1. Packages
  2. Google Cloud Native
  3. API Docs
  4. containeranalysis
  5. containeranalysis/v1
  6. Occurrence

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

google-native.containeranalysis/v1.Occurrence

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi

    Creates a new occurrence. Auto-naming is currently not supported for this resource.

    Create Occurrence Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Occurrence(name: string, args: OccurrenceArgs, opts?: CustomResourceOptions);
    @overload
    def Occurrence(resource_name: str,
                   args: OccurrenceArgs,
                   opts: Optional[ResourceOptions] = None)
    
    @overload
    def Occurrence(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   resource_uri: Optional[str] = None,
                   note_name: Optional[str] = None,
                   envelope: Optional[EnvelopeArgs] = None,
                   package: Optional[PackageOccurrenceArgs] = None,
                   compliance: Optional[ComplianceOccurrenceArgs] = None,
                   dsse_attestation: Optional[DSSEAttestationOccurrenceArgs] = None,
                   build: Optional[BuildOccurrenceArgs] = None,
                   image: Optional[ImageOccurrenceArgs] = None,
                   discovery: Optional[DiscoveryOccurrenceArgs] = None,
                   deployment: Optional[DeploymentOccurrenceArgs] = None,
                   project: Optional[str] = None,
                   remediation: Optional[str] = None,
                   attestation: Optional[AttestationOccurrenceArgs] = None,
                   sbom_reference: Optional[SBOMReferenceOccurrenceArgs] = None,
                   upgrade: Optional[UpgradeOccurrenceArgs] = None,
                   vulnerability: Optional[VulnerabilityOccurrenceArgs] = None)
    func NewOccurrence(ctx *Context, name string, args OccurrenceArgs, opts ...ResourceOption) (*Occurrence, error)
    public Occurrence(string name, OccurrenceArgs args, CustomResourceOptions? opts = null)
    public Occurrence(String name, OccurrenceArgs args)
    public Occurrence(String name, OccurrenceArgs args, CustomResourceOptions options)
    
    type: google-native:containeranalysis/v1:Occurrence
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args OccurrenceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OccurrenceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OccurrenceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OccurrenceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OccurrenceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var occurrenceResource = new GoogleNative.ContainerAnalysis.V1.Occurrence("occurrenceResource", new()
    {
        ResourceUri = "string",
        NoteName = "string",
        Envelope = new GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeArgs
        {
            Payload = "string",
            PayloadType = "string",
            Signatures = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeSignatureArgs
                {
                    Keyid = "string",
                    Sig = "string",
                },
            },
        },
        Package = new GoogleNative.ContainerAnalysis.V1.Inputs.PackageOccurrenceArgs
        {
            License = new GoogleNative.ContainerAnalysis.V1.Inputs.LicenseArgs
            {
                Comments = "string",
                Expression = "string",
            },
            Location = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.LocationArgs
                {
                    Path = "string",
                },
            },
        },
        Compliance = new GoogleNative.ContainerAnalysis.V1.Inputs.ComplianceOccurrenceArgs
        {
            NonComplianceReason = "string",
            NonCompliantFiles = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.NonCompliantFileArgs
                {
                    DisplayCommand = "string",
                    Path = "string",
                    Reason = "string",
                },
            },
        },
        DsseAttestation = new GoogleNative.ContainerAnalysis.V1.Inputs.DSSEAttestationOccurrenceArgs
        {
            Envelope = new GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeArgs
            {
                Payload = "string",
                PayloadType = "string",
                Signatures = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeSignatureArgs
                    {
                        Keyid = "string",
                        Sig = "string",
                    },
                },
            },
            Statement = new GoogleNative.ContainerAnalysis.V1.Inputs.InTotoStatementArgs
            {
                PredicateType = "string",
                Provenance = new GoogleNative.ContainerAnalysis.V1.Inputs.InTotoProvenanceArgs
                {
                    BuilderConfig = new GoogleNative.ContainerAnalysis.V1.Inputs.BuilderConfigArgs
                    {
                        Id = "string",
                    },
                    Materials = new[]
                    {
                        "string",
                    },
                    Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.MetadataArgs
                    {
                        BuildFinishedOn = "string",
                        BuildInvocationId = "string",
                        BuildStartedOn = "string",
                        Completeness = new GoogleNative.ContainerAnalysis.V1.Inputs.CompletenessArgs
                        {
                            Arguments = false,
                            Environment = false,
                            Materials = false,
                        },
                        Reproducible = false,
                    },
                    Recipe = new GoogleNative.ContainerAnalysis.V1.Inputs.RecipeArgs
                    {
                        Arguments = new[]
                        {
                            
                            {
                                { "string", "string" },
                            },
                        },
                        DefinedInMaterial = "string",
                        EntryPoint = "string",
                        Environment = new[]
                        {
                            
                            {
                                { "string", "string" },
                            },
                        },
                        Type = "string",
                    },
                },
                SlsaProvenance = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaProvenanceArgs
                {
                    Builder = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaBuilderArgs
                    {
                        Id = "string",
                    },
                    Materials = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1.Inputs.MaterialArgs
                        {
                            Digest = 
                            {
                                { "string", "string" },
                            },
                            Uri = "string",
                        },
                    },
                    Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaMetadataArgs
                    {
                        BuildFinishedOn = "string",
                        BuildInvocationId = "string",
                        BuildStartedOn = "string",
                        Completeness = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaCompletenessArgs
                        {
                            Arguments = false,
                            Environment = false,
                            Materials = false,
                        },
                        Reproducible = false,
                    },
                    Recipe = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaRecipeArgs
                    {
                        Arguments = 
                        {
                            { "string", "string" },
                        },
                        DefinedInMaterial = "string",
                        EntryPoint = "string",
                        Environment = 
                        {
                            { "string", "string" },
                        },
                        Type = "string",
                    },
                },
                SlsaProvenanceZeroTwo = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaProvenanceZeroTwoArgs
                {
                    BuildConfig = 
                    {
                        { "string", "string" },
                    },
                    BuildType = "string",
                    Builder = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs
                    {
                        Id = "string",
                    },
                    Invocation = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs
                    {
                        ConfigSource = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs
                        {
                            Digest = 
                            {
                                { "string", "string" },
                            },
                            EntryPoint = "string",
                            Uri = "string",
                        },
                        Environment = 
                        {
                            { "string", "string" },
                        },
                        Parameters = 
                        {
                            { "string", "string" },
                        },
                    },
                    Materials = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs
                        {
                            Digest = 
                            {
                                { "string", "string" },
                            },
                            Uri = "string",
                        },
                    },
                    Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs
                    {
                        BuildFinishedOn = "string",
                        BuildInvocationId = "string",
                        BuildStartedOn = "string",
                        Completeness = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs
                        {
                            Environment = false,
                            Materials = false,
                            Parameters = false,
                        },
                        Reproducible = false,
                    },
                },
                Subject = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.SubjectArgs
                    {
                        Digest = 
                        {
                            { "string", "string" },
                        },
                        Name = "string",
                    },
                },
                Type = "string",
            },
        },
        Build = new GoogleNative.ContainerAnalysis.V1.Inputs.BuildOccurrenceArgs
        {
            InTotoSlsaProvenanceV1 = new GoogleNative.ContainerAnalysis.V1.Inputs.InTotoSlsaProvenanceV1Args
            {
                Predicate = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaProvenanceV1Args
                {
                    BuildDefinition = new GoogleNative.ContainerAnalysis.V1.Inputs.BuildDefinitionArgs
                    {
                        BuildType = "string",
                        ExternalParameters = 
                        {
                            { "string", "string" },
                        },
                        InternalParameters = 
                        {
                            { "string", "string" },
                        },
                        ResolvedDependencies = new[]
                        {
                            new GoogleNative.ContainerAnalysis.V1.Inputs.ResourceDescriptorArgs
                            {
                                Annotations = 
                                {
                                    { "string", "string" },
                                },
                                Content = "string",
                                Digest = 
                                {
                                    { "string", "string" },
                                },
                                DownloadLocation = "string",
                                MediaType = "string",
                                Name = "string",
                                Uri = "string",
                            },
                        },
                    },
                    RunDetails = new GoogleNative.ContainerAnalysis.V1.Inputs.RunDetailsArgs
                    {
                        Builder = new GoogleNative.ContainerAnalysis.V1.Inputs.ProvenanceBuilderArgs
                        {
                            BuilderDependencies = new[]
                            {
                                new GoogleNative.ContainerAnalysis.V1.Inputs.ResourceDescriptorArgs
                                {
                                    Annotations = 
                                    {
                                        { "string", "string" },
                                    },
                                    Content = "string",
                                    Digest = 
                                    {
                                        { "string", "string" },
                                    },
                                    DownloadLocation = "string",
                                    MediaType = "string",
                                    Name = "string",
                                    Uri = "string",
                                },
                            },
                            Id = "string",
                            Version = 
                            {
                                { "string", "string" },
                            },
                        },
                        Byproducts = new[]
                        {
                            new GoogleNative.ContainerAnalysis.V1.Inputs.ResourceDescriptorArgs
                            {
                                Annotations = 
                                {
                                    { "string", "string" },
                                },
                                Content = "string",
                                Digest = 
                                {
                                    { "string", "string" },
                                },
                                DownloadLocation = "string",
                                MediaType = "string",
                                Name = "string",
                                Uri = "string",
                            },
                        },
                        Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.BuildMetadataArgs
                        {
                            FinishedOn = "string",
                            InvocationId = "string",
                            StartedOn = "string",
                        },
                    },
                },
                PredicateType = "string",
                Subject = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.SubjectArgs
                    {
                        Digest = 
                        {
                            { "string", "string" },
                        },
                        Name = "string",
                    },
                },
                Type = "string",
            },
            IntotoStatement = new GoogleNative.ContainerAnalysis.V1.Inputs.InTotoStatementArgs
            {
                PredicateType = "string",
                Provenance = new GoogleNative.ContainerAnalysis.V1.Inputs.InTotoProvenanceArgs
                {
                    BuilderConfig = new GoogleNative.ContainerAnalysis.V1.Inputs.BuilderConfigArgs
                    {
                        Id = "string",
                    },
                    Materials = new[]
                    {
                        "string",
                    },
                    Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.MetadataArgs
                    {
                        BuildFinishedOn = "string",
                        BuildInvocationId = "string",
                        BuildStartedOn = "string",
                        Completeness = new GoogleNative.ContainerAnalysis.V1.Inputs.CompletenessArgs
                        {
                            Arguments = false,
                            Environment = false,
                            Materials = false,
                        },
                        Reproducible = false,
                    },
                    Recipe = new GoogleNative.ContainerAnalysis.V1.Inputs.RecipeArgs
                    {
                        Arguments = new[]
                        {
                            
                            {
                                { "string", "string" },
                            },
                        },
                        DefinedInMaterial = "string",
                        EntryPoint = "string",
                        Environment = new[]
                        {
                            
                            {
                                { "string", "string" },
                            },
                        },
                        Type = "string",
                    },
                },
                SlsaProvenance = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaProvenanceArgs
                {
                    Builder = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaBuilderArgs
                    {
                        Id = "string",
                    },
                    Materials = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1.Inputs.MaterialArgs
                        {
                            Digest = 
                            {
                                { "string", "string" },
                            },
                            Uri = "string",
                        },
                    },
                    Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaMetadataArgs
                    {
                        BuildFinishedOn = "string",
                        BuildInvocationId = "string",
                        BuildStartedOn = "string",
                        Completeness = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaCompletenessArgs
                        {
                            Arguments = false,
                            Environment = false,
                            Materials = false,
                        },
                        Reproducible = false,
                    },
                    Recipe = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaRecipeArgs
                    {
                        Arguments = 
                        {
                            { "string", "string" },
                        },
                        DefinedInMaterial = "string",
                        EntryPoint = "string",
                        Environment = 
                        {
                            { "string", "string" },
                        },
                        Type = "string",
                    },
                },
                SlsaProvenanceZeroTwo = new GoogleNative.ContainerAnalysis.V1.Inputs.SlsaProvenanceZeroTwoArgs
                {
                    BuildConfig = 
                    {
                        { "string", "string" },
                    },
                    BuildType = "string",
                    Builder = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs
                    {
                        Id = "string",
                    },
                    Invocation = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs
                    {
                        ConfigSource = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs
                        {
                            Digest = 
                            {
                                { "string", "string" },
                            },
                            EntryPoint = "string",
                            Uri = "string",
                        },
                        Environment = 
                        {
                            { "string", "string" },
                        },
                        Parameters = 
                        {
                            { "string", "string" },
                        },
                    },
                    Materials = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs
                        {
                            Digest = 
                            {
                                { "string", "string" },
                            },
                            Uri = "string",
                        },
                    },
                    Metadata = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs
                    {
                        BuildFinishedOn = "string",
                        BuildInvocationId = "string",
                        BuildStartedOn = "string",
                        Completeness = new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs
                        {
                            Environment = false,
                            Materials = false,
                            Parameters = false,
                        },
                        Reproducible = false,
                    },
                },
                Subject = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.SubjectArgs
                    {
                        Digest = 
                        {
                            { "string", "string" },
                        },
                        Name = "string",
                    },
                },
                Type = "string",
            },
            Provenance = new GoogleNative.ContainerAnalysis.V1.Inputs.BuildProvenanceArgs
            {
                Id = "string",
                EndTime = "string",
                BuiltArtifacts = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.ArtifactArgs
                    {
                        Checksum = "string",
                        Id = "string",
                        Names = new[]
                        {
                            "string",
                        },
                    },
                },
                Commands = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.CommandArgs
                    {
                        Name = "string",
                        Args = new[]
                        {
                            "string",
                        },
                        Dir = "string",
                        Env = new[]
                        {
                            "string",
                        },
                        Id = "string",
                        WaitFor = new[]
                        {
                            "string",
                        },
                    },
                },
                CreateTime = "string",
                Creator = "string",
                BuildOptions = 
                {
                    { "string", "string" },
                },
                BuilderVersion = "string",
                LogsUri = "string",
                Project = "string",
                SourceProvenance = new GoogleNative.ContainerAnalysis.V1.Inputs.SourceArgs
                {
                    AdditionalContexts = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1.Inputs.SourceContextArgs
                        {
                            CloudRepo = new GoogleNative.ContainerAnalysis.V1.Inputs.CloudRepoSourceContextArgs
                            {
                                AliasContext = new GoogleNative.ContainerAnalysis.V1.Inputs.AliasContextArgs
                                {
                                    Kind = GoogleNative.ContainerAnalysis.V1.AliasContextKind.KindUnspecified,
                                    Name = "string",
                                },
                                RepoId = new GoogleNative.ContainerAnalysis.V1.Inputs.RepoIdArgs
                                {
                                    ProjectRepoId = new GoogleNative.ContainerAnalysis.V1.Inputs.ProjectRepoIdArgs
                                    {
                                        Project = "string",
                                        RepoName = "string",
                                    },
                                    Uid = "string",
                                },
                                RevisionId = "string",
                            },
                            Gerrit = new GoogleNative.ContainerAnalysis.V1.Inputs.GerritSourceContextArgs
                            {
                                AliasContext = new GoogleNative.ContainerAnalysis.V1.Inputs.AliasContextArgs
                                {
                                    Kind = GoogleNative.ContainerAnalysis.V1.AliasContextKind.KindUnspecified,
                                    Name = "string",
                                },
                                GerritProject = "string",
                                HostUri = "string",
                                RevisionId = "string",
                            },
                            Git = new GoogleNative.ContainerAnalysis.V1.Inputs.GitSourceContextArgs
                            {
                                RevisionId = "string",
                                Url = "string",
                            },
                            Labels = 
                            {
                                { "string", "string" },
                            },
                        },
                    },
                    ArtifactStorageSourceUri = "string",
                    Context = new GoogleNative.ContainerAnalysis.V1.Inputs.SourceContextArgs
                    {
                        CloudRepo = new GoogleNative.ContainerAnalysis.V1.Inputs.CloudRepoSourceContextArgs
                        {
                            AliasContext = new GoogleNative.ContainerAnalysis.V1.Inputs.AliasContextArgs
                            {
                                Kind = GoogleNative.ContainerAnalysis.V1.AliasContextKind.KindUnspecified,
                                Name = "string",
                            },
                            RepoId = new GoogleNative.ContainerAnalysis.V1.Inputs.RepoIdArgs
                            {
                                ProjectRepoId = new GoogleNative.ContainerAnalysis.V1.Inputs.ProjectRepoIdArgs
                                {
                                    Project = "string",
                                    RepoName = "string",
                                },
                                Uid = "string",
                            },
                            RevisionId = "string",
                        },
                        Gerrit = new GoogleNative.ContainerAnalysis.V1.Inputs.GerritSourceContextArgs
                        {
                            AliasContext = new GoogleNative.ContainerAnalysis.V1.Inputs.AliasContextArgs
                            {
                                Kind = GoogleNative.ContainerAnalysis.V1.AliasContextKind.KindUnspecified,
                                Name = "string",
                            },
                            GerritProject = "string",
                            HostUri = "string",
                            RevisionId = "string",
                        },
                        Git = new GoogleNative.ContainerAnalysis.V1.Inputs.GitSourceContextArgs
                        {
                            RevisionId = "string",
                            Url = "string",
                        },
                        Labels = 
                        {
                            { "string", "string" },
                        },
                    },
                    FileHashes = 
                    {
                        { "string", "string" },
                    },
                },
                StartTime = "string",
                TriggerId = "string",
            },
            ProvenanceBytes = "string",
        },
        Image = new GoogleNative.ContainerAnalysis.V1.Inputs.ImageOccurrenceArgs
        {
            Fingerprint = new GoogleNative.ContainerAnalysis.V1.Inputs.FingerprintArgs
            {
                V1Name = "string",
                V2Blob = new[]
                {
                    "string",
                },
            },
            LayerInfo = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.LayerArgs
                {
                    Directive = "string",
                    Arguments = "string",
                },
            },
        },
        Discovery = new GoogleNative.ContainerAnalysis.V1.Inputs.DiscoveryOccurrenceArgs
        {
            AnalysisCompleted = new GoogleNative.ContainerAnalysis.V1.Inputs.AnalysisCompletedArgs
            {
                AnalysisType = new[]
                {
                    "string",
                },
            },
            AnalysisError = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.StatusArgs
                {
                    Code = 0,
                    Details = new[]
                    {
                        
                        {
                            { "string", "string" },
                        },
                    },
                    Message = "string",
                },
            },
            AnalysisStatus = GoogleNative.ContainerAnalysis.V1.DiscoveryOccurrenceAnalysisStatus.AnalysisStatusUnspecified,
            AnalysisStatusError = new GoogleNative.ContainerAnalysis.V1.Inputs.StatusArgs
            {
                Code = 0,
                Details = new[]
                {
                    
                    {
                        { "string", "string" },
                    },
                },
                Message = "string",
            },
            ContinuousAnalysis = GoogleNative.ContainerAnalysis.V1.DiscoveryOccurrenceContinuousAnalysis.ContinuousAnalysisUnspecified,
            Cpe = "string",
            LastScanTime = "string",
            SbomStatus = new GoogleNative.ContainerAnalysis.V1.Inputs.SBOMStatusArgs
            {
                Error = "string",
                SbomState = GoogleNative.ContainerAnalysis.V1.SBOMStatusSbomState.SbomStateUnspecified,
            },
        },
        Deployment = new GoogleNative.ContainerAnalysis.V1.Inputs.DeploymentOccurrenceArgs
        {
            DeployTime = "string",
            Address = "string",
            Config = "string",
            Platform = GoogleNative.ContainerAnalysis.V1.DeploymentOccurrencePlatform.PlatformUnspecified,
            UndeployTime = "string",
            UserEmail = "string",
        },
        Project = "string",
        Remediation = "string",
        Attestation = new GoogleNative.ContainerAnalysis.V1.Inputs.AttestationOccurrenceArgs
        {
            SerializedPayload = "string",
            Jwts = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.JwtArgs
                {
                    CompactJwt = "string",
                },
            },
            Signatures = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.SignatureArgs
                {
                    PublicKeyId = "string",
                    Signature = "string",
                },
            },
        },
        SbomReference = new GoogleNative.ContainerAnalysis.V1.Inputs.SBOMReferenceOccurrenceArgs
        {
            Payload = new GoogleNative.ContainerAnalysis.V1.Inputs.SbomReferenceIntotoPayloadArgs
            {
                Predicate = new GoogleNative.ContainerAnalysis.V1.Inputs.SbomReferenceIntotoPredicateArgs
                {
                    Digest = 
                    {
                        { "string", "string" },
                    },
                    Location = "string",
                    MimeType = "string",
                    ReferrerId = "string",
                },
                PredicateType = "string",
                Subject = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.SubjectArgs
                    {
                        Digest = 
                        {
                            { "string", "string" },
                        },
                        Name = "string",
                    },
                },
                Type = "string",
            },
            PayloadType = "string",
            Signatures = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeSignatureArgs
                {
                    Keyid = "string",
                    Sig = "string",
                },
            },
        },
        Upgrade = new GoogleNative.ContainerAnalysis.V1.Inputs.UpgradeOccurrenceArgs
        {
            Distribution = new GoogleNative.ContainerAnalysis.V1.Inputs.UpgradeDistributionArgs
            {
                Classification = "string",
                CpeUri = "string",
                Cve = new[]
                {
                    "string",
                },
                Severity = "string",
            },
            Package = "string",
            ParsedVersion = new GoogleNative.ContainerAnalysis.V1.Inputs.VersionArgs
            {
                Kind = GoogleNative.ContainerAnalysis.V1.VersionKind.VersionKindUnspecified,
                Epoch = 0,
                FullName = "string",
                Inclusive = false,
                Name = "string",
                Revision = "string",
            },
            WindowsUpdate = new GoogleNative.ContainerAnalysis.V1.Inputs.WindowsUpdateArgs
            {
                Categories = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.CategoryArgs
                    {
                        CategoryId = "string",
                        Name = "string",
                    },
                },
                Description = "string",
                Identity = new GoogleNative.ContainerAnalysis.V1.Inputs.IdentityArgs
                {
                    Revision = 0,
                    UpdateId = "string",
                },
                KbArticleIds = new[]
                {
                    "string",
                },
                LastPublishedTimestamp = "string",
                SupportUrl = "string",
                Title = "string",
            },
        },
        Vulnerability = new GoogleNative.ContainerAnalysis.V1.Inputs.VulnerabilityOccurrenceArgs
        {
            PackageIssue = new[]
            {
                new GoogleNative.ContainerAnalysis.V1.Inputs.PackageIssueArgs
                {
                    AffectedCpeUri = "string",
                    AffectedPackage = "string",
                    AffectedVersion = new GoogleNative.ContainerAnalysis.V1.Inputs.VersionArgs
                    {
                        Kind = GoogleNative.ContainerAnalysis.V1.VersionKind.VersionKindUnspecified,
                        Epoch = 0,
                        FullName = "string",
                        Inclusive = false,
                        Name = "string",
                        Revision = "string",
                    },
                    FixedVersion = new GoogleNative.ContainerAnalysis.V1.Inputs.VersionArgs
                    {
                        Kind = GoogleNative.ContainerAnalysis.V1.VersionKind.VersionKindUnspecified,
                        Epoch = 0,
                        FullName = "string",
                        Inclusive = false,
                        Name = "string",
                        Revision = "string",
                    },
                    FileLocation = new[]
                    {
                        new GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1FileLocationArgs
                        {
                            FilePath = "string",
                        },
                    },
                    FixedCpeUri = "string",
                    FixedPackage = "string",
                    PackageType = "string",
                },
            },
            CvssV2 = new GoogleNative.ContainerAnalysis.V1.Inputs.CVSSArgs
            {
                AttackComplexity = GoogleNative.ContainerAnalysis.V1.CVSSAttackComplexity.AttackComplexityUnspecified,
                AttackVector = GoogleNative.ContainerAnalysis.V1.CVSSAttackVector.AttackVectorUnspecified,
                Authentication = GoogleNative.ContainerAnalysis.V1.CVSSAuthentication.AuthenticationUnspecified,
                AvailabilityImpact = GoogleNative.ContainerAnalysis.V1.CVSSAvailabilityImpact.ImpactUnspecified,
                BaseScore = 0,
                ConfidentialityImpact = GoogleNative.ContainerAnalysis.V1.CVSSConfidentialityImpact.ImpactUnspecified,
                ExploitabilityScore = 0,
                ImpactScore = 0,
                IntegrityImpact = GoogleNative.ContainerAnalysis.V1.CVSSIntegrityImpact.ImpactUnspecified,
                PrivilegesRequired = GoogleNative.ContainerAnalysis.V1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
                Scope = GoogleNative.ContainerAnalysis.V1.CVSSScope.ScopeUnspecified,
                UserInteraction = GoogleNative.ContainerAnalysis.V1.CVSSUserInteraction.UserInteractionUnspecified,
            },
            Cvssv3 = new GoogleNative.ContainerAnalysis.V1.Inputs.CVSSArgs
            {
                AttackComplexity = GoogleNative.ContainerAnalysis.V1.CVSSAttackComplexity.AttackComplexityUnspecified,
                AttackVector = GoogleNative.ContainerAnalysis.V1.CVSSAttackVector.AttackVectorUnspecified,
                Authentication = GoogleNative.ContainerAnalysis.V1.CVSSAuthentication.AuthenticationUnspecified,
                AvailabilityImpact = GoogleNative.ContainerAnalysis.V1.CVSSAvailabilityImpact.ImpactUnspecified,
                BaseScore = 0,
                ConfidentialityImpact = GoogleNative.ContainerAnalysis.V1.CVSSConfidentialityImpact.ImpactUnspecified,
                ExploitabilityScore = 0,
                ImpactScore = 0,
                IntegrityImpact = GoogleNative.ContainerAnalysis.V1.CVSSIntegrityImpact.ImpactUnspecified,
                PrivilegesRequired = GoogleNative.ContainerAnalysis.V1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
                Scope = GoogleNative.ContainerAnalysis.V1.CVSSScope.ScopeUnspecified,
                UserInteraction = GoogleNative.ContainerAnalysis.V1.CVSSUserInteraction.UserInteractionUnspecified,
            },
            EffectiveSeverity = GoogleNative.ContainerAnalysis.V1.VulnerabilityOccurrenceEffectiveSeverity.SeverityUnspecified,
            ExtraDetails = "string",
            Type = "string",
            VexAssessment = new GoogleNative.ContainerAnalysis.V1.Inputs.VexAssessmentArgs
            {
                Impacts = new[]
                {
                    "string",
                },
                Justification = new GoogleNative.ContainerAnalysis.V1.Inputs.JustificationArgs
                {
                    Details = "string",
                    JustificationType = GoogleNative.ContainerAnalysis.V1.JustificationJustificationType.JustificationTypeUnspecified,
                },
                NoteName = "string",
                RelatedUris = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrlArgs
                    {
                        Label = "string",
                        Url = "string",
                    },
                },
                Remediations = new[]
                {
                    new GoogleNative.ContainerAnalysis.V1.Inputs.RemediationArgs
                    {
                        Details = "string",
                        RemediationType = GoogleNative.ContainerAnalysis.V1.RemediationRemediationType.RemediationTypeUnspecified,
                        RemediationUri = new GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrlArgs
                        {
                            Label = "string",
                            Url = "string",
                        },
                    },
                },
                State = GoogleNative.ContainerAnalysis.V1.VexAssessmentState.StateUnspecified,
                VulnerabilityId = "string",
            },
        },
    });
    
