You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/dyn/containeranalysis_v1alpha1.projects.notes.occurrences.html
+46
Original file line number
Diff line number
Diff line change
@@ -356,6 +356,52 @@ <h3>Method Details</h3>
356
356
"uri": "A String", # The unique URI of the resource. E.g., "https://gcr.io/project/image@sha256:foo" for a Docker image.
357
357
},
358
358
"resourceUrl": "A String", # The unique URL of the image or the container for which the `Occurrence` applies. For example, https://gcr.io/project/image@sha256:foo This field can be used as a filter in list requests.
359
+
"sbom": { # DocumentOccurrence represents an SPDX Document Creation Information section: https://spdx.github.io/spdx-spec/2-document-creation-information/ # Describes a specific software bill of materials document.
360
+
"createTime": "A String", # Identify when the SPDX file was originally created. The date is to be specified according to combined date and time in UTC format as specified in ISO 8601 standard
361
+
"creatorComment": "A String", # A field for creators of the SPDX file to provide general comments about the creation of the SPDX file or any other relevant comment not included in the other fields
362
+
"creators": [ # Identify who (or what, in the case of a tool) created the SPDX file. If the SPDX file was created by an individual, indicate the person's name
363
+
"A String",
364
+
],
365
+
"documentComment": "A String", # A field for creators of the SPDX file content to provide comments to the consumers of the SPDX document
366
+
"externalDocumentRefs": [ # Identify any external SPDX documents referenced within this SPDX document
367
+
"A String",
368
+
],
369
+
"id": "A String", # Identify the current SPDX document which may be referenced in relationships by other files, packages internally and documents externally
370
+
"licenseListVersion": "A String", # A field for creators of the SPDX file to provide the version of the SPDX License List used when the SPDX file was created
371
+
"namespace": "A String", # Provide an SPDX document specific namespace as a unique absolute Uniform Resource Identifier (URI) as specified in RFC-3986, with the exception of the ‘#’ delimiter
372
+
"title": "A String", # Identify name of this document as designated by creator
373
+
},
374
+
"spdxFile": { # FileOccurrence represents an SPDX File Information section: https://spdx.github.io/spdx-spec/4-file-information/ # Describes a specific SPDX File.
375
+
"attributions": [ # This field provides a place for the SPDX data creator to record, at the file level, acknowledgements that may be needed to be communicated in some contexts
376
+
"A String",
377
+
],
378
+
"comment": "A String", # This field provides a place for the SPDX file creator to record any general comments about the file
379
+
"contributors": [ # This field provides a place for the SPDX file creator to record file contributors
380
+
"A String",
381
+
],
382
+
"copyright": "A String", # Identify the copyright holder of the file, as well as any dates present
383
+
"filesLicenseInfo": [ # This field contains the license information actually found in the file, if any
384
+
"A String",
385
+
],
386
+
"id": "A String", # Uniquely identify any element in an SPDX document which may be referenced by other elements
387
+
"licenseComments": "A String", # This field provides a place for the SPDX file creator to record any relevant background references or analysis that went in to arriving at the Concluded License for a file
388
+
"licenseConcluded": "A String", # This field contains the license the SPDX file creator has concluded as governing the file or alternative values if the governing license cannot be determined
389
+
"notice": "A String", # This field provides a place for the SPDX file creator to record license notices or other such related notices found in the file
390
+
},
391
+
"spdxPackage": { # PackageOccurrence represents an SPDX Package Information section: https://spdx.github.io/spdx-spec/3-package-information/ # Describes a specific SPDX Package.
392
+
"comment": "A String", # A place for the SPDX file creator to record any general comments about the package being described
393
+
"filename": "A String", # Provide the actual file name of the package, or path of the directory being treated as a package
394
+
"id": "A String", # Uniquely identify any element in an SPDX document which may be referenced by other elements
395
+
"licenseComments": "A String", # This field provides a place for the SPDX file creator to record any relevant background information or analysis that went in to arriving at the Concluded License for a package
396
+
"licenseConcluded": "A String", # package or alternative values, if the governing license cannot be determined
397
+
"sourceInfo": "A String", # Provide a place for the SPDX file creator to record any relevant background information or additional comments about the origin of the package
398
+
},
399
+
"spdxRelationship": { # RelationshipOccurrence represents an SPDX Relationship section: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/ # Describes a specific relationship between SPDX elements.
400
+
"comment": "A String", # A place for the SPDX file creator to record any general comments about the relationship
401
+
"source": "A String", # Also referred to as SPDXRef-A The source SPDX element (file, package, etc)
402
+
"target": "A String", # Also referred to as SPDXRef-B The target SPDC element (file, package, etc) In cases where there are "known unknowns", the use of the keyword NOASSERTION can be used The keywords NONE can be used to indicate that an SPDX element (package/file/snippet) has no other elements connected by some relationship to it
403
+
"type": "A String", # The type of relationship between the source and target SPDX elements
404
+
},
359
405
"updateTime": "A String", # Output only. The time this `Occurrence` was last updated.
360
406
"upgrade": { # An Upgrade Occurrence represents that a specific resource_url could install a specific upgrade. This presence is supplied via local sources (i.e. it is present in the mirror and the running system has noticed its availability). # Describes an upgrade.
361
407
"distribution": { # The Upgrade Distribution represents metadata about the Upgrade for each operating system (CPE). Some distributions have additional metadata around updates, classifying them into various categories and severities. # Metadata about the upgrade for available for the specific operating system for the resource_url. This allows efficient filtering, as well as making it easier to use the occurrence.
0 commit comments