export declare const AliasContextKind: { /** * Unknown. */ readonly KindUnspecified: "KIND_UNSPECIFIED"; /** * Git tag. */ readonly Fixed: "FIXED"; /** * Git branch. */ readonly Movable: "MOVABLE"; /** * Used to specify non-standard aliases. For example, if a Git repo has a ref named "refs/foo/bar". */ readonly Other: "OTHER"; }; /** * The alias kind. */ export type AliasContextKind = (typeof AliasContextKind)[keyof typeof AliasContextKind]; export declare const AssessmentState: { /** * No state is specified. */ readonly StateUnspecified: "STATE_UNSPECIFIED"; /** * This product is known to be affected by this vulnerability. */ readonly Affected: "AFFECTED"; /** * This product is known to be not affected by this vulnerability. */ readonly NotAffected: "NOT_AFFECTED"; /** * This product contains a fix for this vulnerability. */ readonly Fixed: "FIXED"; /** * It is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation. */ readonly UnderInvestigation: "UNDER_INVESTIGATION"; }; /** * Provides the state of this Vulnerability assessment. */ export type AssessmentState = (typeof AssessmentState)[keyof typeof AssessmentState]; export declare const BuildSignatureKeyType: { /** * `KeyType` is not set. */ readonly KeyTypeUnspecified: "KEY_TYPE_UNSPECIFIED"; /** * `PGP ASCII Armored` public key. */ readonly PgpAsciiArmored: "PGP_ASCII_ARMORED"; /** * `PKIX PEM` public key. */ readonly PkixPem: "PKIX_PEM"; }; /** * The type of the key, either stored in `public_key` or referenced in `key_id`. */ export type BuildSignatureKeyType = (typeof BuildSignatureKeyType)[keyof typeof BuildSignatureKeyType]; export declare const CVSSAttackComplexity: { /** * Defined in CVSS v3, CVSS v2 */ readonly AttackComplexityUnspecified: "ATTACK_COMPLEXITY_UNSPECIFIED"; /** * Defined in CVSS v3, CVSS v2 */ readonly AttackComplexityLow: "ATTACK_COMPLEXITY_LOW"; /** * Defined in CVSS v3, CVSS v2 */ readonly AttackComplexityHigh: "ATTACK_COMPLEXITY_HIGH"; /** * Defined in CVSS v2 */ readonly AttackComplexityMedium: "ATTACK_COMPLEXITY_MEDIUM"; }; /** * Defined in CVSS v3, CVSS v2 */ export type CVSSAttackComplexity = (typeof CVSSAttackComplexity)[keyof typeof CVSSAttackComplexity]; export declare const CVSSAttackVector: { /** * Defined in CVSS v3, CVSS v2 */ readonly AttackVectorUnspecified: "ATTACK_VECTOR_UNSPECIFIED"; /** * Defined in CVSS v3, CVSS v2 */ readonly AttackVectorNetwork: "ATTACK_VECTOR_NETWORK"; /** * Defined in CVSS v3, CVSS v2 */ readonly AttackVectorAdjacent: "ATTACK_VECTOR_ADJACENT"; /** * Defined in CVSS v3, CVSS v2 */ readonly AttackVectorLocal: "ATTACK_VECTOR_LOCAL"; /** * Defined in CVSS v3 */ readonly AttackVectorPhysical: "ATTACK_VECTOR_PHYSICAL"; }; /** * Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. Defined in CVSS v3, CVSS v2 */ export type CVSSAttackVector = (typeof CVSSAttackVector)[keyof typeof CVSSAttackVector]; export declare const CVSSAuthentication: { /** * Defined in CVSS v2 */ readonly AuthenticationUnspecified: "AUTHENTICATION_UNSPECIFIED"; /** * Defined in CVSS v2 */ readonly AuthenticationMultiple: "AUTHENTICATION_MULTIPLE"; /** * Defined in CVSS v2 */ readonly AuthenticationSingle: "AUTHENTICATION_SINGLE"; /** * Defined in CVSS v2 */ readonly AuthenticationNone: "AUTHENTICATION_NONE"; }; /** * Defined in CVSS v2 */ export type CVSSAuthentication = (typeof CVSSAuthentication)[keyof typeof CVSSAuthentication]; export declare const CVSSAvailabilityImpact: { /** * Defined in CVSS v3, CVSS v2 */ readonly ImpactUnspecified: "IMPACT_UNSPECIFIED"; /** * Defined in CVSS v3 */ readonly ImpactHigh: "IMPACT_HIGH"; /** * Defined in CVSS v3 */ readonly ImpactLow: "IMPACT_LOW"; /** * Defined in CVSS v3, CVSS v2 */ readonly ImpactNone: "IMPACT_NONE"; /** * Defined in CVSS v2 */ readonly ImpactPartial: "IMPACT_PARTIAL"; /** * Defined in CVSS v2 */ readonly ImpactComplete: "IMPACT_COMPLETE"; }; /** * Defined in CVSS v3, CVSS v2 */ export type CVSSAvailabilityImpact = (typeof CVSSAvailabilityImpact)[keyof typeof CVSSAvailabilityImpact]; export declare const CVSSConfidentialityImpact: { /** * Defined in CVSS v3, CVSS v2 */ readonly ImpactUnspecified: "IMPACT_UNSPECIFIED"; /** * Defined in CVSS v3 */ readonly ImpactHigh: "IMPACT_HIGH"; /** * Defined in CVSS v3 */ readonly ImpactLow: "IMPACT_LOW"; /** * Defined in CVSS v3, CVSS v2 */ readonly ImpactNone: "IMPACT_NONE"; /** * Defined in CVSS v2 */ readonly ImpactPartial: "IMPACT_PARTIAL"; /** * Defined in CVSS v2 */ readonly ImpactComplete: "IMPACT_COMPLETE"; }; /** * Defined in CVSS v3, CVSS v2 */ export type CVSSConfidentialityImpact = (typeof CVSSConfidentialityImpact)[keyof typeof CVSSConfidentialityImpact]; export declare const CVSSIntegrityImpact: { /** * Defined in CVSS v3, CVSS v2 */ readonly ImpactUnspecified: "IMPACT_UNSPECIFIED"; /** * Defined in CVSS v3 */ readonly ImpactHigh: "IMPACT_HIGH"; /** * Defined in CVSS v3 */ readonly ImpactLow: "IMPACT_LOW"; /** * Defined in CVSS v3, CVSS v2 */ readonly ImpactNone: "IMPACT_NONE"; /** * Defined in CVSS v2 */ readonly ImpactPartial: "IMPACT_PARTIAL"; /** * Defined in CVSS v2 */ readonly ImpactComplete: "IMPACT_COMPLETE"; }; /** * Defined in CVSS v3, CVSS v2 */ export type CVSSIntegrityImpact = (typeof CVSSIntegrityImpact)[keyof typeof CVSSIntegrityImpact]; export declare const CVSSPrivilegesRequired: { /** * Defined in CVSS v3 */ readonly PrivilegesRequiredUnspecified: "PRIVILEGES_REQUIRED_UNSPECIFIED"; /** * Defined in CVSS v3 */ readonly PrivilegesRequiredNone: "PRIVILEGES_REQUIRED_NONE"; /** * Defined in CVSS v3 */ readonly PrivilegesRequiredLow: "PRIVILEGES_REQUIRED_LOW"; /** * Defined in CVSS v3 */ readonly PrivilegesRequiredHigh: "PRIVILEGES_REQUIRED_HIGH"; }; /** * Defined in CVSS v3 */ export type CVSSPrivilegesRequired = (typeof CVSSPrivilegesRequired)[keyof typeof CVSSPrivilegesRequired]; export declare const CVSSScope: { /** * Defined in CVSS v3 */ readonly ScopeUnspecified: "SCOPE_UNSPECIFIED"; /** * Defined in CVSS v3 */ readonly ScopeUnchanged: "SCOPE_UNCHANGED"; /** * Defined in CVSS v3 */ readonly ScopeChanged: "SCOPE_CHANGED"; }; /** * Defined in CVSS v3 */ export type CVSSScope = (typeof CVSSScope)[keyof typeof CVSSScope]; export declare const CVSSUserInteraction: { /** * Defined in CVSS v3 */ readonly UserInteractionUnspecified: "USER_INTERACTION_UNSPECIFIED"; /** * Defined in CVSS v3 */ readonly UserInteractionNone: "USER_INTERACTION_NONE"; /** * Defined in CVSS v3 */ readonly UserInteractionRequired: "USER_INTERACTION_REQUIRED"; }; /** * Defined in CVSS v3 */ export type CVSSUserInteraction = (typeof CVSSUserInteraction)[keyof typeof CVSSUserInteraction]; export declare const CVSSv3AttackComplexity: { readonly AttackComplexityUnspecified: "ATTACK_COMPLEXITY_UNSPECIFIED"; readonly AttackComplexityLow: "ATTACK_COMPLEXITY_LOW"; readonly AttackComplexityHigh: "ATTACK_COMPLEXITY_HIGH"; }; export type CVSSv3AttackComplexity = (typeof CVSSv3AttackComplexity)[keyof typeof CVSSv3AttackComplexity]; export declare const CVSSv3AttackVector: { readonly AttackVectorUnspecified: "ATTACK_VECTOR_UNSPECIFIED"; readonly AttackVectorNetwork: "ATTACK_VECTOR_NETWORK"; readonly AttackVectorAdjacent: "ATTACK_VECTOR_ADJACENT"; readonly AttackVectorLocal: "ATTACK_VECTOR_LOCAL"; readonly AttackVectorPhysical: "ATTACK_VECTOR_PHYSICAL"; }; /** * Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. */ export type CVSSv3AttackVector = (typeof CVSSv3AttackVector)[keyof typeof CVSSv3AttackVector]; export declare const CVSSv3AvailabilityImpact: { readonly ImpactUnspecified: "IMPACT_UNSPECIFIED"; readonly ImpactHigh: "IMPACT_HIGH"; readonly ImpactLow: "IMPACT_LOW"; readonly ImpactNone: "IMPACT_NONE"; }; export type CVSSv3AvailabilityImpact = (typeof CVSSv3AvailabilityImpact)[keyof typeof CVSSv3AvailabilityImpact]; export declare const CVSSv3ConfidentialityImpact: { readonly ImpactUnspecified: "IMPACT_UNSPECIFIED"; readonly ImpactHigh: "IMPACT_HIGH"; readonly ImpactLow: "IMPACT_LOW"; readonly ImpactNone: "IMPACT_NONE"; }; export type CVSSv3ConfidentialityImpact = (typeof CVSSv3ConfidentialityImpact)[keyof typeof CVSSv3ConfidentialityImpact]; export declare const CVSSv3IntegrityImpact: { readonly ImpactUnspecified: "IMPACT_UNSPECIFIED"; readonly ImpactHigh: "IMPACT_HIGH"; readonly ImpactLow: "IMPACT_LOW"; readonly ImpactNone: "IMPACT_NONE"; }; export type CVSSv3IntegrityImpact = (typeof CVSSv3IntegrityImpact)[keyof typeof CVSSv3IntegrityImpact]; export declare const CVSSv3PrivilegesRequired: { readonly PrivilegesRequiredUnspecified: "PRIVILEGES_REQUIRED_UNSPECIFIED"; readonly PrivilegesRequiredNone: "PRIVILEGES_REQUIRED_NONE"; readonly PrivilegesRequiredLow: "PRIVILEGES_REQUIRED_LOW"; readonly PrivilegesRequiredHigh: "PRIVILEGES_REQUIRED_HIGH"; }; export type CVSSv3PrivilegesRequired = (typeof CVSSv3PrivilegesRequired)[keyof typeof CVSSv3PrivilegesRequired]; export declare const CVSSv3Scope: { readonly ScopeUnspecified: "SCOPE_UNSPECIFIED"; readonly ScopeUnchanged: "SCOPE_UNCHANGED"; readonly ScopeChanged: "SCOPE_CHANGED"; }; export type CVSSv3Scope = (typeof CVSSv3Scope)[keyof typeof CVSSv3Scope]; export declare const CVSSv3UserInteraction: { readonly UserInteractionUnspecified: "USER_INTERACTION_UNSPECIFIED"; readonly UserInteractionNone: "USER_INTERACTION_NONE"; readonly UserInteractionRequired: "USER_INTERACTION_REQUIRED"; }; export type CVSSv3UserInteraction = (typeof CVSSv3UserInteraction)[keyof typeof CVSSv3UserInteraction]; export declare const DeploymentPlatform: { /** * Unknown. */ readonly PlatformUnspecified: "PLATFORM_UNSPECIFIED"; /** * Google Container Engine. */ readonly Gke: "GKE"; /** * Google App Engine: Flexible Environment. */ readonly Flex: "FLEX"; /** * Custom user-defined platform. */ readonly Custom: "CUSTOM"; }; /** * Platform hosting this deployment. */ export type DeploymentPlatform = (typeof DeploymentPlatform)[keyof typeof DeploymentPlatform]; export declare const DiscoveredAnalysisStatus: { /** * Unknown. */ readonly AnalysisStatusUnspecified: "ANALYSIS_STATUS_UNSPECIFIED"; /** * Resource is known but no action has been taken yet. */ readonly Pending: "PENDING"; /** * Resource is being analyzed. */ readonly Scanning: "SCANNING"; /** * Analysis has finished successfully. */ readonly FinishedSuccess: "FINISHED_SUCCESS"; /** * Analysis has completed. */ readonly Complete: "COMPLETE"; /** * Analysis has finished unsuccessfully, the analysis itself is in a bad state. */ readonly FinishedFailed: "FINISHED_FAILED"; /** * The resource is known not to be supported */ readonly FinishedUnsupported: "FINISHED_UNSUPPORTED"; }; /** * The status of discovery for the resource. */ export type DiscoveredAnalysisStatus = (typeof DiscoveredAnalysisStatus)[keyof typeof DiscoveredAnalysisStatus]; export declare const DiscoveredContinuousAnalysis: { /** * Unknown. */ readonly ContinuousAnalysisUnspecified: "CONTINUOUS_ANALYSIS_UNSPECIFIED"; /** * The resource is continuously analyzed. */ readonly Active: "ACTIVE"; /** * The resource is ignored for continuous analysis. */ readonly Inactive: "INACTIVE"; }; /** * Whether the resource is continuously analyzed. */ export type DiscoveredContinuousAnalysis = (typeof DiscoveredContinuousAnalysis)[keyof typeof DiscoveredContinuousAnalysis]; export declare const DiscoveryAnalysisKind: { /** * Default value. This value is unused. */ readonly NoteKindUnspecified: "NOTE_KIND_UNSPECIFIED"; /** * The note and occurrence represent a package vulnerability. */ readonly Vulnerability: "VULNERABILITY"; /** * The note and occurrence assert build provenance. */ readonly Build: "BUILD"; /** * This represents an image basis relationship. */ readonly Image: "IMAGE"; /** * This represents a package installed via a package manager. */ readonly Package: "PACKAGE"; /** * The note and occurrence track deployment events. */ readonly Deployment: "DEPLOYMENT"; /** * The note and occurrence track the initial discovery status of a resource. */ readonly Discovery: "DISCOVERY"; /** * This represents a logical "role" that can attest to artifacts. */ readonly Attestation: "ATTESTATION"; /** * This represents an in-toto link. */ readonly Intoto: "INTOTO"; /** * This represents a software bill of materials. */ readonly Sbom: "SBOM"; /** * This represents an SPDX Package. */ readonly SpdxPackage: "SPDX_PACKAGE"; /** * This represents an SPDX File. */ readonly SpdxFile: "SPDX_FILE"; /** * This represents an SPDX Relationship. */ readonly SpdxRelationship: "SPDX_RELATIONSHIP"; /** * This represents a Vulnerability Assessment. */ readonly VulnerabilityAssessment: "VULNERABILITY_ASSESSMENT"; /** * This represents an SBOM Reference. */ readonly SbomReference: "SBOM_REFERENCE"; }; /** * Required. Immutable. The kind of analysis that is handled by this discovery. */ export type DiscoveryAnalysisKind = (typeof DiscoveryAnalysisKind)[keyof typeof DiscoveryAnalysisKind]; export declare const DistributionArchitecture: { /** * Unknown architecture. */ readonly ArchitectureUnspecified: "ARCHITECTURE_UNSPECIFIED"; /** * X86 architecture. */ readonly X86: "X86"; /** * X64 architecture. */ readonly X64: "X64"; }; /** * The CPU architecture for which packages in this distribution channel were built. */ export type DistributionArchitecture = (typeof DistributionArchitecture)[keyof typeof DistributionArchitecture]; export declare const ExternalRefCategory: { /** * Unspecified */ readonly CategoryUnspecified: "CATEGORY_UNSPECIFIED"; /** * Security (e.g. cpe22Type, cpe23Type) */ readonly Security: "SECURITY"; /** * Package Manager (e.g. maven-central, npm, nuget, bower, purl) */ readonly PackageManager: "PACKAGE_MANAGER"; /** * Persistent-Id (e.g. swh) */ readonly PersistentId: "PERSISTENT_ID"; /** * Other */ readonly Other: "OTHER"; }; /** * An External Reference allows a Package to reference an external source of additional information, metadata, enumerations, asset identifiers, or downloadable content believed to be relevant to the Package */ export type ExternalRefCategory = (typeof ExternalRefCategory)[keyof typeof ExternalRefCategory]; export declare const FileNoteFileType: { /** * Unspecified */ readonly FileTypeUnspecified: "FILE_TYPE_UNSPECIFIED"; /** * The file is human readable source code (.c, .html, etc.) */ readonly Source: "SOURCE"; /** * The file is a compiled object, target image or binary executable (.o, .a, etc.) */ readonly Binary: "BINARY"; /** * The file represents an archive (.tar, .jar, etc.) */ readonly Archive: "ARCHIVE"; /** * The file is associated with a specific application type (MIME type of application/*) */ readonly Application: "APPLICATION"; /** * The file is associated with an audio file (MIME type of audio/* , e.g. .mp3) */ readonly Audio: "AUDIO"; /** * The file is associated with an picture image file (MIME type of image/*, e.g., .jpg, .gif) */ readonly Image: "IMAGE"; /** * The file is human readable text file (MIME type of text/*) */ readonly Text: "TEXT"; /** * The file is associated with a video file type (MIME type of video/*) */ readonly Video: "VIDEO"; /** * The file serves as documentation */ readonly Documentation: "DOCUMENTATION"; /** * The file is an SPDX document */ readonly Spdx: "SPDX"; /** * The file doesn't fit into the above categories (generated artifacts, data files, etc.) */ readonly Other: "OTHER"; }; /** * This