cloudPlatformScope _requesterprojects locationsnotes occurrences resources batchCreatecreatedeleteget getIamPolicylistpatch setIamPolicytestIamPermissionsgetNotesgetVulnerabilitySummary exportSBOMcveimpacts justificationlongDescription relatedUris remediationsshortDescriptionstatevulnerabilityIdtoJsonhintjwtsserializedPayloadserializedPayloadAsBytes signatures conditionmembersrole buildTypeexternalParametersinternalParametersresolvedDependenciesbuilderVersioninTotoSlsaProvenanceV1intotoProvenanceintotoStatement provenanceprovenanceBytes buildOptionsbuiltArtifactscommands createTimecreatorendTimeidlogsUri projectIdsourceProvenance startTime triggerIdattackComplexity attackVectoravailabilityImpact baseScoreconfidentialityImpactexploitabilityScore impactScoreintegrityImpactprivilegesRequiredscopeuserInteraction profileLevelseverity aliasContextrepoId revisionId cisBenchmark descriptionimpact rationale remediationscanInstructionsscanInstructionsAsBytestitleversionnonComplianceReasonnonCompliantFilesenvelope statementhumanReadableName resourceUriaffectedCpeUriaffectedPackageaffectedVersionEndaffectedVersionStart fixedCpeUri fixedPackage fixedVersion isObsolete packageType severityNamesourcesourceUpdateTimevendoralgo digestBytesdigestBytesAsBytes analysisKindanalysisCompleted analysisErroranalysisStatusanalysisStatusError archiveTimecontinuousAnalysiscpefiles lastScanTimelastVulnerabilityUpdateTime sbomStatus architecturecpeUri latestVersion maintainerurlpayloadpayloadAsBytes payloadTypecloudStorageLocationdiscoveryOccurrencefileHash fixableCount totalCount gerritProjecthostUrioptionsfilePath layerDetails configSource environment parametersbuildFinishedOnbuildInvocationIdbuildStartedOn completeness reproducible fingerprint resourceUrlbaseResourceUrldistance layerInfo builderConfig materialsmetadatarecipeP_type predicate predicateTypesubjectslsaProvenanceslsaProvenanceZeroTwoname baseImageschainIdcommanddiffIdindex nextPageToken unreachablepathadvisoryPublishTime attestationbuild compliance deployment discoverydsseAttestationexpirationTimeimagekindpackagerelatedNoteNames relatedUrl sbomReferencesecret updateTimeupgrade vulnerabilityvulnerabilityAssessmentnoteNameaffectedVersioneffectiveSeverity fileLocation fixAvailabledigest distributionlicenselocationbindingsetag etagAsBytes genericUribuilderDependenciesissuingAuthoritypublisherNamespacedetailsremediationTyperemediationUri projectRepoIduidcisaKevepssbuilder byproductsformatstatusespolicybuildDefinition runDetails buildConfig invocationadditionalContextsartifactStorageSourceUricontext fileHashes cloudRepogerritgitlabels distributions windowsUpdate parsedVersion assessment languageCodeproduct publisher cvssScorecvssV2cvssV3 cvssVersionwindowsDetailscvssv3 extraDetails packageIssue relatedUrlsrisktype vexAssessmentcounts fixingKbs categoriesidentity kbArticleIdslastPublishedTimestamp supportUrlContainerAnalysisApiProjectsResourceProjectsLocationsResourceProjectsLocationsNotesResource)ProjectsLocationsNotesOccurrencesResource$ProjectsLocationsOccurrencesResource"ProjectsLocationsResourcesResourceProjectsNotesResource ProjectsNotesOccurrencesResourceProjectsOccurrencesResourceProjectsResourcesResource AliasContextAnalysisCompletedArtifact AssessmentAttestationNoteAttestationOccurrence BaseImageBatchCreateNotesRequestBatchCreateNotesResponseBatchCreateOccurrencesRequestBatchCreateOccurrencesResponseBindingBuildDefinition BuildMetadata BuildNoteBuildOccurrenceBuildProvenance BuilderConfig!CISAKnownExploitedVulnerabilitiesCVSSCVSSv3Category CisBenchmarkCloudRepoSourceContextCloudStorageLocationCommand CompletenessComplianceNoteComplianceOccurrenceComplianceVersionDSSEAttestationNoteDSSEAttestationOccurrenceDSSEHintDeploymentNoteDeploymentOccurrenceDetailDigest DiscoveryNoteDiscoveryOccurrence DistributionEmptyEnvelopeEnvelopeSignatureExploitPredictionScoringSystemExportSBOMRequestExportSBOMResponseExprFile FileHashes FingerprintFixableTotalByDigestGerritSourceContextGetIamPolicyRequestGetPolicyOptionsGitSourceContextGrafeasV1FileLocation)GrafeasV1SlsaProvenanceZeroTwoSlsaBuilder.GrafeasV1SlsaProvenanceZeroTwoSlsaCompleteness.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSource,GrafeasV1SlsaProvenanceZeroTwoSlsaInvocation*GrafeasV1SlsaProvenanceZeroTwoSlsaMaterial*GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataHashHintIdentity ImageNoteImageOccurrenceInTotoProvenanceInTotoSlsaProvenanceV1InTotoStatement JustificationJwt KnowledgeBaseLayer LayerDetailsLicenseListNoteOccurrencesResponseListNotesResponseListOccurrencesResponseLocationMaterialMetadataNonCompliantFileNote Occurrence PackageIssue PackageNotePackageOccurrencePolicyProduct ProjectRepoIdProvenanceBuilder PublisherRecipe RelatedUrl RemediationRepoIdResourceDescriptorRisk RunDetailsSBOMReferenceNoteSBOMReferenceOccurrence SBOMStatusSbomReferenceIntotoPayloadSbomReferenceIntotoPredicateSecretLocation SecretNoteSecretOccurrence SecretStatusSetIamPolicyRequest Signature SlsaBuilderSlsaCompleteness SlsaMetadataSlsaProvenanceSlsaProvenanceV1SlsaProvenanceZeroTwo SlsaRecipeSource SourceContextStatusSubjectTestIamPermissionsRequestTestIamPermissionsResponseUpgradeDistribution UpgradeNoteUpgradeOccurrenceVersion VexAssessmentVulnerabilityAssessmentNoteVulnerabilityNoteVulnerabilityOccurrenceVulnerabilityOccurrencesSummary WindowsDetail WindowsUpdateAApiRequestErrorDetailedApiRequestError ApiRequesterClientStringrootUrl servicePathrequestHeaders$fieldsFuturejsonencodeListUri encodeFullrequestbody queryParamsfromJsonMapdynamicnoteIdfilterpageSize pageTokenreturnPartialSuccessintbool updateMask $AliasContext$AnalysisCompleted $Artifact DeprecatedcveimpactsmapvaluetoList justification containsKeylongDescription relatedUris remediationsshortDescriptionstatevulnerabilityIdhintbase64decode replaceAlljwtsserializedPayload signatures $BaseImagenotesMapEntrykey occurrences conditionmembersroleObject buildTypeexternalParametersinternalParametersresolvedDependencies$BuildMetadatabuilderVersioninTotoSlsaProvenanceV1intotoProvenanceintotoStatement provenanceprovenanceBytes buildOptionsbuiltArtifactscommands createTimecreatorendTimeidlogsUri projectIdsourceProvenance startTime triggerId $Shared03"$CISAKnownExploitedVulnerabilities$CVSSdoubleattackComplexity attackVectoravailabilityImpact baseScorenumtoDoubleconfidentialityImpactexploitabilityScore impactScoreintegrityImpactprivilegesRequiredscopeuserInteraction $Category profileLevelseverity aliasContextrepoId revisionId$Empty$Command $Completeness cisBenchmark descriptionimpact rationale remediationscanInstructionstitleversionnonComplianceReasonnonCompliantFiles$ComplianceVersionenvelope statementhumanReadableName resourceUri$DeploymentOccurrenceaffectedCpeUriaffectedPackageaffectedVersionEndaffectedVersionStart fixedCpeUri fixedPackage fixedVersion isObsolete packageType severityNamesourcesourceUpdateTimevendoralgo digestBytes analysisKindanalysisCompleted analysisErroranalysisStatusanalysisStatusError archiveTimecontinuousAnalysiscpefiles lastScanTimelastVulnerabilityUpdateTime sbomStatus architecturecpeUri latestVersion maintainerurlpayload payloadType$EnvelopeSignature$ExploitPredictionScoringSystemcloudStorageLocationdiscoveryOccurrence$Expr$FilefileHash $Fingerprint fixableCount totalCount gerritProjecthostUrioptions$GetPolicyOptions00$GitSourceContextfilePath layerDetails/$GrafeasV1SlsaProvenanceZeroTwoSlsaCompleteness/$GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSource configSource environment parameters $MaterialbuildFinishedOnbuildInvocationIdbuildStartedOn completeness reproducible$Hash $Identity fingerprint resourceUrlbaseResourceUrldistance layerInfo builderConfig materialsmetadatarecipeP_type predicate predicateTypesubjectslsaProvenanceslsaProvenanceZeroTwo$Justification$Jwtname$Layer baseImageschainIdcommanddiffIdindex$License nextPageToken unreachablepath$NonCompliantFileadvisoryPublishTime attestationbuild compliance deployment discoverydsseAttestationexpirationTimeimagekindpackagerelatedNoteNames relatedUrl sbomReferencesecret updateTimeupgrade vulnerabilityvulnerabilityAssessmentnoteNameaffectedVersioneffectiveSeverity fileLocation fixAvailabledigest distributionlicenselocationbindingsetag genericUri$ProjectRepoIdbuilderDependenciesissuingAuthoritypublisherNamespace$Recipe $RelatedUrldetailsremediationTyperemediationUri projectRepoIduid$ResourceDescriptorcisaKevepssbuilder byproductsformat $SBOMStatus$SbomReferenceIntotoPredicate locationsstatuses $SecretStatuspolicy $SignaturebuildDefinition runDetails buildConfig invocation $SlsaRecipeadditionalContextsartifactStorageSourceUricontext fileHashes cloudRepogerritgitlabels $Status00$Subject$TestIamPermissionsRequest00$PermissionsResponse$UpgradeDistribution distributions windowsUpdate parsedVersion$Version assessment languageCodeproduct publisher cvssScorecvssV2cvssV3 cvssVersionwindowsDetailscvssv3 extraDetails packageIssue relatedUrlsrisktype vexAssessmentcounts fixingKbs categoriesidentity kbArticleIdslastPublishedTimestamp supportUrl 伴#oApiRequestErrorDetailedApiRequestError':package:_discoveryapis_commons/_discoveryapis_commons.dart),async, dart:async4ILconvertL dart:convertVhkcorek dart:corescommons:package:_discoveryapis_commons/_discoveryapis_commons.darthttppackage:http/http.dart../shared.dart../src/user_agent.dartdGHmЀ)[ʂ*`a΃kڄ $pt܅Et 3Uqr†&'kcڈGnʉˉ67OiҊ 5NXZ[tˋ@q͌BDEg+cώЏ "#Jst/JKmsȑ R28"X}.cjk:Ao͕Ӗ"(j4:$uǘ٘ &3c֚ WX֚ݛ)-.PVpv=CĜʝ(.Cx%,y}~à0N۠gtzˢKǢȢ0(Mn!V]^ܾ *1Ϳ߿@!@f@@@A"A(ABAHAAAB(BFBBBBBCC$CuCCCDDMDtDDDDE'E\EcEdEuEEEEF FF>FEFuFFFFFFGGG`G{G|GGHH<HBH\HbHHIIAIGIoIuIIJ JJ[JkJqJJJK KKbKKKKLL.LHLULLMMBMwM~MMMMNNN2N9NjNNNNNNOOOKOfOgOOOOOOP,PzPPQQ!Q'Q`QfQQQRRPRRRRRS(ShSSSSTTT4T@TNTaTTTTTUUU!U'UVU\UvU|UV VPVVVVVVVW3W@WFWWWXX!X;XHXxXXXXY?Y@YpY|YYYYYZZ$Z(Z)ZQZWZZZZ[[E[[[[\1\A\G\g\m\\\]"]W]]^^"^#^Z^[^^^^^__ _!_F_L_f_l__``J`P`````a-a:a@aabbWbbbbbbccc6c=c]ccccccd+d|deeKeQeeeeeffSffffg0g@gFgggmgggh"hWh|hhhhiiPiiiiij jj%j8jYj`jjjjjk?kWk]kwk}kkll[lalllllm8mEmKmmn!nannnnnooo*oKoRooooopp pSpppqqqTqqqrrNr^rdrrrsssYssst t/tItVttuuu?utu{u|uuuuuv$v0v=v^vevvvvvwww1w7wwwwx$x*xrxxxy(y.y{yzzzfzvz|zz{{{{i{{{{||3|X|r|||}0}l}}}~~~~i~j~~~~~@GKLtzMk/?Ejp%Z| `DP_rHN#_Mb>D*02?o9:jv [ms0{%:gw} m$>K{ ST AHLNOz28gm$_eJW]1IcpdeJQUWXv WXz_-3Sx)^ef5<j#e#n~ ^L@Aq}9?Y__ouPIPQJNOntCI -3Dy#*vz{V%+Z`z-Y#)z8Yu AHIjno5io:@3v| `ms!;TlG7lst#*Q OCSYx~3h"bFRat7=vNÙß<Qġ`pvŗŝRƇƬ@ǀǵǼǽ ;GUhȉȐ,>DɀLRʁʇʡʧ [ˇ*0ek̼ U͔ͻ.nΣΪΫμ7CQdυόϼ+TUЕаб9qwёї^dҌҒ'-xӈӎ(.Դ/Kerղ#_֛֔֜!.OVׇ׿Vqrؚؠ7مٹٿ  Y_ڰڽIۅ۰!aܖܝܞܯ-9GZ{݂ݶ OUou޷7=߈ߘߞ'-~"/_&'Wcq 8>,g6<&u)*Zfv5;~RbhH}CJKLSWX3{7=W] 6~ ]jp<Xr$+,yzMQR_3CIhn#X$%gh%)*jpHNv|]rxjw}Lf >z;hiGNRS%Y_ 6<.x~hu{/Ibz"U Ez 7>k ,2u ) / z        p      . ; k    & ' ^ _        = D H I   #n*0JP)qwP]c/Kerlm@DE'c Xm17$17#?Yf $no$\cgij7=lr LR7DJ6P]    Q R       !7!>!B!D!E!f!!!!" "<"="e"""""#I#v#|##$$$-$.${$$$%%%>%?%i%%%%%&<&&&&'7'_'`''''( (B((()8)))))*6*<*z*******++)+D+T+n+t+u+++,,7,N,,,- -!-d---....<.S...// /./E///00070Q0s0001)1]1{111122:2]222222223J3N3348445 5H5`55555566-6J6666667 7'7+7-7.7e7i778B889"9W9u99::T::;.;r;;;<<<(P>>>???F?R?~???