Class: Google::Apis::ContaineranalysisV1alpha1::VulnerabilityDetails

Inherits:
Object
  • Object
show all
Includes:
Google::Apis::Core::Hashable, Google::Apis::Core::JsonObjectSupport
Defined in:
lib/google/apis/containeranalysis_v1alpha1/classes.rb,
lib/google/apis/containeranalysis_v1alpha1/representations.rb,
lib/google/apis/containeranalysis_v1alpha1/representations.rb

Overview

Used by Occurrence to point to where the vulnerability exists and how to fix it.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ VulnerabilityDetails

Returns a new instance of VulnerabilityDetails.



8636
8637
8638
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8636

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#cvss_score ⇒ Float

Output only. The CVSS score of this vulnerability. CVSS score is on a scale of 0-10 where 0 indicates low severity and 10 indicates high severity. Corresponds to the JSON property cvssScore

Returns:

  • (Float) 


8548
8549
8550
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8548

def cvss_score
  @cvss_score
end

#cvss_v2 ⇒ Google::Apis::ContaineranalysisV1alpha1::Cvss

Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator For CVSS v4 details, see https://www.first.org/cvss/v4.0/user-guide CVSS v4 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator Corresponds to the JSON property cvssV2

Returns:



8559
8560
8561
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8559

def cvss_v2
  @cvss_v2
end

#cvss_v3 ⇒ Google::Apis::ContaineranalysisV1alpha1::Cvss

Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator For CVSS v4 details, see https://www.first.org/cvss/v4.0/user-guide CVSS v4 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator Corresponds to the JSON property cvssV3

Returns:



8570
8571
8572
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8570

def cvss_v3
  @cvss_v3
end

#cvss_v4 ⇒ Google::Apis::ContaineranalysisV1alpha1::Cvss

Common Vulnerability Scoring System. This message is compatible with CVSS v2 and v3. For CVSS v2 details, see https://www.first.org/cvss/v2/guide CVSS v2 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator For CVSS v3 details, see https://www.first.org/cvss/specification-document CVSS v3 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator For CVSS v4 details, see https://www.first.org/cvss/v4.0/user-guide CVSS v4 calculator: https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator Corresponds to the JSON property cvssV4

Returns:



8581
8582
8583
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8581

def cvss_v4
  @cvss_v4
end

#cvss_version ⇒ String

Output only. CVSS version used to populate cvss_score and severity. Corresponds to the JSON property cvssVersion

Returns:

  • (String) 


8586
8587
8588
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8586

def cvss_version
  @cvss_version
end

#effective_severity ⇒ String

The distro assigned severity for this vulnerability when that is available and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple package issues for this vulnerability, they can have different effective severities because some might come from the distro and some might come from installed language packs (e.g. Maven JARs or Go binaries). For this reason, it is advised to use the effective severity on the PackageIssue level, as this field may eventually be deprecated. In the case where multiple PackageIssues have different effective severities, the one set here will be the highest severity of any of the PackageIssues. Corresponds to the JSON property effectiveSeverity

Returns:

  • (String) 


8600
8601
8602
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8600

def effective_severity
  @effective_severity
end

#extra_details ⇒ String

Occurrence-specific extra details about the vulnerability. Corresponds to the JSON property extraDetails

Returns:

  • (String) 


8605
8606
8607
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8605

def extra_details
  @extra_details
end

#package_issue ⇒ Array<Google::Apis::ContaineranalysisV1alpha1::PackageIssue>

The set of affected locations and their fixes (if available) within the associated resource. Corresponds to the JSON property packageIssue

Returns:



8611
8612
8613
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8611

def package_issue
  @package_issue
end

#risk ⇒ Google::Apis::ContaineranalysisV1alpha1::Risk

The Risk message provides information about the risk of a vulnerability. Corresponds to the JSON property risk

Returns:



8616
8617
8618
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8616

def risk
  @risk
end

#severity ⇒ String

Output only. The note provider assigned Severity of the vulnerability. Corresponds to the JSON property severity

Returns:

  • (String) 


8621
8622
8623
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8621

def severity
  @severity
end

#type ⇒ String

The type of package; whether native or non native(ruby gems, node.js packages etc). This may be deprecated in the future because we can have multiple PackageIssues with different package types. Corresponds to the JSON property type

Returns:

  • (String) 


8628
8629
8630
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8628

def type
  @type
end

#vex_assessment ⇒ Google::Apis::ContaineranalysisV1alpha1::VexAssessment

VexAssessment provides all publisher provided Vex information that is related to this vulnerability. Corresponds to the JSON property vexAssessment

Returns:



8634
8635
8636
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8634

def vex_assessment
  @vex_assessment
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



8641
8642
8643
8644
8645
8646
8647
8648
8649
8650
8651
8652
8653
8654
 
# File 'lib/google/apis/containeranalysis_v1alpha1/classes.rb', line 8641

def update!(**args)
  @cvss_score = args[:cvss_score] if args.key?(:cvss_score)
  @cvss_v2 = args[:cvss_v2] if args.key?(:cvss_v2)
  @cvss_v3 = args[:cvss_v3] if args.key?(:cvss_v3)
  @cvss_v4 = args[:cvss_v4] if args.key?(:cvss_v4)
  @cvss_version = args[:cvss_version] if args.key?(:cvss_version)
  @effective_severity = args[:effective_severity] if args.key?(:effective_severity)
  @extra_details = args[:extra_details] if args.key?(:extra_details)
  @package_issue = args[:package_issue] if args.key?(:package_issue)
  @risk = args[:risk] if args.key?(:risk)
  @severity = args[:severity] if args.key?(:severity)
  @type = args[:type] if args.key?(:type)
  @vex_assessment = args[:vex_assessment] if args.key?(:vex_assessment)
end