v1

type ComponentGraph struct {
	Nodes []*ComponentGraph_Node `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
	Edges []*ComponentGraph_Edge `protobuf:"bytes,2,rep,name=edges,proto3" json:"edges,omitempty"`
	// contains filtered or unexported fields
}

type ComponentGraph_Edge struct {
	SubjectId   string                   `protobuf:"bytes,1,opt,name=subject_id,json=subjectId,proto3" json:"subject_id,omitempty"`
	PredicateId string                   `protobuf:"bytes,2,opt,name=predicate_id,json=predicateId,proto3" json:"predicate_id,omitempty"`
	Type        ComponentGraph_Edge_Type `protobuf:"varint,3,opt,name=type,proto3,enum=chainguard.platform.tenant.ComponentGraph_Edge_Type" json:"type,omitempty"`
	// contains filtered or unexported fields
}

type ComponentGraph_Edge_Type int32

type ComponentGraph_Node struct {

	// Types that are assignable to TypedNode:
	//
	//	*ComponentGraph_Node_Package
	//	*ComponentGraph_Node_File
	TypedNode isComponentGraph_Node_TypedNode `protobuf_oneof:"typed_node"`
	// contains filtered or unexported fields
}

type ComponentGraph_Node_File struct {
	File *File2 `protobuf:"bytes,2,opt,name=file,proto3,oneof"`
}

type ComponentGraph_Node_Package struct {
	Package *Package2 `protobuf:"bytes,1,opt,name=package,proto3,oneof"`
}

type File2 struct {
	Id    string   `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name  string   `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Types []string `protobuf:"bytes,4,rep,name=types,proto3" json:"types,omitempty"`
	// contains filtered or unexported fields
}

type Fix struct {

	// List of in versions of the package on which the vulnerability has been solved.
	Versions []string `protobuf:"bytes,1,rep,name=versions,proto3" json:"versions,omitempty"`
	// state reflects the state of the fix, e.g. fixed, unknown, not-fixed, won't-fix.
	State Fix_State `protobuf:"varint,2,opt,name=state,proto3,enum=chainguard.platform.tenant.Fix_State" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type Fix_State int32

type Package2 struct {
	Id          string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name        string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Version     string `protobuf:"bytes,3,opt,name=version,proto3" json:"version,omitempty"`
	License     string `protobuf:"bytes,4,opt,name=license,proto3" json:"license,omitempty"`
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	Purl        string `protobuf:"bytes,6,opt,name=purl,proto3" json:"purl,omitempty"`
	// contains filtered or unexported fields
}

type Sbom2 struct {

	// id, The Sbom UIDP at which this Sbom resides in the hierarchy.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// raw_sbom may or may not be useful in the long term, but for now to make
	// progress on this, we'll just yolo and serialize it here.
	RawSbom []byte          `protobuf:"bytes,2,opt,name=raw_sbom,json=rawSbom,proto3" json:"raw_sbom,omitempty"`
	Graph   *ComponentGraph `protobuf:"bytes,3,opt,name=graph,proto3" json:"graph,omitempty"`
	// last_seen tracks the timestamp at which this sbom was last seen.
	// TODO(vaikas): Does this really make any sense?
	LastSeen *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=last_seen,json=lastSeen,proto3" json:"last_seen,omitempty"`
	// tool holds the name of the tool that produced the SBOM.
	Tool string `protobuf:"bytes,5,opt,name=tool,proto3" json:"tool,omitempty"`
	// format holds whether the SBOM is SPDX, CycloneDX, or other.
	Format string `protobuf:"bytes,6,opt,name=format,proto3" json:"format,omitempty"`
	// generated_at holds when the SBOM was generated.
	GeneratedAt *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=generated_at,json=generatedAt,proto3" json:"generated_at,omitempty"`
	// authors is zero or more authors concatenated.
	Authors string `protobuf:"bytes,8,opt,name=authors,proto3" json:"authors,omitempty"`
	// source is where the SBOM came from. For example, we want to know if sbom
	// was generated by us, or ingested.
	Source Sbom2_Source `protobuf:"varint,9,opt,name=source,proto3,enum=chainguard.platform.tenant.Sbom2_Source" json:"source,omitempty"`
	// Name of the Sbom.
	Name string `protobuf:"bytes,10,opt,name=name,proto3" json:"name,omitempty"`
	// Short description of the Sbom
	Description string `protobuf:"bytes,11,opt,name=description,proto3" json:"description,omitempty"`
	// digest of the SBOM when ingested
	Digest *string `protobuf:"bytes,12,opt,name=digest,proto3,oneof" json:"digest,omitempty"`
	// contains filtered or unexported fields
}

type Sbom2Filter struct {

	// id is the exact UID of the record.
	Id   string         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Uidp *v1.UIDPFilter `protobuf:"bytes,2,opt,name=uidp,proto3" json:"uidp,omitempty"`
	// active_since is the timestamp after which the records should
	// have last been observed in the returned context.
	ActiveSince *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=active_since,json=activeSince,proto3" json:"active_since,omitempty"`
	// include_raw_sbom is a flag to return the raw sbom field in the record.
	IncludeRawSbom bool `protobuf:"varint,4,opt,name=include_raw_sbom,json=includeRawSbom,proto3" json:"include_raw_sbom,omitempty"`
	// contains filtered or unexported fields
}