@@@d@@@AA+A9APAYAZAAABBB'BVBwB~BBBBBBCC'CBCHCjCpCCCCCDDD^DDDDDEEE4EREpEtEvEwEEEEFF*F+F_FkFFFGG"G9GBGCGtGGGGGGH H*H0HRHXHhHHHHHI IDIWIIIIIJJJ4J^JJJJJJKK5K6KlKmKKKLL.LlL}LLLLLMM1M5M7M8MpMMMN N]NNO=OUOOOPPP_PPQLQQR/RRRS;SRSTTfTTU%UUV7VdVW(W{WXLXY Y2YZ"ZZ[[h[\\-\}\\]7]u]^^e^^_)_J_``````aHaabbLbabbbbbbbccbcrcccdd/d8d9djdddeeeee7eQeReXe^eef*f+f1f7ffgg:g;gOgcgggggggh1huhhiioiiijjVjgjujjjjjk%k]kkkkl'l\lclgliljlllmm-memkmmmmmmn5n6ngnnnnnno oXooopp2p3pbphpppppqq$qrqqqqrr=r>rrrss^sstKttttuu#u>uXumuuuuuvv@vpvvvww9wcwwwxx)xzxxxxyFyVyjyyyyz(z\zzzz{.{[{{{{{{{{{|N|m|||}}}R}S}}}}}}~&~F~G~r~~~~l&'bz{4NO+@Rdq .z L_3FqQWv7nwx5Y%Y)Fg4SZ^`aS)-t56 +Lj/RS2X| ?@Fh$Fb|>^_j !;Xh9\vHw)U+UIn(Kv%CDt:^~)c#fjlm67Qcdy!Y~;Gg Ta7EklE_`#X!@DE| "8I]s%J(_@S7c1Oq~!Ne#@d 'CU[\)<p<Tv  ^k  12am  )*[w:JVGo=cT?23YZ~1gkmn,-ST~ŠIsÝáãä mėĦ78fl|ŜŝLƜ6DžǓDzdzdȴNɝɫ$%uʱʷlˁˇ=RX̟̰8QR͜ͻ/0yΐΑ$HijϗϮϯϺ )?UlЃИЮ +7xѻK҇җҫA}ӍӡTԌԬ UՐCt}~֯Iׅׯ1Y؃د#0Yلٵ 0Uzڛھ)BIMOPhwۓۨ۩;<sܔܬ:Fsݮݷݸ/hlno޶޺BXߖߜ߷ f{LFWhA `|!EFvBkFef BwH\]@lm3Ift ZM`y0v"]+zCw E{=u#KX -^qmq6q$^dt?YZ 7H^vB}&6J5_=diJN~(E]{'(LXFAiv]^$39Iwx , Y       " ^        p       l m       e q u \1{_H[n I\u$Hlprs(E Su'Ohi'<BCs,enoBOt2`~/MNz&;ABq}(8L2^  / J k r v x y  ! ! !=!>!e!f!!!!"A"Q"e"n"o""""""##O#P####$!$?$$$$%8%q%%%%%& &@&x&&&''''J'n'''''(1(v(()))H)})~))**Q****+0+1+7+=++,,, ,,Z,,,---2-G-M-N---.!.o...//'/[/////00I0q0~00000001B1y1112202R2q22223323K3b3y333344\4455j5z55556666l66677,7[77777778888e8t8x899b99::V:\:l:::::;;;O;;;;;;< < >>D>E>j>v>>??-?A?|????@ @R@V@X@Y@@@@AGAMA`AAAAAABBB;BABQBmBnBCCDCcCdCxCCCCCCDD DPDDDE)E9EMEEEEF F$F-F.F_FFFGGG=GZG}GGGGGGGGGHBH{HHII,IBICIzIIJJHJZJ[JpJJJJJJJJK9K_KKKLL;LRLLLLMM=M\MMMMMNN1NWN{NNNNO O$O+O/O1O2OQOnOOOPP'P(PCPTPhPPPPPPQQ9QbQQQRRBRURRRRRRRS/SOSuSSSST T0TKTRTVTXTYTmTTTU?UWUUUUUVV>VnVVVVVVVWW+W1W2W]WiWWX X5XXXXYYXYhY|YYZ#Z_ZoZZZZ[1[B[P[g[p[q[[[\\H\\\\\]]>]u]]]]]]^^)^=^>^T^^^^__._/_W_X______` `<`V```````aa(aYa}a~aab%b=b>b~bbbbbcMcdcecccccccd ddd dHdTddde ee)e@eseeff f f>fffffffgg1gLgeg|gggggggghhVhthuhhhiiiQi]iiijjUjfjtjjjjjkkikmkokpkkkkl2lUlsltlllllmmCmvmmmmnn!n`nnno oo.ohooooopp9pcpppppppppqq%q[qaqqqqrr6r7rMrSrrss*s+sGs_susssssttJt]tttttu9uluuuuuvv@vMvtvvvvvvww'w+w`wqwwwwwx7xLxMx{xxxxxxyy y>ykyyzzz&z/z0zazzz{{{ { {({){L{]{{{{|1|7||||||}>}N}l}m}}~~~~(~D~]~t~~~~~L8H\:j)Rw<+y-ABn ()a 23[a>DWy^49rFs/5H]^8]^78ci %&W{|&6K`u1F^oi$8b#J'Naq@Pd8H\'K/F~3m 6Y Cq<f'['a!Gy1S1Y{+Ne;Rg7P}"&()pUyz;<l)?@:@SuZ05nBo gYwx%+x$%?[\%&Pz{0@O^qDP%OwC MfvK[o .XEz+?zn~/?S-=Q‹» .78iÓñ)OāĥAkŕ -[hƋƢ$Olǃǘǭ+RkȌȧ-_t  >DTtu^ˮ˿$Jȟ̬+]^͑͗ͪ'-vΒΓ23u{$@ARkЅПл-CIJr~ѿ@`ұXkӤSԎ#qՁՕ ;m֟-W׃ׯ:eؔع&Knuy{|ٵ&,dچ"#tۮ۴*FGܖܮ "KLݒݦݧ!'BWXޢ:NO_v߇ߝ߮178_kDWp"5e'p5`$%V:b~/Rk29=?@ AGZ|jXlm9NO)=>Tk| U-Au(U'7KTU4^;V]acd(qXA A}V4}O5$qRAciW;23c}XD,r\r2] . 7 8 i        h p       X u {     & ; < n o     - 6 7 h      PEF%[D@M` EZ[{/RSAMZQ]wx+x.`<=uE7G[de'Bm23h|}  6      !!=!W!!!!!!!")"F"t"u"##:#;#^#_####$<$L$`$$%%%)%2%3%d%%%%%%%& &8&S&T&&&&&''f'v'''( (I(Z(h((())/)C)L)M)~))))**5*R*Y*]*_*`*****+++F+L++++++, ,<,o,x,y,,,-!-%-'-(-s---. ..9.y..../,/R/n/o///000E0Q0001 11Z11122)272N2W2X22223 3%3H3i3p3t3v3w333344B4444555?5E5t5555561676q6666666777<7H7x778*8:8N88889;9L9Z9q9z9{999: :B:O:g:::::::;;W;X;x;;;;<<<0<<!>:>P>V>f>>>?C?R??@@i@@AAcAAB1B|BBBC9CCCCDNDlDDE"EfEEF FgFFFFFGG0G1GMGSGcGGGGGHH/HeHxHHHIIIRIeIIIIJ JJJDJ`JJJJJJK,KRKSKKKKL:LLLLLLMMM<M[MMMMMNN"NBNFNHNINNNO/O}OPPkPQ QNQQR5RRSSiSSSSTT,TVTWTzTTTTU+UcUiUUUVV"V#VpVVVVWW6W7WHWbW~WWWWWWXXCXXYY,YzYYYYYZZFZ|ZZ[[[<[k[[[[[[[\\\*\+\z\\] ]?]a]{]|]]^^V^^^^^___K_o___``%`Q`````aadataaabb/bCbLbMb~bbbc cc2cQcnccccccddYdrdddddee'eeeeeff6fYfffffgg6g^ggggghhhhghhhi1imiiijjj.j@jUjij|jjjjjk@kTkkklDlTlhllm-m=mQmmmn&n7nEn\nnoo)o=oFoGoxooopp8p\pippppqq#q*q.q0q1qXq\qqqqrr)rwrrrs3scsdsssst8tRtStttu-uzuuv"v#v.vKvnvvvvvvww%wVwwwwwx+xYxxxxyyPy}yyyz zz*z3z4zezz{{+{8{i{{{{{{{|'|+|{|||}}}P}o}p}}}}~-~.~u~v~~~ Wg{+?eG1Q^}cgQFG}!%v"/3W^rs+=U[\Uft Uey(8LUV'4[v.2}$>67Z`()HNJV,_,f :f1X@cy5I 01b{|Rz{ ^REefx !JV7]?R0CrXab!Kw)Fi+Uy 5RS}Hij '9Mhx~eu 7Wcs6^8Vc;RY]_`8WqrVx:XY *NnCgK"3I[n$Pm$l|)zYlLr"V"?l,2QWj-=>n¾Væ<Z~Ğ*GHőŗŪ34ƂƝƣƳ  FGǐǞǟEkȉȭGM`Ɂɂ !=Qbxʉʥʼ)<Wf~˄˅˸2O̧̗̻"?͇͗ͫ/jέ,j{ωϠYjxЏз*>sѸEҔҤҸ9cӃӹCoԙԵ )WdՃ՜տ,Q|֡#8_fjlm׼Grs؉؏ ?fg٫٬#6nڬڽOfopۡ(,./Eܒܡܧܷhnݺ#3Z[ށއޗެޭ$0aߜTes<b~ Uko "\ft6QR{/?EFo{0AOf<L`7p,P|0Sp /// Container Analysis API - v1 /// /// This API is a prerequisite for leveraging Artifact Analysis scanning /// capabilities in Artifact Registry. In addition, the Container Analysis API /// is an implementation of the Grafeas API, which enables storing, querying, /// and retrieval of critical metadata about all of your software artifacts. /// /// For more information, see /// /// /// Create an instance of [ContainerAnalysisApi] to access these resources: /// /// - [ProjectsResource] /// - [ProjectsLocationsResource] /// - [ProjectsLocationsNotesResource] /// - [ProjectsLocationsNotesOccurrencesResource] /// - [ProjectsLocationsOccurrencesResource] /// - [ProjectsLocationsResourcesResource] /// - [ProjectsNotesResource] /// - [ProjectsNotesOccurrencesResource] /// - [ProjectsOccurrencesResource] /// - [ProjectsResourcesResource],3LUkr'o^9MSS_mmAy ΊيU(>99}}r/// See, edit, configure, and delete your Google Cloud data and see the email /// address for your Google Account.%> :/// This API is a prerequisite for leveraging Artifact Analysis scanning /// capabilities in Artifact Registry. /// /// In addition, the Container Analysis API is an implementation of the Grafeas /// API, which enables storing, querying, and retrieval of critical metadata /// about all of your software artifacts. #8-:Dv%WEBB]bW[[a ҎMi%]oeeiEEK'@5BVgL%gvvy \\tMMdK/// Creates new notes in batch. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the notes are to be created. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [BatchCreateNotesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.˘ ݘw/// Creates a new note. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the note is to be created. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [noteId] - Required. The ID to use for this note. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ѝ00Lʂ_/// Deletes the specified note. /// /// Request parameters: /// /// [name] - Required. The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.%,,9@[/// Gets the specified note. /// /// Request parameters: /// /// [name] - Required. The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.بģću/// Gets the access control policy for a note or an occurrence resource. /// /// Requires `containeranalysis.notes.setIamPolicy` or /// `containeranalysis.occurrences.setIamPolicy` permission if the resource is /// a note or occurrence, respectively. The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ɯ""/ЪЈ4a/// Lists notes for the specified project. /// /// Request parameters: /// /// [parent] - Required. The name of the project to list notes for in the form /// of `projects/[PROJECT_ID]`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The filter expression. /// /// [pageSize] - Number of notes to return in the list. Must be positive. Max /// allowed page size is 1000. If not specified, page size defaults to 20. /// /// [pageToken] - Token to provide to skip to a particular spot in the list. /// /// [returnPartialSuccess] - If set, the request will return all reachable /// Notes and report all unreachable regions in the `unreachable` field in the /// response. Only applicable for requests in the global region. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListNotesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. ##/;;HXXel/// Updates the specified note. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [updateMask] - The fields to update. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.QQerr~xx ?w/// Sets the access control policy on the specified note or occurrence. /// /// Requires `containeranalysis.notes.setIamPolicy` or /// `containeranalysis.occurrences.setIamPolicy` permission if the resource is /// a note or an occurrence, respectively. The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.DQDQ!DkDxDxDDDD1D9O/// Returns the permissions that a caller has on the specified note or /// occurrence. /// /// Requires list permission on the project (for example, /// `containeranalysis.notes.list`). The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.##)GGBGCGCGXGqGfGsGGaG F%G KKKKKKKKLLLL#L2L2L?G~G~.KÃ/// Lists occurrences referencing the specified note. /// /// Provider projects can use this method to get all occurrences across /// consumer projects referencing the specified note. /// /// Request parameters: /// /// [name] - Required. The name of the note to list occurrences for in the /// form of `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/notes/\[^/\]+$`. /// /// [filter] - The filter expression. /// /// [pageSize] - Number of occurrences to return in the list. /// /// [pageToken] - Token to provide to skip to a particular spot in the list. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListNoteOccurrencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.FFFO O-O.O.OCO\OQO^O O \NN%N RR%RRRRRRROiOiR/// Creates new occurrences in batch. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the occurrences are to be created. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [BatchCreateOccurrencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.WWWX X XX%X%X2UU$W炢/// Creates a new occurrence. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the occurrence is to be created. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Occurrence]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.]t]t]]]]Z+Z+]m/// Deletes the specified occurrence. /// /// For example, use this method to delete an occurrence when the occurrence /// is no longer applicable for the given resource. /// /// Request parameters: /// /// [name] - Required. The name of the occurrence in the form of /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.aaaaab_#_#|a~/// Gets the specified occurrence. /// /// Request parameters: /// /// [name] - Required. The name of the occurrence in the form of /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Occurrence]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.hhhhhhhhhcchn{/// Gets the access control policy for a note or an occurrence resource. /// /// Requires `containeranalysis.notes.setIamPolicy` or /// `containeranalysis.occurrences.setIamPolicy` permission if the resource is /// a note or occurrence, respectively. The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.mmmnnnjjm/// Gets the note attached to the specified occurrence. /// /// Consumer projects can use this method to get a note that belongs to a /// provider project. /// /// Request parameters: /// /// [name] - Required. The name of the occurrence in the form of /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.sssssttttt3t3t@oo7s/// Gets a summary of the number and severity of occurrences. /// /// Request parameters: /// /// [parent] - Required. The name of the project to get a vulnerability /// summary for in the form of `projects/[PROJECT_ID]`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The filter expression. /// /// [returnPartialSuccess] - If set, the request will return all reachable /// occurrence summaries and report all unreachable regions in the /// `unreachable` field in the response. Only applicable for requests in the /// global region. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [VulnerabilityOccurrencesSummary]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.