    example, err := containeranalysis.NewOccurrence(ctx, "occurrenceResource", &containeranalysis.OccurrenceArgs{
    	ResourceUri: pulumi.String("string"),
    	NoteName:    pulumi.String("string"),
    	Envelope: &containeranalysis.EnvelopeArgs{
    		Payload:     pulumi.String("string"),
    		PayloadType: pulumi.String("string"),
    		Signatures: containeranalysis.EnvelopeSignatureArray{
    			&containeranalysis.EnvelopeSignatureArgs{
    				Keyid: pulumi.String("string"),
    				Sig:   pulumi.String("string"),
    			},
    		},
    	},
    	Package: &containeranalysis.PackageOccurrenceArgs{
    		License: &containeranalysis.LicenseArgs{
    			Comments:   pulumi.String("string"),
    			Expression: pulumi.String("string"),
    		},
    		Location: containeranalysis.LocationArray{
    			&containeranalysis.LocationArgs{
    				Path: pulumi.String("string"),
    			},
    		},
    	},
    	Compliance: &containeranalysis.ComplianceOccurrenceArgs{
    		NonComplianceReason: pulumi.String("string"),
    		NonCompliantFiles: containeranalysis.NonCompliantFileArray{
    			&containeranalysis.NonCompliantFileArgs{
    				DisplayCommand: pulumi.String("string"),
    				Path:           pulumi.String("string"),
    				Reason:         pulumi.String("string"),
    			},
    		},
    	},
    	DsseAttestation: &containeranalysis.DSSEAttestationOccurrenceArgs{
    		Envelope: &containeranalysis.EnvelopeArgs{
    			Payload:     pulumi.String("string"),
    			PayloadType: pulumi.String("string"),
    			Signatures: containeranalysis.EnvelopeSignatureArray{
    				&containeranalysis.EnvelopeSignatureArgs{
    					Keyid: pulumi.String("string"),
    					Sig:   pulumi.String("string"),
    				},
    			},
    		},
    		Statement: &containeranalysis.InTotoStatementArgs{
    			PredicateType: pulumi.String("string"),
    			Provenance: &containeranalysis.InTotoProvenanceArgs{
    				BuilderConfig: &containeranalysis.BuilderConfigArgs{
    					Id: pulumi.String("string"),
    				},
    				Materials: pulumi.StringArray{
    					pulumi.String("string"),
    				},
    				Metadata: &containeranalysis.MetadataArgs{
    					BuildFinishedOn:   pulumi.String("string"),
    					BuildInvocationId: pulumi.String("string"),
    					BuildStartedOn:    pulumi.String("string"),
    					Completeness: &containeranalysis.CompletenessArgs{
    						Arguments:   pulumi.Bool(false),
    						Environment: pulumi.Bool(false),
    						Materials:   pulumi.Bool(false),
    					},
    					Reproducible: pulumi.Bool(false),
    				},
    				Recipe: &containeranalysis.RecipeArgs{
    					Arguments: pulumi.StringMapArray{
    						pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    					DefinedInMaterial: pulumi.String("string"),
    					EntryPoint:        pulumi.String("string"),
    					Environment: pulumi.StringMapArray{
    						pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    					Type: pulumi.String("string"),
    				},
    			},
    			SlsaProvenance: &containeranalysis.SlsaProvenanceArgs{
    				Builder: &containeranalysis.SlsaBuilderArgs{
    					Id: pulumi.String("string"),
    				},
    				Materials: containeranalysis.MaterialArray{
    					&containeranalysis.MaterialArgs{
    						Digest: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    						Uri: pulumi.String("string"),
    					},
    				},
    				Metadata: &containeranalysis.SlsaMetadataArgs{
    					BuildFinishedOn:   pulumi.String("string"),
    					BuildInvocationId: pulumi.String("string"),
    					BuildStartedOn:    pulumi.String("string"),
    					Completeness: &containeranalysis.SlsaCompletenessArgs{
    						Arguments:   pulumi.Bool(false),
    						Environment: pulumi.Bool(false),
    						Materials:   pulumi.Bool(false),
    					},
    					Reproducible: pulumi.Bool(false),
    				},
    				Recipe: &containeranalysis.SlsaRecipeArgs{
    					Arguments: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					DefinedInMaterial: pulumi.String("string"),
    					EntryPoint:        pulumi.String("string"),
    					Environment: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Type: pulumi.String("string"),
    				},
    			},
    			SlsaProvenanceZeroTwo: &containeranalysis.SlsaProvenanceZeroTwoArgs{
    				BuildConfig: pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    				BuildType: pulumi.String("string"),
    				Builder: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs{
    					Id: pulumi.String("string"),
    				},
    				Invocation: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs{
    					ConfigSource: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs{
    						Digest: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    						EntryPoint: pulumi.String("string"),
    						Uri:        pulumi.String("string"),
    					},
    					Environment: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Parameters: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    				},
    				Materials: containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArray{
    					&containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs{
    						Digest: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    						Uri: pulumi.String("string"),
    					},
    				},
    				Metadata: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs{
    					BuildFinishedOn:   pulumi.String("string"),
    					BuildInvocationId: pulumi.String("string"),
    					BuildStartedOn:    pulumi.String("string"),
    					Completeness: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs{
    						Environment: pulumi.Bool(false),
    						Materials:   pulumi.Bool(false),
    						Parameters:  pulumi.Bool(false),
    					},
    					Reproducible: pulumi.Bool(false),
    				},
    			},
    			Subject: containeranalysis.SubjectArray{
    				&containeranalysis.SubjectArgs{
    					Digest: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Name: pulumi.String("string"),
    				},
    			},
    			Type: pulumi.String("string"),
    		},
    	},
    	Build: &containeranalysis.BuildOccurrenceArgs{
    		InTotoSlsaProvenanceV1: &containeranalysis.InTotoSlsaProvenanceV1Args{
    			Predicate: &containeranalysis.SlsaProvenanceV1Args{
    				BuildDefinition: &containeranalysis.BuildDefinitionArgs{
    					BuildType: pulumi.String("string"),
    					ExternalParameters: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					InternalParameters: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					ResolvedDependencies: containeranalysis.ResourceDescriptorArray{
    						&containeranalysis.ResourceDescriptorArgs{
    							Annotations: pulumi.StringMap{
    								"string": pulumi.String("string"),
    							},
    							Content: pulumi.String("string"),
    							Digest: pulumi.StringMap{
    								"string": pulumi.String("string"),
    							},
    							DownloadLocation: pulumi.String("string"),
    							MediaType:        pulumi.String("string"),
    							Name:             pulumi.String("string"),
    							Uri:              pulumi.String("string"),
    						},
    					},
    				},
    				RunDetails: &containeranalysis.RunDetailsArgs{
    					Builder: &containeranalysis.ProvenanceBuilderArgs{
    						BuilderDependencies: containeranalysis.ResourceDescriptorArray{
    							&containeranalysis.ResourceDescriptorArgs{
    								Annotations: pulumi.StringMap{
    									"string": pulumi.String("string"),
    								},
    								Content: pulumi.String("string"),
    								Digest: pulumi.StringMap{
    									"string": pulumi.String("string"),
    								},
    								DownloadLocation: pulumi.String("string"),
    								MediaType:        pulumi.String("string"),
    								Name:             pulumi.String("string"),
    								Uri:              pulumi.String("string"),
    							},
    						},
    						Id: pulumi.String("string"),
    						Version: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    					Byproducts: containeranalysis.ResourceDescriptorArray{
    						&containeranalysis.ResourceDescriptorArgs{
    							Annotations: pulumi.StringMap{
    								"string": pulumi.String("string"),
    							},
    							Content: pulumi.String("string"),
    							Digest: pulumi.StringMap{
    								"string": pulumi.String("string"),
    							},
    							DownloadLocation: pulumi.String("string"),
    							MediaType:        pulumi.String("string"),
    							Name:             pulumi.String("string"),
    							Uri:              pulumi.String("string"),
    						},
    					},
    					Metadata: &containeranalysis.BuildMetadataArgs{
    						FinishedOn:   pulumi.String("string"),
    						InvocationId: pulumi.String("string"),
    						StartedOn:    pulumi.String("string"),
    					},
    				},
    			},
    			PredicateType: pulumi.String("string"),
    			Subject: containeranalysis.SubjectArray{
    				&containeranalysis.SubjectArgs{
    					Digest: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Name: pulumi.String("string"),
    				},
    			},
    			Type: pulumi.String("string"),
    		},
    		IntotoStatement: &containeranalysis.InTotoStatementArgs{
    			PredicateType: pulumi.String("string"),
    			Provenance: &containeranalysis.InTotoProvenanceArgs{
    				BuilderConfig: &containeranalysis.BuilderConfigArgs{
    					Id: pulumi.String("string"),
    				},
    				Materials: pulumi.StringArray{
    					pulumi.String("string"),
    				},
    				Metadata: &containeranalysis.MetadataArgs{
    					BuildFinishedOn:   pulumi.String("string"),
    					BuildInvocationId: pulumi.String("string"),
    					BuildStartedOn:    pulumi.String("string"),
    					Completeness: &containeranalysis.CompletenessArgs{
    						Arguments:   pulumi.Bool(false),
    						Environment: pulumi.Bool(false),
    						Materials:   pulumi.Bool(false),
    					},
    					Reproducible: pulumi.Bool(false),
    				},
    				Recipe: &containeranalysis.RecipeArgs{
    					Arguments: pulumi.StringMapArray{
    						pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    					DefinedInMaterial: pulumi.String("string"),
    					EntryPoint:        pulumi.String("string"),
    					Environment: pulumi.StringMapArray{
    						pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    					Type: pulumi.String("string"),
    				},
    			},
    			SlsaProvenance: &containeranalysis.SlsaProvenanceArgs{
    				Builder: &containeranalysis.SlsaBuilderArgs{
    					Id: pulumi.String("string"),
    				},
    				Materials: containeranalysis.MaterialArray{
    					&containeranalysis.MaterialArgs{
    						Digest: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    						Uri: pulumi.String("string"),
    					},
    				},
    				Metadata: &containeranalysis.SlsaMetadataArgs{
    					BuildFinishedOn:   pulumi.String("string"),
    					BuildInvocationId: pulumi.String("string"),
    					BuildStartedOn:    pulumi.String("string"),
    					Completeness: &containeranalysis.SlsaCompletenessArgs{
    						Arguments:   pulumi.Bool(false),
    						Environment: pulumi.Bool(false),
    						Materials:   pulumi.Bool(false),
    					},
    					Reproducible: pulumi.Bool(false),
    				},
    				Recipe: &containeranalysis.SlsaRecipeArgs{
    					Arguments: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					DefinedInMaterial: pulumi.String("string"),
    					EntryPoint:        pulumi.String("string"),
    					Environment: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Type: pulumi.String("string"),
    				},
    			},
    			SlsaProvenanceZeroTwo: &containeranalysis.SlsaProvenanceZeroTwoArgs{
    				BuildConfig: pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    				BuildType: pulumi.String("string"),
    				Builder: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs{
    					Id: pulumi.String("string"),
    				},
    				Invocation: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs{
    					ConfigSource: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs{
    						Digest: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    						EntryPoint: pulumi.String("string"),
    						Uri:        pulumi.String("string"),
    					},
    					Environment: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Parameters: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    				},
    				Materials: containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArray{
    					&containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs{
    						Digest: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    						Uri: pulumi.String("string"),
    					},
    				},
    				Metadata: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs{
    					BuildFinishedOn:   pulumi.String("string"),
    					BuildInvocationId: pulumi.String("string"),
    					BuildStartedOn:    pulumi.String("string"),
    					Completeness: &containeranalysis.GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs{
    						Environment: pulumi.Bool(false),
    						Materials:   pulumi.Bool(false),
    						Parameters:  pulumi.Bool(false),
    					},
    					Reproducible: pulumi.Bool(false),
    				},
    			},
    			Subject: containeranalysis.SubjectArray{
    				&containeranalysis.SubjectArgs{
    					Digest: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Name: pulumi.String("string"),
    				},
    			},
    			Type: pulumi.String("string"),
    		},
    		Provenance: &containeranalysis.BuildProvenanceArgs{
    			Id:      pulumi.String("string"),
    			EndTime: pulumi.String("string"),
    			BuiltArtifacts: containeranalysis.ArtifactArray{
    				&containeranalysis.ArtifactArgs{
    					Checksum: pulumi.String("string"),
    					Id:       pulumi.String("string"),
    					Names: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    			},
    			Commands: containeranalysis.CommandArray{
    				&containeranalysis.CommandArgs{
    					Name: pulumi.String("string"),
    					Args: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    					Dir: pulumi.String("string"),
    					Env: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    					Id: pulumi.String("string"),
    					WaitFor: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    			},
    			CreateTime: pulumi.String("string"),
    			Creator:    pulumi.String("string"),
    			BuildOptions: pulumi.StringMap{
    				"string": pulumi.String("string"),
    			},
    			BuilderVersion: pulumi.String("string"),
    			LogsUri:        pulumi.String("string"),
    			Project:        pulumi.String("string"),
    			SourceProvenance: &containeranalysis.SourceArgs{
    				AdditionalContexts: containeranalysis.SourceContextArray{
    					&containeranalysis.SourceContextArgs{
    						CloudRepo: &containeranalysis.CloudRepoSourceContextArgs{
    							AliasContext: &containeranalysis.AliasContextArgs{
    								Kind: containeranalysis.AliasContextKindKindUnspecified,
    								Name: pulumi.String("string"),
    							},
    							RepoId: &containeranalysis.RepoIdArgs{
    								ProjectRepoId: &containeranalysis.ProjectRepoIdArgs{
    									Project:  pulumi.String("string"),
    									RepoName: pulumi.String("string"),
    								},
    								Uid: pulumi.String("string"),
    							},
    							RevisionId: pulumi.String("string"),
    						},
    						Gerrit: &containeranalysis.GerritSourceContextArgs{
    							AliasContext: &containeranalysis.AliasContextArgs{
    								Kind: containeranalysis.AliasContextKindKindUnspecified,
    								Name: pulumi.String("string"),
    							},
    							GerritProject: pulumi.String("string"),
    							HostUri:       pulumi.String("string"),
    							RevisionId:    pulumi.String("string"),
    						},
    						Git: &containeranalysis.GitSourceContextArgs{
    							RevisionId: pulumi.String("string"),
    							Url:        pulumi.String("string"),
    						},
    						Labels: pulumi.StringMap{
    							"string": pulumi.String("string"),
    						},
    					},
    				},
    				ArtifactStorageSourceUri: pulumi.String("string"),
    				Context: &containeranalysis.SourceContextArgs{
    					CloudRepo: &containeranalysis.CloudRepoSourceContextArgs{
    						AliasContext: &containeranalysis.AliasContextArgs{
    							Kind: containeranalysis.AliasContextKindKindUnspecified,
    							Name: pulumi.String("string"),
    						},
    						RepoId: &containeranalysis.RepoIdArgs{
    							ProjectRepoId: &containeranalysis.ProjectRepoIdArgs{
    								Project:  pulumi.String("string"),
    								RepoName: pulumi.String("string"),
    							},
    							Uid: pulumi.String("string"),
    						},
    						RevisionId: pulumi.String("string"),
    					},
    					Gerrit: &containeranalysis.GerritSourceContextArgs{
    						AliasContext: &containeranalysis.AliasContextArgs{
    							Kind: containeranalysis.AliasContextKindKindUnspecified,
    							Name: pulumi.String("string"),
    						},
    						GerritProject: pulumi.String("string"),
    						HostUri:       pulumi.String("string"),
    						RevisionId:    pulumi.String("string"),
    					},
    					Git: &containeranalysis.GitSourceContextArgs{
    						RevisionId: pulumi.String("string"),
    						Url:        pulumi.String("string"),
    					},
    					Labels: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    				},
    				FileHashes: pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    			},
    			StartTime: pulumi.String("string"),
    			TriggerId: pulumi.String("string"),
    		},
    		ProvenanceBytes: pulumi.String("string"),
    	},
    	Image: &containeranalysis.ImageOccurrenceArgs{
    		Fingerprint: &containeranalysis.FingerprintArgs{
    			V1Name: pulumi.String("string"),
    			V2Blob: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    		LayerInfo: containeranalysis.LayerArray{
    			&containeranalysis.LayerArgs{
    				Directive: pulumi.String("string"),
    				Arguments: pulumi.String("string"),
    			},
    		},
    	},
    	Discovery: &containeranalysis.DiscoveryOccurrenceArgs{
    		AnalysisCompleted: &containeranalysis.AnalysisCompletedArgs{
    			AnalysisType: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    		AnalysisError: containeranalysis.StatusArray{
    			&containeranalysis.StatusArgs{
    				Code: pulumi.Int(0),
    				Details: pulumi.StringMapArray{
    					pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    				},
    				Message: pulumi.String("string"),
    			},
    		},
    		AnalysisStatus: containeranalysis.DiscoveryOccurrenceAnalysisStatusAnalysisStatusUnspecified,
    		AnalysisStatusError: &containeranalysis.StatusArgs{
    			Code: pulumi.Int(0),
    			Details: pulumi.StringMapArray{
    				pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    			},
    			Message: pulumi.String("string"),
    		},
    		ContinuousAnalysis: containeranalysis.DiscoveryOccurrenceContinuousAnalysisContinuousAnalysisUnspecified,
    		Cpe:                pulumi.String("string"),
    		LastScanTime:       pulumi.String("string"),
    		SbomStatus: &containeranalysis.SBOMStatusArgs{
    			Error:     pulumi.String("string"),
    			SbomState: containeranalysis.SBOMStatusSbomStateSbomStateUnspecified,
    		},
    	},
    	Deployment: &containeranalysis.DeploymentOccurrenceArgs{
    		DeployTime:   pulumi.String("string"),
    		Address:      pulumi.String("string"),
    		Config:       pulumi.String("string"),
    		Platform:     containeranalysis.DeploymentOccurrencePlatformPlatformUnspecified,
    		UndeployTime: pulumi.String("string"),
    		UserEmail:    pulumi.String("string"),
    	},
    	Project:     pulumi.String("string"),
    	Remediation: pulumi.String("string"),
    	Attestation: &containeranalysis.AttestationOccurrenceArgs{
    		SerializedPayload: pulumi.String("string"),
    		Jwts: containeranalysis.JwtArray{
    			&containeranalysis.JwtArgs{
    				CompactJwt: pulumi.String("string"),
    			},
    		},
    		Signatures: containeranalysis.SignatureArray{
    			&containeranalysis.SignatureArgs{
    				PublicKeyId: pulumi.String("string"),
    				Signature:   pulumi.String("string"),
    			},
    		},
    	},
    	SbomReference: &containeranalysis.SBOMReferenceOccurrenceArgs{
    		Payload: &containeranalysis.SbomReferenceIntotoPayloadArgs{
    			Predicate: &containeranalysis.SbomReferenceIntotoPredicateArgs{
    				Digest: pulumi.StringMap{
    					"string": pulumi.String("string"),
    				},
    				Location:   pulumi.String("string"),
    				MimeType:   pulumi.String("string"),
    				ReferrerId: pulumi.String("string"),
    			},
    			PredicateType: pulumi.String("string"),
    			Subject: containeranalysis.SubjectArray{
    				&containeranalysis.SubjectArgs{
    					Digest: pulumi.StringMap{
    						"string": pulumi.String("string"),
    					},
    					Name: pulumi.String("string"),
    				},
    			},
    			Type: pulumi.String("string"),
    		},
    		PayloadType: pulumi.String("string"),
    		Signatures: containeranalysis.EnvelopeSignatureArray{
    			&containeranalysis.EnvelopeSignatureArgs{
    				Keyid: pulumi.String("string"),
    				Sig:   pulumi.String("string"),
    			},
    		},
    	},
    	Upgrade: &containeranalysis.UpgradeOccurrenceArgs{
    		Distribution: &containeranalysis.UpgradeDistributionArgs{
    			Classification: pulumi.String("string"),
    			CpeUri:         pulumi.String("string"),
    			Cve: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			Severity: pulumi.String("string"),
    		},
    		Package: pulumi.String("string"),
    		ParsedVersion: &containeranalysis.VersionArgs{
    			Kind:      containeranalysis.VersionKindVersionKindUnspecified,
    			Epoch:     pulumi.Int(0),
    			FullName:  pulumi.String("string"),
    			Inclusive: pulumi.Bool(false),
    			Name:      pulumi.String("string"),
    			Revision:  pulumi.String("string"),
    		},
    		WindowsUpdate: &containeranalysis.WindowsUpdateArgs{
    			Categories: containeranalysis.CategoryArray{
    				&containeranalysis.CategoryArgs{
    					CategoryId: pulumi.String("string"),
    					Name:       pulumi.String("string"),
    				},
    			},
    			Description: pulumi.String("string"),
    			Identity: &containeranalysis.IdentityArgs{
    				Revision: pulumi.Int(0),
    				UpdateId: pulumi.String("string"),
    			},
    			KbArticleIds: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			LastPublishedTimestamp: pulumi.String("string"),
    			SupportUrl:             pulumi.String("string"),
    			Title:                  pulumi.String("string"),
    		},
    	},
    	Vulnerability: &containeranalysis.VulnerabilityOccurrenceArgs{
    		PackageIssue: containeranalysis.PackageIssueArray{
    			&containeranalysis.PackageIssueArgs{
    				AffectedCpeUri:  pulumi.String("string"),
    				AffectedPackage: pulumi.String("string"),
    				AffectedVersion: &containeranalysis.VersionArgs{
    					Kind:      containeranalysis.VersionKindVersionKindUnspecified,
    					Epoch:     pulumi.Int(0),
    					FullName:  pulumi.String("string"),
    					Inclusive: pulumi.Bool(false),
    					Name:      pulumi.String("string"),
    					Revision:  pulumi.String("string"),
    				},
    				FixedVersion: &containeranalysis.VersionArgs{
    					Kind:      containeranalysis.VersionKindVersionKindUnspecified,
    					Epoch:     pulumi.Int(0),
    					FullName:  pulumi.String("string"),
    					Inclusive: pulumi.Bool(false),
    					Name:      pulumi.String("string"),
    					Revision:  pulumi.String("string"),
    				},
    				FileLocation: containeranalysis.GrafeasV1FileLocationArray{
    					&containeranalysis.GrafeasV1FileLocationArgs{
    						FilePath: pulumi.String("string"),
    					},
    				},
    				FixedCpeUri:  pulumi.String("string"),
    				FixedPackage: pulumi.String("string"),
    				PackageType:  pulumi.String("string"),
    			},
    		},
    		CvssV2: &containeranalysis.CVSSArgs{
    			AttackComplexity:      containeranalysis.CVSSAttackComplexityAttackComplexityUnspecified,
    			AttackVector:          containeranalysis.CVSSAttackVectorAttackVectorUnspecified,
    			Authentication:        containeranalysis.CVSSAuthenticationAuthenticationUnspecified,
    			AvailabilityImpact:    containeranalysis.CVSSAvailabilityImpactImpactUnspecified,
    			BaseScore:             pulumi.Float64(0),
    			ConfidentialityImpact: containeranalysis.CVSSConfidentialityImpactImpactUnspecified,
    			ExploitabilityScore:   pulumi.Float64(0),
    			ImpactScore:           pulumi.Float64(0),
    			IntegrityImpact:       containeranalysis.CVSSIntegrityImpactImpactUnspecified,
    			PrivilegesRequired:    containeranalysis.CVSSPrivilegesRequiredPrivilegesRequiredUnspecified,
    			Scope:                 containeranalysis.CVSSScopeScopeUnspecified,
    			UserInteraction:       containeranalysis.CVSSUserInteractionUserInteractionUnspecified,
    		},
    		Cvssv3: &containeranalysis.CVSSArgs{
    			AttackComplexity:      containeranalysis.CVSSAttackComplexityAttackComplexityUnspecified,
    			AttackVector:          containeranalysis.CVSSAttackVectorAttackVectorUnspecified,
    			Authentication:        containeranalysis.CVSSAuthenticationAuthenticationUnspecified,
    			AvailabilityImpact:    containeranalysis.CVSSAvailabilityImpactImpactUnspecified,
    			BaseScore:             pulumi.Float64(0),
    			ConfidentialityImpact: containeranalysis.CVSSConfidentialityImpactImpactUnspecified,
    			ExploitabilityScore:   pulumi.Float64(0),
    			ImpactScore:           pulumi.Float64(0),
    			IntegrityImpact:       containeranalysis.CVSSIntegrityImpactImpactUnspecified,
    			PrivilegesRequired:    containeranalysis.CVSSPrivilegesRequiredPrivilegesRequiredUnspecified,
    			Scope:                 containeranalysis.CVSSScopeScopeUnspecified,
    			UserInteraction:       containeranalysis.CVSSUserInteractionUserInteractionUnspecified,
    		},
    		EffectiveSeverity: containeranalysis.VulnerabilityOccurrenceEffectiveSeveritySeverityUnspecified,
    		ExtraDetails:      pulumi.String("string"),
    		Type:              pulumi.String("string"),
    		VexAssessment: &containeranalysis.VexAssessmentArgs{
    			Impacts: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			Justification: &containeranalysis.JustificationArgs{
    				Details:           pulumi.String("string"),
    				JustificationType: containeranalysis.JustificationJustificationTypeJustificationTypeUnspecified,
    			},
    			NoteName: pulumi.String("string"),
    			RelatedUris: containeranalysis.RelatedUrlArray{
    				&containeranalysis.RelatedUrlArgs{
    					Label: pulumi.String("string"),
    					Url:   pulumi.String("string"),
    				},
    			},
    			Remediations: containeranalysis.RemediationArray{
    				&containeranalysis.RemediationArgs{
    					Details:         pulumi.String("string"),
    					RemediationType: containeranalysis.RemediationRemediationTypeRemediationTypeUnspecified,
    					RemediationUri: &containeranalysis.RelatedUrlArgs{
    						Label: pulumi.String("string"),
    						Url:   pulumi.String("string"),
    					},
    				},
    			},
    			State:           containeranalysis.VexAssessmentStateStateUnspecified,
    			VulnerabilityId: pulumi.String("string"),
    		},
    	},
    })
    
    var occurrenceResource = new Occurrence("occurrenceResource", OccurrenceArgs.builder()
        .resourceUri("string")
        .noteName("string")
        .envelope(EnvelopeArgs.builder()
            .payload("string")
            .payloadType("string")
            .signatures(EnvelopeSignatureArgs.builder()
                .keyid("string")
                .sig("string")
                .build())
            .build())
        .package_(PackageOccurrenceArgs.builder()
            .license(LicenseArgs.builder()
                .comments("string")
                .expression("string")
                .build())
            .location(LocationArgs.builder()
                .path("string")
                .build())
            .build())
        .compliance(ComplianceOccurrenceArgs.builder()
            .nonComplianceReason("string")
            .nonCompliantFiles(NonCompliantFileArgs.builder()
                .displayCommand("string")
                .path("string")
                .reason("string")
                .build())
            .build())
        .dsseAttestation(DSSEAttestationOccurrenceArgs.builder()
            .envelope(EnvelopeArgs.builder()
                .payload("string")
                .payloadType("string")
                .signatures(EnvelopeSignatureArgs.builder()
                    .keyid("string")
                    .sig("string")
                    .build())
                .build())
            .statement(InTotoStatementArgs.builder()
                .predicateType("string")
                .provenance(InTotoProvenanceArgs.builder()
                    .builderConfig(BuilderConfigArgs.builder()
                        .id("string")
                        .build())
                    .materials("string")
                    .metadata(MetadataArgs.builder()
                        .buildFinishedOn("string")
                        .buildInvocationId("string")
                        .buildStartedOn("string")
                        .completeness(CompletenessArgs.builder()
                            .arguments(false)
                            .environment(false)
                            .materials(false)
                            .build())
                        .reproducible(false)
                        .build())
                    .recipe(RecipeArgs.builder()
                        .arguments(Map.of("string", "string"))
                        .definedInMaterial("string")
                        .entryPoint("string")
                        .environment(Map.of("string", "string"))
                        .type("string")
                        .build())
                    .build())
                .slsaProvenance(SlsaProvenanceArgs.builder()
                    .builder(SlsaBuilderArgs.builder()
                        .id("string")
                        .build())
                    .materials(MaterialArgs.builder()
                        .digest(Map.of("string", "string"))
                        .uri("string")
                        .build())
                    .metadata(SlsaMetadataArgs.builder()
                        .buildFinishedOn("string")
                        .buildInvocationId("string")
                        .buildStartedOn("string")
                        .completeness(SlsaCompletenessArgs.builder()
                            .arguments(false)
                            .environment(false)
                            .materials(false)
                            .build())
                        .reproducible(false)
                        .build())
                    .recipe(SlsaRecipeArgs.builder()
                        .arguments(Map.of("string", "string"))
                        .definedInMaterial("string")
                        .entryPoint("string")
                        .environment(Map.of("string", "string"))
                        .type("string")
                        .build())
                    .build())
                .slsaProvenanceZeroTwo(SlsaProvenanceZeroTwoArgs.builder()
                    .buildConfig(Map.of("string", "string"))
                    .buildType("string")
                    .builder(GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs.builder()
                        .id("string")
                        .build())
                    .invocation(GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs.builder()
                        .configSource(GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs.builder()
                            .digest(Map.of("string", "string"))
                            .entryPoint("string")
                            .uri("string")
                            .build())
                        .environment(Map.of("string", "string"))
                        .parameters(Map.of("string", "string"))
                        .build())
                    .materials(GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs.builder()
                        .digest(Map.of("string", "string"))
                        .uri("string")
                        .build())
                    .metadata(GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs.builder()
                        .buildFinishedOn("string")
                        .buildInvocationId("string")
                        .buildStartedOn("string")
                        .completeness(GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs.builder()
                            .environment(false)
                            .materials(false)
                            .parameters(false)
                            .build())
                        .reproducible(false)
                        .build())
                    .build())
                .subject(SubjectArgs.builder()
                    .digest(Map.of("string", "string"))
                    .name("string")
                    .build())
                .type("string")
                .build())
            .build())
        .build(BuildOccurrenceArgs.builder()
            .inTotoSlsaProvenanceV1(InTotoSlsaProvenanceV1Args.builder()
                .predicate(SlsaProvenanceV1Args.builder()
                    .buildDefinition(BuildDefinitionArgs.builder()
                        .buildType("string")
                        .externalParameters(Map.of("string", "string"))
                        .internalParameters(Map.of("string", "string"))
                        .resolvedDependencies(ResourceDescriptorArgs.builder()
                            .annotations(Map.of("string", "string"))
                            .content("string")
                            .digest(Map.of("string", "string"))
                            .downloadLocation("string")
                            .mediaType("string")
                            .name("string")
                            .uri("string")
                            .build())
                        .build())
                    .runDetails(RunDetailsArgs.builder()
                        .builder(ProvenanceBuilderArgs.builder()
                            .builderDependencies(ResourceDescriptorArgs.builder()
                                .annotations(Map.of("string", "string"))
                                .content("string")
                                .digest(Map.of("string", "string"))
                                .downloadLocation("string")
                                .mediaType("string")
                                .name("string")
                                .uri("string")
                                .build())
                            .id("string")
                            .version(Map.of("string", "string"))
                            .build())
                        .byproducts(ResourceDescriptorArgs.builder()
                            .annotations(Map.of("string", "string"))
                            .content("string")
                            .digest(Map.of("string", "string"))
                            .downloadLocation("string")
                            .mediaType("string")
                            .name("string")
                            .uri("string")
                            .build())
                        .metadata(BuildMetadataArgs.builder()
                            .finishedOn("string")
                            .invocationId("string")
                            .startedOn("string")
                            .build())
                        .build())
                    .build())
                .predicateType("string")
                .subject(SubjectArgs.builder()
                    .digest(Map.of("string", "string"))
                    .name("string")
                    .build())
                .type("string")
                .build())
            .intotoStatement(InTotoStatementArgs.builder()
                .predicateType("string")
                .provenance(InTotoProvenanceArgs.builder()
                    .builderConfig(BuilderConfigArgs.builder()
                        .id("string")
                        .build())
                    .materials("string")
                    .metadata(MetadataArgs.builder()
                        .buildFinishedOn("string")
                        .buildInvocationId("string")
                        .buildStartedOn("string")
                        .completeness(CompletenessArgs.builder()
                            .arguments(false)
                            .environment(false)
                            .materials(false)
                            .build())
                        .reproducible(false)
                        .build())
                    .recipe(RecipeArgs.builder()
                        .arguments(Map.of("string", "string"))
                        .definedInMaterial("string")
                        .entryPoint("string")
                        .environment(Map.of("string", "string"))
                        .type("string")
                        .build())
                    .build())
                .slsaProvenance(SlsaProvenanceArgs.builder()
                    .builder(SlsaBuilderArgs.builder()
                        .id("string")
                        .build())
                    .materials(MaterialArgs.builder()
                        .digest(Map.of("string", "string"))
                        .uri("string")
                        .build())
                    .metadata(SlsaMetadataArgs.builder()
                        .buildFinishedOn("string")
                        .buildInvocationId("string")
                        .buildStartedOn("string")
                        .completeness(SlsaCompletenessArgs.builder()
                            .arguments(false)
                            .environment(false)
                            .materials(false)
                            .build())
                        .reproducible(false)
                        .build())
                    .recipe(SlsaRecipeArgs.builder()
                        .arguments(Map.of("string", "string"))
                        .definedInMaterial("string")
                        .entryPoint("string")
                        .environment(Map.of("string", "string"))
                        .type("string")
                        .build())
                    .build())
                .slsaProvenanceZeroTwo(SlsaProvenanceZeroTwoArgs.builder()
                    .buildConfig(Map.of("string", "string"))
                    .buildType("string")
                    .builder(GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs.builder()
                        .id("string")
                        .build())
                    .invocation(GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs.builder()
                        .configSource(GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs.builder()
                            .digest(Map.of("string", "string"))
                            .entryPoint("string")
                            .uri("string")
                            .build())
                        .environment(Map.of("string", "string"))
                        .parameters(Map.of("string", "string"))
                        .build())
                    .materials(GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs.builder()
                        .digest(Map.of("string", "string"))
                        .uri("string")
                        .build())
                    .metadata(GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs.builder()
                        .buildFinishedOn("string")
                        .buildInvocationId("string")
                        .buildStartedOn("string")
                        .completeness(GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs.builder()
                            .environment(false)
                            .materials(false)
                            .parameters(false)
                            .build())
                        .reproducible(false)
                        .build())
                    .build())
                .subject(SubjectArgs.builder()
                    .digest(Map.of("string", "string"))
                    .name("string")
                    .build())
                .type("string")
                .build())
            .provenance(BuildProvenanceArgs.builder()
                .id("string")
                .endTime("string")
                .builtArtifacts(ArtifactArgs.builder()
                    .checksum("string")
                    .id("string")
                    .names("string")
                    .build())
                .commands(CommandArgs.builder()
                    .name("string")
                    .args("string")
                    .dir("string")
                    .env("string")
                    .id("string")
                    .waitFor("string")
                    .build())
                .createTime("string")
                .creator("string")
                .buildOptions(Map.of("string", "string"))
                .builderVersion("string")
                .logsUri("string")
                .project("string")
                .sourceProvenance(SourceArgs.builder()
                    .additionalContexts(SourceContextArgs.builder()
                        .cloudRepo(CloudRepoSourceContextArgs.builder()
                            .aliasContext(AliasContextArgs.builder()
                                .kind("KIND_UNSPECIFIED")
                                .name("string")
                                .build())
                            .repoId(RepoIdArgs.builder()
                                .projectRepoId(ProjectRepoIdArgs.builder()
                                    .project("string")
                                    .repoName("string")
                                    .build())
                                .uid("string")
                                .build())
                            .revisionId("string")
                            .build())
                        .gerrit(GerritSourceContextArgs.builder()
                            .aliasContext(AliasContextArgs.builder()
                                .kind("KIND_UNSPECIFIED")
                                .name("string")
                                .build())
                            .gerritProject("string")
                            .hostUri("string")
                            .revisionId("string")
                            .build())
                        .git(GitSourceContextArgs.builder()
                            .revisionId("string")
                            .url("string")
                            .build())
                        .labels(Map.of("string", "string"))
                        .build())
                    .artifactStorageSourceUri("string")
                    .context(SourceContextArgs.builder()
                        .cloudRepo(CloudRepoSourceContextArgs.builder()
                            .aliasContext(AliasContextArgs.builder()
                                .kind("KIND_UNSPECIFIED")
                                .name("string")
                                .build())
                            .repoId(RepoIdArgs.builder()
                                .projectRepoId(ProjectRepoIdArgs.builder()
                                    .project("string")
                                    .repoName("string")
                                    .build())
                                .uid("string")
                                .build())
                            .revisionId("string")
                            .build())
                        .gerrit(GerritSourceContextArgs.builder()
                            .aliasContext(AliasContextArgs.builder()
                                .kind("KIND_UNSPECIFIED")
                                .name("string")
                                .build())
                            .gerritProject("string")
                            .hostUri("string")
                            .revisionId("string")
                            .build())
                        .git(GitSourceContextArgs.builder()
                            .revisionId("string")
                            .url("string")
                            .build())
                        .labels(Map.of("string", "string"))
                        .build())
                    .fileHashes(Map.of("string", "string"))
                    .build())
                .startTime("string")
                .triggerId("string")
                .build())
            .provenanceBytes("string")
            .build())
        .image(ImageOccurrenceArgs.builder()
            .fingerprint(FingerprintArgs.builder()
                .v1Name("string")
                .v2Blob("string")
                .build())
            .layerInfo(LayerArgs.builder()
                .directive("string")
                .arguments("string")
                .build())
            .build())
        .discovery(DiscoveryOccurrenceArgs.builder()
            .analysisCompleted(AnalysisCompletedArgs.builder()
                .analysisType("string")
                .build())
            .analysisError(StatusArgs.builder()
                .code(0)
                .details(Map.of("string", "string"))
                .message("string")
                .build())
            .analysisStatus("ANALYSIS_STATUS_UNSPECIFIED")
            .analysisStatusError(StatusArgs.builder()
                .code(0)
                .details(Map.of("string", "string"))
                .message("string")
                .build())
            .continuousAnalysis("CONTINUOUS_ANALYSIS_UNSPECIFIED")
            .cpe("string")
            .lastScanTime("string")
            .sbomStatus(SBOMStatusArgs.builder()
                .error("string")
                .sbomState("SBOM_STATE_UNSPECIFIED")
                .build())
            .build())
        .deployment(DeploymentOccurrenceArgs.builder()
            .deployTime("string")
            .address("string")
            .config("string")
            .platform("PLATFORM_UNSPECIFIED")
            .undeployTime("string")
            .userEmail("string")
            .build())
        .project("string")
        .remediation("string")
        .attestation(AttestationOccurrenceArgs.builder()
            .serializedPayload("string")
            .jwts(JwtArgs.builder()
                .compactJwt("string")
                .build())
            .signatures(SignatureArgs.builder()
                .publicKeyId("string")
                .signature("string")
                .build())
            .build())
        .sbomReference(SBOMReferenceOccurrenceArgs.builder()
            .payload(SbomReferenceIntotoPayloadArgs.builder()
                .predicate(SbomReferenceIntotoPredicateArgs.builder()
                    .digest(Map.of("string", "string"))
                    .location("string")
                    .mimeType("string")
                    .referrerId("string")
                    .build())
                .predicateType("string")
                .subject(SubjectArgs.builder()
                    .digest(Map.of("string", "string"))
                    .name("string")
                    .build())
                .type("string")
                .build())
            .payloadType("string")
            .signatures(EnvelopeSignatureArgs.builder()
                .keyid("string")
                .sig("string")
                .build())
            .build())
        .upgrade(UpgradeOccurrenceArgs.builder()
            .distribution(UpgradeDistributionArgs.builder()
                .classification("string")
                .cpeUri("string")
                .cve("string")
                .severity("string")
                .build())
            .package_("string")
            .parsedVersion(VersionArgs.builder()
                .kind("VERSION_KIND_UNSPECIFIED")
                .epoch(0)
                .fullName("string")
                .inclusive(false)
                .name("string")
                .revision("string")
                .build())
            .windowsUpdate(WindowsUpdateArgs.builder()
                .categories(CategoryArgs.builder()
                    .categoryId("string")
                    .name("string")
                    .build())
                .description("string")
                .identity(IdentityArgs.builder()
                    .revision(0)
                    .updateId("string")
                    .build())
                .kbArticleIds("string")
                .lastPublishedTimestamp("string")
                .supportUrl("string")
                .title("string")
                .build())
            .build())
        .vulnerability(VulnerabilityOccurrenceArgs.builder()
            .packageIssue(PackageIssueArgs.builder()
                .affectedCpeUri("string")
                .affectedPackage("string")
                .affectedVersion(VersionArgs.builder()
                    .kind("VERSION_KIND_UNSPECIFIED")
                    .epoch(0)
                    .fullName("string")
                    .inclusive(false)
                    .name("string")
                    .revision("string")
                    .build())
                .fixedVersion(VersionArgs.builder()
                    .kind("VERSION_KIND_UNSPECIFIED")
                    .epoch(0)
                    .fullName("string")
                    .inclusive(false)
                    .name("string")
                    .revision("string")
                    .build())
                .fileLocation(GrafeasV1FileLocationArgs.builder()
                    .filePath("string")
                    .build())
                .fixedCpeUri("string")
                .fixedPackage("string")
                .packageType("string")
                .build())
            .cvssV2(CVSSArgs.builder()
                .attackComplexity("ATTACK_COMPLEXITY_UNSPECIFIED")
                .attackVector("ATTACK_VECTOR_UNSPECIFIED")
                .authentication("AUTHENTICATION_UNSPECIFIED")
                .availabilityImpact("IMPACT_UNSPECIFIED")
                .baseScore(0)
                .confidentialityImpact("IMPACT_UNSPECIFIED")
                .exploitabilityScore(0)
                .impactScore(0)
                .integrityImpact("IMPACT_UNSPECIFIED")
                .privilegesRequired("PRIVILEGES_REQUIRED_UNSPECIFIED")
                .scope("SCOPE_UNSPECIFIED")
                .userInteraction("USER_INTERACTION_UNSPECIFIED")
                .build())
            .cvssv3(CVSSArgs.builder()
                .attackComplexity("ATTACK_COMPLEXITY_UNSPECIFIED")
                .attackVector("ATTACK_VECTOR_UNSPECIFIED")
                .authentication("AUTHENTICATION_UNSPECIFIED")
                .availabilityImpact("IMPACT_UNSPECIFIED")
                .baseScore(0)
                .confidentialityImpact("IMPACT_UNSPECIFIED")
                .exploitabilityScore(0)
                .impactScore(0)
                .integrityImpact("IMPACT_UNSPECIFIED")
                .privilegesRequired("PRIVILEGES_REQUIRED_UNSPECIFIED")
                .scope("SCOPE_UNSPECIFIED")
                .userInteraction("USER_INTERACTION_UNSPECIFIED")
                .build())
            .effectiveSeverity("SEVERITY_UNSPECIFIED")
            .extraDetails("string")
            .type("string")
            .vexAssessment(VexAssessmentArgs.builder()
                .impacts("string")
                .justification(JustificationArgs.builder()
                    .details("string")
                    .justificationType("JUSTIFICATION_TYPE_UNSPECIFIED")
                    .build())
                .noteName("string")
                .relatedUris(RelatedUrlArgs.builder()
                    .label("string")
                    .url("string")
                    .build())
                .remediations(RemediationArgs.builder()
                    .details("string")
                    .remediationType("REMEDIATION_TYPE_UNSPECIFIED")
                    .remediationUri(RelatedUrlArgs.builder()
                        .label("string")
                        .url("string")
                        .build())
                    .build())
                .state("STATE_UNSPECIFIED")
                .vulnerabilityId("string")
                .build())
            .build())
        .build());
    
