pulumi-google-native-kotlin/com.pulumi.googlenative.containeranalysis.v1beta1.kotlin.inputs/VulnerabilityArgs

VulnerabilityArgs

data class VulnerabilityArgs(val cvssScore: Output<Double>? = null, val cvssV2: Output<CVSSArgs>? = null, val cvssV3: Output<CVSSv3Args>? = null, val cvssVersion: Output<VulnerabilityCvssVersion>? = null, val cwe: Output<List<String>>? = null, val details: Output<List<DetailArgs>>? = null, val severity: Output<VulnerabilitySeverity>? = null, val sourceUpdateTime: Output<String>? = null, val windowsDetails: Output<List<WindowsDetailArgs>>? = null) : ConvertibleToJava<VulnerabilityArgs>

Vulnerability provides metadata about a security vulnerability in a Note.

Constructors

Link copied to clipboard
fun VulnerabilityArgs(cvssScore: Output<Double>? = null, cvssV2: Output<CVSSArgs>? = null, cvssV3: Output<CVSSv3Args>? = null, cvssVersion: Output<VulnerabilityCvssVersion>? = null, cwe: Output<List<String>>? = null, details: Output<List<DetailArgs>>? = null, severity: Output<VulnerabilitySeverity>? = null, sourceUpdateTime: Output<String>? = null, windowsDetails: Output<List<WindowsDetailArgs>>? = null)

Functions

Link copied to clipboard
open override fun toJava(): VulnerabilityArgs

Properties

Link copied to clipboard
val cvssScore: Output<Double>? = null

The CVSS score for this vulnerability.

Link copied to clipboard
val cvssV2: Output<CVSSArgs>? = null

The full description of the CVSS for version 2.

Link copied to clipboard
val cvssV3: Output<CVSSv3Args>? = null

The full description of the CVSS for version 3.

Link copied to clipboard
val cvssVersion: Output<VulnerabilityCvssVersion>? = null

CVSS version used to populate cvss_score and severity.

Link copied to clipboard
val cwe: Output<List<String>>? = null

A list of CWE for this vulnerability. For details, see: https://cwe.mitre.org/index.html

Link copied to clipboard
val details: Output<List<DetailArgs>>? = null

All information about the package to specifically identify this vulnerability. One entry per (version range and cpe_uri) the package vulnerability has manifested in.

Link copied to clipboard
val severity: Output<VulnerabilitySeverity>? = null

Note provider assigned impact of the vulnerability.

Link copied to clipboard
val sourceUpdateTime: Output<String>? = null

The time this information was last changed at the source. This is an upstream timestamp from the underlying information source - e.g. Ubuntu security tracker.

Link copied to clipboard
val windowsDetails: Output<List<WindowsDetailArgs>>? = null

Windows details get their own format because the information format and model don't match a normal detail. Specifically Windows updates are done as patches, thus Windows vulnerabilities really are a missing package, rather than a package being at an incorrect version.