field provides information about the type of file identified */ export type FileNoteFileType = (typeof FileNoteFileType)[keyof typeof FileNoteFileType]; export declare const GenericSignedAttestationContentType: { /** * `ContentType` is not set. */ readonly ContentTypeUnspecified: "CONTENT_TYPE_UNSPECIFIED"; /** * Atomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted in `plaintext` is a JSON blob conforming to the linked schema. */ readonly SimpleSigningJson: "SIMPLE_SIGNING_JSON"; }; /** * Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema). */ export type GenericSignedAttestationContentType = (typeof GenericSignedAttestationContentType)[keyof typeof GenericSignedAttestationContentType]; export declare const GrafeasV1beta1VulnerabilityDetailsEffectiveSeverity: { /** * Unknown. */ readonly SeverityUnspecified: "SEVERITY_UNSPECIFIED"; /** * Minimal severity. */ readonly Minimal: "MINIMAL"; /** * Low severity. */ readonly Low: "LOW"; /** * Medium severity. */ readonly Medium: "MEDIUM"; /** * High severity. */ readonly High: "HIGH"; /** * Critical severity. */ readonly Critical: "CRITICAL"; }; /** * The distro assigned severity for this vulnerability when it is available, and note provider assigned severity when distro has not yet assigned a severity for this vulnerability. When there are multiple PackageIssues for this vulnerability, they can have different effective severities because some might be provided by the distro while others are provided by the language ecosystem for a language pack. For this reason, it is advised to use the effective severity on the PackageIssue level. In the case where multiple PackageIssues have differing effective severities, this field should be the highest severity for any of the PackageIssues. */ export type GrafeasV1beta1VulnerabilityDetailsEffectiveSeverity = (typeof GrafeasV1beta1VulnerabilityDetailsEffectiveSeverity)[keyof typeof GrafeasV1beta1VulnerabilityDetailsEffectiveSeverity]; export declare const HashType: { /** * Unknown. */ readonly HashTypeUnspecified: "HASH_TYPE_UNSPECIFIED"; /** * A SHA-256 hash. */ readonly Sha256: "SHA256"; /** * Dirhash of a Go module's source code which is then hex-encoded. See b/244466565 and https://github.com/in-toto/attestation/pull/108. */ readonly GoModuleH1: "GO_MODULE_H1"; /** * A SHA-512 hash. */ readonly Sha512: "SHA512"; }; /** * Required. The type of hash that was performed. */ export type HashType = (typeof HashType)[keyof typeof HashType]; export declare const JustificationJustificationType: { /** * JUSTIFICATION_TYPE_UNSPECIFIED. */ readonly JustificationTypeUnspecified: "JUSTIFICATION_TYPE_UNSPECIFIED"; /** * The vulnerable component is not present in the product. */ readonly ComponentNotPresent: "COMPONENT_NOT_PRESENT"; /** * The vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code. */ readonly VulnerableCodeNotPresent: "VULNERABLE_CODE_NOT_PRESENT"; /** * The vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code. */ readonly VulnerableCodeNotInExecutePath: "VULNERABLE_CODE_NOT_IN_EXECUTE_PATH"; /** * The vulnerable code cannot be controlled by an attacker to exploit the vulnerability. */ readonly VulnerableCodeCannotBeControlledByAdversary: "VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY"; /** * The product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors. */ readonly InlineMitigationsAlreadyExist: "INLINE_MITIGATIONS_ALREADY_EXIST"; }; /** * The justification type for this vulnerability. */ export type JustificationJustificationType = (typeof JustificationJustificationType)[keyof typeof JustificationJustificationType]; export declare const LayerDirective: { /** * Default value for unsupported/missing directive. */ readonly DirectiveUnspecified: "DIRECTIVE_UNSPECIFIED"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Maintainer: "MAINTAINER"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Run: "RUN"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Cmd: "CMD"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Label: "LABEL"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Expose: "EXPOSE"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Env: "ENV"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Add: "ADD"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Copy: "COPY"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Entrypoint: "ENTRYPOINT"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Volume: "VOLUME"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly User: "USER"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Workdir: "WORKDIR"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Arg: "ARG"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Onbuild: "ONBUILD"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Stopsignal: "STOPSIGNAL"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Healthcheck: "HEALTHCHECK"; /** * https://docs.docker.com/engine/reference/builder/ */ readonly Shell: "SHELL"; }; /** * Required. The recovered Dockerfile directive used to construct this layer. */ export type LayerDirective = (typeof LayerDirective)[keyof typeof LayerDirective]; export declare const PackageArchitecture: { /** * Unknown architecture. */ readonly ArchitectureUnspecified: "ARCHITECTURE_UNSPECIFIED"; /** * X86 architecture. */ readonly X86: "X86"; /** * X64 architecture. */ readonly X64: "X64"; }; /** * The CPU architecture for which packages in this distribution channel were built. Architecture will be blank for language packages. */ export type PackageArchitecture = (typeof PackageArchitecture)[keyof typeof PackageArchitecture]; export declare const PgpSignedAttestationContentType: { /** * `ContentType` is not set. */ readonly ContentTypeUnspecified: "CONTENT_TYPE_UNSPECIFIED"; /** * Atomic format attestation signature. See https://github.com/containers/image/blob/8a5d2f82a6e3263290c8e0276c3e0f64e77723e7/docs/atomic-signature.md The payload extracted from `signature` is a JSON blob conforming to the linked schema. */ readonly SimpleSigningJson: "SIMPLE_SIGNING_JSON"; }; /** * Type (for example schema) of the attestation payload that was signed. The verifier must ensure that the provided type is one that the verifier supports, and that the attestation payload is a valid instantiation of that type (for example by validating a JSON schema). */ export type PgpSignedAttestationContentType = (typeof PgpSignedAttestationContentType)[keyof typeof PgpSignedAttestationContentType]; export declare const RelationshipNoteType: { /** * Unspecified */ readonly RelationshipTypeUnspecified: "RELATIONSHIP_TYPE_UNSPECIFIED"; /** * Is to be used when SPDXRef-DOCUMENT describes SPDXRef-A */ readonly Describes: "DESCRIBES"; /** * Is to be used when SPDXRef-A is described by SPDXREF-Document */ readonly DescribedBy: "DESCRIBED_BY"; /** * Is to be used when SPDXRef-A contains SPDXRef-B */ readonly Contains: "CONTAINS"; /** * Is to be used when SPDXRef-A is contained by SPDXRef-B */ readonly ContainedBy: "CONTAINED_BY"; /** * Is to be used when SPDXRef-A depends on SPDXRef-B */ readonly DependsOn: "DEPENDS_ON"; /** * Is to be used when SPDXRef-A is dependency of SPDXRef-B */ readonly DependencyOf: "DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is a manifest file that lists a set of dependencies for SPDXRef-B */ readonly DependencyManifestOf: "DEPENDENCY_MANIFEST_OF"; /** * Is to be used when SPDXRef-A is a build dependency of SPDXRef-B */ readonly BuildDependencyOf: "BUILD_DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is a development dependency of SPDXRef-B */ readonly DevDependencyOf: "DEV_DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is an optional dependency of SPDXRef-B */ readonly OptionalDependencyOf: "OPTIONAL_DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is a to be provided dependency of SPDXRef-B */ readonly ProvidedDependencyOf: "PROVIDED_DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is a test dependency of SPDXRef-B */ readonly TestDependencyOf: "TEST_DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is a dependency required for the execution of SPDXRef-B */ readonly RuntimeDependencyOf: "RUNTIME_DEPENDENCY_OF"; /** * Is to be used when SPDXRef-A is an example of SPDXRef-B */ readonly ExampleOf: "EXAMPLE_OF"; /** * Is to be used when SPDXRef-A generates SPDXRef-B */ readonly Generates: "GENERATES"; /** * Is to be used when SPDXRef-A was generated from SPDXRef-B */ readonly GeneratedFrom: "GENERATED_FROM"; /** * Is to be used when SPDXRef-A is an ancestor (same lineage but pre-dates) SPDXRef-B */ readonly AncestorOf: "ANCESTOR_OF"; /** * Is to be used when SPDXRef-A is a descendant of (same lineage but postdates) SPDXRef-B */ readonly DescendantOf: "DESCENDANT_OF"; /** * Is to be used when SPDXRef-A is a variant of (same lineage but not clear which came first) SPDXRef-B */ readonly VariantOf: "VARIANT_OF"; /** * Is to be used when distributing SPDXRef-A requires that SPDXRef-B also be distributed */ readonly DistributionArtifact: "DISTRIBUTION_ARTIFACT"; /** * Is to be used when SPDXRef-A is a patch file for (to be applied to) SPDXRef-B */ readonly PatchFor: "PATCH_FOR"; /** * Is to be used when SPDXRef-A is a patch file that has been applied to SPDXRef-B */ readonly PatchApplied: "PATCH_APPLIED"; /** * Is to be used when SPDXRef-A is an exact copy of SPDXRef-B */ readonly CopyOf: "COPY_OF"; /** * Is to be used when SPDXRef-A is a file that was added to SPDXRef-B */ readonly FileAdded: "FILE_ADDED"; /** * Is to be used when SPDXRef-A is a file that was deleted from SPDXRef-B */ readonly FileDeleted: "FILE_DELETED"; /** * Is to be used when SPDXRef-A is a file that was modified from SPDXRef-B */ readonly FileModified: "FILE_MODIFIED"; /** * Is to be used when SPDXRef-A is expanded from the archive SPDXRef-B */ readonly ExpandedFromArchive: "EXPANDED_FROM_ARCHIVE"; /** * Is to be used when SPDXRef-A dynamically links to SPDXRef-B */ readonly DynamicLink: "DYNAMIC_LINK"; /** * Is to be used when SPDXRef-A statically links to SPDXRef-B */ readonly StaticLink: "STATIC_LINK"; /** * Is to be used when SPDXRef-A is a data file used in SPDXRef-B */ readonly DataFileOf: "DATA_FILE_OF"; /** * Is to be used when SPDXRef-A is a test case used in testing SPDXRef-B */ readonly TestCaseOf: "TEST_CASE_OF"; /** * Is to be used when SPDXRef-A is used to build SPDXRef-B */ readonly BuildToolOf: "BUILD_TOOL_OF"; /** * Is to be used when SPDXRef-A is used as a development tool for SPDXRef-B */ readonly DevToolOf: "DEV_TOOL_OF"; /** * Is to be used when SPDXRef-A is used for testing SPDXRef-B */ readonly TestOf: "TEST_OF"; /** * Is to be used when SPDXRef-A is used as a test tool for SPDXRef-B */ readonly TestToolOf: "TEST_TOOL_OF"; /** * Is to be used when SPDXRef-A provides documentation of SPDXRef-B */ readonly DocumentationOf: "DOCUMENTATION_OF"; /** * Is to be used when SPDXRef-A is an optional component of SPDXRef-B */ readonly OptionalComponentOf: "OPTIONAL_COMPONENT_OF"; /** * Is to be used when SPDXRef-A is a metafile of SPDXRef-B */ readonly MetafileOf: "METAFILE_OF"; /** * Is to be used when SPDXRef-A is used as a package as part of SPDXRef-B */ readonly PackageOf: "PACKAGE_OF"; /** * Is to be used when (current) SPDXRef-DOCUMENT amends the SPDX information in SPDXRef-B */ readonly Amends: "AMENDS"; /** * Is to be used when SPDXRef-A is a prerequisite for SPDXRef-B */ readonly PrerequisiteFor: "PREREQUISITE_FOR"; /** * Is