type Sbom2List struct {
	Items []*Sbom2 `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	// contains filtered or unexported fields
}

type Sbom2_Source int32

type Scanner struct {

	// name contains the vendor name of the scanner.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// version holds the version of the used scanner to generate the report.
	Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

type VulnReport struct {

	// id, The VulnReport UIDP at which this VulnReport resides.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// vulnerability_db_last_build_time holds the time when the vulnerability database was built last time.
	VulnerabilityDbLastBuildTime *timestamppb.Timestamp `` /* 151-byte string literal not displayed */
	// Report's list of vulnerability matches(s).
	VulnerabilityMatches []*VulnerabilityMatch `protobuf:"bytes,3,rep,name=vulnerability_matches,json=vulnerabilityMatches,proto3" json:"vulnerability_matches,omitempty"`
	// scanner contains some information about the scanner used to generate the report.
	Scanner *Scanner `protobuf:"bytes,4,opt,name=scanner,proto3" json:"scanner,omitempty"`
	// report_generation tracks the timestamp at which this report was generated.
	ReportGeneration *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=report_generation,json=reportGeneration,proto3" json:"report_generation,omitempty"`
	// raw_vuln_report may or may not be useful in the long term, but for now to make
	// progress on this, we'll just yolo and serialize it here.
	RawVulnReport []byte `protobuf:"bytes,6,opt,name=raw_vuln_report,json=rawVulnReport,proto3" json:"raw_vuln_report,omitempty"`
	// last_seen tracks the timestamp at which this vuln report was last seen.
	LastSeen *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=last_seen,json=lastSeen,proto3" json:"last_seen,omitempty"`
	// contains filtered or unexported fields
}

type VulnReportFilter struct {

	// id is the exact UID of the record.
	Id   string         `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Uidp *v1.UIDPFilter `protobuf:"bytes,2,opt,name=uidp,proto3" json:"uidp,omitempty"`
	// active_since is the timestamp after which the records should
	// have last been observed in the returned context.
	ActiveSince *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=active_since,json=activeSince,proto3" json:"active_since,omitempty"`
	// include_raw_vuln_report is a flag to return a list of reports containing the raw report.
	IncludeRawVulnReport bool `` /* 126-byte string literal not displayed */
	// contains filtered or unexported fields
}

type VulnReportList struct {
	Items []*VulnReport `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	// contains filtered or unexported fields
}

type VulnerabilityMatch struct {

	// Vulnerability holds information about the found vulnerability.
	Vulnerability *VulnerabilityRecord `protobuf:"bytes,1,opt,name=vulnerability,proto3" json:"vulnerability,omitempty"`
	// Package affected by this vulnerability.
	Pkg *Package2 `protobuf:"bytes,2,opt,name=pkg,proto3" json:"pkg,omitempty"`
	// Fix related data about this vulnerability.
	Fix *Fix `protobuf:"bytes,3,opt,name=fix,proto3,oneof" json:"fix,omitempty"`
	// contains filtered or unexported fields
}

type VulnerabilityRecord struct {

	// id of the vulnerability e.g. CVE_1231-12.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// a short description of this vulnerability.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// severity is the value representing the severity of the vulnerability
	Severity VulnerabilityRecord_Severity `` /* 131-byte string literal not displayed */
	// source from where the vulnerability information was obtained, e.g. nvd, github, osv.
	Source string `protobuf:"bytes,4,opt,name=source,proto3" json:"source,omitempty"`
	// List of cvss information about the exploitability of the vulnerability.
	Cvss []*VulnerabilityRecord_Cvss `protobuf:"bytes,5,rep,name=cvss,proto3" json:"cvss,omitempty"`
	// List of cpe_uri on which the vulnerability was found.
	CpeUri []string `protobuf:"bytes,6,rep,name=cpe_uri,json=cpeUri,proto3" json:"cpe_uri,omitempty"`
	// URLs related to this vulnerability.
	RelatedUrls []string `protobuf:"bytes,7,rep,name=related_urls,json=relatedUrls,proto3" json:"related_urls,omitempty"`
	// advisories related to this vulnerability.
	Advisories map[string]string `` /* 161-byte string literal not displayed */
	// related vulnerabilities to the main vulnerability reported here.
	RelatedVulnerabilities []*VulnerabilityRecord_RelatedVulnerability `` /* 127-byte string literal not displayed */
	// display_id is the normalized value of the vulnerability ID often defined by a CVE-ID.
	DisplayId string `protobuf:"bytes,10,opt,name=display_id,json=displayId,proto3" json:"display_id,omitempty"`
	// contains filtered or unexported fields
}

type VulnerabilityRecord_Cvss struct {

	// CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.
	Score string `protobuf:"bytes,1,opt,name=score,proto3" json:"score,omitempty"`
	// CVSS version used to populate score and severity.
	Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

type VulnerabilityRecord_RelatedVulnerability struct {

	// ID of the vulnerability.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Source from where the vulnerability information was obtained, e.g. nvd, github, osv.
	Source string `protobuf:"bytes,2,opt,name=source,proto3" json:"source,omitempty"`
	// contains filtered or unexported fields
}

type VulnerabilityRecord_Severity int32