All Classes and Interfaces

Class
Description
An alias to a repo revision.
An alias to a repo revision.
The type of an alias.
 
Instruction set architectures supported by various package managers.
Artifact describes a build product.
Artifact describes a build product.
 
Occurrence that represents a single "attestation".
Occurrence that represents a single "attestation".
 
 
 
Note kind that represents a logical attestation "role" or "authority".
Note kind that represents a logical attestation "role" or "authority".
This submessage provides human-readable hints about the purpose of the authority.
This submessage provides human-readable hints about the purpose of the authority.
 
 
Basis describes the base image portion (Note) of the DockerImage relationship.
Basis describes the base image portion (Note) of the DockerImage relationship.
 
Request to create notes in batch.
Request to create notes in batch.
 
Response for creating notes in batch.
Response for creating notes in batch.
 
Request to create occurrences in batch.
Request to create occurrences in batch.
 
Response for creating occurrences in batch.
Response for creating occurrences in batch.
 
Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
Note holding the version of the provider's builder and the signature of the provenance message in the build details occurrence.
 
 
Provenance of a build.
Provenance of a build.
 
Message encapsulating the signature of the verified build.
Message encapsulating the signature of the verified build.
Public key formats.
 
A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
A CloudRepoSourceContext denotes a particular revision in a Google Cloud Source Repo.
 
 
Command describes a step performed as part of the build pipeline.
Command describes a step performed as part of the build pipeline.
 
 
 
Request to create a new note.
Request to create a new note.
 
Request to create a new occurrence.
Request to create a new occurrence.
 
 
Common Vulnerability Scoring System version 3.
Protobuf enum grafeas.v1beta1.vulnerability.CVSSv3.AttackComplexity
Protobuf enum grafeas.v1beta1.vulnerability.CVSSv3.AttackVector
Common Vulnerability Scoring System version 3.
Protobuf enum grafeas.v1beta1.vulnerability.CVSSv3.Impact
Protobuf enum grafeas.v1beta1.vulnerability.CVSSv3.PrivilegesRequired
Protobuf enum grafeas.v1beta1.vulnerability.CVSSv3.Scope
Protobuf enum grafeas.v1beta1.vulnerability.CVSSv3.UserInteraction
 
Request to delete a note.
Request to delete a note.
 
Request to delete a occurrence.
Request to delete a occurrence.
 
An artifact that can be deployed in some runtime.
An artifact that can be deployed in some runtime.
 
The period during which some deployable was active in a runtime.
The period during which some deployable was active in a runtime.
Types of platforms.
 
 
Derived describes the derived image portion (Occurrence) of the DockerImage relationship.
Derived describes the derived image portion (Occurrence) of the DockerImage relationship.
 
Details of an attestation occurrence.
Details of a build occurrence.
Details of a deployment occurrence.
Details of a discovery occurrence.
Details of an image occurrence.
Details of a package occurrence.
Details of a vulnerability Occurrence.
Details of an attestation occurrence.
Details of a build occurrence.
Details of a deployment occurrence.
Details of a discovery occurrence.
Details of an image occurrence.
Details of a package occurrence.
Details of a vulnerability Occurrence.
 
 
 
 
 
 
 
Provides information about the analysis status of a discovered resource.
Analysis status for a resource.
Provides information about the analysis status of a discovered resource.
Whether the resource is continuously analyzed.
 
A note that indicates a type of analysis a provider would perform.
A note that indicates a type of analysis a provider would perform.
 
 
This represents a particular channel of distribution for a given package.
This represents a particular channel of distribution for a given package.
 
The request to a call of ExportSBOM
The request to a call of ExportSBOM
 
The response from a call to ExportSBOM
The response from a call to ExportSBOM
 
Container message for hashes of byte content of files, used in source messages to verify integrity of source input to the build.
Container message for hashes of byte content of files, used in source messages to verify integrity of source input to the build.
 
A set of properties that uniquely identify a given Docker image.
A set of properties that uniquely identify a given Docker image.
 
GeneratePackagesSummaryRequest is the request body for the GeneratePackagesSummary API method.
GeneratePackagesSummaryRequest is the request body for the GeneratePackagesSummary API method.
 