    occurrence_resource = google_native.containeranalysis.v1.Occurrence("occurrenceResource",
        resource_uri="string",
        note_name="string",
        envelope=google_native.containeranalysis.v1.EnvelopeArgs(
            payload="string",
            payload_type="string",
            signatures=[google_native.containeranalysis.v1.EnvelopeSignatureArgs(
                keyid="string",
                sig="string",
            )],
        ),
        package=google_native.containeranalysis.v1.PackageOccurrenceArgs(
            license=google_native.containeranalysis.v1.LicenseArgs(
                comments="string",
                expression="string",
            ),
            location=[google_native.containeranalysis.v1.LocationArgs(
                path="string",
            )],
        ),
        compliance=google_native.containeranalysis.v1.ComplianceOccurrenceArgs(
            non_compliance_reason="string",
            non_compliant_files=[google_native.containeranalysis.v1.NonCompliantFileArgs(
                display_command="string",
                path="string",
                reason="string",
            )],
        ),
        dsse_attestation=google_native.containeranalysis.v1.DSSEAttestationOccurrenceArgs(
            envelope=google_native.containeranalysis.v1.EnvelopeArgs(
                payload="string",
                payload_type="string",
                signatures=[google_native.containeranalysis.v1.EnvelopeSignatureArgs(
                    keyid="string",
                    sig="string",
                )],
            ),
            statement=google_native.containeranalysis.v1.InTotoStatementArgs(
                predicate_type="string",
                provenance=google_native.containeranalysis.v1.InTotoProvenanceArgs(
                    builder_config=google_native.containeranalysis.v1.BuilderConfigArgs(
                        id="string",
                    ),
                    materials=["string"],
                    metadata=google_native.containeranalysis.v1.MetadataArgs(
                        build_finished_on="string",
                        build_invocation_id="string",
                        build_started_on="string",
                        completeness=google_native.containeranalysis.v1.CompletenessArgs(
                            arguments=False,
                            environment=False,
                            materials=False,
                        ),
                        reproducible=False,
                    ),
                    recipe=google_native.containeranalysis.v1.RecipeArgs(
                        arguments=[{
                            "string": "string",
                        }],
                        defined_in_material="string",
                        entry_point="string",
                        environment=[{
                            "string": "string",
                        }],
                        type="string",
                    ),
                ),
                slsa_provenance=google_native.containeranalysis.v1.SlsaProvenanceArgs(
                    builder=google_native.containeranalysis.v1.SlsaBuilderArgs(
                        id="string",
                    ),
                    materials=[google_native.containeranalysis.v1.MaterialArgs(
                        digest={
                            "string": "string",
                        },
                        uri="string",
                    )],
                    metadata=google_native.containeranalysis.v1.SlsaMetadataArgs(
                        build_finished_on="string",
                        build_invocation_id="string",
                        build_started_on="string",
                        completeness=google_native.containeranalysis.v1.SlsaCompletenessArgs(
                            arguments=False,
                            environment=False,
                            materials=False,
                        ),
                        reproducible=False,
                    ),
                    recipe=google_native.containeranalysis.v1.SlsaRecipeArgs(
                        arguments={
                            "string": "string",
                        },
                        defined_in_material="string",
                        entry_point="string",
                        environment={
                            "string": "string",
                        },
                        type="string",
                    ),
                ),
                slsa_provenance_zero_two=google_native.containeranalysis.v1.SlsaProvenanceZeroTwoArgs(
                    build_config={
                        "string": "string",
                    },
                    build_type="string",
                    builder=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs(
                        id="string",
                    ),
                    invocation=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs(
                        config_source=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs(
                            digest={
                                "string": "string",
                            },
                            entry_point="string",
                            uri="string",
                        ),
                        environment={
                            "string": "string",
                        },
                        parameters={
                            "string": "string",
                        },
                    ),
                    materials=[google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs(
                        digest={
                            "string": "string",
                        },
                        uri="string",
                    )],
                    metadata=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs(
                        build_finished_on="string",
                        build_invocation_id="string",
                        build_started_on="string",
                        completeness=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs(
                            environment=False,
                            materials=False,
                            parameters=False,
                        ),
                        reproducible=False,
                    ),
                ),
                subject=[google_native.containeranalysis.v1.SubjectArgs(
                    digest={
                        "string": "string",
                    },
                    name="string",
                )],
                type="string",
            ),
        ),
        build=google_native.containeranalysis.v1.BuildOccurrenceArgs(
            in_toto_slsa_provenance_v1=google_native.containeranalysis.v1.InTotoSlsaProvenanceV1Args(
                predicate=google_native.containeranalysis.v1.SlsaProvenanceV1Args(
                    build_definition=google_native.containeranalysis.v1.BuildDefinitionArgs(
                        build_type="string",
                        external_parameters={
                            "string": "string",
                        },
                        internal_parameters={
                            "string": "string",
                        },
                        resolved_dependencies=[google_native.containeranalysis.v1.ResourceDescriptorArgs(
                            annotations={
                                "string": "string",
                            },
                            content="string",
                            digest={
                                "string": "string",
                            },
                            download_location="string",
                            media_type="string",
                            name="string",
                            uri="string",
                        )],
                    ),
                    run_details=google_native.containeranalysis.v1.RunDetailsArgs(
                        builder=google_native.containeranalysis.v1.ProvenanceBuilderArgs(
                            builder_dependencies=[google_native.containeranalysis.v1.ResourceDescriptorArgs(
                                annotations={
                                    "string": "string",
                                },
                                content="string",
                                digest={
                                    "string": "string",
                                },
                                download_location="string",
                                media_type="string",
                                name="string",
                                uri="string",
                            )],
                            id="string",
                            version={
                                "string": "string",
                            },
                        ),
                        byproducts=[google_native.containeranalysis.v1.ResourceDescriptorArgs(
                            annotations={
                                "string": "string",
                            },
                            content="string",
                            digest={
                                "string": "string",
                            },
                            download_location="string",
                            media_type="string",
                            name="string",
                            uri="string",
                        )],
                        metadata=google_native.containeranalysis.v1.BuildMetadataArgs(
                            finished_on="string",
                            invocation_id="string",
                            started_on="string",
                        ),
                    ),
                ),
                predicate_type="string",
                subject=[google_native.containeranalysis.v1.SubjectArgs(
                    digest={
                        "string": "string",
                    },
                    name="string",
                )],
                type="string",
            ),
            intoto_statement=google_native.containeranalysis.v1.InTotoStatementArgs(
                predicate_type="string",
                provenance=google_native.containeranalysis.v1.InTotoProvenanceArgs(
                    builder_config=google_native.containeranalysis.v1.BuilderConfigArgs(
                        id="string",
                    ),
                    materials=["string"],
                    metadata=google_native.containeranalysis.v1.MetadataArgs(
                        build_finished_on="string",
                        build_invocation_id="string",
                        build_started_on="string",
                        completeness=google_native.containeranalysis.v1.CompletenessArgs(
                            arguments=False,
                            environment=False,
                            materials=False,
                        ),
                        reproducible=False,
                    ),
                    recipe=google_native.containeranalysis.v1.RecipeArgs(
                        arguments=[{
                            "string": "string",
                        }],
                        defined_in_material="string",
                        entry_point="string",
                        environment=[{
                            "string": "string",
                        }],
                        type="string",
                    ),
                ),
                slsa_provenance=google_native.containeranalysis.v1.SlsaProvenanceArgs(
                    builder=google_native.containeranalysis.v1.SlsaBuilderArgs(
                        id="string",
                    ),
                    materials=[google_native.containeranalysis.v1.MaterialArgs(
                        digest={
                            "string": "string",
                        },
                        uri="string",
                    )],
                    metadata=google_native.containeranalysis.v1.SlsaMetadataArgs(
                        build_finished_on="string",
                        build_invocation_id="string",
                        build_started_on="string",
                        completeness=google_native.containeranalysis.v1.SlsaCompletenessArgs(
                            arguments=False,
                            environment=False,
                            materials=False,
                        ),
                        reproducible=False,
                    ),
                    recipe=google_native.containeranalysis.v1.SlsaRecipeArgs(
                        arguments={
                            "string": "string",
                        },
                        defined_in_material="string",
                        entry_point="string",
                        environment={
                            "string": "string",
                        },
                        type="string",
                    ),
                ),
                slsa_provenance_zero_two=google_native.containeranalysis.v1.SlsaProvenanceZeroTwoArgs(
                    build_config={
                        "string": "string",
                    },
                    build_type="string",
                    builder=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs(
                        id="string",
                    ),
                    invocation=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs(
                        config_source=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs(
                            digest={
                                "string": "string",
                            },
                            entry_point="string",
                            uri="string",
                        ),
                        environment={
                            "string": "string",
                        },
                        parameters={
                            "string": "string",
                        },
                    ),
                    materials=[google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs(
                        digest={
                            "string": "string",
                        },
                        uri="string",
                    )],
                    metadata=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs(
                        build_finished_on="string",
                        build_invocation_id="string",
                        build_started_on="string",
                        completeness=google_native.containeranalysis.v1.GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs(
                            environment=False,
                            materials=False,
                            parameters=False,
                        ),
                        reproducible=False,
                    ),
                ),
                subject=[google_native.containeranalysis.v1.SubjectArgs(
                    digest={
                        "string": "string",
                    },
                    name="string",
                )],
                type="string",
            ),
            provenance=google_native.containeranalysis.v1.BuildProvenanceArgs(
                id="string",
                end_time="string",
                built_artifacts=[google_native.containeranalysis.v1.ArtifactArgs(
                    checksum="string",
                    id="string",
                    names=["string"],
                )],
                commands=[google_native.containeranalysis.v1.CommandArgs(
                    name="string",
                    args=["string"],
                    dir="string",
                    env=["string"],
                    id="string",
                    wait_for=["string"],
                )],
                create_time="string",
                creator="string",
                build_options={
                    "string": "string",
                },
                builder_version="string",
                logs_uri="string",
                project="string",
                source_provenance=google_native.containeranalysis.v1.SourceArgs(
                    additional_contexts=[google_native.containeranalysis.v1.SourceContextArgs(
                        cloud_repo=google_native.containeranalysis.v1.CloudRepoSourceContextArgs(
                            alias_context=google_native.containeranalysis.v1.AliasContextArgs(
                                kind=google_native.containeranalysis.v1.AliasContextKind.KIND_UNSPECIFIED,
                                name="string",
                            ),
                            repo_id=google_native.containeranalysis.v1.RepoIdArgs(
                                project_repo_id=google_native.containeranalysis.v1.ProjectRepoIdArgs(
                                    project="string",
                                    repo_name="string",
                                ),
                                uid="string",
                            ),
                            revision_id="string",
                        ),
                        gerrit=google_native.containeranalysis.v1.GerritSourceContextArgs(
                            alias_context=google_native.containeranalysis.v1.AliasContextArgs(
                                kind=google_native.containeranalysis.v1.AliasContextKind.KIND_UNSPECIFIED,
                                name="string",
                            ),
                            gerrit_project="string",
                            host_uri="string",
                            revision_id="string",
                        ),
                        git=google_native.containeranalysis.v1.GitSourceContextArgs(
                            revision_id="string",
                            url="string",
                        ),
                        labels={
                            "string": "string",
                        },
                    )],
                    artifact_storage_source_uri="string",
                    context=google_native.containeranalysis.v1.SourceContextArgs(
                        cloud_repo=google_native.containeranalysis.v1.CloudRepoSourceContextArgs(
                            alias_context=google_native.containeranalysis.v1.AliasContextArgs(
                                kind=google_native.containeranalysis.v1.AliasContextKind.KIND_UNSPECIFIED,
                                name="string",
                            ),
                            repo_id=google_native.containeranalysis.v1.RepoIdArgs(
                                project_repo_id=google_native.containeranalysis.v1.ProjectRepoIdArgs(
                                    project="string",
                                    repo_name="string",
                                ),
                                uid="string",
                            ),
                            revision_id="string",
                        ),
                        gerrit=google_native.containeranalysis.v1.GerritSourceContextArgs(
                            alias_context=google_native.containeranalysis.v1.AliasContextArgs(
                                kind=google_native.containeranalysis.v1.AliasContextKind.KIND_UNSPECIFIED,
                                name="string",
                            ),
                            gerrit_project="string",
                            host_uri="string",
                            revision_id="string",
                        ),
                        git=google_native.containeranalysis.v1.GitSourceContextArgs(
                            revision_id="string",
                            url="string",
                        ),
                        labels={
                            "string": "string",
                        },
                    ),
                    file_hashes={
                        "string": "string",
                    },
                ),
                start_time="string",
                trigger_id="string",
            ),
            provenance_bytes="string",
        ),
        image=google_native.containeranalysis.v1.ImageOccurrenceArgs(
            fingerprint=google_native.containeranalysis.v1.FingerprintArgs(
                v1_name="string",
                v2_blob=["string"],
            ),
            layer_info=[google_native.containeranalysis.v1.LayerArgs(
                directive="string",
                arguments="string",
            )],
        ),
        discovery=google_native.containeranalysis.v1.DiscoveryOccurrenceArgs(
            analysis_completed=google_native.containeranalysis.v1.AnalysisCompletedArgs(
                analysis_type=["string"],
            ),
            analysis_error=[google_native.containeranalysis.v1.StatusArgs(
                code=0,
                details=[{
                    "string": "string",
                }],
                message="string",
            )],
            analysis_status=google_native.containeranalysis.v1.DiscoveryOccurrenceAnalysisStatus.ANALYSIS_STATUS_UNSPECIFIED,
            analysis_status_error=google_native.containeranalysis.v1.StatusArgs(
                code=0,
                details=[{
                    "string": "string",
                }],
                message="string",
            ),
            continuous_analysis=google_native.containeranalysis.v1.DiscoveryOccurrenceContinuousAnalysis.CONTINUOUS_ANALYSIS_UNSPECIFIED,
            cpe="string",
            last_scan_time="string",
            sbom_status=google_native.containeranalysis.v1.SBOMStatusArgs(
                error="string",
                sbom_state=google_native.containeranalysis.v1.SBOMStatusSbomState.SBOM_STATE_UNSPECIFIED,
            ),
        ),
        deployment=google_native.containeranalysis.v1.DeploymentOccurrenceArgs(
            deploy_time="string",
            address="string",
            config="string",
            platform=google_native.containeranalysis.v1.DeploymentOccurrencePlatform.PLATFORM_UNSPECIFIED,
            undeploy_time="string",
            user_email="string",
        ),
        project="string",
        remediation="string",
        attestation=google_native.containeranalysis.v1.AttestationOccurrenceArgs(
            serialized_payload="string",
            jwts=[google_native.containeranalysis.v1.JwtArgs(
                compact_jwt="string",
            )],
            signatures=[google_native.containeranalysis.v1.SignatureArgs(
                public_key_id="string",
                signature="string",
            )],
        ),
        sbom_reference=google_native.containeranalysis.v1.SBOMReferenceOccurrenceArgs(
            payload=google_native.containeranalysis.v1.SbomReferenceIntotoPayloadArgs(
                predicate=google_native.containeranalysis.v1.SbomReferenceIntotoPredicateArgs(
                    digest={
                        "string": "string",
                    },
                    location="string",
                    mime_type="string",
                    referrer_id="string",
                ),
                predicate_type="string",
                subject=[google_native.containeranalysis.v1.SubjectArgs(
                    digest={
                        "string": "string",
                    },
                    name="string",
                )],
                type="string",
            ),
            payload_type="string",
            signatures=[google_native.containeranalysis.v1.EnvelopeSignatureArgs(
                keyid="string",
                sig="string",
            )],
        ),
        upgrade=google_native.containeranalysis.v1.UpgradeOccurrenceArgs(
            distribution=google_native.containeranalysis.v1.UpgradeDistributionArgs(
                classification="string",
                cpe_uri="string",
                cve=["string"],
                severity="string",
            ),
            package="string",
            parsed_version=google_native.containeranalysis.v1.VersionArgs(
                kind=google_native.containeranalysis.v1.VersionKind.VERSION_KIND_UNSPECIFIED,
                epoch=0,
                full_name="string",
                inclusive=False,
                name="string",
                revision="string",
            ),
            windows_update=google_native.containeranalysis.v1.WindowsUpdateArgs(
                categories=[google_native.containeranalysis.v1.CategoryArgs(
                    category_id="string",
                    name="string",
                )],
                description="string",
                identity=google_native.containeranalysis.v1.IdentityArgs(
                    revision=0,
                    update_id="string",
                ),
                kb_article_ids=["string"],
                last_published_timestamp="string",
                support_url="string",
                title="string",
            ),
        ),
        vulnerability=google_native.containeranalysis.v1.VulnerabilityOccurrenceArgs(
            package_issue=[google_native.containeranalysis.v1.PackageIssueArgs(
                affected_cpe_uri="string",
                affected_package="string",
                affected_version=google_native.containeranalysis.v1.VersionArgs(
                    kind=google_native.containeranalysis.v1.VersionKind.VERSION_KIND_UNSPECIFIED,
                    epoch=0,
                    full_name="string",
                    inclusive=False,
                    name="string",
                    revision="string",
                ),
                fixed_version=google_native.containeranalysis.v1.VersionArgs(
                    kind=google_native.containeranalysis.v1.VersionKind.VERSION_KIND_UNSPECIFIED,
                    epoch=0,
                    full_name="string",
                    inclusive=False,
                    name="string",
                    revision="string",
                ),
                file_location=[google_native.containeranalysis.v1.GrafeasV1FileLocationArgs(
                    file_path="string",
                )],
                fixed_cpe_uri="string",
                fixed_package="string",
                package_type="string",
            )],
            cvss_v2=google_native.containeranalysis.v1.CVSSArgs(
                attack_complexity=google_native.containeranalysis.v1.CVSSAttackComplexity.ATTACK_COMPLEXITY_UNSPECIFIED,
                attack_vector=google_native.containeranalysis.v1.CVSSAttackVector.ATTACK_VECTOR_UNSPECIFIED,
                authentication=google_native.containeranalysis.v1.CVSSAuthentication.AUTHENTICATION_UNSPECIFIED,
                availability_impact=google_native.containeranalysis.v1.CVSSAvailabilityImpact.IMPACT_UNSPECIFIED,
                base_score=0,
                confidentiality_impact=google_native.containeranalysis.v1.CVSSConfidentialityImpact.IMPACT_UNSPECIFIED,
                exploitability_score=0,
                impact_score=0,
                integrity_impact=google_native.containeranalysis.v1.CVSSIntegrityImpact.IMPACT_UNSPECIFIED,
                privileges_required=google_native.containeranalysis.v1.CVSSPrivilegesRequired.PRIVILEGES_REQUIRED_UNSPECIFIED,
                scope=google_native.containeranalysis.v1.CVSSScope.SCOPE_UNSPECIFIED,
                user_interaction=google_native.containeranalysis.v1.CVSSUserInteraction.USER_INTERACTION_UNSPECIFIED,
            ),
            cvssv3=google_native.containeranalysis.v1.CVSSArgs(
                attack_complexity=google_native.containeranalysis.v1.CVSSAttackComplexity.ATTACK_COMPLEXITY_UNSPECIFIED,
                attack_vector=google_native.containeranalysis.v1.CVSSAttackVector.ATTACK_VECTOR_UNSPECIFIED,
                authentication=google_native.containeranalysis.v1.CVSSAuthentication.AUTHENTICATION_UNSPECIFIED,
                availability_impact=google_native.containeranalysis.v1.CVSSAvailabilityImpact.IMPACT_UNSPECIFIED,
                base_score=0,
                confidentiality_impact=google_native.containeranalysis.v1.CVSSConfidentialityImpact.IMPACT_UNSPECIFIED,
                exploitability_score=0,
                impact_score=0,
                integrity_impact=google_native.containeranalysis.v1.CVSSIntegrityImpact.IMPACT_UNSPECIFIED,
                privileges_required=google_native.containeranalysis.v1.CVSSPrivilegesRequired.PRIVILEGES_REQUIRED_UNSPECIFIED,
                scope=google_native.containeranalysis.v1.CVSSScope.SCOPE_UNSPECIFIED,
                user_interaction=google_native.containeranalysis.v1.CVSSUserInteraction.USER_INTERACTION_UNSPECIFIED,
            ),
            effective_severity=google_native.containeranalysis.v1.VulnerabilityOccurrenceEffectiveSeverity.SEVERITY_UNSPECIFIED,
            extra_details="string",
            type="string",
            vex_assessment=google_native.containeranalysis.v1.VexAssessmentArgs(
                impacts=["string"],
                justification=google_native.containeranalysis.v1.JustificationArgs(
                    details="string",
                    justification_type=google_native.containeranalysis.v1.JustificationJustificationType.JUSTIFICATION_TYPE_UNSPECIFIED,
                ),
                note_name="string",
                related_uris=[google_native.containeranalysis.v1.RelatedUrlArgs(
                    label="string",
                    url="string",
                )],
                remediations=[google_native.containeranalysis.v1.RemediationArgs(
                    details="string",
                    remediation_type=google_native.containeranalysis.v1.RemediationRemediationType.REMEDIATION_TYPE_UNSPECIFIED,
                    remediation_uri=google_native.containeranalysis.v1.RelatedUrlArgs(
                        label="string",
                        url="string",
                    ),
                )],
                state=google_native.containeranalysis.v1.VexAssessmentState.STATE_UNSPECIFIED,
                vulnerability_id="string",
            ),
        ))
    
    const occurrenceResource = new google_native.containeranalysis.v1.Occurrence("occurrenceResource", {
        resourceUri: "string",
        noteName: "string",
        envelope: {
            payload: "string",
            payloadType: "string",
            signatures: [{
                keyid: "string",
                sig: "string",
            }],
        },
        "package": {
            license: {
                comments: "string",
                expression: "string",
            },
            location: [{
                path: "string",
            }],
        },
        compliance: {
            nonComplianceReason: "string",
            nonCompliantFiles: [{
                displayCommand: "string",
                path: "string",
                reason: "string",
            }],
        },
        dsseAttestation: {
            envelope: {
                payload: "string",
                payloadType: "string",
                signatures: [{
                    keyid: "string",
                    sig: "string",
                }],
            },
            statement: {
                predicateType: "string",
                provenance: {
                    builderConfig: {
                        id: "string",
                    },
                    materials: ["string"],
                    metadata: {
                        buildFinishedOn: "string",
                        buildInvocationId: "string",
                        buildStartedOn: "string",
                        completeness: {
                            arguments: false,
                            environment: false,
                            materials: false,
                        },
                        reproducible: false,
                    },
                    recipe: {
                        arguments: [{
                            string: "string",
                        }],
                        definedInMaterial: "string",
                        entryPoint: "string",
                        environment: [{
                            string: "string",
                        }],
                        type: "string",
                    },
                },
                slsaProvenance: {
                    builder: {
                        id: "string",
                    },
                    materials: [{
                        digest: {
                            string: "string",
                        },
                        uri: "string",
                    }],
                    metadata: {
                        buildFinishedOn: "string",
                        buildInvocationId: "string",
                        buildStartedOn: "string",
                        completeness: {
                            arguments: false,
                            environment: false,
                            materials: false,
                        },
                        reproducible: false,
                    },
                    recipe: {
                        arguments: {
                            string: "string",
                        },
                        definedInMaterial: "string",
                        entryPoint: "string",
                        environment: {
                            string: "string",
                        },
                        type: "string",
                    },
                },
                slsaProvenanceZeroTwo: {
                    buildConfig: {
                        string: "string",
                    },
                    buildType: "string",
                    builder: {
                        id: "string",
                    },
                    invocation: {
                        configSource: {
                            digest: {
                                string: "string",
                            },
                            entryPoint: "string",
                            uri: "string",
                        },
                        environment: {
                            string: "string",
                        },
                        parameters: {
                            string: "string",
                        },
                    },
                    materials: [{
                        digest: {
                            string: "string",
                        },
                        uri: "string",
                    }],
                    metadata: {
                        buildFinishedOn: "string",
                        buildInvocationId: "string",
                        buildStartedOn: "string",
                        completeness: {
                            environment: false,
                            materials: false,
                            parameters: false,
                        },
                        reproducible: false,
                    },
                },
                subject: [{
                    digest: {
                        string: "string",
                    },
                    name: "string",
                }],
                type: "string",
            },
        },
        build: {
            inTotoSlsaProvenanceV1: {
                predicate: {
                    buildDefinition: {
                        buildType: "string",
                        externalParameters: {
                            string: "string",
                        },
                        internalParameters: {
                            string: "string",
                        },
                        resolvedDependencies: [{
                            annotations: {
                                string: "string",
                            },
                            content: "string",
                            digest: {
                                string: "string",
                            },
                            downloadLocation: "string",
                            mediaType: "string",
                            name: "string",
                            uri: "string",
                        }],
                    },
                    runDetails: {
                        builder: {
                            builderDependencies: [{
                                annotations: {
                                    string: "string",
                                },
                                content: "string",
                                digest: {
                                    string: "string",
                                },
                                downloadLocation: "string",
                                mediaType: "string",
                                name: "string",
                                uri: "string",
                            }],
                            id: "string",
                            version: {
                                string: "string",
                            },
                        },
                        byproducts: [{
                            annotations: {
                                string: "string",
                            },
                            content: "string",
                            digest: {
                                string: "string",
                            },
                            downloadLocation: "string",
                            mediaType: "string",
                            name: "string",
                            uri: "string",
                        }],
                        metadata: {
                            finishedOn: "string",
                            invocationId: "string",
                            startedOn: "string",
                        },
                    },
                },
                predicateType: "string",
                subject: [{
                    digest: {
                        string: "string",
                    },
                    name: "string",
                }],
                type: "string",
            },
            intotoStatement: {
                predicateType: "string",
                provenance: {
                    builderConfig: {
                        id: "string",
                    },
                    materials: ["string"],
                    metadata: {
                        buildFinishedOn: "string",
                        buildInvocationId: "string",
                        buildStartedOn: "string",
                        completeness: {
                            arguments: false,
                            environment: false,
                            materials: false,
                        },
                        reproducible: false,
                    },
                    recipe: {
                        arguments: [{
                            string: "string",
                        }],
                        definedInMaterial: "string",
                        entryPoint: "string",
                        environment: [{
                            string: "string",
                        }],
                        type: "string",
                    },
                },
                slsaProvenance: {
                    builder: {
                        id: "string",
                    },
                    materials: [{
                        digest: {
                            string: "string",
                        },
                        uri: "string",
                    }],
                    metadata: {
                        buildFinishedOn: "string",
                        buildInvocationId: "string",
                        buildStartedOn: "string",
                        completeness: {
                            arguments: false,
                            environment: false,
                            materials: false,
                        },
                        reproducible: false,
                    },
                    recipe: {
                        arguments: {
                            string: "string",
                        },
                        definedInMaterial: "string",
                        entryPoint: "string",
                        environment: {
                            string: "string",
                        },
                        type: "string",
                    },
                },
                slsaProvenanceZeroTwo: {
                    buildConfig: {
                        string: "string",
                    },
                    buildType: "string",
                    builder: {
                        id: "string",
                    },
                    invocation: {
                        configSource: {
                            digest: {
                                string: "string",
                            },
                            entryPoint: "string",
                            uri: "string",
                        },
                        environment: {
                            string: "string",
                        },
                        parameters: {
                            string: "string",
                        },
                    },
                    materials: [{
                        digest: {
                            string: "string",
                        },
                        uri: "string",
                    }],
                    metadata: {
                        buildFinishedOn: "string",
                        buildInvocationId: "string",
                        buildStartedOn: "string",
                        completeness: {
                            environment: false,
                            materials: false,
                            parameters: false,
                        },
                        reproducible: false,
                    },
                },
                subject: [{
                    digest: {
                        string: "string",
                    },
                    name: "string",
                }],
                type: "string",
            },
            provenance: {
                id: "string",
                endTime: "string",
                builtArtifacts: [{
                    checksum: "string",
                    id: "string",
                    names: ["string"],
                }],
                commands: [{
                    name: "string",
                    args: ["string"],
                    dir: "string",
                    env: ["string"],
                    id: "string",
                    waitFor: ["string"],
                }],
                createTime: "string",
                creator: "string",
                buildOptions: {
                    string: "string",
                },
                builderVersion: "string",
                logsUri: "string",
                project: "string",
                sourceProvenance: {
                    additionalContexts: [{
                        cloudRepo: {
                            aliasContext: {
                                kind: google_native.containeranalysis.v1.AliasContextKind.KindUnspecified,
                                name: "string",
                            },
                            repoId: {
                                projectRepoId: {
                                    project: "string",
                                    repoName: "string",
                                },
                                uid: "string",
                            },
                            revisionId: "string",
                        },
                        gerrit: {
                            aliasContext: {
                                kind: google_native.containeranalysis.v1.AliasContextKind.KindUnspecified,
                                name: "string",
                            },
                            gerritProject: "string",
                            hostUri: "string",
                            revisionId: "string",
                        },
                        git: {
                            revisionId: "string",
                            url: "string",
                        },
                        labels: {
                            string: "string",
                        },
                    }],
                    artifactStorageSourceUri: "string",
                    context: {
                        cloudRepo: {
                            aliasContext: {
                                kind: google_native.containeranalysis.v1.AliasContextKind.KindUnspecified,
                                name: "string",
                            },
                            repoId: {
                                projectRepoId: {
                                    project: "string",
                                    repoName: "string",
                                },
                                uid: "string",
                            },
                            revisionId: "string",
                        },
                        gerrit: {
                            aliasContext: {
                                kind: google_native.containeranalysis.v1.AliasContextKind.KindUnspecified,
                                name: "string",
                            },
                            gerritProject: "string",
                            hostUri: "string",
                            revisionId: "string",
                        },
                        git: {
                            revisionId: "string",
                            url: "string",
                        },
                        labels: {
                            string: "string",
                        },
                    },
                    fileHashes: {
                        string: "string",
                    },
                },
                startTime: "string",
                triggerId: "string",
            },
            provenanceBytes: "string",
        },
        image: {
            fingerprint: {
                v1Name: "string",
                v2Blob: ["string"],
            },
            layerInfo: [{
                directive: "string",
                arguments: "string",
            }],
        },
        discovery: {
            analysisCompleted: {
                analysisType: ["string"],
            },
            analysisError: [{
                code: 0,
                details: [{
                    string: "string",
                }],
                message: "string",
            }],
            analysisStatus: google_native.containeranalysis.v1.DiscoveryOccurrenceAnalysisStatus.AnalysisStatusUnspecified,
            analysisStatusError: {
                code: 0,
                details: [{
                    string: "string",
                }],
                message: "string",
            },
            continuousAnalysis: google_native.containeranalysis.v1.DiscoveryOccurrenceContinuousAnalysis.ContinuousAnalysisUnspecified,
            cpe: "string",
            lastScanTime: "string",
            sbomStatus: {
                error: "string",
                sbomState: google_native.containeranalysis.v1.SBOMStatusSbomState.SbomStateUnspecified,
            },
        },
        deployment: {
            deployTime: "string",
            address: "string",
            config: "string",
            platform: google_native.containeranalysis.v1.DeploymentOccurrencePlatform.PlatformUnspecified,
            undeployTime: "string",
            userEmail: "string",
        },
        project: "string",
        remediation: "string",
        attestation: {
            serializedPayload: "string",
            jwts: [{
                compactJwt: "string",
            }],
            signatures: [{
                publicKeyId: "string",
                signature: "string",
            }],
        },
        sbomReference: {
            payload: {
                predicate: {
                    digest: {
                        string: "string",
                    },
                    location: "string",
                    mimeType: "string",
                    referrerId: "string",
                },
                predicateType: "string",
                subject: [{
                    digest: {
                        string: "string",
                    },
                    name: "string",
                }],
                type: "string",
            },
            payloadType: "string",
            signatures: [{
                keyid: "string",
                sig: "string",
            }],
        },
        upgrade: {
            distribution: {
                classification: "string",
                cpeUri: "string",
                cve: ["string"],
                severity: "string",
            },
            "package": "string",
            parsedVersion: {
                kind: google_native.containeranalysis.v1.VersionKind.VersionKindUnspecified,
                epoch: 0,
                fullName: "string",
                inclusive: false,
                name: "string",
                revision: "string",
            },
            windowsUpdate: {
                categories: [{
                    categoryId: "string",
                    name: "string",
                }],
                description: "string",
                identity: {
                    revision: 0,
                    updateId: "string",
                },
                kbArticleIds: ["string"],
                lastPublishedTimestamp: "string",
                supportUrl: "string",
                title: "string",
            },
        },
        vulnerability: {
            packageIssue: [{
                affectedCpeUri: "string",
                affectedPackage: "string",
                affectedVersion: {
                    kind: google_native.containeranalysis.v1.VersionKind.VersionKindUnspecified,
                    epoch: 0,
                    fullName: "string",
                    inclusive: false,
                    name: "string",
                    revision: "string",
                },
                fixedVersion: {
                    kind: google_native.containeranalysis.v1.VersionKind.VersionKindUnspecified,
                    epoch: 0,
                    fullName: "string",
                    inclusive: false,
                    name: "string",
                    revision: "string",
                },
                fileLocation: [{
                    filePath: "string",
                }],
                fixedCpeUri: "string",
                fixedPackage: "string",
                packageType: "string",
            }],
            cvssV2: {
                attackComplexity: google_native.containeranalysis.v1.CVSSAttackComplexity.AttackComplexityUnspecified,
                attackVector: google_native.containeranalysis.v1.CVSSAttackVector.AttackVectorUnspecified,
                authentication: google_native.containeranalysis.v1.CVSSAuthentication.AuthenticationUnspecified,
                availabilityImpact: google_native.containeranalysis.v1.CVSSAvailabilityImpact.ImpactUnspecified,
                baseScore: 0,
                confidentialityImpact: google_native.containeranalysis.v1.CVSSConfidentialityImpact.ImpactUnspecified,
                exploitabilityScore: 0,
                impactScore: 0,
                integrityImpact: google_native.containeranalysis.v1.CVSSIntegrityImpact.ImpactUnspecified,
                privilegesRequired: google_native.containeranalysis.v1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
                scope: google_native.containeranalysis.v1.CVSSScope.ScopeUnspecified,
                userInteraction: google_native.containeranalysis.v1.CVSSUserInteraction.UserInteractionUnspecified,
            },
            cvssv3: {
                attackComplexity: google_native.containeranalysis.v1.CVSSAttackComplexity.AttackComplexityUnspecified,
                attackVector: google_native.containeranalysis.v1.CVSSAttackVector.AttackVectorUnspecified,
                authentication: google_native.containeranalysis.v1.CVSSAuthentication.AuthenticationUnspecified,
                availabilityImpact: google_native.containeranalysis.v1.CVSSAvailabilityImpact.ImpactUnspecified,
                baseScore: 0,
                confidentialityImpact: google_native.containeranalysis.v1.CVSSConfidentialityImpact.ImpactUnspecified,
                exploitabilityScore: 0,
                impactScore: 0,
                integrityImpact: google_native.containeranalysis.v1.CVSSIntegrityImpact.ImpactUnspecified,
                privilegesRequired: google_native.containeranalysis.v1.CVSSPrivilegesRequired.PrivilegesRequiredUnspecified,
                scope: google_native.containeranalysis.v1.CVSSScope.ScopeUnspecified,
                userInteraction: google_native.containeranalysis.v1.CVSSUserInteraction.UserInteractionUnspecified,
            },
            effectiveSeverity: google_native.containeranalysis.v1.VulnerabilityOccurrenceEffectiveSeverity.SeverityUnspecified,
            extraDetails: "string",
            type: "string",
            vexAssessment: {
                impacts: ["string"],
                justification: {
                    details: "string",
                    justificationType: google_native.containeranalysis.v1.JustificationJustificationType.JustificationTypeUnspecified,
                },
                noteName: "string",
                relatedUris: [{
                    label: "string",
                    url: "string",
                }],
                remediations: [{
                    details: "string",
                    remediationType: google_native.containeranalysis.v1.RemediationRemediationType.RemediationTypeUnspecified,
                    remediationUri: {
                        label: "string",
                        url: "string",
                    },
                }],
                state: google_native.containeranalysis.v1.VexAssessmentState.StateUnspecified,
                vulnerabilityId: "string",
            },
        },
    });
    
    type: google-native:containeranalysis/v1:Occurrence
    properties:
        attestation:
            jwts:
                - compactJwt: string
            serializedPayload: string
            signatures:
                - publicKeyId: string
                  signature: string
        build:
            inTotoSlsaProvenanceV1:
                predicate:
                    buildDefinition:
                        buildType: string
                        externalParameters:
                            string: string
                        internalParameters:
                            string: string
                        resolvedDependencies:
                            - annotations:
                                string: string
                              content: string
                              digest:
                                string: string
                              downloadLocation: string
                              mediaType: string
                              name: string
                              uri: string
                    runDetails:
                        builder:
                            builderDependencies:
                                - annotations:
                                    string: string
                                  content: string
                                  digest:
                                    string: string
                                  downloadLocation: string
                                  mediaType: string
                                  name: string
                                  uri: string
                            id: string
                            version:
                                string: string
                        byproducts:
                            - annotations:
                                string: string
                              content: string
                              digest:
                                string: string
                              downloadLocation: string
                              mediaType: string
                              name: string
                              uri: string
                        metadata:
                            finishedOn: string
                            invocationId: string
                            startedOn: string
                predicateType: string
                subject:
                    - digest:
                        string: string
                      name: string
                type: string
            intotoStatement:
                predicateType: string
                provenance:
                    builderConfig:
                        id: string
                    materials:
                        - string
                    metadata:
                        buildFinishedOn: string
                        buildInvocationId: string
                        buildStartedOn: string
                        completeness:
                            arguments: false
                            environment: false
                            materials: false
                        reproducible: false
                    recipe:
                        arguments:
                            - string: string
                        definedInMaterial: string
                        entryPoint: string
                        environment:
                            - string: string
                        type: string
                slsaProvenance:
                    builder:
                        id: string
                    materials:
                        - digest:
                            string: string
                          uri: string
                    metadata:
                        buildFinishedOn: string
                        buildInvocationId: string
                        buildStartedOn: string
                        completeness:
                            arguments: false
                            environment: false
                            materials: false
                        reproducible: false
                    recipe:
                        arguments:
                            string: string
                        definedInMaterial: string
                        entryPoint: string
                        environment:
                            string: string
                        type: string
                slsaProvenanceZeroTwo:
                    buildConfig:
                        string: string
                    buildType: string
                    builder:
                        id: string
                    invocation:
                        configSource:
                            digest:
                                string: string
                            entryPoint: string
                            uri: string
                        environment:
                            string: string
                        parameters:
                            string: string
                    materials:
                        - digest:
                            string: string
                          uri: string
                    metadata:
                        buildFinishedOn: string
                        buildInvocationId: string
                        buildStartedOn: string
                        completeness:
                            environment: false
                            materials: false
                            parameters: false
                        reproducible: false
                subject:
                    - digest:
                        string: string
                      name: string
                type: string
            provenance:
                buildOptions:
                    string: string
                builderVersion: string
                builtArtifacts:
                    - checksum: string
                      id: string
                      names:
                        - string
                commands:
                    - args:
                        - string
                      dir: string
                      env:
                        - string
                      id: string
                      name: string
                      waitFor:
                        - string
                createTime: string
                creator: string
                endTime: string
                id: string
                logsUri: string
                project: string
                sourceProvenance:
                    additionalContexts:
                        - cloudRepo:
                            aliasContext:
                                kind: KIND_UNSPECIFIED
                                name: string
                            repoId:
                                projectRepoId:
                                    project: string
                                    repoName: string
                                uid: string
                            revisionId: string
                          gerrit:
                            aliasContext:
                                kind: KIND_UNSPECIFIED
                                name: string
                            gerritProject: string
                            hostUri: string
                            revisionId: string
                          git:
                            revisionId: string
                            url: string
                          labels:
                            string: string
                    artifactStorageSourceUri: string
                    context:
                        cloudRepo:
                            aliasContext:
                                kind: KIND_UNSPECIFIED
                                name: string
                            repoId:
                                projectRepoId:
                                    project: string
                                    repoName: string
                                uid: string
                            revisionId: string
                        gerrit:
                            aliasContext:
                                kind: KIND_UNSPECIFIED
                                name: string
                            gerritProject: string
                            hostUri: string
                            revisionId: string
                        git:
                            revisionId: string
                            url: string
                        labels:
                            string: string
                    fileHashes:
                        string: string
                startTime: string
                triggerId: string
            provenanceBytes: string
        compliance:
            nonComplianceReason: string
            nonCompliantFiles:
                - displayCommand: string
                  path: string
                  reason: string
        deployment:
            address: string
            config: string
            deployTime: string
            platform: PLATFORM_UNSPECIFIED
            undeployTime: string
            userEmail: string
        discovery:
            analysisCompleted:
                analysisType:
                    - string
            analysisError:
                - code: 0
                  details:
                    - string: string
                  message: string
            analysisStatus: ANALYSIS_STATUS_UNSPECIFIED
            analysisStatusError:
                code: 0
                details:
                    - string: string
                message: string
            continuousAnalysis: CONTINUOUS_ANALYSIS_UNSPECIFIED
            cpe: string
            lastScanTime: string
            sbomStatus:
                error: string
                sbomState: SBOM_STATE_UNSPECIFIED
        dsseAttestation:
            envelope:
                payload: string
                payloadType: string
                signatures:
                    - keyid: string
                      sig: string
            statement:
                predicateType: string
                provenance:
                    builderConfig:
                        id: string
                    materials:
                        - string
                    metadata:
                        buildFinishedOn: string
                        buildInvocationId: string
                        buildStartedOn: string
                        completeness:
                            arguments: false
                            environment: false
                            materials: false
                        reproducible: false
                    recipe:
                        arguments:
                            - string: string
                        definedInMaterial: string
                        entryPoint: string
                        environment:
                            - string: string
                        type: string
                slsaProvenance:
                    builder:
                        id: string
                    materials:
                        - digest:
                            string: string
                          uri: string
                    metadata:
                        buildFinishedOn: string
                        buildInvocationId: string
                        buildStartedOn: string
                        completeness:
                            arguments: false
                            environment: false
                            materials: false
                        reproducible: false
                    recipe:
                        arguments:
                            string: string
                        definedInMaterial: string
                        entryPoint: string
                        environment:
                            string: string
                        type: string
                slsaProvenanceZeroTwo:
                    buildConfig:
                        string: string
                    buildType: string
                    builder:
                        id: string
                    invocation:
                        configSource:
                            digest:
                                string: string
                            entryPoint: string
                            uri: string
                        environment:
                            string: string
                        parameters:
                            string: string
                    materials:
                        - digest:
                            string: string
                          uri: string
                    metadata:
                        buildFinishedOn: string
                        buildInvocationId: string
                        buildStartedOn: string
                        completeness:
                            environment: false
                            materials: false
                            parameters: false
                        reproducible: false
                subject:
                    - digest:
                        string: string
                      name: string
                type: string
        envelope:
            payload: string
            payloadType: string
            signatures:
                - keyid: string
                  sig: string
        image:
            fingerprint:
                v1Name: string
                v2Blob:
                    - string
            layerInfo:
                - arguments: string
                  directive: string
        noteName: string
        package:
            license:
                comments: string
                expression: string
            location:
                - path: string
        project: string
        remediation: string
        resourceUri: string
        sbomReference:
            payload:
                predicate:
                    digest:
                        string: string
                    location: string
                    mimeType: string
                    referrerId: string
                predicateType: string
                subject:
                    - digest:
                        string: string
                      name: string
                type: string
            payloadType: string
            signatures:
                - keyid: string
                  sig: string
        upgrade:
            distribution:
                classification: string
                cpeUri: string
                cve:
                    - string
                severity: string
            package: string
            parsedVersion:
                epoch: 0
                fullName: string
                inclusive: false
                kind: VERSION_KIND_UNSPECIFIED
                name: string
                revision: string
            windowsUpdate:
                categories:
                    - categoryId: string
                      name: string
                description: string
                identity:
                    revision: 0
                    updateId: string
                kbArticleIds:
                    - string
                lastPublishedTimestamp: string
                supportUrl: string
                title: string
        vulnerability:
            cvssV2:
                attackComplexity: ATTACK_COMPLEXITY_UNSPECIFIED
                attackVector: ATTACK_VECTOR_UNSPECIFIED
                authentication: AUTHENTICATION_UNSPECIFIED
                availabilityImpact: IMPACT_UNSPECIFIED
                baseScore: 0
                confidentialityImpact: IMPACT_UNSPECIFIED
                exploitabilityScore: 0
                impactScore: 0
                integrityImpact: IMPACT_UNSPECIFIED
                privilegesRequired: PRIVILEGES_REQUIRED_UNSPECIFIED
                scope: SCOPE_UNSPECIFIED
                userInteraction: USER_INTERACTION_UNSPECIFIED
            cvssv3:
                attackComplexity: ATTACK_COMPLEXITY_UNSPECIFIED
                attackVector: ATTACK_VECTOR_UNSPECIFIED
                authentication: AUTHENTICATION_UNSPECIFIED
                availabilityImpact: IMPACT_UNSPECIFIED
                baseScore: 0
                confidentialityImpact: IMPACT_UNSPECIFIED
                exploitabilityScore: 0
                impactScore: 0
                integrityImpact: IMPACT_UNSPECIFIED
                privilegesRequired: PRIVILEGES_REQUIRED_UNSPECIFIED
                scope: SCOPE_UNSPECIFIED
                userInteraction: USER_INTERACTION_UNSPECIFIED
            effectiveSeverity: SEVERITY_UNSPECIFIED
            extraDetails: string
            packageIssue:
                - affectedCpeUri: string
                  affectedPackage: string
                  affectedVersion:
                    epoch: 0
                    fullName: string
                    inclusive: false
                    kind: VERSION_KIND_UNSPECIFIED
                    name: string
                    revision: string
                  fileLocation:
                    - filePath: string
                  fixedCpeUri: string
                  fixedPackage: string
                  fixedVersion:
                    epoch: 0
                    fullName: string
                    inclusive: false
                    kind: VERSION_KIND_UNSPECIFIED
                    name: string
                    revision: string
                  packageType: string
            type: string
            vexAssessment:
                impacts:
                    - string
                justification:
                    details: string
                    justificationType: JUSTIFICATION_TYPE_UNSPECIFIED
                noteName: string
                relatedUris:
                    - label: string
                      url: string
                remediations:
                    - details: string
                      remediationType: REMEDIATION_TYPE_UNSPECIFIED
                      remediationUri:
                        label: string
                        url: string
                state: STATE_UNSPECIFIED
                vulnerabilityId: string
    