{{{{{{||| |||(|7|7|B|\|\|ivvj{Ƅ/// Lists occurrences for the specified project. /// /// Request parameters: /// /// [parent] - Required. The name of the project to list occurrences for in /// the form of `projects/[PROJECT_ID]`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The filter expression. /// /// [pageSize] - Number of occurrences to return in the list. Must be /// positive. Max allowed page size is 1000. If not specified, page size /// defaults to 20. /// /// [pageToken] - Token to provide to skip to a particular spot in the list. /// /// [returnPartialSuccess] - If set, the request will return all reachable /// Occurrences and report all unreachable regions in the `unreachable` field /// in the response. Only applicable for requests in the global region. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListOccurrencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.NNu/// Updates the specified occurrence. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. The name of the occurrence in the form of /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [updateMask] - The fields to update. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Occurrence]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. )̈́}/// Sets the access control policy on the specified note or occurrence. /// /// Requires `containeranalysis.notes.setIamPolicy` or /// `containeranalysis.occurrences.setIamPolicy` permission if the resource is /// a note or an occurrence, respectively. The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.! ((57̈́U/// Returns the permissions that a caller has on the specified note or /// occurrence. /// /// Requires list permission on the project (for example, /// `containeranalysis.notes.list`). The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/occurrences/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.NNDNZ|%(55AMMZP/// Generates an SBOM for the given resource. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. The name of the resource in the form of /// `projects/[PROJECT_ID]/resources/[RESOURCE_URL]`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/resources/.*$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ExportSBOMResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.OOU "##8MBO Ix%g WWo||ZZRF/// Creates new notes in batch. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the notes are to be created. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [BatchCreateNotesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. e/// Creates a new note. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the note is to be created. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [noteId] - Required. The ID to use for this note. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.4I/// Deletes the specified note. /// /// Request parameters: /// /// [name] - Required. The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.QQ(΂E/// Gets the specified note. /// /// Request parameters: /// /// [name] - Required. The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.<<P]]iyy}}*_/// Gets the access control policy for a note or an occurrence resource. /// /// Requires `containeranalysis.notes.setIamPolicy` or /// `containeranalysis.occurrences.setIamPolicy` permission if the resource is /// a note or occurrence, respectively. The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.%%1??LXXbpp}qq"O/// Lists notes for the specified project. /// /// Request parameters: /// /// [parent] - Required. The name of the project to list notes for in the form /// of `projects/[PROJECT_ID]`. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [filter] - The filter expression. /// /// [pageSize] - Number of notes to return in the list. Must be positive. Max /// allowed page size is 1000. If not specified, page size defaults to 20. /// /// [pageToken] - Token to provide to skip to a particular spot in the list. /// /// [returnPartialSuccess] - If set, the request will return all reachable /// Notes and report all unreachable regions in the `unreachable` field in the /// response. Only applicable for requests in the global region. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListNotesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. T}/// Updates the specified note. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [updateMask] - The fields to update. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Note]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ưưƞa/// Sets the access control policy on the specified note or occurrence. /// /// Requires `containeranalysis.notes.setIamPolicy` or /// `containeranalysis.occurrences.setIamPolicy` permission if the resource is /// a note or an occurrence, respectively. The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.͘͘!ͲͿͿ̀9/// Returns the permissions that a caller has on the specified note or /// occurrence. /// /// Requires list permission on the project (for example, /// `containeranalysis.notes.list`). The resource takes the format /// `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.XX^WwxxЍЦЛШWWXH-%H%33@OO\гг/// Lists occurrences referencing the specified note. /// /// Provider projects can use this method to get all occurrences across /// consumer projects referencing the specified note. /// /// Request parameters: /// /// [name] - Required. The name of the note to list occurrences for in the /// form of `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// Value must have pattern `^projects/\[^/\]+/notes/\[^/\]+$`. /// /// [filter] - The filter expression. /// /// [pageSize] - Number of occurrences to return in the list. /// /// [pageToken] - Token to provide to skip to a particular spot in the list. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListNoteOccurrencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.899Ng\iS% ۉۉ%ۧ۴۴ttx/// Creates new occurrences in batch. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the occurrences are to be created. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [BatchCreateOccurrencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. ΂/// Creates a new occurrence. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of the project in the form of /// `projects/[PROJECT_ID]`, under which the occurrence is to be created. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Occurrence]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.CCOVVc>>> >>>>???>>L??,?5?6?6??<?L?PAV?^?Z?`?|?o?f?m?a?g?r?v?w?{???@??@@@@@6@%@S@=@Q@8@>@V@Z@[@a@v@l@x@@@~@@y@@@@@@@@A7@A(AEAFALAM??A?-;9wM;&/// One or more JWTs encoding a self-contained attestation. /// /// Each JWT encodes the payload that it verifies within the JWT itself. /// Verifier implementation SHOULD ignore the `serialized_payload` field when /// verifying these JWTs. If only JWTs are present on this /// AttestationOccurrence, then the `serialized_payload` SHOULD be left empty. /// Each JWT SHOULD encode a claim specific to the `resource_uri` of this /// Occurrence, but this is not validated by Grafeas metadata API /// implementations. The JWT itself is opaque to Grafeas.<7;<7Z/// The serialized payload that is verified by one or more `signatures`. /// /// Required.>=rP>%/// One or more signatures over `serialized_payload`. /// /// Verifier implementations should consider this attestation message verified /// if at least one `signature` verifies `serialized_payload`. See `Signature` /// in common.proto for more details on signature structure and verification.E)/// Response for creating notes in batch.HHHHHHH2HHHHHHIIIIIIIBI5I%I3I I&I8I<I=IAIPIRIUIIeIIIIIHHǁ:HHH HT/// The occurrences to create. /// /// Max allowed length is 1000. /// /// Required.JJJ)GGG+/// Request to create occurrences in batch.K8KVKXKXK]K8K83KoKKKKKKKLKKKKKKKKKKKKKKKKLLLzLLLLKoKo;KK(JKK(&/// The occurrences that were created.LLLJJJ//// Response for creating occurrences in batch.bdbkbmbmbrb}b} bbb bbdbd3bbbbbbEbbd5bbcc~bbbbbbcc c ccpc:c,c8c'c-c=cAcBcEc_cFcJcKcScWcXccccccccccccccccccccccccdd dddddd!d%d&d,bbbOM?O/// The condition that is associated with this binding. /// /// If the condition evaluates to `true`, then this binding applies to the /// current request. If the condition evaluates to `false`, then this binding /// does not apply to the current request. However, a different role binding /// might grant the same role to one or more of the principals in this /// binding. To learn which resources support conditions in their IAM /// policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).`OƐ`X/// Specifies the principals requesting access for a Google Cloud resource. /// /// `members` can have the following values: * `allUsers`: A special /// identifier that represents anyone who is on the internet; with or without /// a Google account. * `allAuthenticatedUsers`: A special identifier that /// represents anyone who is authenticated with a Google account or a service /// account. Does not include identities that come from external identity /// providers (IdPs) through identity federation. * `user:{emailid}`: An email /// address that represents a specific Google account. For example, /// `alice@example.com` . * `serviceAccount:{emailid}`: An email address that /// represents a Google service account. For example, /// `my-other-app@appspot.gserviceaccount.com`. * /// `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An /// identifier for a /// [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). /// For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * /// `group:{emailid}`: An email address that represents a Google group. For /// example, `admins@example.com`. * `domain:{domain}`: The G Suite domain /// (primary) that represents all the users of that domain. For example, /// `google.com` or `example.com`. * /// `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: /// A single identity in a workforce identity pool. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: /// All workforce identities in a group. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: /// All workforce identities with a specific attribute value. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id} /// / * `: All identities in a workforce identity pool. * /// `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: /// A single identity in a workload identity pool. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: /// A workload identity pool group. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: /// All identities in a workload identity pool with a certain attribute. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id} /// / * `: All identities in a workload identity pool. * /// `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique /// identifier) representing a user that has been recently deleted. For /// example, `alice@example.com?uid=123456789012345678901`. If the user is /// recovered, this value reverts to `user:{emailid}` and the recovered user /// retains the role in the binding. * /// `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus /// unique identifier) representing a service account that has been recently /// deleted. For example, /// `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If /// the service account is undeleted, this value reverts to /// `serviceAccount:{emailid}` and the undeleted service account retains the /// role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email /// address (plus unique identifier) representing a Google group that has been /// recently deleted. For example, /// `admins@example.com?uid=123456789012345678901`. If the group is recovered, /// this value reverts to `group:{emailid}` and the recovered group retains /// the role in the binding. * /// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: /// Deleted single identity in a workforce identity pool. For example, /// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.b[`b[/// Role that is assigned to the list of `members`, or principals. /// /// For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an /// overview of the IAM roles and permissions, see the /// [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For /// a list of the available pre-defined roles, see /// [here](https://cloud.google.com/iam/docs/understanding-roles).d;d;d_M8M8Mv7/// Associates `members`, or principals, with a `role`.g=gLgSgSgXggggglggggggg=g=gggggg[ggjh hh hhh hh#h'h(h.hKh9hhhMhRhSh^hsh_hhhhhhhhhhhhhhhhhhhi*i{hhhiiiiHi1iFi,i2iKiOiPiSimiTiXiYiaieifi}iiiiiiiiiiiiiiiijsijdjjjjggłgeFe9eFfeTf/// /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.ff-f/// /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.g$g3g$jjjeeIe%mmmmmmm!mmmmmmmmn2n mn#nn!n nn&n*n+n1mmgmmm/tmR/// Version of the builder which produced this build. /// /// Required. Immutable.n8n8n\ll9m!/// Note holding the version of the provider's builder and the signature of the /// provenance message in the build details occurrence.ttuuu u'u'u,uBuBuGu\u\uauququvttuuuuuuuuyuuvvuuuuvuvv5v6v>vvvUvnvPvVvvvvvvvvvvvvvvwwvvvvwvww.w/w7wwwwNwawIwOwzw~wwwwwwwwwwwwx xwwwwwwxxxx'xxRx>xPx9x?xUxYxZx]xwx^xbxcxkxoxpxxxxybxxxxxxxxxxyTyyyy yy!y%y&y)yCy*y.y/y7y;y<ydyyryyyyyyyyyuu%upo %p/// In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa /// spec, wrapped in an in-toto statement. /// /// This allows for direct jsonification of a to-spec in-toto slsa statement /// with a to-spec slsa provenance.pp5p~/// See InTotoStatement for the replacement. /// /// In-toto Provenance representation as defined in spec. /// /// Deprecated.qp q/// In-toto Statement representation as defined in spec. /// /// The intoto_statement can contain any type of provenance. The serialized /// payload of the statement can be stored and signed in the Occurrence's /// envelope.r1qFr1(/// The actual provenance for the build.tr@t܂z/// Serialized JSON representation of the provenance, used in generating the /// build signature in the corresponding build note. /// /// After verifying the signature, `provenance_bytes` can be unmarshalled and /// compared to the provenance to confirm that it is unchanged. A /// base64-encoded string representation of the provenance bytes is used for /// the signature in order to interoperate with openssl which expects this /// format for signature verification. The serialized form is captured both to /// avoid ambiguity in how the provenance is marshalled to json as well to /// prevent incompatibilities with future changes.yy#ynn΍n"/// Details of a build occurrence.  !//4DD IVV [hhmuu z"t, :xQ@O;ATXY\v]abjnow "$J=*;%+@DEIXZ]m1$"'+,0?ADT  -&@4>/5CGHN`Ysgqbhvz{  /c167BUCeklt&$)-.4H?]O[JP`dekㅓ }D|}D/// Special options applied to this build. /// /// This is a catch-all field where build providers can enter any desired /// additional details.}}Ud}F/// Version string of the builder at the time this build was executed.}}>}/// Output of the build.~<~C~<$/// Commands requested by the build.~~IB~(/// Time at which the build was created.{~{/// E-mail address of the user who initiated this build. /// /// Note that this was the user's e-mail address at the time the build was /// initiated; this address may not represent the same end-user for all time.M6/// Time at which execution of the build was finished."K"5/// Unique identifier of the build. /// /// Required.q)Oq8/// URI where any logs for this provenance were written.}//// ID of the project.H-/// Details of the Source input to the build.CNC5/// Time at which execution of the build was started.QgN/// Trigger identifier if the build was triggered automatically; empty if not.zz{{|s/// Provenance of a build. /// /// Contains all information needed to verify the full details about the build /// from source to completion.ag nns%%*??D\\ allqaa&(&+/06SAqZoU[txy  .0ZN6L17QUVYhjrs~7 5!:>?EUPf\dW]imnt7 ##/// /// Possible string values are: /// - "ATTACK_COMPLEXITY_UNSPECIFIED" /// - "ATTACK_COMPLEXITY_LOW" /// - "ATTACK_COMPLEXITY_HIGH"8nD/// Base Metrics Represents the intrinsic characteristics of a vulnerability /// that are constant over time and across user environments. /// Possible string values are: /// - "ATTACK_VECTOR_UNSPECIFIED" /// - "ATTACK_VECTOR_NETWORK" /// - "ATTACK_VECTOR_ADJACENT" /// - "ATTACK_VECTOR_LOCAL" /// - "ATTACK_VECTOR_PHYSICAL">>y/// /// Possible string values are: /// - "IMPACT_UNSPECIFIED" /// - "IMPACT_HIGH" /// - "IMPACT_LOW" /// - "IMPACT_NONE"UT;/// The base score is a function of the base metric scores.AAy/// /// Possible string values are: /// - "IMPACT_UNSPECIFIED" /// - "IMPACT_HIGH" /// - "IMPACT_LOW" /// - "IMPACT_NONE"gZ g~..y/// /// Possible string values are: /// - "IMPACT_UNSPECIFIED" /// - "IMPACT_HIGH" /// - "IMPACT_LOW" /// - "IMPACT_NONE" B /// /// Possible string values are: /// - "PRIVILEGES_REQUIRED_UNSPECIFIED" /// - "PRIVILEGES_REQUIRED_NONE" /// - "PRIVILEGES_REQUIRED_LOW" /// - "PRIVILEGES_REQUIRED_HIGH" k/// /// Possible string values are: /// - "SCOPE_UNSPECIFIED" /// - "SCOPE_UNCHANGED" /// - "SCOPE_CHANGED"MM/// /// Possible string values are: /// - "USER_INTERACTION_UNSPECIFIED" /// - "USER_INTERACTION_NONE" /// - "USER_INTERACTION_REQUIRED"Ƅ-z}/// Common Vulnerability Scoring System version 3. /// /// For details, see https://www.first.org/cvss/specification-document 1   #'=1UDS?EX\]`skzu{/// /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Unknown. /// - "MINIMAL" : Minimal severity. /// - "LOW" : Low severity. /// - "MEDIUM" : Medium severity. /// - "HIGH" : High severity. /// - "CRITICAL" : Critical severity.DD'z//// A compliance check that is a CIS benchmark. JN5)e7<=HWIgst|(*019[PYKQ^bcfgkltxy(H(+/// An alias, which may be a branch or tag.[9([/// The ID of the repo.f,/// A revision ID.mm]/// A CloudRepoSourceContext denotes a particular revision in a Google Cloud /// Source Repo.&&+<< AMMRaafww|  |1 #3?@Hp_nZ`swx{|  %90N@L;AQUV\rgytz >1%/ &489=LNQaKI./// A description about this compliance check.T TT;/// A rationale for the existence of this compliance check.b`E/// A description of remediation steps if the compliance check fails.Z:/// Serialized scan instructions with a predefined format.GI4/// The title that identifies this compliance check.`8/// The OS and config versions the benchmark applies to.%%b=,ll r  ++0GG Lh^r{||E'!"&57:J 12:]Q[LR`dehimnvz{^^SsOB Of.T7/// The OS and config version the benchmark was run on.U~)/// An indication that the compliance checks in the associated ComplianceNote /// were not satisfied for particular resources or a specified reason."$$ )!4GPQQZ#gk&yu{ 44HP?/// DSSEHint hints at the purpose of the attestation authority.,,jP ;09::CCPTf^ hmnyz&S(-.9E:Udem1nn45/// An artifact that can be deployed in some runtime.ϱϷϾϾ--2CCHYY^ppuЇЇЌММСввз  ϱϱV $15zM?gTeOUjnouярѪіѨёїѭѱѲѸ ң ҕ_4I/5bfgj҄kopx|}ҥҳә ӋU(?#)X\]`zaefnrsӛӴөӻӶӼ  +C2A-3FJKQh\Ԙjop{Ԋ|ԚԡԢԪԼ0&F7D28IMNRh]o}jpՂՆՇՍդ՘ռիպզլտ2059:@QKcXaSYfjkq  q'Ĩ'i/// The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability /// affects. /// /// Required.ŋ:`ŋ=/// The package this vulnerability affects. /// /// Required.ǞşǞ/// The version number at the end of an interval in which this vulnerability /// exists. /// /// A vulnerability can affect a package between version numbers that are /// disjoint sets of intervals (example: \[1.0.0-1.1.0\], \[2.4.6-2.4.8\] and /// \[4.5.6-4.6.8\]) each of which will be represented in its own Detail. If a /// specific affected version is provided by a vulnerability database, /// affected_version_start and affected_version_end will be the same in that /// Detail.ɶǵɶ/// The version number at the start of an interval in which this vulnerability /// exists. /// /// A vulnerability can affect a package between version numbers that are /// disjoint sets of intervals (example: \[1.0.0-1.1.0\], \[2.4.6-2.4.8\] and /// \[4.5.6-4.6.8\]) each of which will be represented in its own Detail. If a /// specific affected version is provided by a vulnerability database, /// affected_version_start and affected_version_end will be the same in that /// Detail.S8/// A vendor-specific description of this vulnerability.'/// The distro recommended [CPE URI](https://cpe.mitre.org/specification/) to /// update to that contains a fix for this vulnerability. /// /// It is possible for this to be different from the affected_cpe_uri.߀/// The distro recommended package to update to that contains a fix for this /// vulnerability. /// /// It is possible for this to be different from the affected_package.̻̻/// The distro recommended version to update to that contains a fix for this /// vulnerability. /// /// Setting this to VersionKind.MAXIMUM means no such version is yet /// available.ÈEg/// Whether this detail is obsolete. /// /// Occurrences are expected not to point to obsolete details.Td/// The type of package; whether native or non native (e.g., ruby gems, /// node.js packages, etc.).!S!7/// The distro assigned severity of this vulnerability.Έ2\ΈF/// The source from which the information in this Detail was obtained.WΓW/// The time this information was last changed at the source. /// /// This is an upstream timestamp from the underlying information source - /// e.g. Ubuntu security tracker.Ϧl@Ϧ*/// The name of the vendor of the product.րր֤  .ĝv/// A detail for a distro and package affected by this vulnerability and its /// associated fix (if one is available). & )**3@DݴRNbY`TZeijp݆{ݝݍݛ݈ݎݠݤݥݫ!ۢy-ۢ/// `SHA1`, `SHA512` etc.۫3/// Value of the digest.XUUi>>BݺݺPPn/// Digest information.#'011:GKXLp_nZ`swx~g(ZP/// The kind of analysis that is handled by this discovery. /// /// Required. Immutable. /// Possible string values are: /// - "NOTE_KIND_UNSPECIFIED" : Default value. This value is unused. /// - "VULNERABILITY" : The note and occurrence represent a package /// vulnerability. /// - "BUILD" : The note and occurrence assert build provenance. /// - "IMAGE" : This represents an image basis relationship. /// - "PACKAGE" : This represents a package installed via a package manager. /// - "DEPLOYMENT" : The note and occurrence track deployment events. /// - "DISCOVERY" : The note and occurrence track the initial discovery status /// of a resource. /// - "ATTESTATION" : This represents a logical "role" that can attest to /// artifacts. /// - "UPGRADE" : This represents an available package upgrade. /// - "COMPLIANCE" : This represents a Compliance Note /// - "DSSE_ATTESTATION" : This represents a DSSE attestation Note /// - "VULNERABILITY_ASSESSMENT" : This represents a Vulnerability Assessment. /// - "SBOM_REFERENCE" : This represents an SBOM Reference. /// - "SECRET" : This represents a secret.