mirror of
https://github.com/googleapis/googleapis.git
synced 2026-08-14 12:42:59 +02:00
109 lines
4.4 KiB
Protocol Buffer
109 lines
4.4 KiB
Protocol Buffer
// Copyright 2023 Google LLC
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
syntax = "proto3";
|
|
|
|
package google.devtools.containeranalysis.v1beta1;
|
|
|
|
import "google/api/annotations.proto";
|
|
import "google/api/client.proto";
|
|
import "google/api/field_behavior.proto";
|
|
import "google/iam/v1/iam_policy.proto";
|
|
import "google/iam/v1/policy.proto";
|
|
|
|
option go_package = "google.golang.org/genproto/googleapis/devtools/containeranalysis/v1beta1;containeranalysis";
|
|
option java_multiple_files = true;
|
|
option java_package = "com.google.containeranalysis.v1beta1";
|
|
option objc_class_prefix = "GCA";
|
|
|
|
// Retrieves analysis results of Cloud components such as Docker container
|
|
// images. The Container Analysis API is an implementation of the
|
|
// [Grafeas](https://grafeas.io) API.
|
|
//
|
|
// Analysis results are stored as a series of occurrences. An `Occurrence`
|
|
// contains information about a specific analysis instance on a resource. An
|
|
// occurrence refers to a `Note`. A note contains details describing the
|
|
// analysis and is generally stored in a separate project, called a `Provider`.
|
|
// Multiple occurrences can refer to the same note.
|
|
//
|
|
// For example, an SSL vulnerability could affect multiple images. In this case,
|
|
// there would be one note for the vulnerability and an occurrence for each
|
|
// image with the vulnerability referring to that note.
|
|
service ContainerAnalysisV1Beta1 {
|
|
option (google.api.default_host) = "containeranalysis.googleapis.com";
|
|
option (google.api.oauth_scopes) =
|
|
"https://www.googleapis.com/auth/cloud-platform";
|
|
|
|
// Sets the access control policy on the specified note or occurrence.
|
|
// Requires `containeranalysis.notes.setIamPolicy` or
|
|
// `containeranalysis.occurrences.setIamPolicy` permission if the resource is
|
|
// a note or an occurrence, respectively.
|
|
//
|
|
// The resource takes the format `projects/[PROJECT_ID]/notes/[NOTE_ID]` for
|
|
// notes and `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for
|
|
// occurrences.
|
|
rpc SetIamPolicy(google.iam.v1.SetIamPolicyRequest)
|
|
returns (google.iam.v1.Policy) {
|
|
option (google.api.http) = {
|
|
post: "/v1beta1/{resource=projects/*/notes/*}:setIamPolicy"
|
|
body: "*"
|
|
additional_bindings {
|
|
post: "/v1beta1/{resource=projects/*/occurrences/*}:setIamPolicy"
|
|
body: "*"
|
|
}
|
|
};
|
|
option (google.api.method_signature) = "resource,policy";
|
|
}
|
|
|
|
// Gets the access control policy for a note or an occurrence resource.
|
|
// Requires `containeranalysis.notes.setIamPolicy` or
|
|
// `containeranalysis.occurrences.setIamPolicy` permission if the resource is
|
|
// a note or occurrence, respectively.
|
|
//
|
|
// The resource takes the format `projects/[PROJECT_ID]/notes/[NOTE_ID]` for
|
|
// notes and `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for
|
|
// occurrences.
|
|
rpc GetIamPolicy(google.iam.v1.GetIamPolicyRequest)
|
|
returns (google.iam.v1.Policy) {
|
|
option (google.api.http) = {
|
|
post: "/v1beta1/{resource=projects/*/notes/*}:getIamPolicy"
|
|
body: "*"
|
|
additional_bindings {
|
|
post: "/v1beta1/{resource=projects/*/occurrences/*}:getIamPolicy"
|
|
body: "*"
|
|
}
|
|
};
|
|
option (google.api.method_signature) = "resource";
|
|
}
|
|
|
|
// Returns the permissions that a caller has on the specified note or
|
|
// occurrence. Requires list permission on the project (for example,
|
|
// `containeranalysis.notes.list`).
|
|
//
|
|
// The resource takes the format `projects/[PROJECT_ID]/notes/[NOTE_ID]` for
|
|
// notes and `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for
|
|
// occurrences.
|
|
rpc TestIamPermissions(google.iam.v1.TestIamPermissionsRequest)
|
|
returns (google.iam.v1.TestIamPermissionsResponse) {
|
|
option (google.api.http) = {
|
|
post: "/v1beta1/{resource=projects/*/notes/*}:testIamPermissions"
|
|
body: "*"
|
|
additional_bindings {
|
|
post: "/v1beta1/{resource=projects/*/occurrences/*}:testIamPermissions"
|
|
body: "*"
|
|
}
|
|
};
|
|
option (google.api.method_signature) = "resource,permissions";
|
|
}
|
|
}
|