    Occurrence Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Occurrence resource accepts the following input properties:

    NoteName string
    Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
    ResourceUri string
    Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc for a Docker image.
    Attestation Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.AttestationOccurrence
    Describes an attestation of an artifact.
    Build Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.BuildOccurrence
    Describes a verifiable build.
    Compliance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.ComplianceOccurrence
    Describes a compliance violation on a linked resource.
    Deployment Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.DeploymentOccurrence
    Describes the deployment of an artifact on a runtime.
    Discovery Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.DiscoveryOccurrence
    Describes when a resource was discovered.
    DsseAttestation Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.DSSEAttestationOccurrence
    Describes an attestation of an artifact using dsse.
    Envelope Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Envelope
    https://github.com/secure-systems-lab/dsse
    Image Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.ImageOccurrence
    Describes how this resource derives from the basis in the associated note.
    Package Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.PackageOccurrence
    Describes the installation of a package on the linked resource.
    Project string
    Remediation string
    A description of actions that can be taken to remedy the note.
    SbomReference Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SBOMReferenceOccurrence
    Describes a specific SBOM reference occurrences.
    Upgrade Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.UpgradeOccurrence
    Describes an available package upgrade on the linked resource.
    Vulnerability Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VulnerabilityOccurrence
    Describes a security vulnerability.
    NoteName string
    Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
    ResourceUri string
    Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc for a Docker image.
    Attestation AttestationOccurrenceArgs
    Describes an attestation of an artifact.
    Build BuildOccurrenceArgs
    Describes a verifiable build.
    Compliance ComplianceOccurrenceArgs
    Describes a compliance violation on a linked resource.
    Deployment DeploymentOccurrenceArgs
    Describes the deployment of an artifact on a runtime.
    Discovery DiscoveryOccurrenceArgs
    Describes when a resource was discovered.
    DsseAttestation DSSEAttestationOccurrenceArgs
    Describes an attestation of an artifact using dsse.
    Envelope EnvelopeArgs
    https://github.com/secure-systems-lab/dsse
    Image ImageOccurrenceArgs
    Describes how this resource derives from the basis in the associated note.
    Package PackageOccurrenceArgs
    Describes the installation of a package on the linked resource.
    Project string
    Remediation string
    A description of actions that can be taken to remedy the note.
    SbomReference SBOMReferenceOccurrenceArgs
    Describes a specific SBOM reference occurrences.
    Upgrade UpgradeOccurrenceArgs
    Describes an available package upgrade on the linked resource.
    Vulnerability VulnerabilityOccurrenceArgs
    Describes a security vulnerability.
    noteName String
    Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
    resourceUri String
    Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc for a Docker image.
    attestation AttestationOccurrence
    Describes an attestation of an artifact.
    build BuildOccurrence
    Describes a verifiable build.
    compliance ComplianceOccurrence
    Describes a compliance violation on a linked resource.
    deployment DeploymentOccurrence
    Describes the deployment of an artifact on a runtime.
    discovery DiscoveryOccurrence
    Describes when a resource was discovered.
    dsseAttestation DSSEAttestationOccurrence
    Describes an attestation of an artifact using dsse.
    envelope Envelope
    https://github.com/secure-systems-lab/dsse
    image ImageOccurrence
    Describes how this resource derives from the basis in the associated note.
    package_ PackageOccurrence
    Describes the installation of a package on the linked resource.
    project String
    remediation String
    A description of actions that can be taken to remedy the note.
    sbomReference SBOMReferenceOccurrence
    Describes a specific SBOM reference occurrences.
    upgrade UpgradeOccurrence
    Describes an available package upgrade on the linked resource.
    vulnerability VulnerabilityOccurrence
    Describes a security vulnerability.
    noteName string
    Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
    resourceUri string
    Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc for a Docker image.
    attestation AttestationOccurrence
    Describes an attestation of an artifact.
    build BuildOccurrence
    Describes a verifiable build.
    compliance ComplianceOccurrence
    Describes a compliance violation on a linked resource.
    deployment DeploymentOccurrence
    Describes the deployment of an artifact on a runtime.
    discovery DiscoveryOccurrence
    Describes when a resource was discovered.
    dsseAttestation DSSEAttestationOccurrence
    Describes an attestation of an artifact using dsse.
    envelope Envelope
    https://github.com/secure-systems-lab/dsse
    image ImageOccurrence
    Describes how this resource derives from the basis in the associated note.
    package PackageOccurrence
    Describes the installation of a package on the linked resource.
    project string
    remediation string
    A description of actions that can be taken to remedy the note.
    sbomReference SBOMReferenceOccurrence
    Describes a specific SBOM reference occurrences.
    upgrade UpgradeOccurrence
    Describes an available package upgrade on the linked resource.
    vulnerability VulnerabilityOccurrence
    Describes a security vulnerability.
    note_name str
    Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
    resource_uri str
    Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc for a Docker image.
    attestation AttestationOccurrenceArgs
    Describes an attestation of an artifact.
    build BuildOccurrenceArgs
    Describes a verifiable build.
    compliance ComplianceOccurrenceArgs
    Describes a compliance violation on a linked resource.
    deployment DeploymentOccurrenceArgs
    Describes the deployment of an artifact on a runtime.
    discovery DiscoveryOccurrenceArgs
    Describes when a resource was discovered.
    dsse_attestation DSSEAttestationOccurrenceArgs
    Describes an attestation of an artifact using dsse.
    envelope EnvelopeArgs
    https://github.com/secure-systems-lab/dsse
    image ImageOccurrenceArgs
    Describes how this resource derives from the basis in the associated note.
    package PackageOccurrenceArgs
    Describes the installation of a package on the linked resource.
    project str
    remediation str
    A description of actions that can be taken to remedy the note.
    sbom_reference SBOMReferenceOccurrenceArgs
    Describes a specific SBOM reference occurrences.
    upgrade UpgradeOccurrenceArgs
    Describes an available package upgrade on the linked resource.
    vulnerability VulnerabilityOccurrenceArgs
    Describes a security vulnerability.
    noteName String
    Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.
    resourceUri String
    Immutable. A URI that represents the resource for which the occurrence applies. For example, https://gcr.io/project/image@sha256:123abc for a Docker image.
    attestation Property Map
    Describes an attestation of an artifact.
    build Property Map
    Describes a verifiable build.
    compliance Property Map
    Describes a compliance violation on a linked resource.
    deployment Property Map
    Describes the deployment of an artifact on a runtime.
    discovery Property Map
    Describes when a resource was discovered.
    dsseAttestation Property Map
    Describes an attestation of an artifact using dsse.
    envelope Property Map
    https://github.com/secure-systems-lab/dsse
    image Property Map
    Describes how this resource derives from the basis in the associated note.
    package Property Map
    Describes the installation of a package on the linked resource.
    project String
    remediation String
    A description of actions that can be taken to remedy the note.
    sbomReference Property Map
    Describes a specific SBOM reference occurrences.
    upgrade Property Map
    Describes an available package upgrade on the linked resource.
    vulnerability Property Map
    Describes a security vulnerability.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Occurrence resource produces the following output properties:

    CreateTime string
    The time this occurrence was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    Kind string
    This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
    Name string
    The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
    UpdateTime string
    The time this occurrence was last updated.
    CreateTime string
    The time this occurrence was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    Kind string
    This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
    Name string
    The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
    UpdateTime string
    The time this occurrence was last updated.
    createTime String
    The time this occurrence was created.
    id String
    The provider-assigned unique ID for this managed resource.
    kind String
    This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
    name String
    The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
    updateTime String
    The time this occurrence was last updated.
    createTime string
    The time this occurrence was created.
    id string
    The provider-assigned unique ID for this managed resource.
    kind string
    This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
    name string
    The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
    updateTime string
    The time this occurrence was last updated.
    create_time str
    The time this occurrence was created.
    id str
    The provider-assigned unique ID for this managed resource.
    kind str
    This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
    name str
    The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
    update_time str
    The time this occurrence was last updated.
    createTime String
    The time this occurrence was created.
    id String
    The provider-assigned unique ID for this managed resource.
    kind String
    This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.
    name String
    The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].
    updateTime String
    The time this occurrence was last updated.

    Supporting Types

    AliasContext, AliasContextArgs

    Kind AliasContextKind
    The alias kind.
    Name string
    The alias name.
    kind AliasContextKind
    The alias kind.
    name String
    The alias name.
    kind AliasContextKind
    The alias kind.
    name string
    The alias name.
    kind AliasContextKind
    The alias kind.
    name str
    The alias name.

    AliasContextKind, AliasContextKindArgs

    KindUnspecified
    KIND_UNSPECIFIEDUnknown.
    Fixed
    FIXEDGit tag.
    Movable
    MOVABLEGit branch.
    Other
    OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
    AliasContextKindKindUnspecified
    KIND_UNSPECIFIEDUnknown.
    AliasContextKindFixed
    FIXEDGit tag.
    AliasContextKindMovable
    MOVABLEGit branch.
    AliasContextKindOther
    OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
    KindUnspecified
    KIND_UNSPECIFIEDUnknown.
    Fixed
    FIXEDGit tag.
    Movable
    MOVABLEGit branch.
    Other
    OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
    KindUnspecified
    KIND_UNSPECIFIEDUnknown.
    Fixed
    FIXEDGit tag.
    Movable
    MOVABLEGit branch.
    Other
    OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
    KIND_UNSPECIFIED
    KIND_UNSPECIFIEDUnknown.
    FIXED
    FIXEDGit tag.
    MOVABLE
    MOVABLEGit branch.
    OTHER
    OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".
    "KIND_UNSPECIFIED"
    KIND_UNSPECIFIEDUnknown.
    "FIXED"
    FIXEDGit tag.
    "MOVABLE"
    MOVABLEGit branch.
    "OTHER"
    OTHERUsed to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar".

    AliasContextResponse, AliasContextResponseArgs

    Kind string
    The alias kind.
    Name string
    The alias name.
    Kind string
    The alias kind.
    Name string
    The alias name.
    kind String
    The alias kind.
    name String
    The alias name.
    kind string
    The alias kind.
    name string
    The alias name.
    kind str
    The alias kind.
    name str
    The alias name.
    kind String
    The alias kind.
    name String
    The alias name.

    AnalysisCompleted, AnalysisCompletedArgs

    AnalysisType List<string>
    AnalysisType []string
    analysisType List<String>
    analysisType string[]
    analysis_type Sequence[str]
    analysisType List<String>

    AnalysisCompletedResponse, AnalysisCompletedResponseArgs

    AnalysisType List<string>
    AnalysisType []string
    analysisType List<String>
    analysisType string[]
    analysis_type Sequence[str]
    analysisType List<String>

    Artifact, ArtifactArgs

    Checksum string
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    Id string
    Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456.
    Names List<string>
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    Checksum string
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    Id string
    Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456.
    Names []string
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum String
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    id String
    Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456.
    names List<String>
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum string
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    id string
    Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456.
    names string[]
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum str
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    id str
    Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456.
    names Sequence[str]
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum String
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    id String
    Artifact ID, if any; for container images, this will be a URL by digest like gcr.io/projectID/imagename@sha256:123456.
    names List<String>
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

    ArtifactResponse, ArtifactResponseArgs

    Checksum string
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    Names List<string>
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    Checksum string
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    Names []string
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum String
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    names List<String>
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum string
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    names string[]
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum str
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    names Sequence[str]
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.
    checksum String
    Hash or checksum value of a binary, or Docker Registry 2.0 digest of a container.
    names List<String>
    Related artifact names. This may be the path to a binary or jar file, or in the case of a container build, the name used to push the container image to Google Container Registry, as presented to docker push. Note that a single Artifact ID can have multiple names, for example if two tags are applied to one image.

    AttestationOccurrence, AttestationOccurrenceArgs

    SerializedPayload string
    The serialized payload that is verified by one or more signatures.
    Jwts List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Jwt>
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Signature>
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    SerializedPayload string
    The serialized payload that is verified by one or more signatures.
    Jwts []Jwt
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    Signatures []Signature
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    serializedPayload String
    The serialized payload that is verified by one or more signatures.
    jwts List<Jwt>
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    signatures List<Signature>
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    serializedPayload string
    The serialized payload that is verified by one or more signatures.
    jwts Jwt[]
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    signatures Signature[]
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    serialized_payload str
    The serialized payload that is verified by one or more signatures.
    jwts Sequence[Jwt]
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    signatures Sequence[Signature]
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    serializedPayload String
    The serialized payload that is verified by one or more signatures.
    jwts List<Property Map>
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    signatures List<Property Map>
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

    AttestationOccurrenceResponse, AttestationOccurrenceResponseArgs

    Jwts List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.JwtResponse>
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    SerializedPayload string
    The serialized payload that is verified by one or more signatures.
    Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SignatureResponse>
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    Jwts []JwtResponse
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    SerializedPayload string
    The serialized payload that is verified by one or more signatures.
    Signatures []SignatureResponse
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    jwts List<JwtResponse>
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    serializedPayload String
    The serialized payload that is verified by one or more signatures.
    signatures List<SignatureResponse>
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    jwts JwtResponse[]
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    serializedPayload string
    The serialized payload that is verified by one or more signatures.
    signatures SignatureResponse[]
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    jwts Sequence[JwtResponse]
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    serialized_payload str
    The serialized payload that is verified by one or more signatures.
    signatures Sequence[SignatureResponse]
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.
    jwts List<Property Map>
    One or more JWTs encoding a self-contained attestation. Each JWT encodes the payload that it verifies within the JWT itself. Verifier implementation SHOULD ignore the serialized_payload field when verifying these JWTs. If only JWTs are present on this AttestationOccurrence, then the serialized_payload SHOULD be left empty. Each JWT SHOULD encode a claim specific to the resource_uri of this Occurrence, but this is not validated by Grafeas metadata API implementations. The JWT itself is opaque to Grafeas.
    serializedPayload String
    The serialized payload that is verified by one or more signatures.
    signatures List<Property Map>
    One or more signatures over serialized_payload. Verifier implementations should consider this attestation message verified if at least one signature verifies serialized_payload. See Signature in common.proto for more details on signature structure and verification.

    BuildDefinition, BuildDefinitionArgs

    BuildDefinitionResponse, BuildDefinitionResponseArgs

    BuildMetadata, BuildMetadataArgs

    FinishedOn string
    InvocationId string
    StartedOn string
    FinishedOn string
    InvocationId string
    StartedOn string
    finishedOn String
    invocationId String
    startedOn String
    finishedOn string
    invocationId string
    startedOn string
    finishedOn String
    invocationId String
    startedOn String

    BuildMetadataResponse, BuildMetadataResponseArgs

    FinishedOn string
    InvocationId string
    StartedOn string
    FinishedOn string
    InvocationId string
    StartedOn string
    finishedOn String
    invocationId String
    startedOn String
    finishedOn string
    invocationId string
    startedOn string
    finishedOn String
    invocationId String
    startedOn String

    BuildOccurrence, BuildOccurrenceArgs

    InTotoSlsaProvenanceV1 Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoSlsaProvenanceV1
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    IntotoProvenance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoProvenance
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    IntotoStatement Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoStatement
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    Provenance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.BuildProvenance
    The actual provenance for the build.
    ProvenanceBytes string
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    InTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    IntotoProvenance InTotoProvenance
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    IntotoStatement InTotoStatement
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    Provenance BuildProvenance
    The actual provenance for the build.
    ProvenanceBytes string
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    inTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intotoProvenance InTotoProvenance
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intotoStatement InTotoStatement
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance BuildProvenance
    The actual provenance for the build.
    provenanceBytes String
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    inTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intotoProvenance InTotoProvenance
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intotoStatement InTotoStatement
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance BuildProvenance
    The actual provenance for the build.
    provenanceBytes string
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    in_toto_slsa_provenance_v1 InTotoSlsaProvenanceV1
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intoto_provenance InTotoProvenance
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intoto_statement InTotoStatement
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance BuildProvenance
    The actual provenance for the build.
    provenance_bytes str
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    inTotoSlsaProvenanceV1 Property Map
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intotoProvenance Property Map
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intotoStatement Property Map
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance Property Map
    The actual provenance for the build.
    provenanceBytes String
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

    BuildOccurrenceResponse, BuildOccurrenceResponseArgs

    InTotoSlsaProvenanceV1 Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoSlsaProvenanceV1Response
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    IntotoProvenance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoProvenanceResponse
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    IntotoStatement Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoStatementResponse
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    Provenance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.BuildProvenanceResponse
    The actual provenance for the build.
    ProvenanceBytes string
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    InTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1Response
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    IntotoProvenance InTotoProvenanceResponse
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    IntotoStatement InTotoStatementResponse
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    Provenance BuildProvenanceResponse
    The actual provenance for the build.
    ProvenanceBytes string
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    inTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1Response
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intotoProvenance InTotoProvenanceResponse
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intotoStatement InTotoStatementResponse
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance BuildProvenanceResponse
    The actual provenance for the build.
    provenanceBytes String
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    inTotoSlsaProvenanceV1 InTotoSlsaProvenanceV1Response
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intotoProvenance InTotoProvenanceResponse
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intotoStatement InTotoStatementResponse
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance BuildProvenanceResponse
    The actual provenance for the build.
    provenanceBytes string
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    in_toto_slsa_provenance_v1 InTotoSlsaProvenanceV1Response
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intoto_provenance InTotoProvenanceResponse
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intoto_statement InTotoStatementResponse
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance BuildProvenanceResponse
    The actual provenance for the build.
    provenance_bytes str
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.
    inTotoSlsaProvenanceV1 Property Map
    In-Toto Slsa Provenance V1 represents a slsa provenance meeting the slsa spec, wrapped in an in-toto statement. This allows for direct jsonification of a to-spec in-toto slsa statement with a to-spec slsa provenance.
    intotoProvenance Property Map
    Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    Deprecated: Deprecated. See InTotoStatement for the replacement. In-toto Provenance representation as defined in spec.

    intotoStatement Property Map
    In-toto Statement representation as defined in spec. The intoto_statement can contain any type of provenance. The serialized payload of the statement can be stored and signed in the Occurrence's envelope.
    provenance Property Map
    The actual provenance for the build.
    provenanceBytes String
    Serialized JSON representation of the provenance, used in generating the build signature in the corresponding build note. After verifying the signature, provenance_bytes can be unmarshalled and compared to the provenance to confirm that it is unchanged. A base64-encoded string representation of the provenance bytes is used for the signature in order to interoperate with openssl which expects this format for signature verification. The serialized form is captured both to avoid ambiguity in how the provenance is marshalled to json as well to prevent incompatibilities with future changes.

    BuildProvenance, BuildProvenanceArgs

    Id string
    Unique identifier of the build.
    BuildOptions Dictionary<string, string>
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    BuilderVersion string
    Version string of the builder at the time this build was executed.
    BuiltArtifacts List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Artifact>
    Output of the build.
    Commands List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Command>
    Commands requested by the build.
    CreateTime string
    Time at which the build was created.
    Creator string
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    EndTime string
    Time at which execution of the build was finished.
    LogsUri string
    URI where any logs for this provenance were written.
    Project string
    ID of the project.
    SourceProvenance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Source
    Details of the Source input to the build.
    StartTime string
    Time at which execution of the build was started.
    TriggerId string
    Trigger identifier if the build was triggered automatically; empty if not.
    Id string
    Unique identifier of the build.
    BuildOptions map[string]string
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    BuilderVersion string
    Version string of the builder at the time this build was executed.
    BuiltArtifacts []Artifact
    Output of the build.
    Commands []Command
    Commands requested by the build.
    CreateTime string
    Time at which the build was created.
    Creator string
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    EndTime string
    Time at which execution of the build was finished.
    LogsUri string
    URI where any logs for this provenance were written.
    Project string
    ID of the project.
    SourceProvenance Source
    Details of the Source input to the build.
    StartTime string
    Time at which execution of the build was started.
    TriggerId string
    Trigger identifier if the build was triggered automatically; empty if not.
    id String
    Unique identifier of the build.
    buildOptions Map<String,String>
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builderVersion String
    Version string of the builder at the time this build was executed.
    builtArtifacts List<Artifact>
    Output of the build.
    commands List<Command>
    Commands requested by the build.
    createTime String
    Time at which the build was created.
    creator String
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    endTime String
    Time at which execution of the build was finished.
    logsUri String
    URI where any logs for this provenance were written.
    project String
    ID of the project.
    sourceProvenance Source
    Details of the Source input to the build.
    startTime String
    Time at which execution of the build was started.
    triggerId String
    Trigger identifier if the build was triggered automatically; empty if not.
    id string
    Unique identifier of the build.
    buildOptions {[key: string]: string}
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builderVersion string
    Version string of the builder at the time this build was executed.
    builtArtifacts Artifact[]
    Output of the build.
    commands Command[]
    Commands requested by the build.
    createTime string
    Time at which the build was created.
    creator string
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    endTime string
    Time at which execution of the build was finished.
    logsUri string
    URI where any logs for this provenance were written.
    project string
    ID of the project.
    sourceProvenance Source
    Details of the Source input to the build.
    startTime string
    Time at which execution of the build was started.
    triggerId string
    Trigger identifier if the build was triggered automatically; empty if not.
    id str
    Unique identifier of the build.
    build_options Mapping[str, str]
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builder_version str
    Version string of the builder at the time this build was executed.
    built_artifacts Sequence[Artifact]
    Output of the build.
    commands Sequence[Command]
    Commands requested by the build.
    create_time str
    Time at which the build was created.
    creator str
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    end_time str
    Time at which execution of the build was finished.
    logs_uri str
    URI where any logs for this provenance were written.
    project str
    ID of the project.
    source_provenance Source
    Details of the Source input to the build.
    start_time str
    Time at which execution of the build was started.
    trigger_id str
    Trigger identifier if the build was triggered automatically; empty if not.
    id String
    Unique identifier of the build.
    buildOptions Map<String>
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builderVersion String
    Version string of the builder at the time this build was executed.
    builtArtifacts List<Property Map>
    Output of the build.
    commands List<Property Map>
    Commands requested by the build.
    createTime String
    Time at which the build was created.
    creator String
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    endTime String
    Time at which execution of the build was finished.
    logsUri String
    URI where any logs for this provenance were written.
    project String
    ID of the project.
    sourceProvenance Property Map
    Details of the Source input to the build.
    startTime String
    Time at which execution of the build was started.
    triggerId String
    Trigger identifier if the build was triggered automatically; empty if not.

    BuildProvenanceResponse, BuildProvenanceResponseArgs

    BuildOptions Dictionary<string, string>
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    BuilderVersion string
    Version string of the builder at the time this build was executed.
    BuiltArtifacts List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.ArtifactResponse>
    Output of the build.
    Commands List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CommandResponse>
    Commands requested by the build.
    CreateTime string
    Time at which the build was created.
    Creator string
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    EndTime string
    Time at which execution of the build was finished.
    LogsUri string
    URI where any logs for this provenance were written.
    Project string
    ID of the project.
    SourceProvenance Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SourceResponse
    Details of the Source input to the build.
    StartTime string
    Time at which execution of the build was started.
    TriggerId string
    Trigger identifier if the build was triggered automatically; empty if not.
    BuildOptions map[string]string
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    BuilderVersion string
    Version string of the builder at the time this build was executed.
    BuiltArtifacts []ArtifactResponse
    Output of the build.
    Commands []CommandResponse
    Commands requested by the build.
    CreateTime string
    Time at which the build was created.
    Creator string
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    EndTime string
    Time at which execution of the build was finished.
    LogsUri string
    URI where any logs for this provenance were written.
    Project string
    ID of the project.
    SourceProvenance SourceResponse
    Details of the Source input to the build.
    StartTime string
    Time at which execution of the build was started.
    TriggerId string
    Trigger identifier if the build was triggered automatically; empty if not.
    buildOptions Map<String,String>
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builderVersion String
    Version string of the builder at the time this build was executed.
    builtArtifacts List<ArtifactResponse>
    Output of the build.
    commands List<CommandResponse>
    Commands requested by the build.
    createTime String
    Time at which the build was created.
    creator String
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    endTime String
    Time at which execution of the build was finished.
    logsUri String
    URI where any logs for this provenance were written.
    project String
    ID of the project.
    sourceProvenance SourceResponse
    Details of the Source input to the build.
    startTime String
    Time at which execution of the build was started.
    triggerId String
    Trigger identifier if the build was triggered automatically; empty if not.
    buildOptions {[key: string]: string}
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builderVersion string
    Version string of the builder at the time this build was executed.
    builtArtifacts ArtifactResponse[]
    Output of the build.
    commands CommandResponse[]
    Commands requested by the build.
    createTime string
    Time at which the build was created.
    creator string
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    endTime string
    Time at which execution of the build was finished.
    logsUri string
    URI where any logs for this provenance were written.
    project string
    ID of the project.
    sourceProvenance SourceResponse
    Details of the Source input to the build.
    startTime string
    Time at which execution of the build was started.
    triggerId string
    Trigger identifier if the build was triggered automatically; empty if not.
    build_options Mapping[str, str]
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builder_version str
    Version string of the builder at the time this build was executed.
    built_artifacts Sequence[ArtifactResponse]
    Output of the build.
    commands Sequence[CommandResponse]
    Commands requested by the build.
    create_time str
    Time at which the build was created.
    creator str
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    end_time str
    Time at which execution of the build was finished.
    logs_uri str
    URI where any logs for this provenance were written.
    project str
    ID of the project.
    source_provenance SourceResponse
    Details of the Source input to the build.
    start_time str
    Time at which execution of the build was started.
    trigger_id str
    Trigger identifier if the build was triggered automatically; empty if not.
    buildOptions Map<String>
    Special options applied to this build. This is a catch-all field where build providers can enter any desired additional details.
    builderVersion String
    Version string of the builder at the time this build was executed.
    builtArtifacts List<Property Map>
    Output of the build.
    commands List<Property Map>
    Commands requested by the build.
    createTime String
    Time at which the build was created.
    creator String
    E-mail address of the user who initiated this build. Note that this was the user's e-mail address at the time the build was initiated; this address may not represent the same end-user for all time.
    endTime String
    Time at which execution of the build was finished.
    logsUri String
    URI where any logs for this provenance were written.
    project String
    ID of the project.
    sourceProvenance Property Map
    Details of the Source input to the build.
    startTime String
    Time at which execution of the build was started.
    triggerId String
    Trigger identifier if the build was triggered automatically; empty if not.

    BuilderConfig, BuilderConfigArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    CVSS, CVSSArgs

    AttackComplexity Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSAttackComplexity
    AttackVector Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSAttackVector
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    Authentication Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSAuthentication
    AvailabilityImpact Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSAvailabilityImpact
    BaseScore double
    The base score is a function of the base metric scores.
    ConfidentialityImpact Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSConfidentialityImpact
    ExploitabilityScore double
    ImpactScore double
    IntegrityImpact Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSIntegrityImpact
    PrivilegesRequired Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSPrivilegesRequired
    Scope Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSScope
    UserInteraction Pulumi.GoogleNative.ContainerAnalysis.V1.CVSSUserInteraction
    attackComplexity "ATTACK_COMPLEXITY_UNSPECIFIED" | "ATTACK_COMPLEXITY_LOW" | "ATTACK_COMPLEXITY_HIGH" | "ATTACK_COMPLEXITY_MEDIUM"
    attackVector "ATTACK_VECTOR_UNSPECIFIED" | "ATTACK_VECTOR_NETWORK" | "ATTACK_VECTOR_ADJACENT" | "ATTACK_VECTOR_LOCAL" | "ATTACK_VECTOR_PHYSICAL"
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    authentication "AUTHENTICATION_UNSPECIFIED" | "AUTHENTICATION_MULTIPLE" | "AUTHENTICATION_SINGLE" | "AUTHENTICATION_NONE"
    availabilityImpact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE"
    baseScore Number
    The base score is a function of the base metric scores.
    confidentialityImpact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE"
    exploitabilityScore Number
    impactScore Number
    integrityImpact "IMPACT_UNSPECIFIED" | "IMPACT_HIGH" | "IMPACT_LOW" | "IMPACT_NONE" | "IMPACT_PARTIAL" | "IMPACT_COMPLETE"
    privilegesRequired "PRIVILEGES_REQUIRED_UNSPECIFIED" | "PRIVILEGES_REQUIRED_NONE" | "PRIVILEGES_REQUIRED_LOW" | "PRIVILEGES_REQUIRED_HIGH"
    scope "SCOPE_UNSPECIFIED" | "SCOPE_UNCHANGED" | "SCOPE_CHANGED"
    userInteraction "USER_INTERACTION_UNSPECIFIED" | "USER_INTERACTION_NONE" | "USER_INTERACTION_REQUIRED"

    CVSSAttackComplexity, CVSSAttackComplexityArgs

    AttackComplexityUnspecified
    ATTACK_COMPLEXITY_UNSPECIFIED
    AttackComplexityLow
    ATTACK_COMPLEXITY_LOW
    AttackComplexityHigh
    ATTACK_COMPLEXITY_HIGH
    AttackComplexityMedium
    ATTACK_COMPLEXITY_MEDIUM
    CVSSAttackComplexityAttackComplexityUnspecified
    ATTACK_COMPLEXITY_UNSPECIFIED
    CVSSAttackComplexityAttackComplexityLow
    ATTACK_COMPLEXITY_LOW
    CVSSAttackComplexityAttackComplexityHigh
    ATTACK_COMPLEXITY_HIGH
    CVSSAttackComplexityAttackComplexityMedium
    ATTACK_COMPLEXITY_MEDIUM
    AttackComplexityUnspecified
    ATTACK_COMPLEXITY_UNSPECIFIED
    AttackComplexityLow
    ATTACK_COMPLEXITY_LOW
    AttackComplexityHigh
    ATTACK_COMPLEXITY_HIGH
    AttackComplexityMedium
    ATTACK_COMPLEXITY_MEDIUM
    AttackComplexityUnspecified
    ATTACK_COMPLEXITY_UNSPECIFIED
    AttackComplexityLow
    ATTACK_COMPLEXITY_LOW
    AttackComplexityHigh
    ATTACK_COMPLEXITY_HIGH
    AttackComplexityMedium
    ATTACK_COMPLEXITY_MEDIUM
    ATTACK_COMPLEXITY_UNSPECIFIED
    ATTACK_COMPLEXITY_UNSPECIFIED
    ATTACK_COMPLEXITY_LOW
    ATTACK_COMPLEXITY_LOW
    ATTACK_COMPLEXITY_HIGH
    ATTACK_COMPLEXITY_HIGH
    ATTACK_COMPLEXITY_MEDIUM
    ATTACK_COMPLEXITY_MEDIUM
    "ATTACK_COMPLEXITY_UNSPECIFIED"
    ATTACK_COMPLEXITY_UNSPECIFIED
    "ATTACK_COMPLEXITY_LOW"
    ATTACK_COMPLEXITY_LOW
    "ATTACK_COMPLEXITY_HIGH"
    ATTACK_COMPLEXITY_HIGH
    "ATTACK_COMPLEXITY_MEDIUM"
    ATTACK_COMPLEXITY_MEDIUM

    CVSSAttackVector, CVSSAttackVectorArgs

    AttackVectorUnspecified
    ATTACK_VECTOR_UNSPECIFIED
    AttackVectorNetwork
    ATTACK_VECTOR_NETWORK
    AttackVectorAdjacent
    ATTACK_VECTOR_ADJACENT
    AttackVectorLocal
    ATTACK_VECTOR_LOCAL
    AttackVectorPhysical
    ATTACK_VECTOR_PHYSICAL
    CVSSAttackVectorAttackVectorUnspecified
    ATTACK_VECTOR_UNSPECIFIED
    CVSSAttackVectorAttackVectorNetwork
    ATTACK_VECTOR_NETWORK
    CVSSAttackVectorAttackVectorAdjacent
    ATTACK_VECTOR_ADJACENT
    CVSSAttackVectorAttackVectorLocal
    ATTACK_VECTOR_LOCAL
    CVSSAttackVectorAttackVectorPhysical
    ATTACK_VECTOR_PHYSICAL
    AttackVectorUnspecified
    ATTACK_VECTOR_UNSPECIFIED
    AttackVectorNetwork
    ATTACK_VECTOR_NETWORK
    AttackVectorAdjacent
    ATTACK_VECTOR_ADJACENT
    AttackVectorLocal
    ATTACK_VECTOR_LOCAL
    AttackVectorPhysical
    ATTACK_VECTOR_PHYSICAL
    AttackVectorUnspecified
    ATTACK_VECTOR_UNSPECIFIED
    AttackVectorNetwork
    ATTACK_VECTOR_NETWORK
    AttackVectorAdjacent
    ATTACK_VECTOR_ADJACENT
    AttackVectorLocal
    ATTACK_VECTOR_LOCAL
    AttackVectorPhysical
    ATTACK_VECTOR_PHYSICAL
    ATTACK_VECTOR_UNSPECIFIED
    ATTACK_VECTOR_UNSPECIFIED
    ATTACK_VECTOR_NETWORK
    ATTACK_VECTOR_NETWORK
    ATTACK_VECTOR_ADJACENT
    ATTACK_VECTOR_ADJACENT
    ATTACK_VECTOR_LOCAL
    ATTACK_VECTOR_LOCAL
    ATTACK_VECTOR_PHYSICAL
    ATTACK_VECTOR_PHYSICAL
    "ATTACK_VECTOR_UNSPECIFIED"
    ATTACK_VECTOR_UNSPECIFIED
    "ATTACK_VECTOR_NETWORK"
    ATTACK_VECTOR_NETWORK
    "ATTACK_VECTOR_ADJACENT"
    ATTACK_VECTOR_ADJACENT
    "ATTACK_VECTOR_LOCAL"
    ATTACK_VECTOR_LOCAL
    "ATTACK_VECTOR_PHYSICAL"
    ATTACK_VECTOR_PHYSICAL