䅀ooH/// A note that indicates a type of analysis a provider would perform. /// /// This note exists in a provider's project. A `Discovery` occurrence is /// created in a consumer's project at the start of analysis. 77<MMRjjoxx } 첁)1 f389DXEhyz $&K>,<'-AEFJY[^n  "&'-K8MRS^t_ 5*L<J7=OSTZwe~y   w20 59:@UKW\]hui߆3 ~$6姀6u/// Indicates any errors encountered during analysis of a resource. /// /// There could be 0 or more of these errors.zH@z/// The status of discovery for the resource. /// Possible string values are: /// - "ANALYSIS_STATUS_UNSPECIFIED" : Unknown. /// - "PENDING" : Resource is known but no action has been taken yet. /// - "SCANNING" : Resource is being analyzed. /// - "FINISHED_SUCCESS" : Analysis has finished successfully. /// - "COMPLETE" : Analysis has completed. /// - "FINISHED_FAILED" : Analysis has finished unsuccessfully, the analysis /// itself is in a bad state. /// - "FINISHED_UNSUPPORTED" : The resource is known not to be supported.P荀P/// When an error is encountered this will contain a LocalizedMessage under /// details to show to the user. /// /// The LocalizedMessage is output only and populated by the API.ha/// The time occurrences related to this discovery occurrence were archived. /// /// Output only.+/// Whether the resource is continuously analyzed. /// Possible string values are: /// - "CONTINUOUS_ANALYSIS_UNSPECIFIED" : Unknown. /// - "ACTIVE" : The resource is continuously analyzed. /// - "INACTIVE" : The resource is ignored for continuous analysis.W=W*/// The CPE of the resource being scanned._Y@/// Files that make up the resource described by the occurrence.H,/// The last time this resource was scanned.O `O5/// The last time vulnerability scan results changed.o>%/// The status of an SBOM generation.: fL/// Provides information about the analysis status of a discovered resource.$$);; @LLQbbgzzZ1&/!'489?UJl\jW]ostzB4 # D\Rrcp^duyzĀ/// The CPU architecture for which packages in this distribution channel were /// built. /// Possible string values are: /// - "ARCHITECTURE_UNSPECIFIED" : Unknown architecture. /// - "X86" : X86 architecture. /// - "X64" : X64 architecture.Հ/// The cpe_uri in [CPE format](https://cpe.mitre.org/specification/) denoting /// the package manager version distributing a package. /// /// Required.]B/// The distribution channel-specific description of this package.JgJN/// The latest available version of this package in this distribution channel.\X>/// A freeform string denoting the maintainer of this package. S @/// The distribution channel-specific homepage for this package./// This represents a particular channel of distribution for a given package. /// /// E.g., Debian's jessie-backports dpkg mirror. <*2;<<E0RVg`znxio}  **3(J  Ɓ/// MUST match /// https://github.com/secure-systems-lab/dsse/blob/master/envelope.proto. /// /// An authenticated message of arbitrary type.zzz/#   8      *  : N O W   n  i o            Baـai/// Empty placeholder to denote that this is a Google Cloud Storage export /// request. /// /// Optional.   ^^A^/// The request to generate and export SBOM. /// /// Target must be specified for the request.       /       # ' i ; ( Z B X = C ] a b h  z    /// The name of the discovery occurrence in the form /// "projects/{project_id}/occurrences/{OCCURRENCE_ID} It can be used to track /// the progress of the SBOM export. o o   v +/// The response from a call to ExportSBOM. %'G:-8(.=ABFUWZj pP0/// Collection of file hashes. /// /// Required.z҂a/// Container message for hashes of byte content of files, used in source /// messages to verify integrity of source input to the build. ++0qEYbccl/y}k "#)>4TER@FW[\bEE(ZGdH/// The number of fixable vulnerabilities associated with this resource.5/// The affected resource.^|^R/// The severity for this count. /// /// SEVERITY_UNSPECIFIED indicates total across all severities. /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Unknown. /// - "MINIMAL" : Minimal severity. /// - "LOW" : Low severity. /// - "MEDIUM" : Medium severity. /// - "HIGH" : High severity. /// - "CRITICAL" : Critical severity.k`F/// The total number of vulnerabilities associated with this resource.qqn݆.J/// Per resource and severity counts of fixable and total vulnerabilities. **/qDW`aajDw{D6 % FaTzhxci}DDXp4Hp+/// An alias, which may be a branch or tag.>>/// The full project name within the host. /// /// Projects may be nested, so "project/subproject" is a valid project name. /// The "repo name" is the hostURI/project.P@)/// The URI of a running Gerrit instance.5/// A revision (commit) ID.r'ㅔ2/// A SourceContext referring to a Gerrit project.!@!S!U!U !Z!@!@$!h!{!!!!#!!"k!!!"]!!!!!!!!!!"O"" """"" "!"$">"%")"*"2"6"7"_!h!h!|!4 u!4W/// OPTIONAL: A `GetPolicyOptions` object for specifying options to /// `GetIamPolicy`."q"qv" y yp ./// Request message for `GetIamPolicy` method.%%%% %%%%%%:%%%%%%.&& '&&&/&"&-&&#&2&6&7&=&T&H&'&V&[&\&g&v&h&&&&&&&&&&&&&&&&&&&&&' %%ЁG%$$A$݀/// For jars that are contained inside .war files, this filepath can indicate /// the path to war file combined with the path to jar file.%$ꀣ%/// Each package found in a file should have its own layer metadata (that is, /// information from the origin layer of the package).'''?##$'8/// Indicates the location at which a package was found.,-- - -- - -%-6-6-;,,v-P-|----Y--/---.-------....}.G.6.E.1.7.J.N.O.R.l.S.W.X.`.d.e..../.............../...// / /!/9///g//;/@/A/L/Y/M/}/n/{/i/o////////////-P-Pp-}+"*<+"++3+/// /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.,,,ǀ/// /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.//ā-/**l*3/// Identifies the event that kicked off the build.2233333336363;3O3O3T3f3f3k22π333333O335334343344 4 44.44K454I40464N4R4S4Y4r4d44y44t4z4444444544444445555x5B515@5,525E5I5J5M5g5N5R5S5[5_5`55555555555533O32222?222?2a2T2a22s<222255Ղ511 1"/// Other properties of the build.:::::::::::::::;::; :; ::;;;;::h::{: :{^/// The human readable name of this attestation authority, for example "qa". /// /// Required.; ; ;D88:/// This submessage provides human-readable hints about the purpose of the /// authority. /// /// Because the name of a note acts as its resource reference, it is important /// to disambiguate the canonical name of the Note (which might be a UUID for /// security purposes) from "readable" names more suitable for debug output. /// Note that these hints should not be used to look up authorities in security /// sensitive contexts, such as when looking up attestations to verify.>>>>>#>0>0>5>>0>G>P>Y>Z>Z>c.>p>t?>>~>?9>>>>>>>>>>?+>>>>>>>>?????????;?T?I?k?[?i?V?\?n?r?s?y>G>G=>Q=_=b=_C/// The fingerprint of the base image. /// /// Required. Immutable.>=o>~/// The resource_url for the resource representing the basis of associated /// occurrence images. /// /// Required. Immutable.???< < MZ?ZBZ\ZCZGZHZPZTZUZ}ZZZZZZZZZZZZZZZZ[NZ[?[\[][c[dW4W4;WDUUYEU//// Always `https://in-toto.io/Statement/v0.1`.UUWU:/// `https://slsa.dev/provenance/v0.1` for SlsaProvenance.VUVV.VV.VWV@,VWVVpV[s[s'[TYTYCUE/// Spec defined at /// https://github.com/in-toto/attestation/tree/main/spec#statement The /// serialized InTotoStatement will be stored as Envelope.payload. /// /// Envelope.payloadType is always "application/vnd.in-toto+json"._1_>_@_@ _E_K_K_P_1_1%_Z_g_p_q_q_z__________________________Z_Z_h^^VX^D/// The KB name (generally of the form KB\[0-9\]+ (e.g., KB123456))._)^y_)d/// A link to the KB in the /// [Windows update catalog](https://www.catalog.update.microsoft.com/).__`^>^>F^Dccccccc ccc ccc dd d dccnd"d.d7d8d8dAFdNdRf dfd\dhdd}dnd{didoddddddde'dee5e6e<e=eOeHebeVe`eQeWeeeiejepee{eeeeeeeeeeeeeeeeeeeeeeeeeeeeeefd"d"d/aqa*Qaq./// The base images the layer is found within.b4ab4/// The layer chain ID (sha256 hash) of the layer in the container image. /// /// https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainidbb@b/// The layer build command that was used to build the layer. /// /// This may not be found in all layers depending on how the container image /// is built.c\bdc\N/// The diff ID (typically a sha256 hash) of the layer in the container image.ccgDc2/// The index of the layer in the container image.ffwf3``߆a3/// Details about the layer a package was found in.hhhhhiii hhDii7i@iAiAiJ%iWi[jirieiiyiitiziiiiiiiiiiiiiiiiiiiijrijcjjjjiiwi8heh[he>/// Token to provide to skip to a particular spot in the list.hhwXh3/// The occurrences attached to the specified note.jjjggg0/// Response for listing occurrences for a note.mmmmmmm mmmmmmFmmnnnn<nnon6n)nOn=nMn8n>nRnVnWn]nmnhnonnnun}npnvnnnnnnnonoo#o$o*o+oAo6oCofoYoIoWoDoJo\o`oaoeotovoyoozooooommmldkld/// The next pagination token in the list response. /// /// It should be used as `page_token` for the following request. An empty /// value means no more results.llv1l/// The notes requested.mlm/// Unordered list. /// /// Unreachable regions. Populated for requests from the global region when /// `return_partial_success` is set. Format: /// `projects/[PROJECT_ID]/locations/[LOCATION]`oookpkpmk/// Response for listing notes.s-sDsKsKsPscscshsysys~s-s-cssssss<ssussssssstttt t#tt%tHt;t+t9t&t,t>tBtCtGtVtXt[ttktttttuuuu7u*uu(uuu-u1u2u6uEuGuJujuKuiuxuyuusssqq'q߀/// The next pagination token in the list response. /// /// It should be used as `page_token` for the following request. An empty /// value means no more results.r)qCr)/// The occurrences requested.sr9s/// Unordered list. /// /// Unreachable regions. Populated for requests from the global region when /// `return_partial_success` is set. Format: /// `projects/[PROJECT_ID]/locations/[LOCATION]`uu5upp߅q %/// Response for listing occurrences.xxxx xxx xxx xxx1xxxxxx9yy z,yyy-y"y+yy#y0y4y5y;yJyFyZyQyXyLyRy]yaybyhyzysyzy|yyyyyyyyyzyyyyyyyyyyyyyyyyz xx߁OxwwsswY/// The CPE URI in [CPE format](https://cpe.mitre.org/specification/) /// /// Deprecated.xFw_xFK/// The path from which we gathered that this package/version is installed.xxOVx?/// The version installed at this location. /// /// Deprecated.z2z2zVvvȄ@wf/// An occurrence of a particular package installation found within a system's /// filesystem. /// /// E.g., glibc was found in `/var/lib/dpkg/status`.~~ ~~~~,~,~1~H~H~M~a~a~f~x~x~}~~~~~~~~O~~~~~~~~~~~~ ;%9 &>BCIbT|izdjTF5 !)-.Vpdwrx~~ ~{{_M{./// The timestamp of when the build completed.|{|/// Identifies the particular build invocation, which can be useful for /// finding associated logs or other ad-hoc analysis. /// /// The value SHOULD be globally unique, per in-toto Provenance spec.||J|,/// The timestamp of when the build started.}^|w}^X/// Indicates that the builder claims certain fields in this message to be /// complete.}}o}s/// If true, the builder claims that running the recipe on materials will /// produce bit-for-bit identical output.{){){R"/// Other properties of the build.** /::?OOTddiyy~     55:JJObb gssx  )9&X@V;A[_`f|q0~"  2E@nGLMX`Ypyz/ !1?@Hn_lZ`quvyz~3  %5CDLrcp^duyz}~}  o9+7&,<@AD^EIJRVW\N #=$()156^zl|TF5 !)