pulumi-google-native-kotlin/com.pulumi.googlenative.containeranalysis.v1.kotlin.outputs/VulnerabilityOccurrenceResponse

VulnerabilityOccurrenceResponse

data class VulnerabilityOccurrenceResponse(val cvssScore: Double, val cvssV2: CVSSResponse, val cvssVersion: String, val cvssv3: CVSSResponse, val effectiveSeverity: String, val fixAvailable: Boolean, val longDescription: String, val packageIssue: List<PackageIssueResponse>, val relatedUrls: List<RelatedUrlResponse>, val severity: String, val shortDescription: String, val type: String, val vexAssessment: VexAssessmentResponse)

An occurrence of a severity vulnerability on a resource.

Constructors

constructor(cvssScore: Double, cvssV2: CVSSResponse, cvssVersion: String, cvssv3: CVSSResponse, effectiveSeverity: String, fixAvailable: Boolean, longDescription: String, packageIssue: List<PackageIssueResponse>, relatedUrls: List<RelatedUrlResponse>, severity: String, shortDescription: String, type: String, vexAssessment: VexAssessmentResponse)

Types

Companion

object Companion

Properties

cvssScore

val cvssScore: Double

The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.

cvssV2

val cvssV2: CVSSResponse

The cvss v2 score for the vulnerability.

cvssv3

val cvssv3: CVSSResponse

The cvss v3 score for the vulnerability.

cvssVersion

val cvssVersion: String

CVSS version used to populate cvss_score and severity.

effectiveSeverity

val effectiveSeverity: String

The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.

fixAvailable

val fixAvailable: Boolean

Whether at least one of the affected packages has a fix available.

longDescription

val longDescription: String

A detailed description of this vulnerability.

packageIssue

val packageIssue: List<PackageIssueResponse>

The set of affected locations and their fixes (if available) within the associated resource.