# Functions

# Constants

See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.

# Structs

AliasContext: An alias to a repo revision.
AnalysisCompleted: Indicates which analysis completed successfully.
Artifact: Artifact describes a build product.
Assessment: Assessment provides all information that is related to a single vulnerability for this product.
AttestationNote: Note kind that represents a logical attestation "role" or "authority".
AttestationOccurrence: Occurrence that represents a single "attestation".
BatchCreateNotesRequest: Request to create notes in batch.
BatchCreateNotesResponse: Response for creating notes in batch.
BatchCreateOccurrencesRequest: Request to create occurrences in batch.
BatchCreateOccurrencesResponse: Response for creating occurrences in batch.
Binding: Associates `members`, or principals, with a `role`.
BuildNote: Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
BuildOccurrence: Details of a build occurrence.
BuildProvenance: Provenance of a build.
BuildStep: A step in the build pipeline.
Category: The category to which the update belongs.
CisBenchmark: A compliance check that is a CIS benchmark.
CloudRepoSourceContext: A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
CloudStorageLocation: Empty placeholder to denote that this is a Google Cloud Storage export request.
Command: Command describes a step performed as part of the build pipeline.
Completeness: Indicates that the builder claims certain fields in this message to be complete.
ComplianceOccurrence: An indication that the compliance checks in the associated ComplianceNote were not satisfied for particular resources or a specified reason.
ComplianceVersion: Describes the CIS benchmark version that is applicable to a given OS and os version.
ContaineranalysisGoogleDevtoolsCloudbuildV1ApprovalConfig: ApprovalConfig describes configuration for manual approval of a build.
ContaineranalysisGoogleDevtoolsCloudbuildV1ApprovalResult: ApprovalResult describes the decision and associated metadata of a manual approval of a build.
ContaineranalysisGoogleDevtoolsCloudbuildV1Artifacts: Artifacts produced by a build that should be uploaded upon successful completion of all build steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsArtifactObjects: Files in the workspace to upload to Cloud Storage upon successful completion of all build steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsGoModule: Go module to upload to Artifact Registry upon successful completion of all build steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsMavenArtifact: A Maven artifact to upload to Artifact Registry upon successful completion of all build steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsNpmPackage: Npm package to upload to Artifact Registry upon successful completion of all build steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1ArtifactsPythonPackage: Python package to upload to Artifact Registry upon successful completion of all build steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1Build: A build resource in the Cloud Build API.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuildApproval: BuildApproval describes a build's approval configuration, state, and result.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuildFailureInfo: A fatal problem encountered during the execution of the build.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuildOptions: Optional arguments to enable specific features of builds.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuildOptionsPoolOption: Details about how a build should be executed on a `WorkerPool`.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuildStep: A step in the build pipeline.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuildWarning: A non-fatal problem encountered during the execution of the build.
ContaineranalysisGoogleDevtoolsCloudbuildV1BuiltImage: An image built by the pipeline.
ContaineranalysisGoogleDevtoolsCloudbuildV1ConnectedRepository: Location of the source in a 2nd-gen Google Cloud Build repository resource.
ContaineranalysisGoogleDevtoolsCloudbuildV1Dependency: A dependency that the Cloud Build worker will fetch before executing user steps.
ContaineranalysisGoogleDevtoolsCloudbuildV1DependencyGitSourceDependency: Represents a git repository as a build dependency.
ContaineranalysisGoogleDevtoolsCloudbuildV1DependencyGitSourceRepository: A repository for a git source.
ContaineranalysisGoogleDevtoolsCloudbuildV1DeveloperConnectConfig: This config defines the location of a source through Developer Connect.
ContaineranalysisGoogleDevtoolsCloudbuildV1FileHashes: Container message for hashes of byte content of files, used in SourceProvenance messages to verify integrity of source input to the build.
ContaineranalysisGoogleDevtoolsCloudbuildV1GitConfig: GitConfig is a configuration for git operations.
ContaineranalysisGoogleDevtoolsCloudbuildV1GitConfigHttpConfig: HttpConfig is a configuration for HTTP related git operations.