    CVSSAuthentication, CVSSAuthenticationArgs

    AuthenticationUnspecified
    AUTHENTICATION_UNSPECIFIED
    AuthenticationMultiple
    AUTHENTICATION_MULTIPLE
    AuthenticationSingle
    AUTHENTICATION_SINGLE
    AuthenticationNone
    AUTHENTICATION_NONE
    CVSSAuthenticationAuthenticationUnspecified
    AUTHENTICATION_UNSPECIFIED
    CVSSAuthenticationAuthenticationMultiple
    AUTHENTICATION_MULTIPLE
    CVSSAuthenticationAuthenticationSingle
    AUTHENTICATION_SINGLE
    CVSSAuthenticationAuthenticationNone
    AUTHENTICATION_NONE
    AuthenticationUnspecified
    AUTHENTICATION_UNSPECIFIED
    AuthenticationMultiple
    AUTHENTICATION_MULTIPLE
    AuthenticationSingle
    AUTHENTICATION_SINGLE
    AuthenticationNone
    AUTHENTICATION_NONE
    AuthenticationUnspecified
    AUTHENTICATION_UNSPECIFIED
    AuthenticationMultiple
    AUTHENTICATION_MULTIPLE
    AuthenticationSingle
    AUTHENTICATION_SINGLE
    AuthenticationNone
    AUTHENTICATION_NONE
    AUTHENTICATION_UNSPECIFIED
    AUTHENTICATION_UNSPECIFIED
    AUTHENTICATION_MULTIPLE
    AUTHENTICATION_MULTIPLE
    AUTHENTICATION_SINGLE
    AUTHENTICATION_SINGLE
    AUTHENTICATION_NONE
    AUTHENTICATION_NONE
    "AUTHENTICATION_UNSPECIFIED"
    AUTHENTICATION_UNSPECIFIED
    "AUTHENTICATION_MULTIPLE"
    AUTHENTICATION_MULTIPLE
    "AUTHENTICATION_SINGLE"
    AUTHENTICATION_SINGLE
    "AUTHENTICATION_NONE"
    AUTHENTICATION_NONE

    CVSSAvailabilityImpact, CVSSAvailabilityImpactArgs

    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    CVSSAvailabilityImpactImpactUnspecified
    IMPACT_UNSPECIFIED
    CVSSAvailabilityImpactImpactHigh
    IMPACT_HIGH
    CVSSAvailabilityImpactImpactLow
    IMPACT_LOW
    CVSSAvailabilityImpactImpactNone
    IMPACT_NONE
    CVSSAvailabilityImpactImpactPartial
    IMPACT_PARTIAL
    CVSSAvailabilityImpactImpactComplete
    IMPACT_COMPLETE
    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    IMPACT_UNSPECIFIED
    IMPACT_UNSPECIFIED
    IMPACT_HIGH
    IMPACT_HIGH
    IMPACT_LOW
    IMPACT_LOW
    IMPACT_NONE
    IMPACT_NONE
    IMPACT_PARTIAL
    IMPACT_PARTIAL
    IMPACT_COMPLETE
    IMPACT_COMPLETE
    "IMPACT_UNSPECIFIED"
    IMPACT_UNSPECIFIED
    "IMPACT_HIGH"
    IMPACT_HIGH
    "IMPACT_LOW"
    IMPACT_LOW
    "IMPACT_NONE"
    IMPACT_NONE
    "IMPACT_PARTIAL"
    IMPACT_PARTIAL
    "IMPACT_COMPLETE"
    IMPACT_COMPLETE

    CVSSConfidentialityImpact, CVSSConfidentialityImpactArgs

    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    CVSSConfidentialityImpactImpactUnspecified
    IMPACT_UNSPECIFIED
    CVSSConfidentialityImpactImpactHigh
    IMPACT_HIGH
    CVSSConfidentialityImpactImpactLow
    IMPACT_LOW
    CVSSConfidentialityImpactImpactNone
    IMPACT_NONE
    CVSSConfidentialityImpactImpactPartial
    IMPACT_PARTIAL
    CVSSConfidentialityImpactImpactComplete
    IMPACT_COMPLETE
    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    IMPACT_UNSPECIFIED
    IMPACT_UNSPECIFIED
    IMPACT_HIGH
    IMPACT_HIGH
    IMPACT_LOW
    IMPACT_LOW
    IMPACT_NONE
    IMPACT_NONE
    IMPACT_PARTIAL
    IMPACT_PARTIAL
    IMPACT_COMPLETE
    IMPACT_COMPLETE
    "IMPACT_UNSPECIFIED"
    IMPACT_UNSPECIFIED
    "IMPACT_HIGH"
    IMPACT_HIGH
    "IMPACT_LOW"
    IMPACT_LOW
    "IMPACT_NONE"
    IMPACT_NONE
    "IMPACT_PARTIAL"
    IMPACT_PARTIAL
    "IMPACT_COMPLETE"
    IMPACT_COMPLETE

    CVSSIntegrityImpact, CVSSIntegrityImpactArgs

    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    CVSSIntegrityImpactImpactUnspecified
    IMPACT_UNSPECIFIED
    CVSSIntegrityImpactImpactHigh
    IMPACT_HIGH
    CVSSIntegrityImpactImpactLow
    IMPACT_LOW
    CVSSIntegrityImpactImpactNone
    IMPACT_NONE
    CVSSIntegrityImpactImpactPartial
    IMPACT_PARTIAL
    CVSSIntegrityImpactImpactComplete
    IMPACT_COMPLETE
    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    ImpactUnspecified
    IMPACT_UNSPECIFIED
    ImpactHigh
    IMPACT_HIGH
    ImpactLow
    IMPACT_LOW
    ImpactNone
    IMPACT_NONE
    ImpactPartial
    IMPACT_PARTIAL
    ImpactComplete
    IMPACT_COMPLETE
    IMPACT_UNSPECIFIED
    IMPACT_UNSPECIFIED
    IMPACT_HIGH
    IMPACT_HIGH
    IMPACT_LOW
    IMPACT_LOW
    IMPACT_NONE
    IMPACT_NONE
    IMPACT_PARTIAL
    IMPACT_PARTIAL
    IMPACT_COMPLETE
    IMPACT_COMPLETE
    "IMPACT_UNSPECIFIED"
    IMPACT_UNSPECIFIED
    "IMPACT_HIGH"
    IMPACT_HIGH
    "IMPACT_LOW"
    IMPACT_LOW
    "IMPACT_NONE"
    IMPACT_NONE
    "IMPACT_PARTIAL"
    IMPACT_PARTIAL
    "IMPACT_COMPLETE"
    IMPACT_COMPLETE

    CVSSPrivilegesRequired, CVSSPrivilegesRequiredArgs

    PrivilegesRequiredUnspecified
    PRIVILEGES_REQUIRED_UNSPECIFIED
    PrivilegesRequiredNone
    PRIVILEGES_REQUIRED_NONE
    PrivilegesRequiredLow
    PRIVILEGES_REQUIRED_LOW
    PrivilegesRequiredHigh
    PRIVILEGES_REQUIRED_HIGH
    CVSSPrivilegesRequiredPrivilegesRequiredUnspecified
    PRIVILEGES_REQUIRED_UNSPECIFIED
    CVSSPrivilegesRequiredPrivilegesRequiredNone
    PRIVILEGES_REQUIRED_NONE
    CVSSPrivilegesRequiredPrivilegesRequiredLow
    PRIVILEGES_REQUIRED_LOW
    CVSSPrivilegesRequiredPrivilegesRequiredHigh
    PRIVILEGES_REQUIRED_HIGH
    PrivilegesRequiredUnspecified
    PRIVILEGES_REQUIRED_UNSPECIFIED
    PrivilegesRequiredNone
    PRIVILEGES_REQUIRED_NONE
    PrivilegesRequiredLow
    PRIVILEGES_REQUIRED_LOW
    PrivilegesRequiredHigh
    PRIVILEGES_REQUIRED_HIGH
    PrivilegesRequiredUnspecified
    PRIVILEGES_REQUIRED_UNSPECIFIED
    PrivilegesRequiredNone
    PRIVILEGES_REQUIRED_NONE
    PrivilegesRequiredLow
    PRIVILEGES_REQUIRED_LOW
    PrivilegesRequiredHigh
    PRIVILEGES_REQUIRED_HIGH
    PRIVILEGES_REQUIRED_UNSPECIFIED
    PRIVILEGES_REQUIRED_UNSPECIFIED
    PRIVILEGES_REQUIRED_NONE
    PRIVILEGES_REQUIRED_NONE
    PRIVILEGES_REQUIRED_LOW
    PRIVILEGES_REQUIRED_LOW
    PRIVILEGES_REQUIRED_HIGH
    PRIVILEGES_REQUIRED_HIGH
    "PRIVILEGES_REQUIRED_UNSPECIFIED"
    PRIVILEGES_REQUIRED_UNSPECIFIED
    "PRIVILEGES_REQUIRED_NONE"
    PRIVILEGES_REQUIRED_NONE
    "PRIVILEGES_REQUIRED_LOW"
    PRIVILEGES_REQUIRED_LOW
    "PRIVILEGES_REQUIRED_HIGH"
    PRIVILEGES_REQUIRED_HIGH

    CVSSResponse, CVSSResponseArgs

    AttackComplexity string
    AttackVector string
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    Authentication string
    AvailabilityImpact string
    BaseScore double
    The base score is a function of the base metric scores.
    ConfidentialityImpact string
    ExploitabilityScore double
    ImpactScore double
    IntegrityImpact string
    PrivilegesRequired string
    Scope string
    UserInteraction string
    AttackComplexity string
    AttackVector string
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    Authentication string
    AvailabilityImpact string
    BaseScore float64
    The base score is a function of the base metric scores.
    ConfidentialityImpact string
    ExploitabilityScore float64
    ImpactScore float64
    IntegrityImpact string
    PrivilegesRequired string
    Scope string
    UserInteraction string
    attackComplexity String
    attackVector String
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    authentication String
    availabilityImpact String
    baseScore Double
    The base score is a function of the base metric scores.
    confidentialityImpact String
    exploitabilityScore Double
    impactScore Double
    integrityImpact String
    privilegesRequired String
    scope String
    userInteraction String
    attackComplexity string
    attackVector string
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    authentication string
    availabilityImpact string
    baseScore number
    The base score is a function of the base metric scores.
    confidentialityImpact string
    exploitabilityScore number
    impactScore number
    integrityImpact string
    privilegesRequired string
    scope string
    userInteraction string
    attack_complexity str
    attack_vector str
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    authentication str
    availability_impact str
    base_score float
    The base score is a function of the base metric scores.
    confidentiality_impact str
    exploitability_score float
    impact_score float
    integrity_impact str
    privileges_required str
    scope str
    user_interaction str
    attackComplexity String
    attackVector String
    Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.
    authentication String
    availabilityImpact String
    baseScore Number
    The base score is a function of the base metric scores.
    confidentialityImpact String
    exploitabilityScore Number
    impactScore Number
    integrityImpact String
    privilegesRequired String
    scope String
    userInteraction String

    CVSSScope, CVSSScopeArgs

    ScopeUnspecified
    SCOPE_UNSPECIFIED
    ScopeUnchanged
    SCOPE_UNCHANGED
    ScopeChanged
    SCOPE_CHANGED
    CVSSScopeScopeUnspecified
    SCOPE_UNSPECIFIED
    CVSSScopeScopeUnchanged
    SCOPE_UNCHANGED
    CVSSScopeScopeChanged
    SCOPE_CHANGED
    ScopeUnspecified
    SCOPE_UNSPECIFIED
    ScopeUnchanged
    SCOPE_UNCHANGED
    ScopeChanged
    SCOPE_CHANGED
    ScopeUnspecified
    SCOPE_UNSPECIFIED
    ScopeUnchanged
    SCOPE_UNCHANGED
    ScopeChanged
    SCOPE_CHANGED
    SCOPE_UNSPECIFIED
    SCOPE_UNSPECIFIED
    SCOPE_UNCHANGED
    SCOPE_UNCHANGED
    SCOPE_CHANGED
    SCOPE_CHANGED
    "SCOPE_UNSPECIFIED"
    SCOPE_UNSPECIFIED
    "SCOPE_UNCHANGED"
    SCOPE_UNCHANGED
    "SCOPE_CHANGED"
    SCOPE_CHANGED

    CVSSUserInteraction, CVSSUserInteractionArgs

    UserInteractionUnspecified
    USER_INTERACTION_UNSPECIFIED
    UserInteractionNone
    USER_INTERACTION_NONE
    UserInteractionRequired
    USER_INTERACTION_REQUIRED
    CVSSUserInteractionUserInteractionUnspecified
    USER_INTERACTION_UNSPECIFIED
    CVSSUserInteractionUserInteractionNone
    USER_INTERACTION_NONE
    CVSSUserInteractionUserInteractionRequired
    USER_INTERACTION_REQUIRED
    UserInteractionUnspecified
    USER_INTERACTION_UNSPECIFIED
    UserInteractionNone
    USER_INTERACTION_NONE
    UserInteractionRequired
    USER_INTERACTION_REQUIRED
    UserInteractionUnspecified
    USER_INTERACTION_UNSPECIFIED
    UserInteractionNone
    USER_INTERACTION_NONE
    UserInteractionRequired
    USER_INTERACTION_REQUIRED
    USER_INTERACTION_UNSPECIFIED
    USER_INTERACTION_UNSPECIFIED
    USER_INTERACTION_NONE
    USER_INTERACTION_NONE
    USER_INTERACTION_REQUIRED
    USER_INTERACTION_REQUIRED
    "USER_INTERACTION_UNSPECIFIED"
    USER_INTERACTION_UNSPECIFIED
    "USER_INTERACTION_NONE"
    USER_INTERACTION_NONE
    "USER_INTERACTION_REQUIRED"
    USER_INTERACTION_REQUIRED

    Category, CategoryArgs

    CategoryId string
    The identifier of the category.
    Name string
    The localized name of the category.
    CategoryId string
    The identifier of the category.
    Name string
    The localized name of the category.
    categoryId String
    The identifier of the category.
    name String
    The localized name of the category.
    categoryId string
    The identifier of the category.
    name string
    The localized name of the category.
    category_id str
    The identifier of the category.
    name str
    The localized name of the category.
    categoryId String
    The identifier of the category.
    name String
    The localized name of the category.

    CategoryResponse, CategoryResponseArgs

    CategoryId string
    The identifier of the category.
    Name string
    The localized name of the category.
    CategoryId string
    The identifier of the category.
    Name string
    The localized name of the category.
    categoryId String
    The identifier of the category.
    name String
    The localized name of the category.
    categoryId string
    The identifier of the category.
    name string
    The localized name of the category.
    category_id str
    The identifier of the category.
    name str
    The localized name of the category.
    categoryId String
    The identifier of the category.
    name String
    The localized name of the category.

    CloudRepoSourceContext, CloudRepoSourceContextArgs

    AliasContext AliasContext
    An alias, which may be a branch or tag.
    RepoId RepoId
    The ID of the repo.
    RevisionId string
    A revision ID.
    aliasContext AliasContext
    An alias, which may be a branch or tag.
    repoId RepoId
    The ID of the repo.
    revisionId String
    A revision ID.
    aliasContext AliasContext
    An alias, which may be a branch or tag.
    repoId RepoId
    The ID of the repo.
    revisionId string
    A revision ID.
    alias_context AliasContext
    An alias, which may be a branch or tag.
    repo_id RepoId
    The ID of the repo.
    revision_id str
    A revision ID.
    aliasContext Property Map
    An alias, which may be a branch or tag.
    repoId Property Map
    The ID of the repo.
    revisionId String
    A revision ID.

    CloudRepoSourceContextResponse, CloudRepoSourceContextResponseArgs

    AliasContext AliasContextResponse
    An alias, which may be a branch or tag.
    RepoId RepoIdResponse
    The ID of the repo.
    RevisionId string
    A revision ID.
    aliasContext AliasContextResponse
    An alias, which may be a branch or tag.
    repoId RepoIdResponse
    The ID of the repo.
    revisionId String
    A revision ID.
    aliasContext AliasContextResponse
    An alias, which may be a branch or tag.
    repoId RepoIdResponse
    The ID of the repo.
    revisionId string
    A revision ID.
    alias_context AliasContextResponse
    An alias, which may be a branch or tag.
    repo_id RepoIdResponse
    The ID of the repo.
    revision_id str
    A revision ID.
    aliasContext Property Map
    An alias, which may be a branch or tag.
    repoId Property Map
    The ID of the repo.
    revisionId String
    A revision ID.

    Command, CommandArgs

    Name string
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    Args List<string>
    Command-line arguments used when executing this command.
    Dir string
    Working directory (relative to project source root) used when running this command.
    Env List<string>
    Environment variables set before running this command.
    Id string
    Optional unique identifier for this command, used in wait_for to reference this command as a dependency.
    WaitFor List<string>
    The ID(s) of the command(s) that this command depends on.
    Name string
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    Args []string
    Command-line arguments used when executing this command.
    Dir string
    Working directory (relative to project source root) used when running this command.
    Env []string
    Environment variables set before running this command.
    Id string
    Optional unique identifier for this command, used in wait_for to reference this command as a dependency.
    WaitFor []string
    The ID(s) of the command(s) that this command depends on.
    name String
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    args List<String>
    Command-line arguments used when executing this command.
    dir String
    Working directory (relative to project source root) used when running this command.
    env List<String>
    Environment variables set before running this command.
    id String
    Optional unique identifier for this command, used in wait_for to reference this command as a dependency.
    waitFor List<String>
    The ID(s) of the command(s) that this command depends on.
    name string
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    args string[]
    Command-line arguments used when executing this command.
    dir string
    Working directory (relative to project source root) used when running this command.
    env string[]
    Environment variables set before running this command.
    id string
    Optional unique identifier for this command, used in wait_for to reference this command as a dependency.
    waitFor string[]
    The ID(s) of the command(s) that this command depends on.
    name str
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    args Sequence[str]
    Command-line arguments used when executing this command.
    dir str
    Working directory (relative to project source root) used when running this command.
    env Sequence[str]
    Environment variables set before running this command.
    id str
    Optional unique identifier for this command, used in wait_for to reference this command as a dependency.
    wait_for Sequence[str]
    The ID(s) of the command(s) that this command depends on.
    name String
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    args List<String>
    Command-line arguments used when executing this command.
    dir String
    Working directory (relative to project source root) used when running this command.
    env List<String>
    Environment variables set before running this command.
    id String
    Optional unique identifier for this command, used in wait_for to reference this command as a dependency.
    waitFor List<String>
    The ID(s) of the command(s) that this command depends on.

    CommandResponse, CommandResponseArgs

    Args List<string>
    Command-line arguments used when executing this command.
    Dir string
    Working directory (relative to project source root) used when running this command.
    Env List<string>
    Environment variables set before running this command.
    Name string
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    WaitFor List<string>
    The ID(s) of the command(s) that this command depends on.
    Args []string
    Command-line arguments used when executing this command.
    Dir string
    Working directory (relative to project source root) used when running this command.
    Env []string
    Environment variables set before running this command.
    Name string
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    WaitFor []string
    The ID(s) of the command(s) that this command depends on.
    args List<String>
    Command-line arguments used when executing this command.
    dir String
    Working directory (relative to project source root) used when running this command.
    env List<String>
    Environment variables set before running this command.
    name String
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    waitFor List<String>
    The ID(s) of the command(s) that this command depends on.
    args string[]
    Command-line arguments used when executing this command.
    dir string
    Working directory (relative to project source root) used when running this command.
    env string[]
    Environment variables set before running this command.
    name string
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    waitFor string[]
    The ID(s) of the command(s) that this command depends on.
    args Sequence[str]
    Command-line arguments used when executing this command.
    dir str
    Working directory (relative to project source root) used when running this command.
    env Sequence[str]
    Environment variables set before running this command.
    name str
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    wait_for Sequence[str]
    The ID(s) of the command(s) that this command depends on.
    args List<String>
    Command-line arguments used when executing this command.
    dir String
    Working directory (relative to project source root) used when running this command.
    env List<String>
    Environment variables set before running this command.
    name String
    Name of the command, as presented on the command line, or if the command is packaged as a Docker container, as presented to docker pull.
    waitFor List<String>
    The ID(s) of the command(s) that this command depends on.

    Completeness, CompletenessArgs

    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".

    CompletenessResponse, CompletenessResponseArgs

    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".

    ComplianceOccurrence, ComplianceOccurrenceArgs

    ComplianceOccurrenceResponse, ComplianceOccurrenceResponseArgs

    DSSEAttestationOccurrence, DSSEAttestationOccurrenceArgs

    Envelope Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Envelope
    If doing something security critical, make sure to verify the signatures in this metadata.
    Statement Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.InTotoStatement
    Envelope Envelope
    If doing something security critical, make sure to verify the signatures in this metadata.
    Statement InTotoStatement
    envelope Envelope
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement InTotoStatement
    envelope Envelope
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement InTotoStatement
    envelope Envelope
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement InTotoStatement
    envelope Property Map
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement Property Map

    DSSEAttestationOccurrenceResponse, DSSEAttestationOccurrenceResponseArgs

    Envelope EnvelopeResponse
    If doing something security critical, make sure to verify the signatures in this metadata.
    Statement InTotoStatementResponse
    envelope EnvelopeResponse
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement InTotoStatementResponse
    envelope EnvelopeResponse
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement InTotoStatementResponse
    envelope EnvelopeResponse
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement InTotoStatementResponse
    envelope Property Map
    If doing something security critical, make sure to verify the signatures in this metadata.
    statement Property Map

    DeploymentOccurrence, DeploymentOccurrenceArgs

    DeployTime string
    Beginning of the lifetime of this deployment.
    Address string
    Address of the runtime element hosting this deployment.
    Config string
    Configuration used to create this deployment.
    Platform Pulumi.GoogleNative.ContainerAnalysis.V1.DeploymentOccurrencePlatform
    Platform hosting this deployment.
    UndeployTime string
    End of the lifetime of this deployment.
    UserEmail string
    Identity of the user that triggered this deployment.
    DeployTime string
    Beginning of the lifetime of this deployment.
    Address string
    Address of the runtime element hosting this deployment.
    Config string
    Configuration used to create this deployment.
    Platform DeploymentOccurrencePlatform
    Platform hosting this deployment.
    UndeployTime string
    End of the lifetime of this deployment.
    UserEmail string
    Identity of the user that triggered this deployment.
    deployTime String
    Beginning of the lifetime of this deployment.
    address String
    Address of the runtime element hosting this deployment.
    config String
    Configuration used to create this deployment.
    platform DeploymentOccurrencePlatform
    Platform hosting this deployment.
    undeployTime String
    End of the lifetime of this deployment.
    userEmail String
    Identity of the user that triggered this deployment.
    deployTime string
    Beginning of the lifetime of this deployment.
    address string
    Address of the runtime element hosting this deployment.
    config string
    Configuration used to create this deployment.
    platform DeploymentOccurrencePlatform
    Platform hosting this deployment.
    undeployTime string
    End of the lifetime of this deployment.
    userEmail string
    Identity of the user that triggered this deployment.
    deploy_time str
    Beginning of the lifetime of this deployment.
    address str
    Address of the runtime element hosting this deployment.
    config str
    Configuration used to create this deployment.
    platform DeploymentOccurrencePlatform
    Platform hosting this deployment.
    undeploy_time str
    End of the lifetime of this deployment.
    user_email str
    Identity of the user that triggered this deployment.
    deployTime String
    Beginning of the lifetime of this deployment.
    address String
    Address of the runtime element hosting this deployment.
    config String
    Configuration used to create this deployment.
    platform "PLATFORM_UNSPECIFIED" | "GKE" | "FLEX" | "CUSTOM"
    Platform hosting this deployment.
    undeployTime String
    End of the lifetime of this deployment.
    userEmail String
    Identity of the user that triggered this deployment.

    DeploymentOccurrencePlatform, DeploymentOccurrencePlatformArgs

    PlatformUnspecified
    PLATFORM_UNSPECIFIEDUnknown.
    Gke
    GKEGoogle Container Engine.
    Flex
    FLEXGoogle App Engine: Flexible Environment.
    Custom
    CUSTOMCustom user-defined platform.
    DeploymentOccurrencePlatformPlatformUnspecified
    PLATFORM_UNSPECIFIEDUnknown.
    DeploymentOccurrencePlatformGke
    GKEGoogle Container Engine.
    DeploymentOccurrencePlatformFlex
    FLEXGoogle App Engine: Flexible Environment.
    DeploymentOccurrencePlatformCustom
    CUSTOMCustom user-defined platform.
    PlatformUnspecified
    PLATFORM_UNSPECIFIEDUnknown.
    Gke
    GKEGoogle Container Engine.
    Flex
    FLEXGoogle App Engine: Flexible Environment.
    Custom
    CUSTOMCustom user-defined platform.
    PlatformUnspecified
    PLATFORM_UNSPECIFIEDUnknown.
    Gke
    GKEGoogle Container Engine.
    Flex
    FLEXGoogle App Engine: Flexible Environment.
    Custom
    CUSTOMCustom user-defined platform.
    PLATFORM_UNSPECIFIED
    PLATFORM_UNSPECIFIEDUnknown.
    GKE
    GKEGoogle Container Engine.
    FLEX
    FLEXGoogle App Engine: Flexible Environment.
    CUSTOM
    CUSTOMCustom user-defined platform.
    "PLATFORM_UNSPECIFIED"
    PLATFORM_UNSPECIFIEDUnknown.
    "GKE"
    GKEGoogle Container Engine.
    "FLEX"
    FLEXGoogle App Engine: Flexible Environment.
    "CUSTOM"
    CUSTOMCustom user-defined platform.

    DeploymentOccurrenceResponse, DeploymentOccurrenceResponseArgs

    Address string
    Address of the runtime element hosting this deployment.
    Config string
    Configuration used to create this deployment.
    DeployTime string
    Beginning of the lifetime of this deployment.
    Platform string
    Platform hosting this deployment.
    ResourceUri List<string>
    Resource URI for the artifact being deployed taken from the deployable field with the same name.
    UndeployTime string
    End of the lifetime of this deployment.
    UserEmail string
    Identity of the user that triggered this deployment.
    Address string
    Address of the runtime element hosting this deployment.
    Config string
    Configuration used to create this deployment.
    DeployTime string
    Beginning of the lifetime of this deployment.
    Platform string
    Platform hosting this deployment.
    ResourceUri []string
    Resource URI for the artifact being deployed taken from the deployable field with the same name.
    UndeployTime string
    End of the lifetime of this deployment.
    UserEmail string
    Identity of the user that triggered this deployment.
    address String
    Address of the runtime element hosting this deployment.
    config String
    Configuration used to create this deployment.
    deployTime String
    Beginning of the lifetime of this deployment.
    platform String
    Platform hosting this deployment.
    resourceUri List<String>
    Resource URI for the artifact being deployed taken from the deployable field with the same name.
    undeployTime String
    End of the lifetime of this deployment.
    userEmail String
    Identity of the user that triggered this deployment.
    address string
    Address of the runtime element hosting this deployment.
    config string
    Configuration used to create this deployment.
    deployTime string
    Beginning of the lifetime of this deployment.
    platform string
    Platform hosting this deployment.
    resourceUri string[]
    Resource URI for the artifact being deployed taken from the deployable field with the same name.
    undeployTime string
    End of the lifetime of this deployment.
    userEmail string
    Identity of the user that triggered this deployment.
    address str
    Address of the runtime element hosting this deployment.
    config str
    Configuration used to create this deployment.
    deploy_time str
    Beginning of the lifetime of this deployment.
    platform str
    Platform hosting this deployment.
    resource_uri Sequence[str]
    Resource URI for the artifact being deployed taken from the deployable field with the same name.
    undeploy_time str
    End of the lifetime of this deployment.
    user_email str
    Identity of the user that triggered this deployment.
    address String
    Address of the runtime element hosting this deployment.
    config String
    Configuration used to create this deployment.
    deployTime String
    Beginning of the lifetime of this deployment.
    platform String
    Platform hosting this deployment.
    resourceUri List<String>
    Resource URI for the artifact being deployed taken from the deployable field with the same name.
    undeployTime String
    End of the lifetime of this deployment.
    userEmail String
    Identity of the user that triggered this deployment.

    DiscoveryOccurrence, DiscoveryOccurrenceArgs

    AnalysisCompleted Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.AnalysisCompleted
    AnalysisError List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Status>
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    AnalysisStatus Pulumi.GoogleNative.ContainerAnalysis.V1.DiscoveryOccurrenceAnalysisStatus
    The status of discovery for the resource.
    AnalysisStatusError Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Status
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    ContinuousAnalysis Pulumi.GoogleNative.ContainerAnalysis.V1.DiscoveryOccurrenceContinuousAnalysis
    Whether the resource is continuously analyzed.
    Cpe string
    The CPE of the resource being scanned.
    LastScanTime string
    The last time this resource was scanned.
    SbomStatus Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SBOMStatus
    The status of an SBOM generation.
    AnalysisCompleted AnalysisCompleted
    AnalysisError []Status
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    AnalysisStatus DiscoveryOccurrenceAnalysisStatus
    The status of discovery for the resource.
    AnalysisStatusError Status
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    ContinuousAnalysis DiscoveryOccurrenceContinuousAnalysis
    Whether the resource is continuously analyzed.
    Cpe string
    The CPE of the resource being scanned.
    LastScanTime string
    The last time this resource was scanned.
    SbomStatus SBOMStatus
    The status of an SBOM generation.
    analysisCompleted AnalysisCompleted
    analysisError List<Status>
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysisStatus DiscoveryOccurrenceAnalysisStatus
    The status of discovery for the resource.
    analysisStatusError Status
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    continuousAnalysis DiscoveryOccurrenceContinuousAnalysis
    Whether the resource is continuously analyzed.
    cpe String
    The CPE of the resource being scanned.
    lastScanTime String
    The last time this resource was scanned.
    sbomStatus SBOMStatus
    The status of an SBOM generation.
    analysisCompleted AnalysisCompleted
    analysisError Status[]
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysisStatus DiscoveryOccurrenceAnalysisStatus
    The status of discovery for the resource.
    analysisStatusError Status
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    continuousAnalysis DiscoveryOccurrenceContinuousAnalysis
    Whether the resource is continuously analyzed.
    cpe string
    The CPE of the resource being scanned.
    lastScanTime string
    The last time this resource was scanned.
    sbomStatus SBOMStatus
    The status of an SBOM generation.
    analysis_completed AnalysisCompleted
    analysis_error Sequence[Status]
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysis_status DiscoveryOccurrenceAnalysisStatus
    The status of discovery for the resource.
    analysis_status_error Status
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    continuous_analysis DiscoveryOccurrenceContinuousAnalysis
    Whether the resource is continuously analyzed.
    cpe str
    The CPE of the resource being scanned.
    last_scan_time str
    The last time this resource was scanned.
    sbom_status SBOMStatus
    The status of an SBOM generation.
    analysisCompleted Property Map
    analysisError List<Property Map>
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysisStatus "ANALYSIS_STATUS_UNSPECIFIED" | "PENDING" | "SCANNING" | "FINISHED_SUCCESS" | "COMPLETE" | "FINISHED_FAILED" | "FINISHED_UNSUPPORTED"
    The status of discovery for the resource.
    analysisStatusError Property Map
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    continuousAnalysis "CONTINUOUS_ANALYSIS_UNSPECIFIED" | "ACTIVE" | "INACTIVE"
    Whether the resource is continuously analyzed.
    cpe String
    The CPE of the resource being scanned.
    lastScanTime String
    The last time this resource was scanned.
    sbomStatus Property Map
    The status of an SBOM generation.

    DiscoveryOccurrenceAnalysisStatus, DiscoveryOccurrenceAnalysisStatusArgs

    AnalysisStatusUnspecified
    ANALYSIS_STATUS_UNSPECIFIEDUnknown.
    Pending
    PENDINGResource is known but no action has been taken yet.
    Scanning
    SCANNINGResource is being analyzed.
    FinishedSuccess
    FINISHED_SUCCESSAnalysis has finished successfully.
    Complete
    COMPLETEAnalysis has completed.
    FinishedFailed
    FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
    FinishedUnsupported
    FINISHED_UNSUPPORTEDThe resource is known not to be supported.
    DiscoveryOccurrenceAnalysisStatusAnalysisStatusUnspecified
    ANALYSIS_STATUS_UNSPECIFIEDUnknown.
    DiscoveryOccurrenceAnalysisStatusPending
    PENDINGResource is known but no action has been taken yet.
    DiscoveryOccurrenceAnalysisStatusScanning
    SCANNINGResource is being analyzed.
    DiscoveryOccurrenceAnalysisStatusFinishedSuccess
    FINISHED_SUCCESSAnalysis has finished successfully.
    DiscoveryOccurrenceAnalysisStatusComplete
    COMPLETEAnalysis has completed.
    DiscoveryOccurrenceAnalysisStatusFinishedFailed
    FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
    DiscoveryOccurrenceAnalysisStatusFinishedUnsupported
    FINISHED_UNSUPPORTEDThe resource is known not to be supported.
    AnalysisStatusUnspecified
    ANALYSIS_STATUS_UNSPECIFIEDUnknown.
    Pending
    PENDINGResource is known but no action has been taken yet.
    Scanning
    SCANNINGResource is being analyzed.
    FinishedSuccess
    FINISHED_SUCCESSAnalysis has finished successfully.
    Complete
    COMPLETEAnalysis has completed.
    FinishedFailed
    FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
    FinishedUnsupported
    FINISHED_UNSUPPORTEDThe resource is known not to be supported.
    AnalysisStatusUnspecified
    ANALYSIS_STATUS_UNSPECIFIEDUnknown.
    Pending
    PENDINGResource is known but no action has been taken yet.
    Scanning
    SCANNINGResource is being analyzed.
    FinishedSuccess
    FINISHED_SUCCESSAnalysis has finished successfully.
    Complete
    COMPLETEAnalysis has completed.
    FinishedFailed
    FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
    FinishedUnsupported
    FINISHED_UNSUPPORTEDThe resource is known not to be supported.
    ANALYSIS_STATUS_UNSPECIFIED
    ANALYSIS_STATUS_UNSPECIFIEDUnknown.
    PENDING
    PENDINGResource is known but no action has been taken yet.
    SCANNING
    SCANNINGResource is being analyzed.
    FINISHED_SUCCESS
    FINISHED_SUCCESSAnalysis has finished successfully.
    COMPLETE
    COMPLETEAnalysis has completed.
    FINISHED_FAILED
    FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
    FINISHED_UNSUPPORTED
    FINISHED_UNSUPPORTEDThe resource is known not to be supported.
    "ANALYSIS_STATUS_UNSPECIFIED"
    ANALYSIS_STATUS_UNSPECIFIEDUnknown.
    "PENDING"
    PENDINGResource is known but no action has been taken yet.
    "SCANNING"
    SCANNINGResource is being analyzed.
    "FINISHED_SUCCESS"
    FINISHED_SUCCESSAnalysis has finished successfully.
    "COMPLETE"
    COMPLETEAnalysis has completed.
    "FINISHED_FAILED"
    FINISHED_FAILEDAnalysis has finished unsuccessfully, the analysis itself is in a bad state.
    "FINISHED_UNSUPPORTED"
    FINISHED_UNSUPPORTEDThe resource is known not to be supported.

    DiscoveryOccurrenceContinuousAnalysis, DiscoveryOccurrenceContinuousAnalysisArgs

    ContinuousAnalysisUnspecified
    CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown.
    Active
    ACTIVEThe resource is continuously analyzed.
    Inactive
    INACTIVEThe resource is ignored for continuous analysis.
    DiscoveryOccurrenceContinuousAnalysisContinuousAnalysisUnspecified
    CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown.
    DiscoveryOccurrenceContinuousAnalysisActive
    ACTIVEThe resource is continuously analyzed.
    DiscoveryOccurrenceContinuousAnalysisInactive
    INACTIVEThe resource is ignored for continuous analysis.
    ContinuousAnalysisUnspecified
    CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown.
    Active
    ACTIVEThe resource is continuously analyzed.
    Inactive
    INACTIVEThe resource is ignored for continuous analysis.
    ContinuousAnalysisUnspecified
    CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown.
    Active
    ACTIVEThe resource is continuously analyzed.
    Inactive
    INACTIVEThe resource is ignored for continuous analysis.
    CONTINUOUS_ANALYSIS_UNSPECIFIED
    CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown.
    ACTIVE
    ACTIVEThe resource is continuously analyzed.
    INACTIVE
    INACTIVEThe resource is ignored for continuous analysis.
    "CONTINUOUS_ANALYSIS_UNSPECIFIED"
    CONTINUOUS_ANALYSIS_UNSPECIFIEDUnknown.
    "ACTIVE"
    ACTIVEThe resource is continuously analyzed.
    "INACTIVE"
    INACTIVEThe resource is ignored for continuous analysis.