-.Vhdxovjp{3 %5@AIl`j[aostwx|}  -,;<BCXNZ|o`m[arvw{ ()/0H;yJOP[k\{B +4,DNOWynwio|2#0$59:@RK}TYZeof H*:+J[\d{v|3 % 5PQYpkq-nK/// The timestamp when the advisory was first published by the source feed.I*/// A note describing an attestation role.:Q:>/// A note describing build provenance for a verifiable build.DF)/// A note describing a compliance check.u/// The time this note was created. /// /// This field can be used as a filter in list requests. /// /// Output only.s+Rs5/// A note describing something that can be deployed.T9/// A note describing the initial analysis of a resource.!U!./// A note describing a dsse attestation note.5nL/// Time of expiration for this note. /// /// Empty if note does not expire.6#/// A note describing a base image.ㄣc/// The type of analysis. /// /// This field can be used as a filter in list requests. /// /// Output only. /// Possible string values are: /// - "NOTE_KIND_UNSPECIFIED" : Default value. This value is unused. /// - "VULNERABILITY" : The note and occurrence represent a package /// vulnerability. /// - "BUILD" : The note and occurrence assert build provenance. /// - "IMAGE" : This represents an image basis relationship. /// - "PACKAGE" : This represents a package installed via a package manager. /// - "DEPLOYMENT" : The note and occurrence track deployment events. /// - "DISCOVERY" : The note and occurrence track the initial discovery status /// of a resource. /// - "ATTESTATION" : This represents a logical "role" that can attest to /// artifacts. /// - "UPGRADE" : This represents an available package upgrade. /// - "COMPLIANCE" : This represents a Compliance Note /// - "DSSE_ATTESTATION" : This represents a DSSE attestation Note /// - "VULNERABILITY_ASSESSMENT" : This represents a Vulnerability Assessment. /// - "SBOM_REFERENCE" : This represents an SBOM Reference. /// - "SECRET" : This represents a secret.G(/// A detailed description of this note.W׀Wj/// The name of the note in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// /// Output only.`ZC/// A note describing a package hosted by various package managers.P%/// Other notes related to this note.QGQ#/// URLs associated with this note.`K(/// A note describing an SBOM reference.4/// A note describing a secret.%L%,/// A one sentence description of this note.:z/// The time this note was last updated. /// /// This field can be used as a filter in list requests. /// /// Output only.H1/// A note describing available package upgrades.l(Ql./// A note describing a package vulnerability.~h1/// A note describing a vulnerability assessment.-A$7/// A type of analysis that can be done for a resource.}  !! &44 9DD ISS Xbb guu z  }} *344=JN4cXejkvw2-[49:EMF]lmu"$89AgXeSYjnorswx,.BCKqbo]ctxy|}t>0<+1AEFIcJNOW[\gY#! &*+.H/34<@Aiw&(;6d=BCNVOfuv~ $ 4+2&,7;<BUMi\gW]lpqw7) 9RGiYgTZlpqw|F4D/5IMNQkRVW_cdK= , $%Me[{lygm~I;  *"#KfY—&hmny‰z™°±¹(  +Q,/// Describes an attestation of an artifact.:!/// Describes a verifiable build.m]m:/// Describes a compliance violation on a linked resource.|\>/// The time this occurrence was created. /// /// Output only./\/9/// Describes the deployment of an artifact on a runtime.>N-/// Describes when a resource was discovered.d7/// Describes an attestation of an artifact using dsse.5C5./// https://github.com/secure-systems-lab/dsseBgN/// Describes how this resource derives from the basis in the associated note.~~/// This explicitly denotes which of the occurrence details are specified. /// /// This field can be used as a filter in list requests. /// /// Output only. /// Possible string values are: /// - "NOTE_KIND_UNSPECIFIED" : Default value. This value is unused. /// - "VULNERABILITY" : The note and occurrence represent a package /// vulnerability. /// - "BUILD" : The note and occurrence assert build provenance. /// - "IMAGE" : This represents an image basis relationship. /// - "PACKAGE" : This represents a package installed via a package manager. /// - "DEPLOYMENT" : The note and occurrence track deployment events. /// - "DISCOVERY" : The note and occurrence track the initial discovery status /// of a resource. /// - "ATTESTATION" : This represents a logical "role" that can attest to /// artifacts. /// - "UPGRADE" : This represents an available package upgrade. /// - "COMPLIANCE" : This represents a Compliance Note /// - "DSSE_ATTESTATION" : This represents a DSSE attestation Note /// - "VULNERABILITY_ASSESSMENT" : This represents a Vulnerability Assessment. /// - "SBOM_REFERENCE" : This represents an SBOM Reference. /// - "SECRET" : This represents a secret.{/// The name of the occurrence in the form of /// `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]`. /// /// Output only.!/// The analysis note associated with this occurrence, in the form of /// `projects/[PROVIDER_ID]/notes/[NOTE_ID]`. /// /// This field can be used as a filter in list requests. /// /// Required. Immutable.n`nC/// Describes the installation of a package on the linked resource.z]B/// A description of actions that can be taken to remedy the note.܀/// A URI that represents the resource for which the occurrence applies. /// /// For example, `https://gcr.io/project/image@sha256:123abc` for a Docker /// image. /// /// Required. Immutable.]4/// Describes a specific SBOM reference occurrences.S'2S/// Describes a secret.^aC/// The time this occurrence was last updated. /// /// Output only._B/// Describes an available package upgrade on the linked resource.k(Pk'/// Describes a security vulnerability.::^))vF/// An instance of an analysis type that has been found on a resource.CO VV[ootЉЉЎУУШпп116CCLXabbkx|єцѮћѬіќѱѵѶѼ L !,>-NUV^ҿ҉u҇pvҌҐґҔҮҕҙҚҢҦҧ  0$2VI8G39LPQUdfiy , D3B.4GKLPf[}m{hnԀԄԅԋԢԖԺԩԸԤԪԽՍ!I8G39LPQTnUYZbfgՏը՝տկսժհLLY vn/// The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability was /// found in. /// /// Required.c ecB/// The package this vulnerability was found in. /// /// Required.wv/// The version of the package that is installed on the resource affected by /// this vulnerability. /// /// Required.な/// The distro or language system assigned severity for this vulnerability /// when that is available and note provider assigned severity when it is not /// available. /// /// Output only. /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Unknown. /// - "MINIMAL" : Minimal severity. /// - "LOW" : Low severity. /// - "MEDIUM" : Medium severity. /// - "HIGH" : High severity. /// - "CRITICAL" : Critical severity.ObO1/// The location at which this package was found.ͷ`cͷE/// Whether a fix is available for this package. /// /// Output only.΅Ȁ΅/// The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability was /// fixed in. /// /// It is possible for this to be different from the affected_cpe_uri.$Ε${/// The package this vulnerability was fixed in. /// /// It is possible for this to be different from the affected_package.5倜/// The version of the package this vulnerability was fixed in. /// /// Setting this to VersionKind.MAXIMUM means no fix is yet available. /// /// Required.3H3-/// The type of package (e.g. OS, MAVEN, GO).܃ܐe/// A detail for a distro and package this vulnerability occurrence was found in /// and its associated fix (if one is available).Q\ cchzz ߋߋߐߡߡ ߦ߲߲߷  ## (QQ:ENOOXei!s  "$B5*3%+8<=APRUe .03C%~H<F7=KOPSmTXYaef $"'+,2@=OGMBHRVW]ohqvw::F ˁU+/// The CPU architecture for which packages in this distribution channel were /// built. /// /// Architecture will be blank for language packages. /// Possible string values are: /// - "ARCHITECTURE_UNSPECIFIED" : Unknown architecture. /// - "X86" : X86 architecture. /// - "X64" : X64 architecture.%/// The cpe_uri in [CPE format](https://cpe.mitre.org/specification/) denoting /// the package manager version distributing a package. /// /// The cpe_uri will be blank for language packages.9?9$/// The description of this package.Ib/// Hash value, typically a file digest, that allows unique identification a /// specific package.={=O/// The various channels by which a package is distributed. /// /// Deprecated.ݝNVݝC/// Licenses that have been declared by the authors of the package.ݩV E G G L X X ] a a  f > >/ q x    $   3                               # $ * q q y   f/// Contains a URI which is vendor-specific. /// /// Example: The artifact repository URL of an image.   /// Token that identifies a product so that it can be referred to from other /// parts in the document. /// /// There is no predefined format as long as it uniquely identifies a group in /// the context of the current document. 5 , 5/// Name of the product. 9 9 ]   vU/// Product contains information about a product and how to uniquely identify /// it.HY[[`uuz~~ HHE@   #3 B "#&@'+,489APRUV2<+<U^``eww |UUG$   0'."(378>[Iybw]c|܀/// Provides information about the authority of the issuing party to release /// the document, in particular, the party's constituency and responsibilities /// or other obligations.TgTO/// Name of the publisher. /// /// Examples: 'Google', 'Google Cloud Platform'.>]>/// The context or namespace. /// /// Contains a URL which is under control of the issuing party and can be used /// as a globally unique identifier for that issuing party. Example: /// https://csaf.ioAD/// Publisher contains information about the publisher of this Note. G9 a!4(2#)7;<B\Mwcu^dz~SE 4 (,-U၂-aJ/// Contains a comprehensive human-readable discussion of the remediation.++z/// The type of remediation that can be applied. /// Possible string values are: /// - "REMEDIATION_TYPE_UNSPECIFIED" : No remediation type specified. /// - "MITIGATION" : A MITIGATION is available. /// - "NO_FIX_PLANNED" : No fix is planned. /// - "NONE_AVAILABLE" : Not available. /// - "VENDOR_FIX" : A vendor fix is available. /// - "WORKAROUND" : A workaround is available.?R5/// Contains the URL where to obtain the remediation.gg9ɅM/// Specifies details on how to handle (and presumably, fix) a vulnerability.'.      + , 4  ] K [ F L ` d e h  i m n v z {            2#Q#2/// A combination of a project ID and a repo name.w5Ew2/// A server-assigned, globally unique identifier.  !)/// A unique identifier for a Cloud Repo.#=#A#C#C #H#Q#Q #V#=#= #a#e#n#o#o#xC##%/###$X##########$J$$$$$ $$$$$9$ $$$%$-$1$2$Z$l$h$%!$n$s$t$$$$$$$%$$$$$$$$$%$$$$$$%##a#a#f"k!ۀ"kh/// CISA maintains the authoritative source of vulnerabilities that have been /// exploited in the wild.#4"w#4/// The Exploit Prediction Scoring System (EPSS) estimates the likelihood /// (probability) that a software vulnerability will be exploited in the wild.%5%5%Y!!̄ !&V&`&b&b &g&p&p&u&& &&V&V;&&&&&&Z&&)I&&&'&&&&&&'''''t'>'2'<'-'3'A'E'F'I'c'J'N'O'W'['\'''''''''''''''''(f'(W(t(u({(|((();(((((((((()-(((((((()))))))))=&&&&%&&,& )&,&I&:&I)O)O )s%%ڄ%++++ +++ +++/++++++,, ,u,,,+, ,),,!,.,2,3,9,K,D,^,R,\,M,S,a,e,f,l++Ԁ++*e+K/// The format that SBOM takes. /// /// E.g. may be spdx, cyclonedx, etc...+++n/// The version of the format that the SBOM takes. /// /// E.g. if the format is spdx, the version may be 2.3.,{,{,*`*`*,/// The note representing an SBOM reference.//// //////0//K00+0405050>E0K0O2T0`0Y010b0g0h0s0}0t00001 00000000000000001121'1I191G141:1L1P1Q1W1l1b1n111t11o1u11111112512&2C2D2J2K00B0,..;c.=/// The actual payload that contains the SBOM reference data./a./a/// The kind of payload that SbomReferenceIntotoPayload takes. /// /// Since it's in the intoto format, this value is expected to be /// 'application/vnd.in-toto+json'.