PackageIssue

import type { PackageIssue } from "https://googleapis.deno.dev/v1/containeranalysis:v1.ts";

A detail for a distro and package this vulnerability occurrence was found in and its associated fix (if one is available).

interface PackageIssue {

affectedCpeUri?: string;

affectedPackage?: string;

affectedVersion?: Version;

readonly effectiveSeverity?:

| "SEVERITY_UNSPECIFIED"

| "MINIMAL"

| "LOW"

| "MEDIUM"

| "HIGH"

| "CRITICAL";

fileLocation?: GrafeasV1FileLocation[];

fixAvailable?: boolean;

fixedCpeUri?: string;

fixedPackage?: string;

fixedVersion?: Version;

packageType?: string;

}

§Properties

affectedCpeUri?: string

[src]

Required. The CPE URI this vulnerability was found in.

affectedPackage?: string

[src]

Required. The package this vulnerability was found in.

affectedVersion?: Version

[src]

Required. The version of the package that is installed on the resource affected by this vulnerability.

[src]

Output only. The distro or language system assigned severity for this vulnerability when that is available and note provider assigned severity when it is not available.

fileLocation?: GrafeasV1FileLocation[]

[src]

The location at which this package was found.

fixAvailable?: boolean

[src]

Output only. Whether a fix is available for this package.

fixedCpeUri?: string

[src]

The CPE URI this vulnerability was fixed in. It is possible for this to be different from the affected_cpe_uri.

fixedPackage?: string

[src]

The package this vulnerability was fixed in. It is possible for this to be different from the affected_package.

fixedVersion?: Version

[src]

Required. The version of the package this vulnerability was fixed in. Setting this to VersionKind.MAXIMUM means no fix is yet available.

packageType?: string

[src]

The type of package (e.g. OS, MAVEN, GO).