An attestation wrapper that uses the Grafeas `Signature` message.
An attestation wrapper that uses the Grafeas `Signature` message.
Type of the attestation plaintext that was signed.
 
A SourceContext referring to a Gerrit project.
A SourceContext referring to a Gerrit project.
 
 
Request to get a note.
Request to get a note.
 
Request to get the note to which the specified occurrence is attached.
Request to get the note to which the specified occurrence is attached.
 
Request to get an occurrence.
Request to get an occurrence.
 
Request to get a vulnerability summary for some set of occurrences.
Request to get a vulnerability summary for some set of occurrences.
 
A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
A GitSourceContext denotes a particular revision in a third party Git repository (e.g., GitHub).
 
 
Container message for hash values.
Container message for hash values.
Specifies the hash algorithm.
 
 
This represents how a particular software package may be installed on a system.
This represents how a particular software package may be installed on a system.
 
Layer holds metadata specific to a layer of a Docker image.
Layer holds metadata specific to a layer of a Docker image.
Instructions from Dockerfile.
 
Request to list occurrences for a note.
Request to list occurrences for a note.
 
Response for listing occurrences for a note.
Response for listing occurrences for a note.
 
Request to list notes.
Request to list notes.
 
Response for listing notes.
Response for listing notes.
 
Request to list occurrences.
Request to list occurrences.
 
Response for listing occurrences.
Response for listing occurrences.
 
An occurrence of a particular package installation found within a system's filesystem.
An occurrence of a particular package installation found within a system's filesystem.
 
A type of analysis that can be done for a resource.
A type of analysis that can be done for a resource.
 
Kind represents the kinds of notes supported.
 
An instance of an analysis type that has been found on a resource.
An instance of an analysis type that has been found on a resource.
 
 
This represents a particular package that is distributed over various channels.
This represents a particular package that is distributed over various channels.
This message wraps a location affected by a vulnerability and its associated fix (if one is available).
This message wraps a location affected by a vulnerability and its associated fix (if one is available).
 
 
 
A summary of the packages found within the given resource.
A summary of the packages found within the given resource.
Per license count
Per license count
 
 
An attestation wrapper with a PGP-compatible signature.
An attestation wrapper with a PGP-compatible signature.
Type (for example schema) of the attestation payload that was signed.
 
 
Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
Selects a repo using a Google Cloud Platform project ID (e.g., winged-cargo-31) and a repo name within that project.
 
 
Metadata for any related URL information.
Metadata for any related URL information.
 
A unique identifier for a Cloud Repo.
A unique identifier for a Cloud Repo.
 
 
An entity that can have metadata.
An entity that can have metadata.
 
Note provider-assigned severity/impact ranking.
Verifiers (e.g.
Verifiers (e.g.
 
Source describes the location of the source used for the build.
 
Source describes the location of the source used for the build.
A SourceContext is a reference to a tree of files.
A SourceContext is a reference to a tree of files.
 
 
 
Request to update a note.
Request to update a note.
 
Request to update an occurrence.
Request to update an occurrence.
 
Version contains structured information about the version of a package.
Version contains structured information about the version of a package.
Whether this is an ordinary package version or a sentinel MIN/MAX version.
 
Vulnerability provides metadata about a security vulnerability in a Note.
Vulnerability provides metadata about a security vulnerability in a Note.
Identifies all appearances of this vulnerability in the package for a specific distro/location.
Identifies all appearances of this vulnerability in the package for a specific distro/location.
 
Protobuf type grafeas.v1beta1.vulnerability.Vulnerability.WindowsDetail
Protobuf type grafeas.v1beta1.vulnerability.Vulnerability.WindowsDetail
Protobuf type grafeas.v1beta1.vulnerability.Vulnerability.WindowsDetail.KnowledgeBase
Protobuf type grafeas.v1beta1.vulnerability.Vulnerability.WindowsDetail.KnowledgeBase
 
 
The location of the vulnerability.
The location of the vulnerability.
 
A summary of how many vulnerability occurrences there are per resource and severity type.
A summary of how many vulnerability occurrences there are per resource and severity type.
Per resource and severity counts of fixable and total vulnerabilities.
Per resource and severity counts of fixable and total vulnerabilities.