//qO/$/// The signatures over the payload.2Z2Z2~-(-(M./// The occurrence representing an SBOM reference as applied to a specific /// resource. /// /// The occurrence follows the DSSE specification. See /// https://github.com/secure-systems-lab/dsse/blob/master/envelope.md for more /// details.6666 666666666 666q77"7+7,7,75P7B7F9w7V7P7g7]7e7X7^7j7n7o7u7778F7777777777888787788 8 8 8'888888 8H8c8V8|8j8z8e8k888888888888888888889X89I9f9g9m9n77q7#54E5//// Identifier for the schema of the Statement.555\/// Additional parameters of the Predicate. /// /// Includes the actual data about the SBOM.55K5./// URI identifying the type of the Predicate.656z/// Set of software artifacts that the attestation applies to. /// /// Each element represents a single software artifact.9}9}U9334/// The actual payload that contains the SBOM Reference data. /// /// The payload follows the intoto statement specification. See /// https://github.com/in-toto/attestation/blob/main/spec/v1.0/statement.md for /// more details.;;;;;;;$<<<< < <)#<6<:=<F%/// Type of secret. /// /// Required. /// Possible string values are: /// - "SECRET_KIND_UNSPECIFIED" : Unspecified /// - "SECRET_KIND_UNKNOWN" : The secret kind is unknown. /// - "SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY" : A Google Cloud service account /// key per: /// https://cloud.google.com/iam/docs/creating-managing-service-account-keys /// - "SECRET_KIND_GCP_API_KEY" : A Google Cloud API key per: /// https://cloud.google.com/docs/authentication/api-keys /// - "SECRET_KIND_GCP_OAUTH2_CLIENT_CREDENTIALS" : A Google Cloud OAuth2 /// client credentials per: /// https://developers.google.com/identity/protocols/oauth2 /// - "SECRET_KIND_GCP_OAUTH2_ACCESS_TOKEN" : A Google Cloud OAuth2 access /// token per: https://cloud.google.com/docs/authentication/token-types#access /// - "SECRET_KIND_ANTHROPIC_ADMIN_API_KEY" : An Anthropic Admin API key. /// - "SECRET_KIND_ANTHROPIC_API_KEY" : An Anthropic API key. /// - "SECRET_KIND_AZURE_ACCESS_TOKEN" : An Azure access token. /// - "SECRET_KIND_AZURE_IDENTITY_TOKEN" : An Azure Identity Platform ID /// token. /// - "SECRET_KIND_DOCKER_HUB_PERSONAL_ACCESS_TOKEN" : A Docker Hub personal /// access token. /// - "SECRET_KIND_GITHUB_APP_REFRESH_TOKEN" : A GitHub App refresh token. /// - "SECRET_KIND_GITHUB_APP_SERVER_TO_SERVER_TOKEN" : A GitHub App /// server-to-server token. /// - "SECRET_KIND_GITHUB_APP_USER_TO_SERVER_TOKEN" : A GitHub App /// user-to-server token. /// - "SECRET_KIND_GITHUB_CLASSIC_PERSONAL_ACCESS_TOKEN" : A GitHub personal /// access token (classic). /// - "SECRET_KIND_GITHUB_FINE_GRAINED_PERSONAL_ACCESS_TOKEN" : A GitHub /// fine-grained personal access token. /// - "SECRET_KIND_GITHUB_OAUTH_TOKEN" : A GitHub OAuth token. /// - "SECRET_KIND_HUGGINGFACE_API_KEY" : A Hugging Face API key. /// - "SECRET_KIND_OPENAI_API_KEY" : An OpenAI API key. /// - "SECRET_KIND_PERPLEXITY_API_KEY" : A Perplexity API key. /// - "SECRET_KIND_STRIPE_SECRET_KEY" : A Stripe secret key. /// - "SECRET_KIND_STRIPE_RESTRICTED_KEY" : A Stripe restricted key. /// - "SECRET_KIND_STRIPE_WEBHOOK_SECRET" : A Stripe webhook secret.G%FhG%=/// Locations where the secret is detected. /// /// Optional.G~G3SG~+/// Status of the secret. /// /// Optional.JJJ9== >'0/// The occurrence provides details of a secret.LLLL LLL#LLLLLL#M MMMMMHMM M%M&M1M:M2MJMPMQMYMM{MpMyMkMqM~MMMMMMMMMMMLL׀LLK L/// REQUIRED: The complete policy to be applied to the `resource`. /// /// The size of the policy is limited to a few 10s of KB. An empty policy is a /// valid policy but certain Google Cloud services (such as Projects) might /// reject them.MMrMKSKSK./// Request message for `SetIamPolicy` method.W9WEWLWLWQWfWfWkWWWWWWWWWW9W9WWWWWWOWWYXXX2XX0XXX5X9X:X@X\XKXyXcXwX^XdX|XXXXXXXXXXXXXXXXYYXXXXYXYY!Y"Y*YYRYAYPY<YBYUYYYZY]YwY^YbYcYkYoYpYYYYYYYYYYYYWW΂WTTMT./// The timestamp of when the build completed.UTU/// Identifies the particular build invocation, which can be useful for /// finding associated logs or other ad-hoc analysis. /// /// The value SHOULD be globally unique, per in-toto Provenance spec.VUJV,/// The timestamp of when the build started.VV%{VX/// Indicates that the builder claims certain fields in this message to be /// complete.W(VW(s/// If true, the builder claims that running the recipe on materials will /// produce bit-for-bit identical output.YYZ TWTWT"/// Other properties of the build.^^^^ ^^^^^^ ^^^ ^^^K^^____ z__bI_,_%_W__._3_4_?_I_@_Y_d_e_m_____________________``_`__`` ` ``` `#``3```````aa``````aaaaara<a/a:a*a0a?aCaDaGaaaHaLaMaUaYaZaaaab;aaaaaaaaaab-aaaaaaaabbbbbbbbb=^^b^\!\#\! /// required]V\-2]V /// The collection of artifacts that influenced the build including sources, /// dependencies, build tools, base images, and so on. /// /// This is considered to be incomplete unless metadata.completeness.materials /// is true. Unset or null is equivalent to empty.]q]c]q^]~^/// Identifies the configuration used for the build. /// /// When combined with materials, this SHOULD fully describe the build, such /// that re-running this recipe results in bit-for-bit identical output (if /// the build is reproducible). requiredbObOBbs[[쇧[dddddddddd:dee e e eCe!e%fe>e/eqee@eEeFeQeceReseeeeeeeeeeeeeeeeeeeeeff fBfffff'f4f(fDfNfOfWff}fnf{fifoffffffffffffddeddt ddddffՀfccd_/// Keep in sync with schema at /// https://github.com/slsa-framework/slsa/blob/main/docs/provenance/schema/v1/provenance.proto /// Builder renamed to ProvenanceBuilder because of Java conflicts.ijjjj jjj#j2j2 j7jDjDjIjYjYj^jmjm jrii쀕jjjjjjjjoCjjkkLjjjjjjkk kkk kk k!k$k>k%k)k*k2k6k7kNkek\kzklkxkgkmk}kkkkkkl`kkkkkkkkkklRllll lll#l$l'lAl(l,l-l5l9l:lblzlplmIl|lllllllllm;mlmllmm m mm*mmmmm"m#mKmbmYmdmmxmjmvmemkm{mmmmmmnCmn4nQnRnXnYnlndno5nnnsntnnnnnnno'nnnnnnnnnonooo ooo7jjjhhhԀ/// /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.hhhi(h2i(iai38iaiio@iii4ioIoIomgg}g?/// See full explanation of fields at slsa.dev/provenance/v0.2.v%v+v2v2v7vOvOvTvrvr vwvvvv%v%uvvvvvv`vvz0vvvwwvwvvww w www w#ww3wwwwwwwxwxwwxx!x"x(x:x3xexx<xAxBxMxWxNxgxtxux}xxxxxxxxxxxxxxxxxxxxy yHy!yyy yy$y(y)y,yFy-y1y2y:y>y?yGyIyKyNz'y^zvvvsOr+6sO/// If provided, some of the source code used for the build may be found in /// these locations, in the case where the source repository had multiple /// remotes or submodules. /// /// This list will not include the context specified in the context field.ssfsV/// If provided, the input binary artifacts for the build came from this /// location.tIsetIL/// If provided, the source code used for the build came from this location.vtUv/// Hash(es) of the build source, which can be used to verify that the /// original source integrity was maintained in the build. /// /// The keys to this map are file paths used as build source and the values /// contain the hash values for those files. If the build source came in a /// single package such as a gzipped tarfile (.tar.gz), the FileHash will be /// for the single path to that file.z6z6zZqq֊r C/// Source describes the location of the source used for the build.~0~=~?~?~D~O~O ~T~\~\~a~f~f ~k~0~0D~x~~~~~~~~~~~s~~~~~~~ e/!-"267:T;?@HLMu7) 9JGqLQR]c^s?  #=$()156>@BEQ~x~x&~}|n}J/// A SourceContext referring to a revision in a Google Cloud Source Repo.}g}P}g2/// A SourceContext referring to a Gerrit project.}}ra}I/// A SourceContext referring to any third party Git repo (e.g., GitHub).~%}S~%&/// Labels with user defined metadata.*{{|/// A SourceContext is a reference to a tree of files. /// /// A SourceContext together with a path point to a unique revision of a single /// file or directory.  "// 4AAFg^irss|eRrcq c-!+"0458R9=>FJKsD6 % F^^jyryB/// Metadata about the upgrade for each specific operating system.dI/// Required for non-Windows OS. /// /// The package this Upgrade is for.i|ie/// Required for non-Windows OS. /// /// The version of the package in machine + human readable form.uyV/// Required for Windows OS. /// /// Represents the metadata about the Windows update.XXj|ׇ&/// An Upgrade Note represents a potential upgrade of a package to a given /// version. /// /// For each package version combination (i.e. bash 4.0, bash 4.1, bash 4.1.2), /// there will be an Upgrade Note. For Windows, windows_update field represents /// the information related to the update. r09::CnPTj^$lqr}~&;4NBL=CQUV\tg$v{|&A4rCHITdUt1(@(/// Metadata about the upgrade for available for the specific operating system /// for the resource_url. /// /// This allows efficient filtering, as well as making it easier to use the /// occurrence.9dI/// Required for non-Windows OS. /// /// The package this Upgrade is for.g/// Required for non-Windows OS. /// /// The version of the package in a machine + human readable form.+yV/// Required for Windows OS. /// /// Represents the metadata about the Windows update.  ~/ƈ*]/// An Upgrade Occurrence represents that a specific resource_url could install /// a specific upgrade. /// /// This presence is supplied via local sources (i.e. it is present in the /// mirror and the running system has noticed its availability). For Windows, /// both distribution and windows_update contain information for the Windows /// update.hu||    hh#09::CPT^a^phnciswx~C%5&ERS[rms =0 .!378<KMP` .! $()-<>AQ  ,G3E.4JNOU##=178<=GM{*/// Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) /// tracking number for the vulnerability. /// /// Deprecated: Use vulnerability_id instead to denote CVEs.''`/// Contains information about the impact of this vulnerability, this will /// change with time.3b/// Justification provides the justification when the state of the assessment /// if NOT_AFFECTED.qq/// The VulnerabilityAssessment note from which this VexAssessment was /// generated. /// /// This will be of the form: `projects/[PROJECT_ID]/notes/[NOTE_ID]`.~Z/// Holds a list of references associated with this vulnerability item and /// assessment.ltlM/// Specifies details on how to handle (and presumably, fix) a vulnerability.}I"/// Provides the state of this Vulnerability assessment. /// Possible string values are: /// - "STATE_UNSPECIFIED" : No state is specified. /// - "AFFECTED" : This product is known to be affected by this vulnerability. /// - "NOT_AFFECTED" : This product is known to be not affected by this /// vulnerability. /// - "FIXED" : This product contains a fix for this vulnerability. /// - "UNDER_INVESTIGATION" : It is not known yet whether these versions are /// or are not affected by the vulnerability. However, it is still under /// investigation.TˀTu/// The vulnerability identifier for this Assessment. /// /// Will hold one of common identifiers e.g. CVE, GHSA etc.ddvil/// VexAssessment provides all publisher provided Vex information that is /// related to this vulnerability.++ 0==BQQVll qÀs=.;)/@DEHbIMNVZ[C +5,ELMUxlvgm{ q;-9(.>BCF`GKLTXY{S:/// Represents a vulnerability assessment for the product.D}D_/// Identifies the language used by this document, corresponding to IETF BCP /// 47 / RFC 5646.UF'/// A detailed description of this Vex.8%/// The product affected by this vex.:#/// Publisher details of this Note.WKW+/// A one sentence description of this Vex.lR9/// The title of the note. /// /// E.g. `Vex-Debian-11.4`U+މ[v/// A single VulnerabilityAssessmentNote represents one particular product's /// vulnerability assessment for one CVE. && +77<MM R__ drrw逾   !2,\49:ENF^bck}"zD9B4:GKLOiPTU]ab  w /!1WJ7H28MQRVegjz nff/// The CVSS score of this vulnerability. /// /// CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 /// indicates high severity.tN?