    DiscoveryOccurrenceResponse, DiscoveryOccurrenceResponseArgs

    AnalysisCompleted Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.AnalysisCompletedResponse
    AnalysisError List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.StatusResponse>
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    AnalysisStatus string
    The status of discovery for the resource.
    AnalysisStatusError Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.StatusResponse
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    ArchiveTime string
    The time occurrences related to this discovery occurrence were archived.
    ContinuousAnalysis string
    Whether the resource is continuously analyzed.
    Cpe string
    The CPE of the resource being scanned.
    LastScanTime string
    The last time this resource was scanned.
    SbomStatus Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SBOMStatusResponse
    The status of an SBOM generation.
    AnalysisCompleted AnalysisCompletedResponse
    AnalysisError []StatusResponse
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    AnalysisStatus string
    The status of discovery for the resource.
    AnalysisStatusError StatusResponse
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    ArchiveTime string
    The time occurrences related to this discovery occurrence were archived.
    ContinuousAnalysis string
    Whether the resource is continuously analyzed.
    Cpe string
    The CPE of the resource being scanned.
    LastScanTime string
    The last time this resource was scanned.
    SbomStatus SBOMStatusResponse
    The status of an SBOM generation.
    analysisCompleted AnalysisCompletedResponse
    analysisError List<StatusResponse>
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysisStatus String
    The status of discovery for the resource.
    analysisStatusError StatusResponse
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    archiveTime String
    The time occurrences related to this discovery occurrence were archived.
    continuousAnalysis String
    Whether the resource is continuously analyzed.
    cpe String
    The CPE of the resource being scanned.
    lastScanTime String
    The last time this resource was scanned.
    sbomStatus SBOMStatusResponse
    The status of an SBOM generation.
    analysisCompleted AnalysisCompletedResponse
    analysisError StatusResponse[]
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysisStatus string
    The status of discovery for the resource.
    analysisStatusError StatusResponse
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    archiveTime string
    The time occurrences related to this discovery occurrence were archived.
    continuousAnalysis string
    Whether the resource is continuously analyzed.
    cpe string
    The CPE of the resource being scanned.
    lastScanTime string
    The last time this resource was scanned.
    sbomStatus SBOMStatusResponse
    The status of an SBOM generation.
    analysis_completed AnalysisCompletedResponse
    analysis_error Sequence[StatusResponse]
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysis_status str
    The status of discovery for the resource.
    analysis_status_error StatusResponse
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    archive_time str
    The time occurrences related to this discovery occurrence were archived.
    continuous_analysis str
    Whether the resource is continuously analyzed.
    cpe str
    The CPE of the resource being scanned.
    last_scan_time str
    The last time this resource was scanned.
    sbom_status SBOMStatusResponse
    The status of an SBOM generation.
    analysisCompleted Property Map
    analysisError List<Property Map>
    Indicates any errors encountered during analysis of a resource. There could be 0 or more of these errors.
    analysisStatus String
    The status of discovery for the resource.
    analysisStatusError Property Map
    When an error is encountered this will contain a LocalizedMessage under details to show to the user. The LocalizedMessage is output only and populated by the API.
    archiveTime String
    The time occurrences related to this discovery occurrence were archived.
    continuousAnalysis String
    Whether the resource is continuously analyzed.
    cpe String
    The CPE of the resource being scanned.
    lastScanTime String
    The last time this resource was scanned.
    sbomStatus Property Map
    The status of an SBOM generation.

    Envelope, EnvelopeArgs

    EnvelopeResponse, EnvelopeResponseArgs

    EnvelopeSignature, EnvelopeSignatureArgs

    Keyid string
    Sig string
    Keyid string
    Sig string
    keyid String
    sig String
    keyid string
    sig string
    keyid str
    sig str
    keyid String
    sig String

    EnvelopeSignatureResponse, EnvelopeSignatureResponseArgs

    Keyid string
    Sig string
    Keyid string
    Sig string
    keyid String
    sig String
    keyid string
    sig string
    keyid str
    sig str
    keyid String
    sig String

    Fingerprint, FingerprintArgs

    V1Name string
    The layer ID of the final layer in the Docker image's v1 representation.
    V2Blob List<string>
    The ordered list of v2 blobs that represent a given image.
    V1Name string
    The layer ID of the final layer in the Docker image's v1 representation.
    V2Blob []string
    The ordered list of v2 blobs that represent a given image.
    v1Name String
    The layer ID of the final layer in the Docker image's v1 representation.
    v2Blob List<String>
    The ordered list of v2 blobs that represent a given image.
    v1Name string
    The layer ID of the final layer in the Docker image's v1 representation.
    v2Blob string[]
    The ordered list of v2 blobs that represent a given image.
    v1_name str
    The layer ID of the final layer in the Docker image's v1 representation.
    v2_blob Sequence[str]
    The ordered list of v2 blobs that represent a given image.
    v1Name String
    The layer ID of the final layer in the Docker image's v1 representation.
    v2Blob List<String>
    The ordered list of v2 blobs that represent a given image.

    FingerprintResponse, FingerprintResponseArgs

    V1Name string
    The layer ID of the final layer in the Docker image's v1 representation.
    V2Blob List<string>
    The ordered list of v2 blobs that represent a given image.
    V2Name string
    The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.
    V1Name string
    The layer ID of the final layer in the Docker image's v1 representation.
    V2Blob []string
    The ordered list of v2 blobs that represent a given image.
    V2Name string
    The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.
    v1Name String
    The layer ID of the final layer in the Docker image's v1 representation.
    v2Blob List<String>
    The ordered list of v2 blobs that represent a given image.
    v2Name String
    The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.
    v1Name string
    The layer ID of the final layer in the Docker image's v1 representation.
    v2Blob string[]
    The ordered list of v2 blobs that represent a given image.
    v2Name string
    The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.
    v1_name str
    The layer ID of the final layer in the Docker image's v1 representation.
    v2_blob Sequence[str]
    The ordered list of v2 blobs that represent a given image.
    v2_name str
    The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.
    v1Name String
    The layer ID of the final layer in the Docker image's v1 representation.
    v2Blob List<String>
    The ordered list of v2 blobs that represent a given image.
    v2Name String
    The name of the image's v2 blobs computed via: [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1]) Only the name of the final blob is kept.

    GerritSourceContext, GerritSourceContextArgs

    AliasContext Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.AliasContext
    An alias, which may be a branch or tag.
    GerritProject string
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    HostUri string
    The URI of a running Gerrit instance.
    RevisionId string
    A revision (commit) ID.
    AliasContext AliasContext
    An alias, which may be a branch or tag.
    GerritProject string
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    HostUri string
    The URI of a running Gerrit instance.
    RevisionId string
    A revision (commit) ID.
    aliasContext AliasContext
    An alias, which may be a branch or tag.
    gerritProject String
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    hostUri String
    The URI of a running Gerrit instance.
    revisionId String
    A revision (commit) ID.
    aliasContext AliasContext
    An alias, which may be a branch or tag.
    gerritProject string
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    hostUri string
    The URI of a running Gerrit instance.
    revisionId string
    A revision (commit) ID.
    alias_context AliasContext
    An alias, which may be a branch or tag.
    gerrit_project str
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    host_uri str
    The URI of a running Gerrit instance.
    revision_id str
    A revision (commit) ID.
    aliasContext Property Map
    An alias, which may be a branch or tag.
    gerritProject String
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    hostUri String
    The URI of a running Gerrit instance.
    revisionId String
    A revision (commit) ID.

    GerritSourceContextResponse, GerritSourceContextResponseArgs

    AliasContext Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.AliasContextResponse
    An alias, which may be a branch or tag.
    GerritProject string
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    HostUri string
    The URI of a running Gerrit instance.
    RevisionId string
    A revision (commit) ID.
    AliasContext AliasContextResponse
    An alias, which may be a branch or tag.
    GerritProject string
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    HostUri string
    The URI of a running Gerrit instance.
    RevisionId string
    A revision (commit) ID.
    aliasContext AliasContextResponse
    An alias, which may be a branch or tag.
    gerritProject String
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    hostUri String
    The URI of a running Gerrit instance.
    revisionId String
    A revision (commit) ID.
    aliasContext AliasContextResponse
    An alias, which may be a branch or tag.
    gerritProject string
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    hostUri string
    The URI of a running Gerrit instance.
    revisionId string
    A revision (commit) ID.
    alias_context AliasContextResponse
    An alias, which may be a branch or tag.
    gerrit_project str
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    host_uri str
    The URI of a running Gerrit instance.
    revision_id str
    A revision (commit) ID.
    aliasContext Property Map
    An alias, which may be a branch or tag.
    gerritProject String
    The full project name within the host. Projects may be nested, so "project/subproject" is a valid project name. The "repo name" is the hostURI/project.
    hostUri String
    The URI of a running Gerrit instance.
    revisionId String
    A revision (commit) ID.

    GitSourceContext, GitSourceContextArgs

    RevisionId string
    Git commit hash.
    Url string
    Git repository URL.
    RevisionId string
    Git commit hash.
    Url string
    Git repository URL.
    revisionId String
    Git commit hash.
    url String
    Git repository URL.
    revisionId string
    Git commit hash.
    url string
    Git repository URL.
    revision_id str
    Git commit hash.
    url str
    Git repository URL.
    revisionId String
    Git commit hash.
    url String
    Git repository URL.

    GitSourceContextResponse, GitSourceContextResponseArgs

    RevisionId string
    Git commit hash.
    Url string
    Git repository URL.
    RevisionId string
    Git commit hash.
    Url string
    Git repository URL.
    revisionId String
    Git commit hash.
    url String
    Git repository URL.
    revisionId string
    Git commit hash.
    url string
    Git repository URL.
    revision_id str
    Git commit hash.
    url str
    Git repository URL.
    revisionId String
    Git commit hash.
    url String
    Git repository URL.

    GrafeasV1FileLocation, GrafeasV1FileLocationArgs

    FilePath string
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    FilePath string
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    filePath String
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    filePath string
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    file_path str
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    filePath String
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.

    GrafeasV1FileLocationResponse, GrafeasV1FileLocationResponseArgs

    FilePath string
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    FilePath string
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    filePath String
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    filePath string
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    file_path str
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.
    filePath String
    For jars that are contained inside .war files, this filepath can indicate the path to war file combined with the path to jar file.

    GrafeasV1SlsaProvenanceZeroTwoSlsaBuilder, GrafeasV1SlsaProvenanceZeroTwoSlsaBuilderArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    GrafeasV1SlsaProvenanceZeroTwoSlsaCompleteness, GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessArgs

    environment Boolean
    materials Boolean
    parameters Boolean
    environment boolean
    materials boolean
    parameters boolean
    environment Boolean
    materials Boolean
    parameters Boolean

    GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessResponse, GrafeasV1SlsaProvenanceZeroTwoSlsaCompletenessResponseArgs

    environment Boolean
    materials Boolean
    parameters Boolean
    environment boolean
    materials boolean
    parameters boolean
    environment Boolean
    materials Boolean
    parameters Boolean

    GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSource, GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceArgs

    Digest Dictionary<string, string>
    EntryPoint string
    Uri string
    Digest map[string]string
    EntryPoint string
    Uri string
    digest Map<String,String>
    entryPoint String
    uri String
    digest {[key: string]: string}
    entryPoint string
    uri string
    digest Mapping[str, str]
    entry_point str
    uri str
    digest Map<String>
    entryPoint String
    uri String

    GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceResponse, GrafeasV1SlsaProvenanceZeroTwoSlsaConfigSourceResponseArgs

    Digest Dictionary<string, string>
    EntryPoint string
    Uri string
    Digest map[string]string
    EntryPoint string
    Uri string
    digest Map<String,String>
    entryPoint String
    uri String
    digest {[key: string]: string}
    entryPoint string
    uri string
    digest Mapping[str, str]
    entry_point str
    uri str
    digest Map<String>
    entryPoint String
    uri String

    GrafeasV1SlsaProvenanceZeroTwoSlsaInvocation, GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationArgs

    GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationResponse, GrafeasV1SlsaProvenanceZeroTwoSlsaInvocationResponseArgs

    GrafeasV1SlsaProvenanceZeroTwoSlsaMaterial, GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialArgs

    Digest Dictionary<string, string>
    Uri string
    Digest map[string]string
    Uri string
    digest Map<String,String>
    uri String
    digest {[key: string]: string}
    uri string
    digest Mapping[str, str]
    uri str
    digest Map<String>
    uri String

    GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialResponse, GrafeasV1SlsaProvenanceZeroTwoSlsaMaterialResponseArgs

    Digest Dictionary<string, string>
    Uri string
    Digest map[string]string
    Uri string
    digest Map<String,String>
    uri String
    digest {[key: string]: string}
    uri string
    digest Mapping[str, str]
    uri str
    digest Map<String>
    uri String

    GrafeasV1SlsaProvenanceZeroTwoSlsaMetadata, GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataArgs

    GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataResponse, GrafeasV1SlsaProvenanceZeroTwoSlsaMetadataResponseArgs

    Identity, IdentityArgs

    Revision int
    The revision number of the update.
    UpdateId string
    The revision independent identifier of the update.
    Revision int
    The revision number of the update.
    UpdateId string
    The revision independent identifier of the update.
    revision Integer
    The revision number of the update.
    updateId String
    The revision independent identifier of the update.
    revision number
    The revision number of the update.
    updateId string
    The revision independent identifier of the update.
    revision int
    The revision number of the update.
    update_id str
    The revision independent identifier of the update.
    revision Number
    The revision number of the update.
    updateId String
    The revision independent identifier of the update.

    IdentityResponse, IdentityResponseArgs

    Revision int
    The revision number of the update.
    UpdateId string
    The revision independent identifier of the update.
    Revision int
    The revision number of the update.
    UpdateId string
    The revision independent identifier of the update.
    revision Integer
    The revision number of the update.
    updateId String
    The revision independent identifier of the update.
    revision number
    The revision number of the update.
    updateId string
    The revision independent identifier of the update.
    revision int
    The revision number of the update.
    update_id str
    The revision independent identifier of the update.
    revision Number
    The revision number of the update.
    updateId String
    The revision independent identifier of the update.

    ImageOccurrence, ImageOccurrenceArgs

    Fingerprint Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Fingerprint
    The fingerprint of the derived image.
    LayerInfo List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Layer>
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    Fingerprint Fingerprint
    The fingerprint of the derived image.
    LayerInfo []Layer
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    fingerprint Fingerprint
    The fingerprint of the derived image.
    layerInfo List<Layer>
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    fingerprint Fingerprint
    The fingerprint of the derived image.
    layerInfo Layer[]
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    fingerprint Fingerprint
    The fingerprint of the derived image.
    layer_info Sequence[Layer]
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    fingerprint Property Map
    The fingerprint of the derived image.
    layerInfo List<Property Map>
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

    ImageOccurrenceResponse, ImageOccurrenceResponseArgs

    BaseResourceUrl string
    This contains the base image URL for the derived image occurrence.
    Distance int
    The number of layers by which this image differs from the associated image basis.
    Fingerprint Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.FingerprintResponse
    The fingerprint of the derived image.
    LayerInfo List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.LayerResponse>
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    BaseResourceUrl string
    This contains the base image URL for the derived image occurrence.
    Distance int
    The number of layers by which this image differs from the associated image basis.
    Fingerprint FingerprintResponse
    The fingerprint of the derived image.
    LayerInfo []LayerResponse
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    baseResourceUrl String
    This contains the base image URL for the derived image occurrence.
    distance Integer
    The number of layers by which this image differs from the associated image basis.
    fingerprint FingerprintResponse
    The fingerprint of the derived image.
    layerInfo List<LayerResponse>
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    baseResourceUrl string
    This contains the base image URL for the derived image occurrence.
    distance number
    The number of layers by which this image differs from the associated image basis.
    fingerprint FingerprintResponse
    The fingerprint of the derived image.
    layerInfo LayerResponse[]
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    base_resource_url str
    This contains the base image URL for the derived image occurrence.
    distance int
    The number of layers by which this image differs from the associated image basis.
    fingerprint FingerprintResponse
    The fingerprint of the derived image.
    layer_info Sequence[LayerResponse]
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.
    baseResourceUrl String
    This contains the base image URL for the derived image occurrence.
    distance Number
    The number of layers by which this image differs from the associated image basis.
    fingerprint Property Map
    The fingerprint of the derived image.
    layerInfo List<Property Map>
    This contains layer-specific metadata, if populated it has length "distance" and is ordered with [distance] being the layer immediately following the base image and [1] being the final layer.

    InTotoProvenance, InTotoProvenanceArgs

    BuilderConfig Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.BuilderConfig
    required
    Materials List<string>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Metadata
    Recipe Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Recipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    BuilderConfig BuilderConfig
    required
    Materials []string
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata Metadata
    Recipe Recipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builderConfig BuilderConfig
    required
    materials List<String>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Metadata
    recipe Recipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builderConfig BuilderConfig
    required
    materials string[]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Metadata
    recipe Recipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder_config BuilderConfig
    required
    materials Sequence[str]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Metadata
    recipe Recipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builderConfig Property Map
    required
    materials List<String>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Property Map
    recipe Property Map
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required

    InTotoProvenanceResponse, InTotoProvenanceResponseArgs

    BuilderConfig Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.BuilderConfigResponse
    required
    Materials List<string>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.MetadataResponse
    Recipe Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    BuilderConfig BuilderConfigResponse
    required
    Materials []string
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata MetadataResponse
    Recipe RecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builderConfig BuilderConfigResponse
    required
    materials List<String>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata MetadataResponse
    recipe RecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builderConfig BuilderConfigResponse
    required
    materials string[]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata MetadataResponse
    recipe RecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder_config BuilderConfigResponse
    required
    materials Sequence[str]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata MetadataResponse
    recipe RecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builderConfig Property Map
    required
    materials List<String>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Property Map
    recipe Property Map
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required

    InTotoSlsaProvenanceV1, InTotoSlsaProvenanceV1Args

    Predicate SlsaProvenanceV1
    PredicateType string
    Subject []Subject
    Type string
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate SlsaProvenanceV1
    predicateType String
    subject List<Subject>
    type String
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate SlsaProvenanceV1
    predicateType string
    subject Subject[]
    type string
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate SlsaProvenanceV1
    predicate_type str
    subject Sequence[Subject]
    type str
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate Property Map
    predicateType String
    subject List<Property Map>
    type String
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

    InTotoSlsaProvenanceV1Response, InTotoSlsaProvenanceV1ResponseArgs

    Predicate SlsaProvenanceV1Response
    PredicateType string
    Subject []SubjectResponse
    Type string
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate SlsaProvenanceV1Response
    predicateType String
    subject List<SubjectResponse>
    type String
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate SlsaProvenanceV1Response
    predicateType string
    subject SubjectResponse[]
    type string
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate SlsaProvenanceV1Response
    predicate_type str
    subject Sequence[SubjectResponse]
    type str
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement
    predicate Property Map
    predicateType String
    subject List<Property Map>
    type String
    InToto spec defined at https://github.com/in-toto/attestation/tree/main/spec#statement

    InTotoStatement, InTotoStatementArgs

    PredicateType string
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    Provenance InTotoProvenance
    SlsaProvenance SlsaProvenance
    SlsaProvenanceZeroTwo SlsaProvenanceZeroTwo
    Subject []Subject
    Type string
    Always https://in-toto.io/Statement/v0.1.
    predicateType String
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance InTotoProvenance
    slsaProvenance SlsaProvenance
    slsaProvenanceZeroTwo SlsaProvenanceZeroTwo
    subject List<Subject>
    type String
    Always https://in-toto.io/Statement/v0.1.
    predicateType string
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance InTotoProvenance
    slsaProvenance SlsaProvenance
    slsaProvenanceZeroTwo SlsaProvenanceZeroTwo
    subject Subject[]
    type string
    Always https://in-toto.io/Statement/v0.1.
    predicate_type str
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance InTotoProvenance
    slsa_provenance SlsaProvenance
    slsa_provenance_zero_two SlsaProvenanceZeroTwo
    subject Sequence[Subject]
    type str
    Always https://in-toto.io/Statement/v0.1.
    predicateType String
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance Property Map
    slsaProvenance Property Map
    slsaProvenanceZeroTwo Property Map
    subject List<Property Map>
    type String
    Always https://in-toto.io/Statement/v0.1.

    InTotoStatementResponse, InTotoStatementResponseArgs

    PredicateType string
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    Provenance InTotoProvenanceResponse
    SlsaProvenance SlsaProvenanceResponse
    SlsaProvenanceZeroTwo SlsaProvenanceZeroTwoResponse
    Subject []SubjectResponse
    Type string
    Always https://in-toto.io/Statement/v0.1.
    predicateType String
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance InTotoProvenanceResponse
    slsaProvenance SlsaProvenanceResponse
    slsaProvenanceZeroTwo SlsaProvenanceZeroTwoResponse
    subject List<SubjectResponse>
    type String
    Always https://in-toto.io/Statement/v0.1.
    predicateType string
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance InTotoProvenanceResponse
    slsaProvenance SlsaProvenanceResponse
    slsaProvenanceZeroTwo SlsaProvenanceZeroTwoResponse
    subject SubjectResponse[]
    type string
    Always https://in-toto.io/Statement/v0.1.
    predicateType String
    https://slsa.dev/provenance/v0.1 for SlsaProvenance.
    provenance Property Map
    slsaProvenance Property Map
    slsaProvenanceZeroTwo Property Map
    subject List<Property Map>
    type String
    Always https://in-toto.io/Statement/v0.1.

    Justification, JustificationArgs

    Details string
    Additional details on why this justification was chosen.
    JustificationType Pulumi.GoogleNative.ContainerAnalysis.V1.JustificationJustificationType
    The justification type for this vulnerability.
    Details string
    Additional details on why this justification was chosen.
    JustificationType JustificationJustificationType
    The justification type for this vulnerability.
    details String
    Additional details on why this justification was chosen.
    justificationType JustificationJustificationType
    The justification type for this vulnerability.
    details string
    Additional details on why this justification was chosen.
    justificationType JustificationJustificationType
    The justification type for this vulnerability.
    details str
    Additional details on why this justification was chosen.
    justification_type JustificationJustificationType
    The justification type for this vulnerability.

    JustificationJustificationType, JustificationJustificationTypeArgs

    JustificationTypeUnspecified
    JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
    ComponentNotPresent
    COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
    VulnerableCodeNotPresent
    VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
    VulnerableCodeNotInExecutePath
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
    VulnerableCodeCannotBeControlledByAdversary
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
    InlineMitigationsAlreadyExist
    INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
    JustificationJustificationTypeJustificationTypeUnspecified
    JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
    JustificationJustificationTypeComponentNotPresent
    COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
    JustificationJustificationTypeVulnerableCodeNotPresent
    VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
    JustificationJustificationTypeVulnerableCodeNotInExecutePath
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
    JustificationJustificationTypeVulnerableCodeCannotBeControlledByAdversary
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
    JustificationJustificationTypeInlineMitigationsAlreadyExist
    INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
    JustificationTypeUnspecified
    JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
    ComponentNotPresent
    COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
    VulnerableCodeNotPresent
    VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
    VulnerableCodeNotInExecutePath
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
    VulnerableCodeCannotBeControlledByAdversary
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
    InlineMitigationsAlreadyExist
    INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
    JustificationTypeUnspecified
    JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
    ComponentNotPresent
    COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
    VulnerableCodeNotPresent
    VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
    VulnerableCodeNotInExecutePath
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
    VulnerableCodeCannotBeControlledByAdversary
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
    InlineMitigationsAlreadyExist
    INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
    JUSTIFICATION_TYPE_UNSPECIFIED
    JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
    COMPONENT_NOT_PRESENT
    COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
    VULNERABLE_CODE_NOT_PRESENT
    VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATH
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
    INLINE_MITIGATIONS_ALREADY_EXIST
    INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
    "JUSTIFICATION_TYPE_UNSPECIFIED"
    JUSTIFICATION_TYPE_UNSPECIFIEDJUSTIFICATION_TYPE_UNSPECIFIED.
    "COMPONENT_NOT_PRESENT"
    COMPONENT_NOT_PRESENTThe vulnerable component is not present in the product.
    "VULNERABLE_CODE_NOT_PRESENT"
    VULNERABLE_CODE_NOT_PRESENTThe vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
    "VULNERABLE_CODE_NOT_IN_EXECUTE_PATH"
    VULNERABLE_CODE_NOT_IN_EXECUTE_PATHThe vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
    "VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY"
    VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARYThe vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
    "INLINE_MITIGATIONS_ALREADY_EXIST"
    INLINE_MITIGATIONS_ALREADY_EXISTThe product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.

    JustificationResponse, JustificationResponseArgs

    Details string
    Additional details on why this justification was chosen.
    JustificationType string
    The justification type for this vulnerability.
    Details string
    Additional details on why this justification was chosen.
    JustificationType string
    The justification type for this vulnerability.
    details String
    Additional details on why this justification was chosen.
    justificationType String
    The justification type for this vulnerability.
    details string
    Additional details on why this justification was chosen.
    justificationType string
    The justification type for this vulnerability.
    details str
    Additional details on why this justification was chosen.
    justification_type str
    The justification type for this vulnerability.
    details String
    Additional details on why this justification was chosen.
    justificationType String
    The justification type for this vulnerability.

    Jwt, JwtArgs

    CompactJwt string
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    CompactJwt string
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compactJwt String
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compactJwt string
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compact_jwt str
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compactJwt String
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1

    JwtResponse, JwtResponseArgs

    CompactJwt string
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    CompactJwt string
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compactJwt String
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compactJwt string
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compact_jwt str
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1
    compactJwt String
    The compact encoding of a JWS, which is always three base64 encoded strings joined by periods. For details, see: https://tools.ietf.org/html/rfc7515.html#section-3.1

    Layer, LayerArgs

    Directive string
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    Arguments string
    The recovered arguments to the Dockerfile directive.
    Directive string
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    Arguments string
    The recovered arguments to the Dockerfile directive.
    directive String
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments String
    The recovered arguments to the Dockerfile directive.
    directive string
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments string
    The recovered arguments to the Dockerfile directive.
    directive str
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments str
    The recovered arguments to the Dockerfile directive.
    directive String
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments String
    The recovered arguments to the Dockerfile directive.

    LayerResponse, LayerResponseArgs

    Arguments string
    The recovered arguments to the Dockerfile directive.
    Directive string
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    Arguments string
    The recovered arguments to the Dockerfile directive.
    Directive string
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments String
    The recovered arguments to the Dockerfile directive.
    directive String
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments string
    The recovered arguments to the Dockerfile directive.
    directive string
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments str
    The recovered arguments to the Dockerfile directive.
    directive str
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.
    arguments String
    The recovered arguments to the Dockerfile directive.
    directive String
    The recovered Dockerfile directive used to construct this layer. See https://docs.docker.com/engine/reference/builder/ for more information.

    License, LicenseArgs

    Comments string
    Comments
    Expression string
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    Comments string
    Comments
    Expression string
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments String
    Comments
    expression String
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments string
    Comments
    expression string
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments str
    Comments
    expression str
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments String
    Comments
    expression String
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

    LicenseResponse, LicenseResponseArgs

    Comments string
    Comments
    Expression string
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    Comments string
    Comments
    Expression string
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments String
    Comments
    expression String
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments string
    Comments
    expression string
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments str
    Comments
    expression str
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".
    comments String
    Comments
    expression String
    Often a single license can be used to represent the licensing terms. Sometimes it is necessary to include a choice of one or more licenses or some combination of license identifiers. Examples: "LGPL-2.1-only OR MIT", "LGPL-2.1-only AND MIT", "GPL-2.0-or-later WITH Bison-exception-2.2".

    Location, LocationArgs

    CpeUri string
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    Path string
    The path from which we gathered that this package/version is installed.
    Version Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Version
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    CpeUri string
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    Path string
    The path from which we gathered that this package/version is installed.
    Version Version
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpeUri String
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path String
    The path from which we gathered that this package/version is installed.
    version Version
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpeUri string
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path string
    The path from which we gathered that this package/version is installed.
    version Version
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpe_uri str
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path str
    The path from which we gathered that this package/version is installed.
    version Version
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpeUri String
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path String
    The path from which we gathered that this package/version is installed.
    version Property Map
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    LocationResponse, LocationResponseArgs

    CpeUri string
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    Path string
    The path from which we gathered that this package/version is installed.
    Version Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VersionResponse
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    CpeUri string
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    Path string
    The path from which we gathered that this package/version is installed.
    Version VersionResponse
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpeUri String
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path String
    The path from which we gathered that this package/version is installed.
    version VersionResponse
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpeUri string
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path string
    The path from which we gathered that this package/version is installed.
    version VersionResponse
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpe_uri str
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path str
    The path from which we gathered that this package/version is installed.
    version VersionResponse
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    cpeUri String
    Deprecated. The CPE URI in CPE format

    Deprecated: Deprecated. The CPE URI in CPE format

    path String
    The path from which we gathered that this package/version is installed.
    version Property Map
    Deprecated. The version installed at this location.

    Deprecated: Deprecated. The version installed at this location.

    Material, MaterialArgs

    Digest Dictionary<string, string>
    Uri string
    Digest map[string]string
    Uri string
    digest Map<String,String>
    uri String
    digest {[key: string]: string}
    uri string
    digest Mapping[str, str]
    uri str
    digest Map<String>
    uri String

    MaterialResponse, MaterialResponseArgs

    Digest Dictionary<string, string>
    Uri string
    Digest map[string]string
    Uri string
    digest Map<String,String>
    uri String
    digest {[key: string]: string}
    uri string
    digest Mapping[str, str]
    uri str
    digest Map<String>
    uri String

    Metadata, MetadataArgs

    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Completeness
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness Completeness
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness Completeness
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn string
    The timestamp of when the build completed.
    buildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn string
    The timestamp of when the build started.
    completeness Completeness
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    build_finished_on str
    The timestamp of when the build completed.
    build_invocation_id str
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    build_started_on str
    The timestamp of when the build started.
    completeness Completeness
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness Property Map
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.

    MetadataResponse, MetadataResponseArgs

    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness CompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness CompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn string
    The timestamp of when the build completed.
    buildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn string
    The timestamp of when the build started.
    completeness CompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    build_finished_on str
    The timestamp of when the build completed.
    build_invocation_id str
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    build_started_on str
    The timestamp of when the build started.
    completeness CompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness Property Map
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.

    NonCompliantFile, NonCompliantFileArgs

    DisplayCommand string
    Command to display the non-compliant files.
    Path string
    Empty if display_command is set.
    Reason string
    Explains why a file is non compliant for a CIS check.
    DisplayCommand string
    Command to display the non-compliant files.
    Path string
    Empty if display_command is set.
    Reason string
    Explains why a file is non compliant for a CIS check.
    displayCommand String
    Command to display the non-compliant files.
    path String
    Empty if display_command is set.
    reason String
    Explains why a file is non compliant for a CIS check.
    displayCommand string
    Command to display the non-compliant files.
    path string
    Empty if display_command is set.
    reason string
    Explains why a file is non compliant for a CIS check.
    display_command str
    Command to display the non-compliant files.
    path str
    Empty if display_command is set.
    reason str
    Explains why a file is non compliant for a CIS check.
    displayCommand String
    Command to display the non-compliant files.
    path String
    Empty if display_command is set.
    reason String
    Explains why a file is non compliant for a CIS check.

    NonCompliantFileResponse, NonCompliantFileResponseArgs

    DisplayCommand string
    Command to display the non-compliant files.
    Path string
    Empty if display_command is set.
    Reason string
    Explains why a file is non compliant for a CIS check.
    DisplayCommand string
    Command to display the non-compliant files.
    Path string
    Empty if display_command is set.
    Reason string
    Explains why a file is non compliant for a CIS check.
    displayCommand String
    Command to display the non-compliant files.
    path String
    Empty if display_command is set.
    reason String
    Explains why a file is non compliant for a CIS check.
    displayCommand string
    Command to display the non-compliant files.
    path string
    Empty if display_command is set.
    reason string
    Explains why a file is non compliant for a CIS check.
    display_command str
    Command to display the non-compliant files.
    path str
    Empty if display_command is set.
    reason str
    Explains why a file is non compliant for a CIS check.
    displayCommand String
    Command to display the non-compliant files.
    path String
    Empty if display_command is set.
    reason String
    Explains why a file is non compliant for a CIS check.

    PackageIssue, PackageIssueArgs

    AffectedCpeUri string
    The CPE URI this vulnerability was found in.
    AffectedPackage string
    The package this vulnerability was found in.
    AffectedVersion Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Version
    The version of the package that is installed on the resource affected by this vulnerability.
    FixedVersion Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Version
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    FileLocation List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1FileLocation>
    The location at which this package was found.
    FixedCpeUri string
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    FixedPackage string
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    PackageType string
    The type of package (e.g. OS, MAVEN, GO).
    AffectedCpeUri string
    The CPE URI this vulnerability was found in.
    AffectedPackage string
    The package this vulnerability was found in.
    AffectedVersion Version
    The version of the package that is installed on the resource affected by this vulnerability.
    FixedVersion Version
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    FileLocation []GrafeasV1FileLocation
    The location at which this package was found.
    FixedCpeUri string
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    FixedPackage string
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    PackageType string
    The type of package (e.g. OS, MAVEN, GO).
    affectedCpeUri String
    The CPE URI this vulnerability was found in.
    affectedPackage String
    The package this vulnerability was found in.
    affectedVersion Version
    The version of the package that is installed on the resource affected by this vulnerability.
    fixedVersion Version
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    fileLocation List<GrafeasV1FileLocation>
    The location at which this package was found.
    fixedCpeUri String
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixedPackage String
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    packageType String
    The type of package (e.g. OS, MAVEN, GO).
    affectedCpeUri string
    The CPE URI this vulnerability was found in.
    affectedPackage string
    The package this vulnerability was found in.
    affectedVersion Version
    The version of the package that is installed on the resource affected by this vulnerability.
    fixedVersion Version
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    fileLocation GrafeasV1FileLocation[]
    The location at which this package was found.
    fixedCpeUri string
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixedPackage string
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    packageType string
    The type of package (e.g. OS, MAVEN, GO).
    affected_cpe_uri str
    The CPE URI this vulnerability was found in.
    affected_package str
    The package this vulnerability was found in.
    affected_version Version
    The version of the package that is installed on the resource affected by this vulnerability.
    fixed_version Version
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    file_location Sequence[GrafeasV1FileLocation]
    The location at which this package was found.
    fixed_cpe_uri str
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixed_package str
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    package_type str
    The type of package (e.g. OS, MAVEN, GO).
    affectedCpeUri String
    The CPE URI this vulnerability was found in.
    affectedPackage String
    The package this vulnerability was found in.
    affectedVersion Property Map
    The version of the package that is installed on the resource affected by this vulnerability.
    fixedVersion Property Map
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    fileLocation List<Property Map>
    The location at which this package was found.
    fixedCpeUri String
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixedPackage String
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    packageType String
    The type of package (e.g. OS, MAVEN, GO).

    PackageIssueResponse, PackageIssueResponseArgs

    AffectedCpeUri string
    The CPE URI this vulnerability was found in.
    AffectedPackage string
    The package this vulnerability was found in.
    AffectedVersion Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VersionResponse
    The version of the package that is installed on the resource affected by this vulnerability.
    EffectiveSeverity string
    The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
    FileLocation List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.GrafeasV1FileLocationResponse>
    The location at which this package was found.
    FixAvailable bool
    Whether a fix is available for this package.
    FixedCpeUri string
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    FixedPackage string
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    FixedVersion Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VersionResponse
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    PackageType string
    The type of package (e.g. OS, MAVEN, GO).
    AffectedCpeUri string
    The CPE URI this vulnerability was found in.
    AffectedPackage string
    The package this vulnerability was found in.
    AffectedVersion VersionResponse
    The version of the package that is installed on the resource affected by this vulnerability.
    EffectiveSeverity string
    The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
    FileLocation []GrafeasV1FileLocationResponse
    The location at which this package was found.
    FixAvailable bool
    Whether a fix is available for this package.
    FixedCpeUri string
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    FixedPackage string
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    FixedVersion VersionResponse
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    PackageType string
    The type of package (e.g. OS, MAVEN, GO).
    affectedCpeUri String
    The CPE URI this vulnerability was found in.
    affectedPackage String
    The package this vulnerability was found in.
    affectedVersion VersionResponse
    The version of the package that is installed on the resource affected by this vulnerability.
    effectiveSeverity String
    The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
    fileLocation List<GrafeasV1FileLocationResponse>
    The location at which this package was found.
    fixAvailable Boolean
    Whether a fix is available for this package.
    fixedCpeUri String
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixedPackage String
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    fixedVersion VersionResponse
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    packageType String
    The type of package (e.g. OS, MAVEN, GO).
    affectedCpeUri string
    The CPE URI this vulnerability was found in.
    affectedPackage string
    The package this vulnerability was found in.
    affectedVersion VersionResponse
    The version of the package that is installed on the resource affected by this vulnerability.
    effectiveSeverity string
    The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
    fileLocation GrafeasV1FileLocationResponse[]
    The location at which this package was found.
    fixAvailable boolean
    Whether a fix is available for this package.
    fixedCpeUri string
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixedPackage string
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    fixedVersion VersionResponse
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    packageType string
    The type of package (e.g. OS, MAVEN, GO).
    affected_cpe_uri str
    The CPE URI this vulnerability was found in.
    affected_package str
    The package this vulnerability was found in.
    affected_version VersionResponse
    The version of the package that is installed on the resource affected by this vulnerability.
    effective_severity str
    The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
    file_location Sequence[GrafeasV1FileLocationResponse]
    The location at which this package was found.
    fix_available bool
    Whether a fix is available for this package.
    fixed_cpe_uri str
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixed_package str
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    fixed_version VersionResponse
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    package_type str
    The type of package (e.g. OS, MAVEN, GO).
    affectedCpeUri String
    The CPE URI this vulnerability was found in.
    affectedPackage String
    The package this vulnerability was found in.
    affectedVersion Property Map
    The version of the package that is installed on the resource affected by this vulnerability.
    effectiveSeverity String
    The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.
    fileLocation List<Property Map>
    The location at which this package was found.
    fixAvailable Boolean
    Whether a fix is available for this package.
    fixedCpeUri String
    The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.
    fixedPackage String
    The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.
    fixedVersion Property Map
    The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.
    packageType String
    The type of package (e.g. OS, MAVEN, GO).