to be used when SPDXRef-A has as a prerequisite SPDXRef-B */ readonly HasPrerequisite: "HAS_PREREQUISITE"; /** * Is to be used for a relationship which has not been defined in the formal SPDX specification. A description of the relationship should be included in the Relationship comments field */ readonly Other: "OTHER"; }; /** * The type of relationship between the source and target SPDX elements */ export type RelationshipNoteType = (typeof RelationshipNoteType)[keyof typeof RelationshipNoteType]; export declare const RemediationRemediationType: { /** * No remediation type specified. */ readonly RemediationTypeUnspecified: "REMEDIATION_TYPE_UNSPECIFIED"; /** * A MITIGATION is available. */ readonly Mitigation: "MITIGATION"; /** * No fix is planned. */ readonly NoFixPlanned: "NO_FIX_PLANNED"; /** * Not available. */ readonly NoneAvailable: "NONE_AVAILABLE"; /** * A vendor fix is available. */ readonly VendorFix: "VENDOR_FIX"; /** * A workaround is available. */ readonly Workaround: "WORKAROUND"; }; /** * The type of remediation that can be applied. */ export type RemediationRemediationType = (typeof RemediationRemediationType)[keyof typeof RemediationRemediationType]; export declare const SBOMStatusSbomState: { /** * Default unknown state. */ readonly SbomStateUnspecified: "SBOM_STATE_UNSPECIFIED"; /** * SBOM scanning is pending. */ readonly Pending: "PENDING"; /** * SBOM scanning has completed. */ readonly Complete: "COMPLETE"; }; /** * The progress of the SBOM generation. */ export type SBOMStatusSbomState = (typeof SBOMStatusSbomState)[keyof typeof SBOMStatusSbomState]; export declare const VersionKind: { /** * Unknown. */ readonly VersionKindUnspecified: "VERSION_KIND_UNSPECIFIED"; /** * A standard package version. */ readonly Normal: "NORMAL"; /** * A special version representing negative infinity. */ readonly Minimum: "MINIMUM"; /** * A special version representing positive infinity. */ readonly Maximum: "MAXIMUM"; }; /** * Required. Distinguishes between sentinel MIN/MAX versions and normal versions. */ export type VersionKind = (typeof VersionKind)[keyof typeof VersionKind]; export declare const VexAssessmentState: { /** * No state is specified. */ readonly StateUnspecified: "STATE_UNSPECIFIED"; /** * This product is known to be affected by this vulnerability. */ readonly Affected: "AFFECTED"; /** * This product is known to be not affected by this vulnerability. */ readonly NotAffected: "NOT_AFFECTED"; /** * This product contains a fix for this vulnerability. */ readonly Fixed: "FIXED"; /** * It is not known yet whether these versions are or are not affected by the vulnerability. However, it is still under investigation. */ readonly UnderInvestigation: "UNDER_INVESTIGATION"; }; /** * Provides the state of this Vulnerability assessment. */ export type VexAssessmentState = (typeof VexAssessmentState)[keyof typeof VexAssessmentState]; export declare const VulnerabilityCvssVersion: { readonly CvssVersionUnspecified: "CVSS_VERSION_UNSPECIFIED"; readonly CvssVersion2: "CVSS_VERSION_2"; readonly CvssVersion3: "CVSS_VERSION_3"; }; /** * CVSS version used to populate cvss_score and severity. */ export type VulnerabilityCvssVersion = (typeof VulnerabilityCvssVersion)[keyof typeof VulnerabilityCvssVersion]; export declare const VulnerabilitySeverity: { /** * Unknown. */ readonly SeverityUnspecified: "SEVERITY_UNSPECIFIED"; /** * Minimal severity. */ readonly Minimal: "MINIMAL"; /** * Low severity. */ readonly Low: "LOW"; /** * Medium severity. */ readonly Medium: "MEDIUM"; /** * High severity. */ readonly High: "HIGH"; /** * Critical severity. */ readonly Critical: "CRITICAL"; }; /** * Note provider assigned impact of the vulnerability. */ export type VulnerabilitySeverity = (typeof VulnerabilitySeverity)[keyof typeof VulnerabilitySeverity];