/// The full description of the v2 CVSS for this vulnerability.O>/// The full description of the CVSSv3 for this vulnerability.܀/// CVSS version used to populate cvss_score and severity. /// Possible string values are: /// - "CVSS_VERSION_UNSPECIFIED" /// - "CVSS_VERSION_2" /// - "CVSS_VERSION_3"OjOM/// Details of all known distros and packages affected by this vulnerability.[R,/// The note provider assigned severity of this vulnerability. /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Unknown. /// - "MINIMAL" : Minimal severity. /// - "LOW" : Low severity. /// - "MEDIUM" : Medium severity. /// - "HIGH" : High severity. /// - "CRITICAL" : Critical severity.vv/// The time this information was last changed at the source. /// /// This is an upstream timestamp from the underlying information source - /// e.g. Ubuntu security tracker.Yց$/// Windows details get their own format because the information format and /// model don't match a normal detail. /// /// Specifically Windows updates are done as patches, thus Windows /// vulnerabilities really are a missing package, rather than a package being /// at an incorrect version.A``A̳'0(@DEM̥odm_ervwz̔{̵̀̈̌̍.ͣ   045=͕_T]OUbfgj̈́kopx|}ͥͳ !%&,C7[JYEK^bcg΁rΜΈΚ΃ΉΟΣΤΪεχ xϕϖϜϝϳϨϵϻ϶ϼvgЄЅЋЌЛЗ6НТУЮеЯ( 8NFbU`PVeijpы{ѧђѥэѓѪѮѯѵ+Ұ -:;CҢlZjU[ostwґx|}҅҉ҊҲˇˇ9˟Ȁ/// The CVSS score of this vulnerability. /// /// CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 /// indicates high severity. /// /// Output only. ; ,/// The cvss v2 score for the vulnerability./// CVSS version used to populate cvss_score and severity. /// /// Output only. /// Possible string values are: /// - "CVSS_VERSION_UNSPECIFIED" /// - "CVSS_VERSION_2" /// - "CVSS_VERSION_3"5;5,/// The cvss v3 score for the vulnerability.@Ճe/// The distro assigned severity for this vulnerability when it is available, /// otherwise this is the note provider assigned severity. /// /// When there are multiple PackageIssues for this vulnerability, they can /// have different effective severities because some might be provided by the /// distro while others are provided by the language ecosystem for a language /// pack. For this reason, it is advised to use the effective severity on the /// PackageIssue level. In the case where multiple PackageIssues have /// differing effective severities, this field should be the highest severity /// for any of the PackageIssues. /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Unknown. /// - "MINIMAL" : Minimal severity. /// - "LOW" : Low severity. /// - "MEDIUM" : Medium severity. /// - "HIGH" : High severity. /// - "CRITICAL" : Critical severity.9Z9>/// Occurrence-specific extra details about the vulnerability.ŷJyŷ[/// Whether at least one of the affected packages has a fix available. /// /// Output only."i"F/// A detailed description of this vulnerability. /// /// Output only.6v/// The set of affected locations and their fixes (if available) within the /// associated resource. /// /// Required.9e98PEN@FSWX^tiߋ{߉v|ߎߒߓߙ߭ߤ߯ߵ߰߶qb Gi/// The [CPE URI](https://cpe.mitre.org/specification/) this vulnerability /// affects. /// /// Required. E */// The description of this vulnerability.O=O /// The names of the KBs which have hotfixes to mitigate this vulnerability. /// /// Note that there may be multiple hotfixes (and thus multiple KBs) that /// mitigate a given vulnerability. Currently any listed KBs presence is /// considered a fix. /// /// Required.ަ]Mަ5/// The name of this vulnerability. /// /// Required.ÁB//5 #33 8唀HU^__h}uyM>[\bcyn{XJ9 $%-12Zthv|w}& $ )-.4I?_P]KQbfgm}xHH_Vs$Ys7/// The list of categories to which the update belongs.G,/// The localized description of the update.I4/// Required - The unique identifier for the update.~U/// The Microsoft Knowledge Base article IDs that are associated with the /// update.U//// The last published timestamp of the update.EVE(Mn!V]^ܾ *1Ϳ߿@!@f@@@A"A(ABAHAAAB(BFBBBBBCC$CuCCCDDMDtDDDDE'E\EcEdEuEEEEF FF>FEFuFFFFFFGGG`G{G|GGHH<HBH\HbHHIIAIGIoIuIIJ JJ[JkJqJJJK KKbKKKKLL.LHLULLMMBMwM~MMMMNNN2N9NjNNNNNNOOOKOfOgOOOOOOP,PzPPQQ!Q'Q`QfQQQRRPRRRRRS(ShSSSSTTT4T@TNTaTTTTTUUU!U'UVU\UvU|UV VPVVVVVVVW3W@WFWWWXX!X;XHXxXXXXY?Y@YpY|YYYYYZZ$Z(Z)ZQZWZZZZ[[E[[[[\1\A\G\g\m\\\]"]W]]^^"^#^Z^[^^^^^__ _!_F_L_f_l__``J`P`````a-a:a@aabbWbbbbbbccc6c=c]ccccccd+d|deeKeQeeeeeffSffffg0g@gFgggmgggh"hWh|hhhhiiPiiiiij jj%j8jYj`jjjjjk?kWk]kwk}kkll[lalllllm8mEmKmmn!nannnnnooo*oKoRooooopp pSpppqqqTqqqrrNr^rdrrrsssYssst t/tItVttuuu?utu{u|uuuuuv$v0v=v^vevvvvvwww1w7wwwwx$x*xrxxxy(y.y{yzzzfzvz|zz{{{{i{{{{||3|X|r|||}0}l}}}~~~~i~j~~~~~@GKLtzMk/?Ejp%Z| `DP_rHN#_Mb>D*02?o9:jv [ms0{%:gw} m$>K{ ST AHLNOz28gm$_eJW]1IcpdeJQUWXv WXz_-3Sx)^ef5<j#e#n~ ^L@Aq}9?Y__ouPIPQJNOntCI -3Dy#*vz{V%+Z`z-Y#)z8Yu AHIjno5io:@3v| `ms!;TlG7lst#*Q OCSYx~3h"bFRat7=vNÙß<Qġ`pvŗŝRƇƬ@ǀǵǼǽ ;GUhȉȐ,>DɀLRʁʇʡʧ [ˇ*0ek̼ U͔ͻ.nΣΪΫμ7CQdυόϼ+TUЕаб9qwёї^dҌҒ'-xӈӎ(.Դ/Kerղ#_֛֔֜!.OVׇ׿Vqrؚؠ7مٹٿ  Y_ڰڽIۅ۰!aܖܝܞܯ-9GZ{݂ݶ OUou޷7=߈ߘߞ'-~"/_&'Wcq 8>,g6<&u)*Zfv5;~RbhH}CJKLSWX3{7=W] 6~ ]jp<Xr$+,yzMQR_3CIhn#X$%gh%)*jpHNv|]rxjw}Lf >z;hiGNRS%Y_ 6<.x~hu{/Ibz"U Ez 7>k ,2u ) / z        p      . ; k    & ' ^ _        = D H I   #n*0JP)qwP]c/Kerlm@DE'c Xm17$17#?Yf $no$\cgij7=lr LR7DJ6P]    Q R       !7!>!B!D!E!f!!!!" "<"="e"""""#I#v#|##$$$-$.${$$$%%%>%?%i%%%%%&<&&&&'7'_'`''''( (B((()8)))))*6*<*z*******++)+D+T+n+t+u+++,,7,N,,,- -!-d---....<.S...// /./E///00070Q0s0001)1]1{111122:2]222222223J3N3348445 5H5`55555566-6J6666667 7'7+7-7.7e7i778B889"9W9u99::T::;.;r;;;<<<(P>>>???F?R?~???@@@d@@@AA+A9APAYAZAAABBB'BVBwB~BBBBBBCC'CBCHCjCpCCCCCDDD^DDDDDEEE4EREpEtEvEwEEEEFF*F+F_FkFFFGG"G9GBGCGtGGGGGGH H*H0HRHXHhHHHHHI IDIWIIIIIJJJ4J^JJJJJJKK5K6KlKmKKKLL.LlL}LLLLLMM1M5M7M8MpMMMN N]NNO=OUOOOPPP_PPQLQQR/RRRS;SRSTTfTTU%UUV7VdVW(W{WXLXY Y2YZ"ZZ[[h[\\-\}\\]7]u]^^e^^_)_J_``````aHaabbLbabbbbbbbccbcrcccdd/d8d9djdddeeeee7eQeReXe^eef*f+f1f7ffgg:g;gOgcgggggggh1huhhiioiiijjVjgjujjjjjk%k]kkkkl'l\lclgliljlllmm-memkmmmmmmn5n6ngnnnnnno oXooopp2p3pbphpppppqq$qrqqqqrr=r>rrrss^sstKttttuu#u>uXumuuuuuvv@vpvvvww9wcwwwxx)xzxxxxyFyVyjyyyyz(z\zzzz{.{[{{{{{{{{{|N|m|||}}}R}S}}}}}}~&~F~G~r~~~~l&'bz{4NO+@Rdq .z L_3FqQWv7nwx5Y%Y)Fg4SZ^`aS)-t56 +Lj/RS2X| ?@Fh$Fb|>^_j !;Xh9\vHw)U+UIn(Kv%CDt:^~)c#fjlm67Qcdy!Y~;Gg Ta7EklE_`#X!@DE| "8I]s%J(_@S7c1Oq~!Ne#@d 'CU[\)<p<Tv  ^k  12am  )*[w:JVGo=cT?23YZ~1gkmn,-ST~ŠIsÝáãä mėĦ78fl|ŜŝLƜ6DžǓDzdzdȴNɝɫ$%uʱʷlˁˇ=RX̟̰8QR͜ͻ/0yΐΑ$HijϗϮϯϺ )?UlЃИЮ +7xѻK҇җҫA}ӍӡTԌԬ UՐCt}~֯Iׅׯ1Y؃د#0Yلٵ 0Uzڛھ)BIMOPhwۓۨ۩;<sܔܬ:Fsݮݷݸ/hlno޶޺BXߖߜ߷ f{LFWhA `|!EFvBkFef BwH\]@lm3Ift ZM`y0v"]+zCw E{=u#KX -^qmq6q$^dt?YZ 7H^vB}&6J5_=diJN~(E]{'(LXFAiv]^$39Iwx , Y       " ^        p       l m       e q u \1{_H[n I\u$Hlprs(E Su'Ohi'<BCs,enoBOt2`~/MNz&;ABq}(8L2^  / J k r v x y  ! ! !=!>!e!f!!!!"A"Q"e"n"o""""""##O#P####$!$?$$$$%8%q%%%%%& &@&x&&&''''J'n'''''(1(v(()))H)})~))**Q****+0+1+7+=++,,, ,,Z,,,---2-G-M-N---.!.o...//'/[/////00I0q0~00000001B1y1112202R2q22223323K3b3y333344\4455j5z55556666l66677,7[77777778888e8t8x899b99::V:\:l:::::;;;O;;;;;;< < >>D>E>j>v>>??-?A?|????@ @R@V@X@Y@@@@AGAMA`AAAAAABBB;BABQBmBnBCCDCcCdCxCCCCCCDD DPDDDE)E9EMEEEEF F$F-F.F_FFFGGG=GZG}GGGGGGGGGHBH{HHII,IBICIzIIJJHJZJ[JpJJJJJJJJK9K_KKKLL;LRLLLLMM=M\MMMMMNN1NWN{NNNNO O$O+O/O1O2OQOnOOOPP'P(PCPTPhPPPPPPQQ9QbQQQRRBRURRRRRRRS/SOSuSSSST T0TKTRTVTXTYTmTTTU?UWUUUUUVV>VnVVVVVVVWW+W1W2W]WiWWX X5XXXXYYXYhY|YYZ#Z_ZoZZZZ[1[B[P[g[p[q[[[\\H\\\\\]]>]u]]]]]]^^)^=^>^T^^^^__._/_W_X______` `<`V```````aa(aYa}a~aab%b=b>b~bbbbbcMcdcecccccccd ddd dHdTddde ee)e@eseeff f f>fffffffgg1gLgeg|gggggggghhVhthuhhhiiiQi]iiijjUjfjtjjjjjkkikmkokpkkkkl2lUlsltlllllmmCmvmmmmnn!n`nnno oo.ohooooopp9pcpppppppppqq%q[qaqqqqrr6r7rMrSrrss*s+sGs_susssssttJt]tttttu9uluuuuuvv@vMvtvvvvvvww'w+w`wqwwwwwx7xLxMx{xxxxxxyy y>ykyyzzz&z/z0zazzz{{{ { {({){L{]{{{{|1|7||||||}>}N}l}m}}~~~~(~D~]~t~~~~~L8H\:j)Rw<+y-ABn ()a 23[a>DWy^49rFs/5H]^8]^78ci %&W{|&6K`u1F^oi$8b#J'Naq@Pd8H\'K/F~3m 6Y Cq<f'['a!Gy1S1Y{+Ne;Rg7P}"&()pUyz;<l)?@:@SuZ05nBo gYwx%+x$%?[\%&Pz{0@O^qDP%OwC MfvK[o .XEz+?zn~/?S-=Q‹» .78iÓñ)OāĥAkŕ -[hƋƢ$Olǃǘǭ+RkȌȧ-_t  >DTtu^ˮ˿$Jȟ̬+]^͑͗ͪ'-vΒΓ23u{$@ARkЅПл-CIJr~ѿ@`ұXkӤSԎ#qՁՕ ;m֟-W׃ׯ:eؔع&Knuy{|ٵ&,dچ"#tۮ۴*FGܖܮ "KLݒݦݧ!'BWXޢ:NO_v߇ߝ߮178_kDWp"5e'p5`$%V:b~/Rk29=?@ AGZ|jXlm9NO)=>Tk| U-Au(U'7KTU4^;V]acd(qXA A}V4}O5$qRAciW;23c}XD,r\r2] . 7 8 i        h p       X u {     & ; < n o     - 6 7 h      PEF%[D@M` EZ[{/RSAMZQ]wx+x.`<=uE7G[de'Bm23h|}  6      !!=!W!!!!!!!")"F"t"u"##:#;#^#_####$<$L$`$$%%%)%2%3%d%%%%%%%& &8&S&T&&&&&''f'v'''( (I(Z(h((())/)C)L)M)~))))**5*R*Y*]*_*`*****+++F+L++++++, ,<,o,x,y,,,-!-%-'-(-s---. ..9.y..../,/R/n/o///000E0Q0001 11Z11122)272N2W2X22223 3%3H3i3p3t3v3w333344B4444555?5E5t5555561676q6666666777<7H7x778*8:8N88889;9L9Z9q9z9{999: :B:O:g:::::::;;W;X;x;;;;<<<0<<!>:>P>V>f>>>?C?R??@@i@@AAcAAB1B|BBBC9CCCCDNDlDDE"EfEEF FgFFFFFGG0G1GMGSGcGGGGGHH/HeHxHHHIIIRIeIIIIJ JJJDJ`JJJJJJK,KRKSKKKKL:LLLLLLMMM<M[MMMMMNN"NBNFNHNINNNO/O}OPPkPQ QNQQR5RRSSiSSSSTT,TVTWTzTTTTU+UcUiUUUVV"V#VpVVVVWW6W7WHWbW~WWWWWWXXCXXYY,YzYYYYYZZFZ|ZZ[[[<[k[[[[[[[\\\*\+\z\\] ]?]a]{]|]]^^V^^^^^___K_o___``%`Q`````aadataaabb/bCbLbMb~bbbc cc2cQcnccccccddYdrdddddee'eeeeeff6fYfffffgg6g^ggggghhhhghhhi1imiiijjj.j@jUjij|jjjjjk@kTkkklDlTlhllm-m=mQmmmn&n7nEn\nnoo)o=oFoGoxooopp8p\pippppqq#q*q.q0q1qXq\qqqqrr)rwrrrs3scsdsssst8tRtStttu-uzuuv"v#v.vKvnvvvvvvww%wVwwwwwx+xYxxxxyyPy}yyyz zz*z3z4zezz{{+{8{i{{{{{{{|'|+|{|||}}}P}o}p}}}}~-~.~u~v~~~ Wg{+?eG1Q^}cgQFG}!%v"/3W^rs+=U[\Uft Uey(8LUV'4[v.2}$>67Z`()HNJV,_,f :f1X@cy5I 01b{|Rz{ ^REefx !JV7]?R0CrXab!Kw)Fi+Uy 5RS}Hij '9Mhx~eu 7Wcs6^8Vc;RY]_`8WqrVx:XY *NnCgK"3I[n$Pm$l|)zYlLr"V"?l,2QWj-=>n¾Væ<Z~Ğ*GHőŗŪ34ƂƝƣƳ  FGǐǞǟEkȉȭGM`Ɂɂ !=Qbxʉʥʼ)<Wf~˄˅˸2O̧̗̻"?͇͗ͫ/jέ,j{ωϠYjxЏз*>sѸEҔҤҸ9cӃӹCoԙԵ )WdՃ՜տ,Q|֡#8_fjlm׼Grs؉؏ ?fg٫٬#6nڬڽOfopۡ(,./Eܒܡܧܷhnݺ#3Z[ށއޗެޭ$0aߜTes<b~ Uko "\ft6QR{/?EFo{0AOf<L`7p,P|0Sp ^ContainerAnalysisApiProjectsResourceProjectsLocationsResourceProjectsLocationsNotesResource)ProjectsLocationsNotesOccurrencesResource$ProjectsLocationsOccurrencesResource"ProjectsLocationsResourcesResourceProjectsNotesResource ProjectsNotesOccurrencesResourceProjectsOccurrencesResourceProjectsResourcesResource AssessmentAttestationNoteAttestationOccurrenceBatchCreateNotesRequestBatchCreateNotesResponseBatchCreateOccurrencesRequestBatchCreateOccurrencesResponseBindingBuildDefinition BuildNoteBuildOccurrenceBuildProvenanceCVSSv3 CisBenchmarkCloudRepoSourceContextComplianceNoteComplianceOccurrenceDSSEAttestationNoteDSSEAttestationOccurrenceDSSEHintDeploymentNoteDetailDigest DiscoveryNoteDiscoveryOccurrence DistributionEnvelopeExportSBOMRequestExportSBOMResponse FileHashesFixableTotalByDigestGerritSourceContextGetIamPolicyRequestGrafeasV1FileLocation,GrafeasV1SlsaProvenanceZeroTwoSlsaInvocation*GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataHint ImageNoteImageOccurrenceInTotoProvenanceInTotoSlsaProvenanceV1InTotoStatement KnowledgeBase LayerDetailsListNoteOccurrencesResponseListNotesResponseListOccurrencesResponseLocationMetadataNote Occurrence PackageIssue PackageNotePackageOccurrencePolicyProductProvenanceBuilder Publisher RemediationRepoIdRisk RunDetailsSBOMReferenceNoteSBOMReferenceOccurrenceSbomReferenceIntotoPayloadSecretLocationSecretOccurrenceSetIamPolicyRequest SlsaMetadataSlsaProvenanceSlsaProvenanceV1SlsaProvenanceZeroTwoSource SourceContext UpgradeNoteUpgradeOccurrence VexAssessmentVulnerabilityAssessmentNoteVulnerabilityNoteVulnerabilityOccurrenceVulnerabilityOccurrencesSummary WindowsDetail WindowsUpdateɆ