    PackageOccurrence, PackageOccurrenceArgs

    License Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.License
    Licenses that have been declared by the authors of the package.
    Location List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Location>
    All of the places within the filesystem versions of this package have been found.
    License License
    Licenses that have been declared by the authors of the package.
    Location []Location
    All of the places within the filesystem versions of this package have been found.
    license License
    Licenses that have been declared by the authors of the package.
    location List<Location>
    All of the places within the filesystem versions of this package have been found.
    license License
    Licenses that have been declared by the authors of the package.
    location Location[]
    All of the places within the filesystem versions of this package have been found.
    license License
    Licenses that have been declared by the authors of the package.
    location Sequence[Location]
    All of the places within the filesystem versions of this package have been found.
    license Property Map
    Licenses that have been declared by the authors of the package.
    location List<Property Map>
    All of the places within the filesystem versions of this package have been found.

    PackageOccurrenceResponse, PackageOccurrenceResponseArgs

    Architecture string
    The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
    CpeUri string
    The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
    License Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.LicenseResponse
    Licenses that have been declared by the authors of the package.
    Location List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.LocationResponse>
    All of the places within the filesystem versions of this package have been found.
    Name string
    The name of the installed package.
    PackageType string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    Version Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VersionResponse
    The version of the package.
    Architecture string
    The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
    CpeUri string
    The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
    License LicenseResponse
    Licenses that have been declared by the authors of the package.
    Location []LocationResponse
    All of the places within the filesystem versions of this package have been found.
    Name string
    The name of the installed package.
    PackageType string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    Version VersionResponse
    The version of the package.
    architecture String
    The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
    cpeUri String
    The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
    license LicenseResponse
    Licenses that have been declared by the authors of the package.
    location List<LocationResponse>
    All of the places within the filesystem versions of this package have been found.
    name String
    The name of the installed package.
    packageType String
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    version VersionResponse
    The version of the package.
    architecture string
    The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
    cpeUri string
    The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
    license LicenseResponse
    Licenses that have been declared by the authors of the package.
    location LocationResponse[]
    All of the places within the filesystem versions of this package have been found.
    name string
    The name of the installed package.
    packageType string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    version VersionResponse
    The version of the package.
    architecture str
    The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
    cpe_uri str
    The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
    license LicenseResponse
    Licenses that have been declared by the authors of the package.
    location Sequence[LocationResponse]
    All of the places within the filesystem versions of this package have been found.
    name str
    The name of the installed package.
    package_type str
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    version VersionResponse
    The version of the package.
    architecture String
    The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages.
    cpeUri String
    The cpe_uri in CPE format denoting the package manager version distributing a package. The cpe_uri will be blank for language packages.
    license Property Map
    Licenses that have been declared by the authors of the package.
    location List<Property Map>
    All of the places within the filesystem versions of this package have been found.
    name String
    The name of the installed package.
    packageType String
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    version Property Map
    The version of the package.

    ProjectRepoId, ProjectRepoIdArgs

    Project string
    The ID of the project.
    RepoName string
    The name of the repo. Leave empty for the default repo.
    Project string
    The ID of the project.
    RepoName string
    The name of the repo. Leave empty for the default repo.
    project String
    The ID of the project.
    repoName String
    The name of the repo. Leave empty for the default repo.
    project string
    The ID of the project.
    repoName string
    The name of the repo. Leave empty for the default repo.
    project str
    The ID of the project.
    repo_name str
    The name of the repo. Leave empty for the default repo.
    project String
    The ID of the project.
    repoName String
    The name of the repo. Leave empty for the default repo.

    ProjectRepoIdResponse, ProjectRepoIdResponseArgs

    Project string
    The ID of the project.
    RepoName string
    The name of the repo. Leave empty for the default repo.
    Project string
    The ID of the project.
    RepoName string
    The name of the repo. Leave empty for the default repo.
    project String
    The ID of the project.
    repoName String
    The name of the repo. Leave empty for the default repo.
    project string
    The ID of the project.
    repoName string
    The name of the repo. Leave empty for the default repo.
    project str
    The ID of the project.
    repo_name str
    The name of the repo. Leave empty for the default repo.
    project String
    The ID of the project.
    repoName String
    The name of the repo. Leave empty for the default repo.

    ProvenanceBuilder, ProvenanceBuilderArgs

    builderDependencies ResourceDescriptor[]
    id string
    version {[key: string]: string}

    ProvenanceBuilderResponse, ProvenanceBuilderResponseArgs

    Recipe, RecipeArgs

    Arguments List<ImmutableDictionary<string, string>>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment List<ImmutableDictionary<string, string>>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    Arguments []map[string]string
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment []map[string]string
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments List<Map<String,String>>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment List<Map<String,String>>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments {[key: string]: string}[]
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    definedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment {[key: string]: string}[]
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Sequence[Mapping[str, str]]
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    defined_in_material str
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entry_point str
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Sequence[Mapping[str, str]]
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type str
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments List<Map<String>>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment List<Map<String>>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.

    RecipeResponse, RecipeResponseArgs

    Arguments List<ImmutableDictionary<string, string>>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment List<ImmutableDictionary<string, string>>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    Arguments []map[string]string
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment []map[string]string
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments List<Map<String,String>>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment List<Map<String,String>>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments {[key: string]: string}[]
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    definedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment {[key: string]: string}[]
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Sequence[Mapping[str, str]]
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    defined_in_material str
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entry_point str
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Sequence[Mapping[str, str]]
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type str
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments List<Map<String>>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Since the arguments field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment List<Map<String>>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Since the environment field can greatly vary in structure, depending on the builder and recipe type, this is of form "Any".
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.

    RelatedUrl, RelatedUrlArgs

    Label string
    Label to describe usage of the URL.
    Url string
    Specific URL associated with the resource.
    Label string
    Label to describe usage of the URL.
    Url string
    Specific URL associated with the resource.
    label String
    Label to describe usage of the URL.
    url String
    Specific URL associated with the resource.
    label string
    Label to describe usage of the URL.
    url string
    Specific URL associated with the resource.
    label str
    Label to describe usage of the URL.
    url str
    Specific URL associated with the resource.
    label String
    Label to describe usage of the URL.
    url String
    Specific URL associated with the resource.

    RelatedUrlResponse, RelatedUrlResponseArgs

    Label string
    Label to describe usage of the URL.
    Url string
    Specific URL associated with the resource.
    Label string
    Label to describe usage of the URL.
    Url string
    Specific URL associated with the resource.
    label String
    Label to describe usage of the URL.
    url String
    Specific URL associated with the resource.
    label string
    Label to describe usage of the URL.
    url string
    Specific URL associated with the resource.
    label str
    Label to describe usage of the URL.
    url str
    Specific URL associated with the resource.
    label String
    Label to describe usage of the URL.
    url String
    Specific URL associated with the resource.

    Remediation, RemediationArgs

    Details string
    Contains a comprehensive human-readable discussion of the remediation.
    RemediationType Pulumi.GoogleNative.ContainerAnalysis.V1.RemediationRemediationType
    The type of remediation that can be applied.
    RemediationUri Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrl
    Contains the URL where to obtain the remediation.
    Details string
    Contains a comprehensive human-readable discussion of the remediation.
    RemediationType RemediationRemediationType
    The type of remediation that can be applied.
    RemediationUri RelatedUrl
    Contains the URL where to obtain the remediation.
    details String
    Contains a comprehensive human-readable discussion of the remediation.
    remediationType RemediationRemediationType
    The type of remediation that can be applied.
    remediationUri RelatedUrl
    Contains the URL where to obtain the remediation.
    details string
    Contains a comprehensive human-readable discussion of the remediation.
    remediationType RemediationRemediationType
    The type of remediation that can be applied.
    remediationUri RelatedUrl
    Contains the URL where to obtain the remediation.
    details str
    Contains a comprehensive human-readable discussion of the remediation.
    remediation_type RemediationRemediationType
    The type of remediation that can be applied.
    remediation_uri RelatedUrl
    Contains the URL where to obtain the remediation.
    details String
    Contains a comprehensive human-readable discussion of the remediation.
    remediationType "REMEDIATION_TYPE_UNSPECIFIED" | "MITIGATION" | "NO_FIX_PLANNED" | "NONE_AVAILABLE" | "VENDOR_FIX" | "WORKAROUND"
    The type of remediation that can be applied.
    remediationUri Property Map
    Contains the URL where to obtain the remediation.

    RemediationRemediationType, RemediationRemediationTypeArgs

    RemediationTypeUnspecified
    REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
    Mitigation
    MITIGATIONA MITIGATION is available.
    NoFixPlanned
    NO_FIX_PLANNEDNo fix is planned.
    NoneAvailable
    NONE_AVAILABLENot available.
    VendorFix
    VENDOR_FIXA vendor fix is available.
    Workaround
    WORKAROUNDA workaround is available.
    RemediationRemediationTypeRemediationTypeUnspecified
    REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
    RemediationRemediationTypeMitigation
    MITIGATIONA MITIGATION is available.
    RemediationRemediationTypeNoFixPlanned
    NO_FIX_PLANNEDNo fix is planned.
    RemediationRemediationTypeNoneAvailable
    NONE_AVAILABLENot available.
    RemediationRemediationTypeVendorFix
    VENDOR_FIXA vendor fix is available.
    RemediationRemediationTypeWorkaround
    WORKAROUNDA workaround is available.
    RemediationTypeUnspecified
    REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
    Mitigation
    MITIGATIONA MITIGATION is available.
    NoFixPlanned
    NO_FIX_PLANNEDNo fix is planned.
    NoneAvailable
    NONE_AVAILABLENot available.
    VendorFix
    VENDOR_FIXA vendor fix is available.
    Workaround
    WORKAROUNDA workaround is available.
    RemediationTypeUnspecified
    REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
    Mitigation
    MITIGATIONA MITIGATION is available.
    NoFixPlanned
    NO_FIX_PLANNEDNo fix is planned.
    NoneAvailable
    NONE_AVAILABLENot available.
    VendorFix
    VENDOR_FIXA vendor fix is available.
    Workaround
    WORKAROUNDA workaround is available.
    REMEDIATION_TYPE_UNSPECIFIED
    REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
    MITIGATION
    MITIGATIONA MITIGATION is available.
    NO_FIX_PLANNED
    NO_FIX_PLANNEDNo fix is planned.
    NONE_AVAILABLE
    NONE_AVAILABLENot available.
    VENDOR_FIX
    VENDOR_FIXA vendor fix is available.
    WORKAROUND
    WORKAROUNDA workaround is available.
    "REMEDIATION_TYPE_UNSPECIFIED"
    REMEDIATION_TYPE_UNSPECIFIEDNo remediation type specified.
    "MITIGATION"
    MITIGATIONA MITIGATION is available.
    "NO_FIX_PLANNED"
    NO_FIX_PLANNEDNo fix is planned.
    "NONE_AVAILABLE"
    NONE_AVAILABLENot available.
    "VENDOR_FIX"
    VENDOR_FIXA vendor fix is available.
    "WORKAROUND"
    WORKAROUNDA workaround is available.

    RemediationResponse, RemediationResponseArgs

    Details string
    Contains a comprehensive human-readable discussion of the remediation.
    RemediationType string
    The type of remediation that can be applied.
    RemediationUri Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrlResponse
    Contains the URL where to obtain the remediation.
    Details string
    Contains a comprehensive human-readable discussion of the remediation.
    RemediationType string
    The type of remediation that can be applied.
    RemediationUri RelatedUrlResponse
    Contains the URL where to obtain the remediation.
    details String
    Contains a comprehensive human-readable discussion of the remediation.
    remediationType String
    The type of remediation that can be applied.
    remediationUri RelatedUrlResponse
    Contains the URL where to obtain the remediation.
    details string
    Contains a comprehensive human-readable discussion of the remediation.
    remediationType string
    The type of remediation that can be applied.
    remediationUri RelatedUrlResponse
    Contains the URL where to obtain the remediation.
    details str
    Contains a comprehensive human-readable discussion of the remediation.
    remediation_type str
    The type of remediation that can be applied.
    remediation_uri RelatedUrlResponse
    Contains the URL where to obtain the remediation.
    details String
    Contains a comprehensive human-readable discussion of the remediation.
    remediationType String
    The type of remediation that can be applied.
    remediationUri Property Map
    Contains the URL where to obtain the remediation.

    RepoId, RepoIdArgs

    ProjectRepoId Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.ProjectRepoId
    A combination of a project ID and a repo name.
    Uid string
    A server-assigned, globally unique identifier.
    ProjectRepoId ProjectRepoId
    A combination of a project ID and a repo name.
    Uid string
    A server-assigned, globally unique identifier.
    projectRepoId ProjectRepoId
    A combination of a project ID and a repo name.
    uid String
    A server-assigned, globally unique identifier.
    projectRepoId ProjectRepoId
    A combination of a project ID and a repo name.
    uid string
    A server-assigned, globally unique identifier.
    project_repo_id ProjectRepoId
    A combination of a project ID and a repo name.
    uid str
    A server-assigned, globally unique identifier.
    projectRepoId Property Map
    A combination of a project ID and a repo name.
    uid String
    A server-assigned, globally unique identifier.

    RepoIdResponse, RepoIdResponseArgs

    ProjectRepoId Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.ProjectRepoIdResponse
    A combination of a project ID and a repo name.
    Uid string
    A server-assigned, globally unique identifier.
    ProjectRepoId ProjectRepoIdResponse
    A combination of a project ID and a repo name.
    Uid string
    A server-assigned, globally unique identifier.
    projectRepoId ProjectRepoIdResponse
    A combination of a project ID and a repo name.
    uid String
    A server-assigned, globally unique identifier.
    projectRepoId ProjectRepoIdResponse
    A combination of a project ID and a repo name.
    uid string
    A server-assigned, globally unique identifier.
    project_repo_id ProjectRepoIdResponse
    A combination of a project ID and a repo name.
    uid str
    A server-assigned, globally unique identifier.
    projectRepoId Property Map
    A combination of a project ID and a repo name.
    uid String
    A server-assigned, globally unique identifier.

    ResourceDescriptor, ResourceDescriptorArgs

    Annotations Dictionary<string, string>
    Content string
    Digest Dictionary<string, string>
    DownloadLocation string
    MediaType string
    Name string
    Uri string
    Annotations map[string]string
    Content string
    Digest map[string]string
    DownloadLocation string
    MediaType string
    Name string
    Uri string
    annotations Map<String,String>
    content String
    digest Map<String,String>
    downloadLocation String
    mediaType String
    name String
    uri String
    annotations {[key: string]: string}
    content string
    digest {[key: string]: string}
    downloadLocation string
    mediaType string
    name string
    uri string
    annotations Mapping[str, str]
    content str
    digest Mapping[str, str]
    download_location str
    media_type str
    name str
    uri str
    annotations Map<String>
    content String
    digest Map<String>
    downloadLocation String
    mediaType String
    name String
    uri String

    ResourceDescriptorResponse, ResourceDescriptorResponseArgs

    Annotations Dictionary<string, string>
    Content string
    Digest Dictionary<string, string>
    DownloadLocation string
    MediaType string
    Name string
    Uri string
    Annotations map[string]string
    Content string
    Digest map[string]string
    DownloadLocation string
    MediaType string
    Name string
    Uri string
    annotations Map<String,String>
    content String
    digest Map<String,String>
    downloadLocation String
    mediaType String
    name String
    uri String
    annotations {[key: string]: string}
    content string
    digest {[key: string]: string}
    downloadLocation string
    mediaType string
    name string
    uri string
    annotations Mapping[str, str]
    content str
    digest Mapping[str, str]
    download_location str
    media_type str
    name str
    uri str
    annotations Map<String>
    content String
    digest Map<String>
    downloadLocation String
    mediaType String
    name String
    uri String

    RunDetails, RunDetailsArgs

    RunDetailsResponse, RunDetailsResponseArgs

    SBOMReferenceOccurrence, SBOMReferenceOccurrenceArgs

    Payload Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SbomReferenceIntotoPayload
    The actual payload that contains the SBOM reference data.
    PayloadType string
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeSignature>
    The signatures over the payload.
    Payload SbomReferenceIntotoPayload
    The actual payload that contains the SBOM reference data.
    PayloadType string
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    Signatures []EnvelopeSignature
    The signatures over the payload.
    payload SbomReferenceIntotoPayload
    The actual payload that contains the SBOM reference data.
    payloadType String
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures List<EnvelopeSignature>
    The signatures over the payload.
    payload SbomReferenceIntotoPayload
    The actual payload that contains the SBOM reference data.
    payloadType string
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures EnvelopeSignature[]
    The signatures over the payload.
    payload SbomReferenceIntotoPayload
    The actual payload that contains the SBOM reference data.
    payload_type str
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures Sequence[EnvelopeSignature]
    The signatures over the payload.
    payload Property Map
    The actual payload that contains the SBOM reference data.
    payloadType String
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures List<Property Map>
    The signatures over the payload.

    SBOMReferenceOccurrenceResponse, SBOMReferenceOccurrenceResponseArgs

    Payload Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SbomReferenceIntotoPayloadResponse
    The actual payload that contains the SBOM reference data.
    PayloadType string
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    Signatures List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.EnvelopeSignatureResponse>
    The signatures over the payload.
    Payload SbomReferenceIntotoPayloadResponse
    The actual payload that contains the SBOM reference data.
    PayloadType string
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    Signatures []EnvelopeSignatureResponse
    The signatures over the payload.
    payload SbomReferenceIntotoPayloadResponse
    The actual payload that contains the SBOM reference data.
    payloadType String
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures List<EnvelopeSignatureResponse>
    The signatures over the payload.
    payload SbomReferenceIntotoPayloadResponse
    The actual payload that contains the SBOM reference data.
    payloadType string
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures EnvelopeSignatureResponse[]
    The signatures over the payload.
    payload SbomReferenceIntotoPayloadResponse
    The actual payload that contains the SBOM reference data.
    payload_type str
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures Sequence[EnvelopeSignatureResponse]
    The signatures over the payload.
    payload Property Map
    The actual payload that contains the SBOM reference data.
    payloadType String
    The kind of payload that SbomReferenceIntotoPayload takes. Since it's in the intoto format, this value is expected to be 'application/vnd.in-toto+json'.
    signatures List<Property Map>
    The signatures over the payload.

    SBOMStatus, SBOMStatusArgs

    Error string
    If there was an error generating an SBOM, this will indicate what that error was.
    SbomState Pulumi.GoogleNative.ContainerAnalysis.V1.SBOMStatusSbomState
    The progress of the SBOM generation.
    Error string
    If there was an error generating an SBOM, this will indicate what that error was.
    SbomState SBOMStatusSbomState
    The progress of the SBOM generation.
    error String
    If there was an error generating an SBOM, this will indicate what that error was.
    sbomState SBOMStatusSbomState
    The progress of the SBOM generation.
    error string
    If there was an error generating an SBOM, this will indicate what that error was.
    sbomState SBOMStatusSbomState
    The progress of the SBOM generation.
    error str
    If there was an error generating an SBOM, this will indicate what that error was.
    sbom_state SBOMStatusSbomState
    The progress of the SBOM generation.
    error String
    If there was an error generating an SBOM, this will indicate what that error was.
    sbomState "SBOM_STATE_UNSPECIFIED" | "PENDING" | "COMPLETE"
    The progress of the SBOM generation.

    SBOMStatusResponse, SBOMStatusResponseArgs

    Error string
    If there was an error generating an SBOM, this will indicate what that error was.
    SbomState string
    The progress of the SBOM generation.
    Error string
    If there was an error generating an SBOM, this will indicate what that error was.
    SbomState string
    The progress of the SBOM generation.
    error String
    If there was an error generating an SBOM, this will indicate what that error was.
    sbomState String
    The progress of the SBOM generation.
    error string
    If there was an error generating an SBOM, this will indicate what that error was.
    sbomState string
    The progress of the SBOM generation.
    error str
    If there was an error generating an SBOM, this will indicate what that error was.
    sbom_state str
    The progress of the SBOM generation.
    error String
    If there was an error generating an SBOM, this will indicate what that error was.
    sbomState String
    The progress of the SBOM generation.

    SBOMStatusSbomState, SBOMStatusSbomStateArgs

    SbomStateUnspecified
    SBOM_STATE_UNSPECIFIEDDefault unknown state.
    Pending
    PENDINGSBOM scanning is pending.
    Complete
    COMPLETESBOM scanning has completed.
    SBOMStatusSbomStateSbomStateUnspecified
    SBOM_STATE_UNSPECIFIEDDefault unknown state.
    SBOMStatusSbomStatePending
    PENDINGSBOM scanning is pending.
    SBOMStatusSbomStateComplete
    COMPLETESBOM scanning has completed.
    SbomStateUnspecified
    SBOM_STATE_UNSPECIFIEDDefault unknown state.
    Pending
    PENDINGSBOM scanning is pending.
    Complete
    COMPLETESBOM scanning has completed.
    SbomStateUnspecified
    SBOM_STATE_UNSPECIFIEDDefault unknown state.
    Pending
    PENDINGSBOM scanning is pending.
    Complete
    COMPLETESBOM scanning has completed.
    SBOM_STATE_UNSPECIFIED
    SBOM_STATE_UNSPECIFIEDDefault unknown state.
    PENDING
    PENDINGSBOM scanning is pending.
    COMPLETE
    COMPLETESBOM scanning has completed.
    "SBOM_STATE_UNSPECIFIED"
    SBOM_STATE_UNSPECIFIEDDefault unknown state.
    "PENDING"
    PENDINGSBOM scanning is pending.
    "COMPLETE"
    COMPLETESBOM scanning has completed.

    SbomReferenceIntotoPayload, SbomReferenceIntotoPayloadArgs

    Predicate Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SbomReferenceIntotoPredicate
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    PredicateType string
    URI identifying the type of the Predicate.
    Subject List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Subject>
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    Type string
    Identifier for the schema of the Statement.
    Predicate SbomReferenceIntotoPredicate
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    PredicateType string
    URI identifying the type of the Predicate.
    Subject []Subject
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    Type string
    Identifier for the schema of the Statement.
    predicate SbomReferenceIntotoPredicate
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicateType String
    URI identifying the type of the Predicate.
    subject List<Subject>
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type String
    Identifier for the schema of the Statement.
    predicate SbomReferenceIntotoPredicate
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicateType string
    URI identifying the type of the Predicate.
    subject Subject[]
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type string
    Identifier for the schema of the Statement.
    predicate SbomReferenceIntotoPredicate
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicate_type str
    URI identifying the type of the Predicate.
    subject Sequence[Subject]
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type str
    Identifier for the schema of the Statement.
    predicate Property Map
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicateType String
    URI identifying the type of the Predicate.
    subject List<Property Map>
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type String
    Identifier for the schema of the Statement.

    SbomReferenceIntotoPayloadResponse, SbomReferenceIntotoPayloadResponseArgs

    Predicate Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SbomReferenceIntotoPredicateResponse
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    PredicateType string
    URI identifying the type of the Predicate.
    Subject List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SubjectResponse>
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    Type string
    Identifier for the schema of the Statement.
    Predicate SbomReferenceIntotoPredicateResponse
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    PredicateType string
    URI identifying the type of the Predicate.
    Subject []SubjectResponse
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    Type string
    Identifier for the schema of the Statement.
    predicate SbomReferenceIntotoPredicateResponse
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicateType String
    URI identifying the type of the Predicate.
    subject List<SubjectResponse>
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type String
    Identifier for the schema of the Statement.
    predicate SbomReferenceIntotoPredicateResponse
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicateType string
    URI identifying the type of the Predicate.
    subject SubjectResponse[]
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type string
    Identifier for the schema of the Statement.
    predicate SbomReferenceIntotoPredicateResponse
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicate_type str
    URI identifying the type of the Predicate.
    subject Sequence[SubjectResponse]
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type str
    Identifier for the schema of the Statement.
    predicate Property Map
    Additional parameters of the Predicate. Includes the actual data about the SBOM.
    predicateType String
    URI identifying the type of the Predicate.
    subject List<Property Map>
    Set of software artifacts that the attestation applies to. Each element represents a single software artifact.
    type String
    Identifier for the schema of the Statement.

    SbomReferenceIntotoPredicate, SbomReferenceIntotoPredicateArgs

    Digest Dictionary<string, string>
    A map of algorithm to digest of the contents of the SBOM.
    Location string
    The location of the SBOM.
    MimeType string
    The mime type of the SBOM.
    ReferrerId string
    The person or system referring this predicate to the consumer.
    Digest map[string]string
    A map of algorithm to digest of the contents of the SBOM.
    Location string
    The location of the SBOM.
    MimeType string
    The mime type of the SBOM.
    ReferrerId string
    The person or system referring this predicate to the consumer.
    digest Map<String,String>
    A map of algorithm to digest of the contents of the SBOM.
    location String
    The location of the SBOM.
    mimeType String
    The mime type of the SBOM.
    referrerId String
    The person or system referring this predicate to the consumer.
    digest {[key: string]: string}
    A map of algorithm to digest of the contents of the SBOM.
    location string
    The location of the SBOM.
    mimeType string
    The mime type of the SBOM.
    referrerId string
    The person or system referring this predicate to the consumer.
    digest Mapping[str, str]
    A map of algorithm to digest of the contents of the SBOM.
    location str
    The location of the SBOM.
    mime_type str
    The mime type of the SBOM.
    referrer_id str
    The person or system referring this predicate to the consumer.
    digest Map<String>
    A map of algorithm to digest of the contents of the SBOM.
    location String
    The location of the SBOM.
    mimeType String
    The mime type of the SBOM.
    referrerId String
    The person or system referring this predicate to the consumer.

    SbomReferenceIntotoPredicateResponse, SbomReferenceIntotoPredicateResponseArgs

    Digest Dictionary<string, string>
    A map of algorithm to digest of the contents of the SBOM.
    Location string
    The location of the SBOM.
    MimeType string
    The mime type of the SBOM.
    ReferrerId string
    The person or system referring this predicate to the consumer.
    Digest map[string]string
    A map of algorithm to digest of the contents of the SBOM.
    Location string
    The location of the SBOM.
    MimeType string
    The mime type of the SBOM.
    ReferrerId string
    The person or system referring this predicate to the consumer.
    digest Map<String,String>
    A map of algorithm to digest of the contents of the SBOM.
    location String
    The location of the SBOM.
    mimeType String
    The mime type of the SBOM.
    referrerId String
    The person or system referring this predicate to the consumer.
    digest {[key: string]: string}
    A map of algorithm to digest of the contents of the SBOM.
    location string
    The location of the SBOM.
    mimeType string
    The mime type of the SBOM.
    referrerId string
    The person or system referring this predicate to the consumer.
    digest Mapping[str, str]
    A map of algorithm to digest of the contents of the SBOM.
    location str
    The location of the SBOM.
    mime_type str
    The mime type of the SBOM.
    referrer_id str
    The person or system referring this predicate to the consumer.
    digest Map<String>
    A map of algorithm to digest of the contents of the SBOM.
    location String
    The location of the SBOM.
    mimeType String
    The mime type of the SBOM.
    referrerId String
    The person or system referring this predicate to the consumer.

    Signature, SignatureArgs

    PublicKeyId string
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    Signature string
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    PublicKeyId string
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    Signature string
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    publicKeyId String
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature String
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    publicKeyId string
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature string
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    public_key_id str
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature str
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    publicKeyId String
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature String
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

    SignatureResponse, SignatureResponseArgs

    PublicKeyId string
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    Signature string
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    PublicKeyId string
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    Signature string
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    publicKeyId String
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature String
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    publicKeyId string
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature string
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    public_key_id str
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature str
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.
    publicKeyId String
    The identifier for the public key that verifies this signature. * The public_key_id is required. * The public_key_id SHOULD be an RFC3986 conformant URI. * When possible, the public_key_id SHOULD be an immutable reference, such as a cryptographic digest. Examples of valid public_key_ids: OpenPGP V4 public key fingerprint: * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA" See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more details on this scheme. RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization): * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU" * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
    signature String
    The content of the signature, an opaque bytestring. The payload that this signature verifies MUST be unambiguously provided with the Signature during verification. A wrapper message might provide the payload explicitly. Alternatively, a message might have a canonical serialization that can always be unambiguously computed to derive the payload.

    SlsaBuilder, SlsaBuilderArgs

    Id string
    Id string
    id String
    id string
    id str
    id String

    SlsaCompleteness, SlsaCompletenessArgs

    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".

    SlsaCompletenessResponse, SlsaCompletenessResponseArgs

    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    Arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    Environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    Materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments bool
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment bool
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials bool
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".
    arguments Boolean
    If true, the builder claims that recipe.arguments is complete, meaning that all external inputs are properly captured in the recipe.
    environment Boolean
    If true, the builder claims that recipe.environment is claimed to be complete.
    materials Boolean
    If true, the builder claims that materials are complete, usually through some controls to prevent network access. Sometimes called "hermetic".

    SlsaMetadata, SlsaMetadataArgs

    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaCompleteness
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness SlsaCompleteness
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness SlsaCompleteness
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn string
    The timestamp of when the build completed.
    buildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn string
    The timestamp of when the build started.
    completeness SlsaCompleteness
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    build_finished_on str
    The timestamp of when the build completed.
    build_invocation_id str
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    build_started_on str
    The timestamp of when the build started.
    completeness SlsaCompleteness
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness Property Map
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.

    SlsaMetadataResponse, SlsaMetadataResponseArgs

    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaCompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    BuildFinishedOn string
    The timestamp of when the build completed.
    BuildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    BuildStartedOn string
    The timestamp of when the build started.
    Completeness SlsaCompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    Reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness SlsaCompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn string
    The timestamp of when the build completed.
    buildInvocationId string
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn string
    The timestamp of when the build started.
    completeness SlsaCompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    build_finished_on str
    The timestamp of when the build completed.
    build_invocation_id str
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    build_started_on str
    The timestamp of when the build started.
    completeness SlsaCompletenessResponse
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible bool
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.
    buildFinishedOn String
    The timestamp of when the build completed.
    buildInvocationId String
    Identifies the particular build invocation, which can be useful for finding associated logs or other ad-hoc analysis. The value SHOULD be globally unique, per in-toto Provenance spec.
    buildStartedOn String
    The timestamp of when the build started.
    completeness Property Map
    Indicates that the builder claims certain fields in this message to be complete.
    reproducible Boolean
    If true, the builder claims that running the recipe on materials will produce bit-for-bit identical output.

    SlsaProvenance, SlsaProvenanceArgs

    Builder Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaBuilder
    required
    Materials List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Material>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaMetadata
    Recipe Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaRecipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    Builder SlsaBuilder
    required
    Materials []Material
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata SlsaMetadata
    Recipe SlsaRecipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder_ SlsaBuilder
    required
    materials List<Material>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata SlsaMetadata
    recipe SlsaRecipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder SlsaBuilder
    required
    materials Material[]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata SlsaMetadata
    recipe SlsaRecipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder SlsaBuilder
    required
    materials Sequence[Material]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata SlsaMetadata
    recipe SlsaRecipe
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder Property Map
    required
    materials List<Property Map>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Property Map
    recipe Property Map
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required

    SlsaProvenanceResponse, SlsaProvenanceResponseArgs

    Builder Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaBuilderResponse
    required
    Materials List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.MaterialResponse>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaMetadataResponse
    Recipe Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SlsaRecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    Builder SlsaBuilderResponse
    required
    Materials []MaterialResponse
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    Metadata SlsaMetadataResponse
    Recipe SlsaRecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder_ SlsaBuilderResponse
    required
    materials List<MaterialResponse>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata SlsaMetadataResponse
    recipe SlsaRecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder SlsaBuilderResponse
    required
    materials MaterialResponse[]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata SlsaMetadataResponse
    recipe SlsaRecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder SlsaBuilderResponse
    required
    materials Sequence[MaterialResponse]
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata SlsaMetadataResponse
    recipe SlsaRecipeResponse
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required
    builder Property Map
    required
    materials List<Property Map>
    The collection of artifacts that influenced the build including sources, dependencies, build tools, base images, and so on. This is considered to be incomplete unless metadata.completeness.materials is true. Unset or null is equivalent to empty.
    metadata Property Map
    recipe Property Map
    Identifies the configuration used for the build. When combined with materials, this SHOULD fully describe the build, such that re-running this recipe results in bit-for-bit identical output (if the build is reproducible). required

    SlsaProvenanceV1, SlsaProvenanceV1Args

    SlsaProvenanceV1Response, SlsaProvenanceV1ResponseArgs

    SlsaProvenanceZeroTwo, SlsaProvenanceZeroTwoArgs

    SlsaProvenanceZeroTwoResponse, SlsaProvenanceZeroTwoResponseArgs

    SlsaRecipe, SlsaRecipeArgs

    Arguments Dictionary<string, string>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment Dictionary<string, string>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    Arguments map[string]string
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment map[string]string
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Map<String,String>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Map<String,String>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments {[key: string]: string}
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    definedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment {[key: string]: string}
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Mapping[str, str]
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    defined_in_material str
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entry_point str
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Mapping[str, str]
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type str
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Map<String>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Map<String>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.

    SlsaRecipeResponse, SlsaRecipeResponseArgs

    Arguments Dictionary<string, string>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment Dictionary<string, string>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    Arguments map[string]string
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    DefinedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    EntryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    Environment map[string]string
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    Type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Map<String,String>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Map<String,String>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments {[key: string]: string}
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    definedInMaterial string
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint string
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment {[key: string]: string}
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type string
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Mapping[str, str]
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    defined_in_material str
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entry_point str
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Mapping[str, str]
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type str
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.
    arguments Map<String>
    Collection of all external inputs that influenced the build on top of recipe.definedInMaterial and recipe.entryPoint. For example, if the recipe type were "make", then this might be the flags passed to make aside from the target, which is captured in recipe.entryPoint. Depending on the recipe Type, the structure may be different.
    definedInMaterial String
    Index in materials containing the recipe steps that are not implied by recipe.type. For example, if the recipe type were "make", then this would point to the source containing the Makefile, not the make program itself. Set to -1 if the recipe doesn't come from a material, as zero is default unset value for int64.
    entryPoint String
    String identifying the entry point into the build. This is often a path to a configuration file and/or a target label within that file. The syntax and meaning are defined by recipe.type. For example, if the recipe type were "make", then this would reference the directory in which to run make as well as which target to use.
    environment Map<String>
    Any other builder-controlled inputs necessary for correctly evaluating the recipe. Usually only needed for reproducing the build but not evaluated as part of policy. Depending on the recipe Type, the structure may be different.
    type String
    URI indicating what type of recipe was performed. It determines the meaning of recipe.entryPoint, recipe.arguments, recipe.environment, and materials.

    Source, SourceArgs

    AdditionalContexts List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SourceContext>
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    ArtifactStorageSourceUri string
    If provided, the input binary artifacts for the build came from this location.
    Context Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SourceContext
    If provided, the source code used for the build came from this location.
    FileHashes Dictionary<string, string>
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    AdditionalContexts []SourceContext
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    ArtifactStorageSourceUri string
    If provided, the input binary artifacts for the build came from this location.
    Context SourceContext
    If provided, the source code used for the build came from this location.
    FileHashes map[string]string
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additionalContexts List<SourceContext>
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifactStorageSourceUri String
    If provided, the input binary artifacts for the build came from this location.
    context SourceContext
    If provided, the source code used for the build came from this location.
    fileHashes Map<String,String>
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additionalContexts SourceContext[]
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifactStorageSourceUri string
    If provided, the input binary artifacts for the build came from this location.
    context SourceContext
    If provided, the source code used for the build came from this location.
    fileHashes {[key: string]: string}
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additional_contexts Sequence[SourceContext]
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifact_storage_source_uri str
    If provided, the input binary artifacts for the build came from this location.
    context SourceContext
    If provided, the source code used for the build came from this location.
    file_hashes Mapping[str, str]
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additionalContexts List<Property Map>
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifactStorageSourceUri String
    If provided, the input binary artifacts for the build came from this location.
    context Property Map
    If provided, the source code used for the build came from this location.
    fileHashes Map<String>
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

    SourceContext, SourceContextArgs

    CloudRepo Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CloudRepoSourceContext
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    Gerrit Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.GerritSourceContext
    A SourceContext referring to a Gerrit project.
    Git Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.GitSourceContext
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    Labels Dictionary<string, string>
    Labels with user defined metadata.
    CloudRepo CloudRepoSourceContext
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    Gerrit GerritSourceContext
    A SourceContext referring to a Gerrit project.
    Git GitSourceContext
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    Labels map[string]string
    Labels with user defined metadata.
    cloudRepo CloudRepoSourceContext
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit GerritSourceContext
    A SourceContext referring to a Gerrit project.
    git GitSourceContext
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels Map<String,String>
    Labels with user defined metadata.
    cloudRepo CloudRepoSourceContext
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit GerritSourceContext
    A SourceContext referring to a Gerrit project.
    git GitSourceContext
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels {[key: string]: string}
    Labels with user defined metadata.
    cloud_repo CloudRepoSourceContext
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit GerritSourceContext
    A SourceContext referring to a Gerrit project.
    git GitSourceContext
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels Mapping[str, str]
    Labels with user defined metadata.
    cloudRepo Property Map
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit Property Map
    A SourceContext referring to a Gerrit project.
    git Property Map
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels Map<String>
    Labels with user defined metadata.