ContaineranalysisGoogleDevtoolsCloudbuildV1GitSource: Location of the source in any accessible Git repository.
ContaineranalysisGoogleDevtoolsCloudbuildV1Hash: Container message for hash values.
ContaineranalysisGoogleDevtoolsCloudbuildV1InlineSecret: Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
ContaineranalysisGoogleDevtoolsCloudbuildV1RepoSource: Location of the source in a Google Cloud Source Repository.
ContaineranalysisGoogleDevtoolsCloudbuildV1Results: Artifacts created by the build pipeline.
ContaineranalysisGoogleDevtoolsCloudbuildV1Secret: Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
ContaineranalysisGoogleDevtoolsCloudbuildV1SecretManagerSecret: Pairs a secret environment variable with a SecretVersion in Secret Manager.
ContaineranalysisGoogleDevtoolsCloudbuildV1Secrets: Secrets and secret environment variables.
ContaineranalysisGoogleDevtoolsCloudbuildV1Source: Location of the source in a supported storage service.
ContaineranalysisGoogleDevtoolsCloudbuildV1SourceProvenance: Provenance of the source.
ContaineranalysisGoogleDevtoolsCloudbuildV1StorageSource: Location of the source in an archive file in Cloud Storage.
ContaineranalysisGoogleDevtoolsCloudbuildV1StorageSourceManifest: Location of the source manifest in Cloud Storage.
ContaineranalysisGoogleDevtoolsCloudbuildV1TimeSpan: Start and end times for a build execution phase.
ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedGoModule: A Go module artifact uploaded to Artifact Registry using the GoModule directive.
ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedMavenArtifact: A Maven artifact uploaded using the MavenArtifact directive.
ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedNpmPackage: An npm package uploaded to Artifact Registry using the NpmPackage directive.
ContaineranalysisGoogleDevtoolsCloudbuildV1UploadedPythonPackage: Artifact uploaded using the PythonPackage directive.
ContaineranalysisGoogleDevtoolsCloudbuildV1Volume: Volume describes a Docker container volume which is mounted into build steps in order to persist files across build step execution.
CVSS: Common Vulnerability Scoring System.
CVSSv3: Common Vulnerability Scoring System version 3.
DeploymentNote: An artifact that can be deployed in some runtime.
DeploymentOccurrence: The period during which some deployable was active in a runtime.
Detail: A detail for a distro and package affected by this vulnerability and its associated fix (if one is available).
Digest: Digest information.
DiscoveryNote: A note that indicates a type of analysis a provider would perform.
DiscoveryOccurrence: Provides information about the analysis status of a discovered resource.
Distribution: This represents a particular channel of distribution for a given package.
DSSEAttestationOccurrence: Deprecated.
DSSEHint: This submessage provides human-readable hints about the purpose of the authority.
Empty: A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs.
Envelope: MUST match https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto.
ExportSBOMRequest: The request to generate and export SBOM.
ExportSBOMResponse: The response from a call to ExportSBOM.
Expr: Represents a textual expression in the Common Expression Language (CEL) syntax.
FileHashes: Container message for hashes of byte content of files, used in source messages to verify integrity of source input to the build.
Fingerprint: A set of properties that uniquely identify a given Docker image.
FixableTotalByDigest: Per resource and severity counts of fixable and total vulnerabilities.
GerritSourceContext: A SourceContext referring to a Gerrit project.
GetIamPolicyRequest: Request message for `GetIamPolicy` method.
GetPolicyOptions: Encapsulates settings provided to GetIamPolicy.
GitSourceContext: A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
GoogleDevtoolsContaineranalysisV1alpha1OperationMetadata: Metadata for all operations used and required for all operations that created by Container Analysis Providers.
GrafeasV1FileLocation: Indicates the location at which a package was found.
GrafeasV1SlsaProvenanceZeroTwoSlsaBuilder: Identifies the entity that executed the recipe, which is trusted to have correctly performed the operation and populated this provenance.
GrafeasV1SlsaProvenanceZeroTwoSlsaCompleteness: Indicates that the builder claims certain fields in this message to be complete.
GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSource: Describes where the config file that kicked off the build came from.
GrafeasV1SlsaProvenanceZeroTwoSlsaInvocation: Identifies the event that kicked off the build.
GrafeasV1SlsaProvenanceZeroTwoSlsaMaterial: The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on.
GrafeasV1SlsaProvenanceZeroTwoSlsaMetadata: Other properties of the build.
Hash: Container message for hash values.
Hint: This submessage provides human-readable hints about the purpose of the authority.
Identity: The unique identifier of the update.
ImageNote: Basis describes the base image portion (Note) of the DockerImage relationship.
ImageOccurrence: Details of the derived image portion of the DockerImage relationship.
InTotoStatement: Spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement The serialized InTotoStatement will be stored as Envelope.payload.
Justification: Justification provides the justification when the state of the assessment if NOT_AFFECTED.
Layer: Layer holds metadata specific to a layer of a Docker image.
License: License information.
ListNoteOccurrencesResponse: Response for listing occurrences for a note.
ListNotesResponse: Response for listing notes.
ListOccurrencesResponse: Response for listing occurrences.
Location: An occurrence of a particular package installation found within a system's filesystem.
Metadata: Other properties of the build.
NonCompliantFile: Details about files that caused a compliance check to fail.
Note: A type of analysis that can be done for a resource.
Occurrence: An instance of an analysis type that has been found on a resource.
PackageIssue: A detail for a distro and package this vulnerability occurrence was found in and its associated fix (if one is available).
PackageNote: PackageNote represents a particular package version.
PackageOccurrence: Details on how a particular software package was installed on a system.
Policy: An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources.
Product: Product contains information about a product and how to uniquely identify it.
ProjectRepoId: Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
Publisher: Publisher contains information about the publisher of this Note.
Recipe: Steps taken to build the artifact.
RelatedUrl: Metadata for any related URL information.
Remediation: Specifies details on how to handle (and presumably, fix) a vulnerability.
RepoId: A unique identifier for a Cloud Repo.
SbomReferenceIntotoPayload: The actual payload that contains the SBOM Reference data.
SbomReferenceIntotoPredicate: A predicate which describes the SBOM being referenced.
SBOMReferenceNote: The note representing an SBOM reference.
SBOMReferenceOccurrence: The occurrence representing an SBOM reference as applied to a specific resource.
SBOMStatus: The status of an SBOM generation.
SetIamPolicyRequest: Request message for `SetIamPolicy` method.
Signature: Verifiers (e.g.
SlsaCompleteness: Indicates that the builder claims certain fields in this message to be complete.
SlsaMetadata: Other properties of the build.
SlsaProvenanceV1: Keep in sync with schema at https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto Builder renamed to ProvenanceBuilder because of Java conflicts.
SlsaProvenanceZeroTwo: See full explanation of fields at slsa.dev/provenance/v0.2.
SlsaRecipe: Steps taken to build the artifact.
Source: Source describes the location of the source used for the build.
SourceContext: A SourceContext is a reference to a tree of files.
Status: The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs.
TestIamPermissionsRequest: Request message for `TestIamPermissions` method.
TestIamPermissionsResponse: Response message for `TestIamPermissions` method.
TimeSpan: Start and end times for a build execution phase.
UpgradeDistribution: The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE).
UpgradeNote: An Upgrade Note represents a potential upgrade of a package to a given version.
UpgradeOccurrence: An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade.
Version: Version contains structured information about the version of a package.
VexAssessment: VexAssessment provides all publisher provided Vex information that is related to this vulnerability.
Volume: Volume describes a Docker container volume which is mounted into build steps in order to persist files across build step execution.
VulnerabilityAssessmentNote: A single VulnerabilityAssessmentNote represents one particular product's vulnerability assessment for one CVE.
VulnerabilityNote: A security vulnerability that can be found in resources.
VulnerabilityOccurrence: An occurrence of a severity vulnerability on a resource.
VulnerabilityOccurrencesSummary: A summary of how many vulnerability occurrences there are per resource and severity type.
WindowsUpdate: Windows Update represents the metadata about the update for the Windows operating system.