Class: Grafeas::V1::VulnerabilityOccurrence

Inherits:
Object
  • Object
show all
Defined in:
lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb

Overview

An occurrence of a severity vulnerability on a resource.

Defined Under Namespace

Classes: PackageIssue

Instance Attribute Summary collapse

Instance Attribute Details

#cvss_scoreFloat

Returns Output only. The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.

Returns:

  • (Float)

    Output only. The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#effective_severityGrafeas::V1::Severity

Returns The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability.

Returns:

  • (Grafeas::V1::Severity)

    The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability.



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#fix_availabletrue, false

Returns Output only. Whether at least one of the affected packages has a fix available.

Returns:

  • (true, false)

    Output only. Whether at least one of the affected packages has a fix available.



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#long_descriptionString

Returns Output only. A detailed description of this vulnerability.

Returns:

  • (String)

    Output only. A detailed description of this vulnerability.



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#package_issueArray<Grafeas::V1::VulnerabilityOccurrence::PackageIssue>

Returns Required. The set of affected locations and their fixes (if available) within the associated resource.

Returns:



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

Returns Output only. URLs related to this vulnerability.

Returns:



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#severityGrafeas::V1::Severity

Returns Output only. The note provider assigned severity of this vulnerability.

Returns:



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#short_descriptionString

Returns Output only. A one sentence description of this vulnerability.

Returns:

  • (String)

    Output only. A one sentence description of this vulnerability.



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end

#typeString

Returns The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).

Returns:

  • (String)

    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).



143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# File 'lib/grafeas/v1/doc/grafeas/v1/vulnerability.rb', line 143

class VulnerabilityOccurrence
  # A detail for a distro and package this vulnerability occurrence was found
  # in and its associated fix (if one is available).
  # @!attribute [rw] affected_cpe_uri
  #   @return [String]
  #     Required. The [CPE URI](https://cpe.mitre.org/specification/) this
  #     vulnerability was found in.
  # @!attribute [rw] affected_package
  #   @return [String]
  #     Required. The package this vulnerability was found in.
  # @!attribute [rw] min_affected_version
  #   @return [Grafeas::V1::Version]
  #     Required. The minimum version of the package this vulnerability exists
  #     in.
  # @!attribute [rw] fixed_cpe_uri
  #   @return [String]
  #     The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability
  #     was fixed in. It is possible for this to be different from the
  #     affected_cpe_uri.
  # @!attribute [rw] fixed_package
  #   @return [String]
  #     The package this vulnerability was fixed in. It is possible for this to
  #     be different from the affected_package.
  # @!attribute [rw] fixed_version
  #   @return [Grafeas::V1::Version]
  #     Required. The version of the package this vulnerability was fixed in.
  #     Setting this to VersionKind.MAXIMUM means no fix is yet available.
  # @!attribute [rw] fix_available
  #   @return [true, false]
  #     Output only. Whether a fix is available for this package.
  class PackageIssue; end
end