REST Resource: projects.occurrences

Resource: Occurrence

An instance of an analysis type that has been found on a resource.

JSON representation
{
  "name": string,
  "resource": {
    object (Resource)
  },
  "noteName": string,
  "kind": enum (NoteKind),
  "remediation": string,
  "createTime": string,
  "updateTime": string,
  "envelope": {
    object (Envelope)
  },

  // Union field details can be only one of the following:
  "vulnerability": {
    object (Details)
  },
  "build": {
    object (Details)
  },
  "derivedImage": {
    object (Details)
  },
  "installation": {
    object (Details)
  },
  "deployment": {
    object (Details)
  },
  "discovered": {
    object (Details)
  },
  "attestation": {
    object (Details)
  },
  "intoto": {
    object (Details)
  },
  "sbom": {
    object (DocumentOccurrence)
  },
  "spdxPackage": {
    object (PackageInfoOccurrence)
  },
  "spdxFile": {
    object (FileOccurrence)
  },
  "spdxRelationship": {
    object (RelationshipOccurrence)
  },
  "sbomReference": {
    object (SBOMReferenceOccurrence)
  }
  // End of list of possible types for union field details.
}
Fields
name

string

Output only. The name of the occurrence in the form of projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID].

resource

object (Resource)

Required. Immutable. The resource for which the occurrence applies.

noteName

string

Required. Immutable. The analysis note associated with this occurrence, in the form of projects/[PROVIDER_ID]/notes/[NOTE_ID]. This field can be used as a filter in list requests.

kind

enum (NoteKind)

Output only. This explicitly denotes which of the occurrence details are specified. This field can be used as a filter in list requests.

remediation

string

A description of actions that can be taken to remedy the note.

createTime

string (Timestamp format)

Output only. The time this occurrence was created.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

updateTime

string (Timestamp format)

Output only. The time this occurrence was last updated.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

envelope

object (Envelope)

https://github.com/secure-systems-lab/dsse

Union field details. Required. Immutable. Describes the details of the note kind found on this resource. details can be only one of the following:
vulnerability

object (Details)

Describes a security vulnerability.

build

object (Details)

Describes a verifiable build.

derivedImage

object (Details)

Describes how this resource derives from the basis in the associated note.

installation

object (Details)

Describes the installation of a package on the linked resource.

deployment

object (Details)

Describes the deployment of an artifact on a runtime.

discovered

object (Details)

Describes when a resource was discovered.

attestation

object (Details)

Describes an attestation of an artifact.

intoto

object (Details)

Describes a specific in-toto link.

sbom

object (DocumentOccurrence)

Describes a specific software bill of materials document.

spdxPackage

object (PackageInfoOccurrence)

Describes a specific SPDX Package.

spdxFile

object (FileOccurrence)

Describes a specific SPDX File.

spdxRelationship

object (RelationshipOccurrence)

Describes a specific SPDX Relationship.

sbomReference

object (SBOMReferenceOccurrence)

Describes a specific SBOM reference occurrences.

Methods

batchCreate

Creates new occurrences in batch.

create

Creates a new occurrence.

delete

Deletes the specified occurrence.

get

Gets the specified occurrence.

getIamPolicy

Gets the access control policy for a note or an occurrence resource.

getNotes

Gets the note attached to the specified occurrence.

getVulnerabilitySummary

Gets a summary of the number and severity of occurrences.

list

Lists occurrences for the specified project.

patch

Updates the specified occurrence.

setIamPolicy

Sets the access control policy on the specified note or occurrence.

testIamPermissions

Returns the permissions that a caller has on the specified note or occurrence.