    SourceContextResponse, SourceContextResponseArgs

    CloudRepo Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CloudRepoSourceContextResponse
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    Gerrit Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.GerritSourceContextResponse
    A SourceContext referring to a Gerrit project.
    Git Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.GitSourceContextResponse
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    Labels Dictionary<string, string>
    Labels with user defined metadata.
    CloudRepo CloudRepoSourceContextResponse
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    Gerrit GerritSourceContextResponse
    A SourceContext referring to a Gerrit project.
    Git GitSourceContextResponse
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    Labels map[string]string
    Labels with user defined metadata.
    cloudRepo CloudRepoSourceContextResponse
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit GerritSourceContextResponse
    A SourceContext referring to a Gerrit project.
    git GitSourceContextResponse
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels Map<String,String>
    Labels with user defined metadata.
    cloudRepo CloudRepoSourceContextResponse
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit GerritSourceContextResponse
    A SourceContext referring to a Gerrit project.
    git GitSourceContextResponse
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels {[key: string]: string}
    Labels with user defined metadata.
    cloud_repo CloudRepoSourceContextResponse
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit GerritSourceContextResponse
    A SourceContext referring to a Gerrit project.
    git GitSourceContextResponse
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels Mapping[str, str]
    Labels with user defined metadata.
    cloudRepo Property Map
    A SourceContext referring to a revision in a Google Cloud Source Repo.
    gerrit Property Map
    A SourceContext referring to a Gerrit project.
    git Property Map
    A SourceContext referring to any third party Git repo (e.g., GitHub).
    labels Map<String>
    Labels with user defined metadata.

    SourceResponse, SourceResponseArgs

    AdditionalContexts List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SourceContextResponse>
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    ArtifactStorageSourceUri string
    If provided, the input binary artifacts for the build came from this location.
    Context Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.SourceContextResponse
    If provided, the source code used for the build came from this location.
    FileHashes Dictionary<string, string>
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    AdditionalContexts []SourceContextResponse
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    ArtifactStorageSourceUri string
    If provided, the input binary artifacts for the build came from this location.
    Context SourceContextResponse
    If provided, the source code used for the build came from this location.
    FileHashes map[string]string
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additionalContexts List<SourceContextResponse>
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifactStorageSourceUri String
    If provided, the input binary artifacts for the build came from this location.
    context SourceContextResponse
    If provided, the source code used for the build came from this location.
    fileHashes Map<String,String>
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additionalContexts SourceContextResponse[]
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifactStorageSourceUri string
    If provided, the input binary artifacts for the build came from this location.
    context SourceContextResponse
    If provided, the source code used for the build came from this location.
    fileHashes {[key: string]: string}
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additional_contexts Sequence[SourceContextResponse]
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifact_storage_source_uri str
    If provided, the input binary artifacts for the build came from this location.
    context SourceContextResponse
    If provided, the source code used for the build came from this location.
    file_hashes Mapping[str, str]
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.
    additionalContexts List<Property Map>
    If provided, some of the source code used for the build may be found in these locations, in the case where the source repository had multiple remotes or submodules. This list will not include the context specified in the context field.
    artifactStorageSourceUri String
    If provided, the input binary artifacts for the build came from this location.
    context Property Map
    If provided, the source code used for the build came from this location.
    fileHashes Map<String>
    Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz), the FileHash will be for the single path to that file.

    Status, StatusArgs

    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details List<ImmutableDictionary<string, string>>
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details []map[string]string
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Integer
    The status code, which should be an enum value of google.rpc.Code.
    details List<Map<String,String>>
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code number
    The status code, which should be an enum value of google.rpc.Code.
    details {[key: string]: string}[]
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code int
    The status code, which should be an enum value of google.rpc.Code.
    details Sequence[Mapping[str, str]]
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message str
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Number
    The status code, which should be an enum value of google.rpc.Code.
    details List<Map<String>>
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

    StatusResponse, StatusResponseArgs

    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details List<ImmutableDictionary<string, string>>
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    Code int
    The status code, which should be an enum value of google.rpc.Code.
    Details []map[string]string
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    Message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Integer
    The status code, which should be an enum value of google.rpc.Code.
    details List<Map<String,String>>
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code number
    The status code, which should be an enum value of google.rpc.Code.
    details {[key: string]: string}[]
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message string
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code int
    The status code, which should be an enum value of google.rpc.Code.
    details Sequence[Mapping[str, str]]
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message str
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
    code Number
    The status code, which should be an enum value of google.rpc.Code.
    details List<Map<String>>
    A list of messages that carry the error details. There is a common set of message types for APIs to use.
    message String
    A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.

    Subject, SubjectArgs

    Digest Dictionary<string, string>
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    Name string
    Digest map[string]string
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    Name string
    digest Map<String,String>
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name String
    digest {[key: string]: string}
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name string
    digest Mapping[str, str]
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name str
    digest Map<String>
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name String

    SubjectResponse, SubjectResponseArgs

    Digest Dictionary<string, string>
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    Name string
    Digest map[string]string
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    Name string
    digest Map<String,String>
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name String
    digest {[key: string]: string}
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name string
    digest Mapping[str, str]
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name str
    digest Map<String>
    "": "" Algorithms can be e.g. sha256, sha512 See https://github.com/in-toto/attestation/blob/main/spec/field_types.md#DigestSet
    name String

    UpgradeDistribution, UpgradeDistributionArgs

    Classification string
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    CpeUri string
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    Cve List<string>
    The cve tied to this Upgrade.
    Severity string
    The severity as specified by the upstream operating system.
    Classification string
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    CpeUri string
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    Cve []string
    The cve tied to this Upgrade.
    Severity string
    The severity as specified by the upstream operating system.
    classification String
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpeUri String
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve List<String>
    The cve tied to this Upgrade.
    severity String
    The severity as specified by the upstream operating system.
    classification string
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpeUri string
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve string[]
    The cve tied to this Upgrade.
    severity string
    The severity as specified by the upstream operating system.
    classification str
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpe_uri str
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve Sequence[str]
    The cve tied to this Upgrade.
    severity str
    The severity as specified by the upstream operating system.
    classification String
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpeUri String
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve List<String>
    The cve tied to this Upgrade.
    severity String
    The severity as specified by the upstream operating system.

    UpgradeDistributionResponse, UpgradeDistributionResponseArgs

    Classification string
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    CpeUri string
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    Cve List<string>
    The cve tied to this Upgrade.
    Severity string
    The severity as specified by the upstream operating system.
    Classification string
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    CpeUri string
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    Cve []string
    The cve tied to this Upgrade.
    Severity string
    The severity as specified by the upstream operating system.
    classification String
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpeUri String
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve List<String>
    The cve tied to this Upgrade.
    severity String
    The severity as specified by the upstream operating system.
    classification string
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpeUri string
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve string[]
    The cve tied to this Upgrade.
    severity string
    The severity as specified by the upstream operating system.
    classification str
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpe_uri str
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve Sequence[str]
    The cve tied to this Upgrade.
    severity str
    The severity as specified by the upstream operating system.
    classification String
    The operating system classification of this Upgrade, as specified by the upstream operating system upgrade feed. For Windows the classification is one of the category_ids listed at https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ff357803(v=vs.85)
    cpeUri String
    Required - The specific operating system this metadata applies to. See https://cpe.mitre.org/specification/.
    cve List<String>
    The cve tied to this Upgrade.
    severity String
    The severity as specified by the upstream operating system.

    UpgradeOccurrence, UpgradeOccurrenceArgs

    Distribution Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.UpgradeDistribution
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    Package string
    Required for non-Windows OS. The package this Upgrade is for.
    ParsedVersion Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Version
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    WindowsUpdate Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.WindowsUpdate
    Required for Windows OS. Represents the metadata about the Windows update.
    Distribution UpgradeDistribution
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    Package string
    Required for non-Windows OS. The package this Upgrade is for.
    ParsedVersion Version
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    WindowsUpdate WindowsUpdate
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution UpgradeDistribution
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package_ String
    Required for non-Windows OS. The package this Upgrade is for.
    parsedVersion Version
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windowsUpdate WindowsUpdate
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution UpgradeDistribution
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package string
    Required for non-Windows OS. The package this Upgrade is for.
    parsedVersion Version
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windowsUpdate WindowsUpdate
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution UpgradeDistribution
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package str
    Required for non-Windows OS. The package this Upgrade is for.
    parsed_version Version
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windows_update WindowsUpdate
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution Property Map
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package String
    Required for non-Windows OS. The package this Upgrade is for.
    parsedVersion Property Map
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windowsUpdate Property Map
    Required for Windows OS. Represents the metadata about the Windows update.

    UpgradeOccurrenceResponse, UpgradeOccurrenceResponseArgs

    Distribution Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.UpgradeDistributionResponse
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    Package string
    Required for non-Windows OS. The package this Upgrade is for.
    ParsedVersion Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VersionResponse
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    WindowsUpdate Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.WindowsUpdateResponse
    Required for Windows OS. Represents the metadata about the Windows update.
    Distribution UpgradeDistributionResponse
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    Package string
    Required for non-Windows OS. The package this Upgrade is for.
    ParsedVersion VersionResponse
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    WindowsUpdate WindowsUpdateResponse
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution UpgradeDistributionResponse
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package_ String
    Required for non-Windows OS. The package this Upgrade is for.
    parsedVersion VersionResponse
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windowsUpdate WindowsUpdateResponse
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution UpgradeDistributionResponse
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package string
    Required for non-Windows OS. The package this Upgrade is for.
    parsedVersion VersionResponse
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windowsUpdate WindowsUpdateResponse
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution UpgradeDistributionResponse
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package str
    Required for non-Windows OS. The package this Upgrade is for.
    parsed_version VersionResponse
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windows_update WindowsUpdateResponse
    Required for Windows OS. Represents the metadata about the Windows update.
    distribution Property Map
    Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
    package String
    Required for non-Windows OS. The package this Upgrade is for.
    parsedVersion Property Map
    Required for non-Windows OS. The version of the package in a machine + human readable form.
    windowsUpdate Property Map
    Required for Windows OS. Represents the metadata about the Windows update.

    Version, VersionArgs

    Kind Pulumi.GoogleNative.ContainerAnalysis.V1.VersionKind
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    Epoch int
    Used to correct mistakes in the version numbering scheme.
    FullName string
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    Inclusive bool
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    Name string
    Required only when version kind is NORMAL. The main part of the version name.
    Revision string
    The iteration of the package build from the above version.
    Kind VersionKind
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    Epoch int
    Used to correct mistakes in the version numbering scheme.
    FullName string
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    Inclusive bool
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    Name string
    Required only when version kind is NORMAL. The main part of the version name.
    Revision string
    The iteration of the package build from the above version.
    kind VersionKind
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    epoch Integer
    Used to correct mistakes in the version numbering scheme.
    fullName String
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive Boolean
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    name String
    Required only when version kind is NORMAL. The main part of the version name.
    revision String
    The iteration of the package build from the above version.
    kind VersionKind
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    epoch number
    Used to correct mistakes in the version numbering scheme.
    fullName string
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive boolean
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    name string
    Required only when version kind is NORMAL. The main part of the version name.
    revision string
    The iteration of the package build from the above version.
    kind VersionKind
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    epoch int
    Used to correct mistakes in the version numbering scheme.
    full_name str
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive bool
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    name str
    Required only when version kind is NORMAL. The main part of the version name.
    revision str
    The iteration of the package build from the above version.
    kind "VERSION_KIND_UNSPECIFIED" | "NORMAL" | "MINIMUM" | "MAXIMUM"
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    epoch Number
    Used to correct mistakes in the version numbering scheme.
    fullName String
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive Boolean
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    name String
    Required only when version kind is NORMAL. The main part of the version name.
    revision String
    The iteration of the package build from the above version.

    VersionKind, VersionKindArgs

    VersionKindUnspecified
    VERSION_KIND_UNSPECIFIEDUnknown.
    Normal
    NORMALA standard package version.
    Minimum
    MINIMUMA special version representing negative infinity.
    Maximum
    MAXIMUMA special version representing positive infinity.
    VersionKindVersionKindUnspecified
    VERSION_KIND_UNSPECIFIEDUnknown.
    VersionKindNormal
    NORMALA standard package version.
    VersionKindMinimum
    MINIMUMA special version representing negative infinity.
    VersionKindMaximum
    MAXIMUMA special version representing positive infinity.
    VersionKindUnspecified
    VERSION_KIND_UNSPECIFIEDUnknown.
    Normal
    NORMALA standard package version.
    Minimum
    MINIMUMA special version representing negative infinity.
    Maximum
    MAXIMUMA special version representing positive infinity.
    VersionKindUnspecified
    VERSION_KIND_UNSPECIFIEDUnknown.
    Normal
    NORMALA standard package version.
    Minimum
    MINIMUMA special version representing negative infinity.
    Maximum
    MAXIMUMA special version representing positive infinity.
    VERSION_KIND_UNSPECIFIED
    VERSION_KIND_UNSPECIFIEDUnknown.
    NORMAL
    NORMALA standard package version.
    MINIMUM
    MINIMUMA special version representing negative infinity.
    MAXIMUM
    MAXIMUMA special version representing positive infinity.
    "VERSION_KIND_UNSPECIFIED"
    VERSION_KIND_UNSPECIFIEDUnknown.
    "NORMAL"
    NORMALA standard package version.
    "MINIMUM"
    MINIMUMA special version representing negative infinity.
    "MAXIMUM"
    MAXIMUMA special version representing positive infinity.

    VersionResponse, VersionResponseArgs

    Epoch int
    Used to correct mistakes in the version numbering scheme.
    FullName string
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    Inclusive bool
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    Kind string
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    Name string
    Required only when version kind is NORMAL. The main part of the version name.
    Revision string
    The iteration of the package build from the above version.
    Epoch int
    Used to correct mistakes in the version numbering scheme.
    FullName string
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    Inclusive bool
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    Kind string
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    Name string
    Required only when version kind is NORMAL. The main part of the version name.
    Revision string
    The iteration of the package build from the above version.
    epoch Integer
    Used to correct mistakes in the version numbering scheme.
    fullName String
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive Boolean
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    kind String
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    name String
    Required only when version kind is NORMAL. The main part of the version name.
    revision String
    The iteration of the package build from the above version.
    epoch number
    Used to correct mistakes in the version numbering scheme.
    fullName string
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive boolean
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    kind string
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    name string
    Required only when version kind is NORMAL. The main part of the version name.
    revision string
    The iteration of the package build from the above version.
    epoch int
    Used to correct mistakes in the version numbering scheme.
    full_name str
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive bool
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    kind str
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    name str
    Required only when version kind is NORMAL. The main part of the version name.
    revision str
    The iteration of the package build from the above version.
    epoch Number
    Used to correct mistakes in the version numbering scheme.
    fullName String
    Human readable version string. This string is of the form :- and is only set when kind is NORMAL.
    inclusive Boolean
    Whether this version is specifying part of an inclusive range. Grafeas does not have the capability to specify version ranges; instead we have fields that specify start version and end versions. At times this is insufficient - we also need to specify whether the version is included in the range or is excluded from the range. This boolean is expected to be set to true when the version is included in a range.
    kind String
    Distinguishes between sentinel MIN/MAX versions and normal versions.
    name String
    Required only when version kind is NORMAL. The main part of the version name.
    revision String
    The iteration of the package build from the above version.

    VexAssessment, VexAssessmentArgs

    Cve string
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Impacts List<string>
    Contains information about the impact of this vulnerability, this will change with time.
    Justification Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Justification
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    NoteName string
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    RelatedUris List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrl>
    Holds a list of references associated with this vulnerability item and assessment.
    Remediations List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Remediation>
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    State Pulumi.GoogleNative.ContainerAnalysis.V1.VexAssessmentState
    Provides the state of this Vulnerability assessment.
    VulnerabilityId string
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    Cve string
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Impacts []string
    Contains information about the impact of this vulnerability, this will change with time.
    Justification Justification
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    NoteName string
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    RelatedUris []RelatedUrl
    Holds a list of references associated with this vulnerability item and assessment.
    Remediations []Remediation
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    State VexAssessmentState
    Provides the state of this Vulnerability assessment.
    VulnerabilityId string
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve String
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts List<String>
    Contains information about the impact of this vulnerability, this will change with time.
    justification Justification
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    noteName String
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    relatedUris List<RelatedUrl>
    Holds a list of references associated with this vulnerability item and assessment.
    remediations List<Remediation>
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state VexAssessmentState
    Provides the state of this Vulnerability assessment.
    vulnerabilityId String
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve string
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts string[]
    Contains information about the impact of this vulnerability, this will change with time.
    justification Justification
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    noteName string
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    relatedUris RelatedUrl[]
    Holds a list of references associated with this vulnerability item and assessment.
    remediations Remediation[]
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state VexAssessmentState
    Provides the state of this Vulnerability assessment.
    vulnerabilityId string
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve str
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts Sequence[str]
    Contains information about the impact of this vulnerability, this will change with time.
    justification Justification
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    note_name str
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    related_uris Sequence[RelatedUrl]
    Holds a list of references associated with this vulnerability item and assessment.
    remediations Sequence[Remediation]
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state VexAssessmentState
    Provides the state of this Vulnerability assessment.
    vulnerability_id str
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve String
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts List<String>
    Contains information about the impact of this vulnerability, this will change with time.
    justification Property Map
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    noteName String
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    relatedUris List<Property Map>
    Holds a list of references associated with this vulnerability item and assessment.
    remediations List<Property Map>
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state "STATE_UNSPECIFIED" | "AFFECTED" | "NOT_AFFECTED" | "FIXED" | "UNDER_INVESTIGATION"
    Provides the state of this Vulnerability assessment.
    vulnerabilityId String
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

    VexAssessmentResponse, VexAssessmentResponseArgs

    Cve string
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Impacts List<string>
    Contains information about the impact of this vulnerability, this will change with time.
    Justification Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.JustificationResponse
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    NoteName string
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    RelatedUris List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrlResponse>
    Holds a list of references associated with this vulnerability item and assessment.
    Remediations List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RemediationResponse>
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    State string
    Provides the state of this Vulnerability assessment.
    VulnerabilityId string
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    Cve string
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Impacts []string
    Contains information about the impact of this vulnerability, this will change with time.
    Justification JustificationResponse
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    NoteName string
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    RelatedUris []RelatedUrlResponse
    Holds a list of references associated with this vulnerability item and assessment.
    Remediations []RemediationResponse
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    State string
    Provides the state of this Vulnerability assessment.
    VulnerabilityId string
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve String
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts List<String>
    Contains information about the impact of this vulnerability, this will change with time.
    justification JustificationResponse
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    noteName String
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    relatedUris List<RelatedUrlResponse>
    Holds a list of references associated with this vulnerability item and assessment.
    remediations List<RemediationResponse>
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state String
    Provides the state of this Vulnerability assessment.
    vulnerabilityId String
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve string
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts string[]
    Contains information about the impact of this vulnerability, this will change with time.
    justification JustificationResponse
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    noteName string
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    relatedUris RelatedUrlResponse[]
    Holds a list of references associated with this vulnerability item and assessment.
    remediations RemediationResponse[]
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state string
    Provides the state of this Vulnerability assessment.
    vulnerabilityId string
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve str
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts Sequence[str]
    Contains information about the impact of this vulnerability, this will change with time.
    justification JustificationResponse
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    note_name str
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    related_uris Sequence[RelatedUrlResponse]
    Holds a list of references associated with this vulnerability item and assessment.
    remediations Sequence[RemediationResponse]
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state str
    Provides the state of this Vulnerability assessment.
    vulnerability_id str
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.
    cve String
    Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    Deprecated: Holds the MITRE standard Common Vulnerabilities and Exposures (CVE) tracking number for the vulnerability. Deprecated: Use vulnerability_id instead to denote CVEs.

    impacts List<String>
    Contains information about the impact of this vulnerability, this will change with time.
    justification Property Map
    Justification provides the justification when the state of the assessment if NOT_AFFECTED.
    noteName String
    The VulnerabilityAssessment note from which this VexAssessment was generated. This will be of the form: projects/[PROJECT_ID]/notes/[NOTE_ID].
    relatedUris List<Property Map>
    Holds a list of references associated with this vulnerability item and assessment.
    remediations List<Property Map>
    Specifies details on how to handle (and presumably, fix) a vulnerability.
    state String
    Provides the state of this Vulnerability assessment.
    vulnerabilityId String
    The vulnerability identifier for this Assessment. Will hold one of common identifiers e.g. CVE, GHSA etc.

    VexAssessmentState, VexAssessmentStateArgs

    StateUnspecified
    STATE_UNSPECIFIEDNo state is specified.
    Affected
    AFFECTEDThis product is known to be affected by this vulnerability.
    NotAffected
    NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
    Fixed
    FIXEDThis product contains a fix for this vulnerability.
    UnderInvestigation
    UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
    VexAssessmentStateStateUnspecified
    STATE_UNSPECIFIEDNo state is specified.
    VexAssessmentStateAffected
    AFFECTEDThis product is known to be affected by this vulnerability.
    VexAssessmentStateNotAffected
    NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
    VexAssessmentStateFixed
    FIXEDThis product contains a fix for this vulnerability.
    VexAssessmentStateUnderInvestigation
    UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
    StateUnspecified
    STATE_UNSPECIFIEDNo state is specified.
    Affected
    AFFECTEDThis product is known to be affected by this vulnerability.
    NotAffected
    NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
    Fixed
    FIXEDThis product contains a fix for this vulnerability.
    UnderInvestigation
    UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
    StateUnspecified
    STATE_UNSPECIFIEDNo state is specified.
    Affected
    AFFECTEDThis product is known to be affected by this vulnerability.
    NotAffected
    NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
    Fixed
    FIXEDThis product contains a fix for this vulnerability.
    UnderInvestigation
    UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
    STATE_UNSPECIFIED
    STATE_UNSPECIFIEDNo state is specified.
    AFFECTED
    AFFECTEDThis product is known to be affected by this vulnerability.
    NOT_AFFECTED
    NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
    FIXED
    FIXEDThis product contains a fix for this vulnerability.
    UNDER_INVESTIGATION
    UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.
    "STATE_UNSPECIFIED"
    STATE_UNSPECIFIEDNo state is specified.
    "AFFECTED"
    AFFECTEDThis product is known to be affected by this vulnerability.
    "NOT_AFFECTED"
    NOT_AFFECTEDThis product is known to be not affected by this vulnerability.
    "FIXED"
    FIXEDThis product contains a fix for this vulnerability.
    "UNDER_INVESTIGATION"
    UNDER_INVESTIGATIONIt is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation.

    VulnerabilityOccurrence, VulnerabilityOccurrenceArgs

    PackageIssue List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.PackageIssue>
    The set of affected locations and their fixes (if available) within the associated resource.
    CvssV2 Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CVSS
    The cvss v2 score for the vulnerability.
    Cvssv3 Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CVSS
    The cvss v3 score for the vulnerability.
    EffectiveSeverity Pulumi.GoogleNative.ContainerAnalysis.V1.VulnerabilityOccurrenceEffectiveSeverity
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    ExtraDetails string
    Occurrence-specific extra details about the vulnerability.
    Type string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    VexAssessment Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VexAssessment
    PackageIssue []PackageIssue
    The set of affected locations and their fixes (if available) within the associated resource.
    CvssV2 CVSS
    The cvss v2 score for the vulnerability.
    Cvssv3 CVSS
    The cvss v3 score for the vulnerability.
    EffectiveSeverity VulnerabilityOccurrenceEffectiveSeverity
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    ExtraDetails string
    Occurrence-specific extra details about the vulnerability.
    Type string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    VexAssessment VexAssessment
    packageIssue List<PackageIssue>
    The set of affected locations and their fixes (if available) within the associated resource.
    cvssV2 CVSS
    The cvss v2 score for the vulnerability.
    cvssv3 CVSS
    The cvss v3 score for the vulnerability.
    effectiveSeverity VulnerabilityOccurrenceEffectiveSeverity
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extraDetails String
    Occurrence-specific extra details about the vulnerability.
    type String
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vexAssessment VexAssessment
    packageIssue PackageIssue[]
    The set of affected locations and their fixes (if available) within the associated resource.
    cvssV2 CVSS
    The cvss v2 score for the vulnerability.
    cvssv3 CVSS
    The cvss v3 score for the vulnerability.
    effectiveSeverity VulnerabilityOccurrenceEffectiveSeverity
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extraDetails string
    Occurrence-specific extra details about the vulnerability.
    type string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vexAssessment VexAssessment
    package_issue Sequence[PackageIssue]
    The set of affected locations and their fixes (if available) within the associated resource.
    cvss_v2 CVSS
    The cvss v2 score for the vulnerability.
    cvssv3 CVSS
    The cvss v3 score for the vulnerability.
    effective_severity VulnerabilityOccurrenceEffectiveSeverity
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extra_details str
    Occurrence-specific extra details about the vulnerability.
    type str
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vex_assessment VexAssessment
    packageIssue List<Property Map>
    The set of affected locations and their fixes (if available) within the associated resource.
    cvssV2 Property Map
    The cvss v2 score for the vulnerability.
    cvssv3 Property Map
    The cvss v3 score for the vulnerability.
    effectiveSeverity "SEVERITY_UNSPECIFIED" | "MINIMAL" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL"
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extraDetails String
    Occurrence-specific extra details about the vulnerability.
    type String
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vexAssessment Property Map

    VulnerabilityOccurrenceEffectiveSeverity, VulnerabilityOccurrenceEffectiveSeverityArgs

    SeverityUnspecified
    SEVERITY_UNSPECIFIEDUnknown.
    Minimal
    MINIMALMinimal severity.
    Low
    LOWLow severity.
    Medium
    MEDIUMMedium severity.
    High
    HIGHHigh severity.
    Critical
    CRITICALCritical severity.
    VulnerabilityOccurrenceEffectiveSeveritySeverityUnspecified
    SEVERITY_UNSPECIFIEDUnknown.
    VulnerabilityOccurrenceEffectiveSeverityMinimal
    MINIMALMinimal severity.
    VulnerabilityOccurrenceEffectiveSeverityLow
    LOWLow severity.
    VulnerabilityOccurrenceEffectiveSeverityMedium
    MEDIUMMedium severity.
    VulnerabilityOccurrenceEffectiveSeverityHigh
    HIGHHigh severity.
    VulnerabilityOccurrenceEffectiveSeverityCritical
    CRITICALCritical severity.
    SeverityUnspecified
    SEVERITY_UNSPECIFIEDUnknown.
    Minimal
    MINIMALMinimal severity.
    Low
    LOWLow severity.
    Medium
    MEDIUMMedium severity.
    High
    HIGHHigh severity.
    Critical
    CRITICALCritical severity.
    SeverityUnspecified
    SEVERITY_UNSPECIFIEDUnknown.
    Minimal
    MINIMALMinimal severity.
    Low
    LOWLow severity.
    Medium
    MEDIUMMedium severity.
    High
    HIGHHigh severity.
    Critical
    CRITICALCritical severity.
    SEVERITY_UNSPECIFIED
    SEVERITY_UNSPECIFIEDUnknown.
    MINIMAL
    MINIMALMinimal severity.
    LOW
    LOWLow severity.
    MEDIUM
    MEDIUMMedium severity.
    HIGH
    HIGHHigh severity.
    CRITICAL
    CRITICALCritical severity.
    "SEVERITY_UNSPECIFIED"
    SEVERITY_UNSPECIFIEDUnknown.
    "MINIMAL"
    MINIMALMinimal severity.
    "LOW"
    LOWLow severity.
    "MEDIUM"
    MEDIUMMedium severity.
    "HIGH"
    HIGHHigh severity.
    "CRITICAL"
    CRITICALCritical severity.

    VulnerabilityOccurrenceResponse, VulnerabilityOccurrenceResponseArgs

    CvssScore double
    The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
    CvssV2 Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CVSSResponse
    The cvss v2 score for the vulnerability.
    CvssVersion string
    CVSS version used to populate cvss_score and severity.
    Cvssv3 Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CVSSResponse
    The cvss v3 score for the vulnerability.
    EffectiveSeverity string
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    ExtraDetails string
    Occurrence-specific extra details about the vulnerability.
    FixAvailable bool
    Whether at least one of the affected packages has a fix available.
    LongDescription string
    A detailed description of this vulnerability.
    PackageIssue List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.PackageIssueResponse>
    The set of affected locations and their fixes (if available) within the associated resource.
    RelatedUrls List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.RelatedUrlResponse>
    URLs related to this vulnerability.
    Severity string
    The note provider assigned severity of this vulnerability.
    ShortDescription string
    A one sentence description of this vulnerability.
    Type string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    VexAssessment Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.VexAssessmentResponse
    CvssScore float64
    The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
    CvssV2 CVSSResponse
    The cvss v2 score for the vulnerability.
    CvssVersion string
    CVSS version used to populate cvss_score and severity.
    Cvssv3 CVSSResponse
    The cvss v3 score for the vulnerability.
    EffectiveSeverity string
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    ExtraDetails string
    Occurrence-specific extra details about the vulnerability.
    FixAvailable bool
    Whether at least one of the affected packages has a fix available.
    LongDescription string
    A detailed description of this vulnerability.
    PackageIssue []PackageIssueResponse
    The set of affected locations and their fixes (if available) within the associated resource.
    RelatedUrls []RelatedUrlResponse
    URLs related to this vulnerability.
    Severity string
    The note provider assigned severity of this vulnerability.
    ShortDescription string
    A one sentence description of this vulnerability.
    Type string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    VexAssessment VexAssessmentResponse
    cvssScore Double
    The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
    cvssV2 CVSSResponse
    The cvss v2 score for the vulnerability.
    cvssVersion String
    CVSS version used to populate cvss_score and severity.
    cvssv3 CVSSResponse
    The cvss v3 score for the vulnerability.
    effectiveSeverity String
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extraDetails String
    Occurrence-specific extra details about the vulnerability.
    fixAvailable Boolean
    Whether at least one of the affected packages has a fix available.
    longDescription String
    A detailed description of this vulnerability.
    packageIssue List<PackageIssueResponse>
    The set of affected locations and their fixes (if available) within the associated resource.
    relatedUrls List<RelatedUrlResponse>
    URLs related to this vulnerability.
    severity String
    The note provider assigned severity of this vulnerability.
    shortDescription String
    A one sentence description of this vulnerability.
    type String
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vexAssessment VexAssessmentResponse
    cvssScore number
    The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
    cvssV2 CVSSResponse
    The cvss v2 score for the vulnerability.
    cvssVersion string
    CVSS version used to populate cvss_score and severity.
    cvssv3 CVSSResponse
    The cvss v3 score for the vulnerability.
    effectiveSeverity string
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extraDetails string
    Occurrence-specific extra details about the vulnerability.
    fixAvailable boolean
    Whether at least one of the affected packages has a fix available.
    longDescription string
    A detailed description of this vulnerability.
    packageIssue PackageIssueResponse[]
    The set of affected locations and their fixes (if available) within the associated resource.
    relatedUrls RelatedUrlResponse[]
    URLs related to this vulnerability.
    severity string
    The note provider assigned severity of this vulnerability.
    shortDescription string
    A one sentence description of this vulnerability.
    type string
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vexAssessment VexAssessmentResponse
    cvss_score float
    The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
    cvss_v2 CVSSResponse
    The cvss v2 score for the vulnerability.
    cvss_version str
    CVSS version used to populate cvss_score and severity.
    cvssv3 CVSSResponse
    The cvss v3 score for the vulnerability.
    effective_severity str
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extra_details str
    Occurrence-specific extra details about the vulnerability.
    fix_available bool
    Whether at least one of the affected packages has a fix available.
    long_description str
    A detailed description of this vulnerability.
    package_issue Sequence[PackageIssueResponse]
    The set of affected locations and their fixes (if available) within the associated resource.
    related_urls Sequence[RelatedUrlResponse]
    URLs related to this vulnerability.
    severity str
    The note provider assigned severity of this vulnerability.
    short_description str
    A one sentence description of this vulnerability.
    type str
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vex_assessment VexAssessmentResponse
    cvssScore Number
    The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
    cvssV2 Property Map
    The cvss v2 score for the vulnerability.
    cvssVersion String
    CVSS version used to populate cvss_score and severity.
    cvssv3 Property Map
    The cvss v3 score for the vulnerability.
    effectiveSeverity String
    The distro assigned severity for this vulnerability when it is available, otherwise this is the note provider assigned severity. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues.
    extraDetails String
    Occurrence-specific extra details about the vulnerability.
    fixAvailable Boolean
    Whether at least one of the affected packages has a fix available.
    longDescription String
    A detailed description of this vulnerability.
    packageIssue List<Property Map>
    The set of affected locations and their fixes (if available) within the associated resource.
    relatedUrls List<Property Map>
    URLs related to this vulnerability.
    severity String
    The note provider assigned severity of this vulnerability.
    shortDescription String
    A one sentence description of this vulnerability.
    type String
    The type of package; whether native or non native (e.g., ruby gems, node.js packages, etc.).
    vexAssessment Property Map

    WindowsUpdate, WindowsUpdateArgs

    Categories List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Category>
    The list of categories to which the update belongs.
    Description string
    The localized description of the update.
    Identity Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.Identity
    Required - The unique identifier for the update.
    KbArticleIds List<string>
    The Microsoft Knowledge Base article IDs that are associated with the update.
    LastPublishedTimestamp string
    The last published timestamp of the update.
    SupportUrl string
    The hyperlink to the support information for the update.
    Title string
    The localized title of the update.
    Categories []Category
    The list of categories to which the update belongs.
    Description string
    The localized description of the update.
    Identity Identity
    Required - The unique identifier for the update.
    KbArticleIds []string
    The Microsoft Knowledge Base article IDs that are associated with the update.
    LastPublishedTimestamp string
    The last published timestamp of the update.
    SupportUrl string
    The hyperlink to the support information for the update.
    Title string
    The localized title of the update.
    categories List<Category>
    The list of categories to which the update belongs.
    description String
    The localized description of the update.
    identity Identity
    Required - The unique identifier for the update.
    kbArticleIds List<String>
    The Microsoft Knowledge Base article IDs that are associated with the update.
    lastPublishedTimestamp String
    The last published timestamp of the update.
    supportUrl String
    The hyperlink to the support information for the update.
    title String
    The localized title of the update.
    categories Category[]
    The list of categories to which the update belongs.
    description string
    The localized description of the update.
    identity Identity
    Required - The unique identifier for the update.
    kbArticleIds string[]
    The Microsoft Knowledge Base article IDs that are associated with the update.
    lastPublishedTimestamp string
    The last published timestamp of the update.
    supportUrl string
    The hyperlink to the support information for the update.
    title string
    The localized title of the update.
    categories Sequence[Category]
    The list of categories to which the update belongs.
    description str
    The localized description of the update.
    identity Identity
    Required - The unique identifier for the update.
    kb_article_ids Sequence[str]
    The Microsoft Knowledge Base article IDs that are associated with the update.
    last_published_timestamp str
    The last published timestamp of the update.
    support_url str
    The hyperlink to the support information for the update.
    title str
    The localized title of the update.
    categories List<Property Map>
    The list of categories to which the update belongs.
    description String
    The localized description of the update.
    identity Property Map
    Required - The unique identifier for the update.
    kbArticleIds List<String>
    The Microsoft Knowledge Base article IDs that are associated with the update.
    lastPublishedTimestamp String
    The last published timestamp of the update.
    supportUrl String
    The hyperlink to the support information for the update.
    title String
    The localized title of the update.

    WindowsUpdateResponse, WindowsUpdateResponseArgs

    Categories List<Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.CategoryResponse>
    The list of categories to which the update belongs.
    Description string
    The localized description of the update.
    Identity Pulumi.GoogleNative.ContainerAnalysis.V1.Inputs.IdentityResponse
    Required - The unique identifier for the update.
    KbArticleIds List<string>
    The Microsoft Knowledge Base article IDs that are associated with the update.
    LastPublishedTimestamp string
    The last published timestamp of the update.
    SupportUrl string
    The hyperlink to the support information for the update.
    Title string
    The localized title of the update.
    Categories []CategoryResponse
    The list of categories to which the update belongs.
    Description string
    The localized description of the update.
    Identity IdentityResponse
    Required - The unique identifier for the update.
    KbArticleIds []string
    The Microsoft Knowledge Base article IDs that are associated with the update.
    LastPublishedTimestamp string
    The last published timestamp of the update.
    SupportUrl string
    The hyperlink to the support information for the update.
    Title string
    The localized title of the update.
    categories List<CategoryResponse>
    The list of categories to which the update belongs.
    description String
    The localized description of the update.
    identity IdentityResponse
    Required - The unique identifier for the update.
    kbArticleIds List<String>
    The Microsoft Knowledge Base article IDs that are associated with the update.
    lastPublishedTimestamp String
    The last published timestamp of the update.
    supportUrl String
    The hyperlink to the support information for the update.
    title String
    The localized title of the update.
    categories CategoryResponse[]
    The list of categories to which the update belongs.
    description string
    The localized description of the update.
    identity IdentityResponse
    Required - The unique identifier for the update.
    kbArticleIds string[]
    The Microsoft Knowledge Base article IDs that are associated with the update.
    lastPublishedTimestamp string
    The last published timestamp of the update.
    supportUrl string
    The hyperlink to the support information for the update.
    title string
    The localized title of the update.
    categories Sequence[CategoryResponse]
    The list of categories to which the update belongs.
    description str
    The localized description of the update.
    identity IdentityResponse
    Required - The unique identifier for the update.
    kb_article_ids Sequence[str]
    The Microsoft Knowledge Base article IDs that are associated with the update.
    last_published_timestamp str
    The last published timestamp of the update.
    support_url str
    The hyperlink to the support information for the update.
    title str
    The localized title of the update.
    categories List<Property Map>
    The list of categories to which the update belongs.
    description String
    The localized description of the update.
    identity Property Map
    Required - The unique identifier for the update.
    kbArticleIds List<String>
    The Microsoft Knowledge Base article IDs that are associated with the update.
    lastPublishedTimestamp String
    The last published timestamp of the update.
    supportUrl String
    The hyperlink to the support information for the update.
    title String
    The localized title of the update.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi