized signature bytes). Verifiers MUST ignore any "attached" payload and only verify signatures with respect to explicitly provided payload (e.g. a payload field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).

SlsaBuilderResponse

class SlsaBuilderResponse

SlsaCompletenessResponse

data class SlsaCompletenessResponse(val arguments: Boolean, val environment: Boolean, val materials: Boolean)

Indicates that the builder claims certain fields in this message to be complete.

SlsaMetadataResponse

data class SlsaMetadataResponse(val buildFinishedOn: String, val buildInvocationId: String, val buildStartedOn: String, val completeness: SlsaCompletenessResponse, val reproducible: Boolean)

Other properties of the build.

SlsaProvenanceResponse

data class SlsaProvenanceResponse(val builder: SlsaBuilderResponse, val materials: List<MaterialResponse>, val metadata: SlsaMetadataResponse, val recipe: SlsaRecipeResponse)

SlsaProvenanceZeroTwoResponse

data class SlsaProvenanceZeroTwoResponse(val buildConfig: Map<String, String>, val buildType: String, val builder: GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderResponse, val invocation: GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationResponse, val materials: List<GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialResponse>, val metadata: GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataResponse)

See full explanation of fields at slsa.dev/provenance/v0.2.

SlsaRecipeResponse

data class SlsaRecipeResponse(val arguments: Map<String, String>, val definedInMaterial: String, val entryPoint: String, val environment: Map<String, String>, val type: String)

Steps taken to build the artifact. For a TaskRun, typically each container corresponds to one step in the recipe.

SourceContextResponse

data class SourceContextResponse(val cloudRepo: CloudRepoSourceContextResponse, val gerrit: GerritSourceContextResponse, val git: GitSourceContextResponse, val labels: Map<String, String>)

A SourceContext is a reference to a tree of files. A SourceContext together with a path point to a unique revision of a single file or directory.

SourceResponse

data class SourceResponse(val additionalContexts: List<SourceContextResponse>, val artifactStorageSourceUri: String, val context: SourceContextResponse, val fileHashes: Map<String, String>)

Source describes the location of the source used for the build.

StatusResponse

data class StatusResponse(val code: Int, val details: List<Map<String, String>>, val message: String)

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

SubjectResponse

data class SubjectResponse(val digest: Map<String, String>, val name: String)

UpgradeDistributionResponse

data class UpgradeDistributionResponse(val classification: String, val cpeUri: String, val cve: List<String>, val severity: String)

The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities.

UpgradeNoteResponse

data class UpgradeNoteResponse(val distributions: List<UpgradeDistributionResponse>, val package: String, val version: VersionResponse, val windowsUpdate: WindowsUpdateResponse)

An Upgrade Note represents a potential upgrade of a package to a given version. For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), there will be an Upgrade Note. For Windows, windows_update field represents the information related to the update.

UpgradeOccurrenceResponse

data class UpgradeOccurrenceResponse(val distribution: UpgradeDistributionResponse, val package: String, val parsedVersion: VersionResponse, val windowsUpdate: WindowsUpdateResponse)

An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability). For Windows, both distribution and windows_update contain information for the Windows update.

VersionResponse

data class VersionResponse(val epoch: Int, val fullName: String, val inclusive: Boolean, val kind: String, val name: String, val revision: String)

Version contains structured information about the version of a package.

VexAssessmentResponse

data class VexAssessmentResponse(val cve: String, val impacts: List<String>, val justification: JustificationResponse, val noteName: String, val relatedUris: List<RelatedUrlResponse>, val remediations: List<RemediationResponse>, val state: String)

VexAssessment provides all publisher provided Vex information that is related to this vulnerability.

VulnerabilityAssessmentNoteResponse

data class VulnerabilityAssessmentNoteResponse(val assessment: AssessmentResponse, val languageCode: String, val longDescription: String, val product: ProductResponse, val publisher: PublisherResponse, val shortDescription: String, val title: String)

A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE.

VulnerabilityNoteResponse

data class VulnerabilityNoteResponse(val cvssScore: Double, val cvssV2: CVSSResponse, val cvssV3: CVSSv3Response, val cvssVersion: String, val details: List<DetailResponse>, val severity: String, val sourceUpdateTime: String, val windowsDetails: List<WindowsDetailResponse>)

A security vulnerability that can be found in resources.

VulnerabilityOccurrenceResponse

data class VulnerabilityOccurrenceResponse(val cvssScore: Double, val cvssV2: CVSSResponse, val cvssVersion: String, val cvssv3: CVSSResponse, val effectiveSeverity: String, val fixAvailable: Boolean, val longDescription: String, val packageIssue: List<PackageIssueResponse>, val relatedUrls: List<RelatedUrlResponse>, val severity: String, val shortDescription: String, val type: String, val vexAssessment: VexAssessmentResponse)

An occurrence of a severity vulnerability on a resource.

WindowsDetailResponse

data class WindowsDetailResponse(val cpeUri: String, val description: String, val fixingKbs: List<KnowledgeBaseResponse>, val name: String)

WindowsUpdateResponse

data class WindowsUpdateResponse(val categories: List<CategoryResponse>, val description: String, val identity: IdentityResponse, val kbArticleIds: List<String>, val lastPublishedTimestamp: String, val supportUrl: String, val title: String)

Windows Update represents the metadata about the update for the Windows operating system. The fields in this message come from the Windows Update API documented at https://docs.microsoft.com/en-us/windows/win32/api/wuapi/nn-wuapi-iupdate.