update all json files

This commit is contained in:
Sebastian Thiel
2020-04-12 18:55:37 +08:00
parent ea3b428364
commit aacc30f08d
260 changed files with 138411 additions and 26293 deletions

View File

@@ -22,6 +22,7 @@
},
"id": "websecurityscanner:v1beta",
"kind": "discovery#restDescription",
"mtlsRootUrl": "https://websecurityscanner.mtls.googleapis.com/",
"name": "websecurityscanner",
"ownerDomain": "google.com",
"ownerName": "Google",
@@ -485,7 +486,7 @@
],
"parameters": {
"filter": {
"description": "The filter expression. The expression must be in the format: <field>\n<operator> <value>.\nSupported field: 'finding_type'.\nSupported operator: '='.",
"description": "Required. The filter expression. The expression must be in the format: <field>\n<operator> <value>.\nSupported field: 'finding_type'.\nSupported operator: '='.",
"location": "query",
"type": "string"
},
@@ -525,7 +526,7 @@
}
}
},
"revision": "20190629",
"revision": "20200329",
"rootUrl": "https://websecurityscanner.googleapis.com/",
"schemas": {
"Authentication": {
@@ -539,6 +540,10 @@
"googleAccount": {
"$ref": "GoogleAccount",
"description": "Authentication using a Google account."
},
"iapCredential": {
"$ref": "IapCredential",
"description": "Authentication using Identity-Aware-Proxy (IAP)."
}
},
"type": "object"
@@ -548,15 +553,15 @@
"id": "CrawledUrl",
"properties": {
"body": {
"description": "Output only. The body of the request that was used to visit the URL.",
"description": "The body of the request that was used to visit the URL.",
"type": "string"
},
"httpMethod": {
"description": "Output only. The http method of the request that was used to visit the URL, in\nuppercase.",
"description": "The http method of the request that was used to visit the URL, in\nuppercase.",
"type": "string"
},
"url": {
"description": "Output only. The URL that was crawled.",
"description": "The URL that was crawled.",
"type": "string"
}
},
@@ -592,68 +597,86 @@
"id": "Finding",
"properties": {
"body": {
"description": "Output only. The body of the request that triggered the vulnerability.",
"description": "The body of the request that triggered the vulnerability.",
"type": "string"
},
"description": {
"description": "Output only. The description of the vulnerability.",
"description": "The description of the vulnerability.",
"type": "string"
},
"finalUrl": {
"description": "Output only. The URL where the browser lands when the vulnerability is detected.",
"description": "The URL where the browser lands when the vulnerability is detected.",
"type": "string"
},
"findingType": {
"description": "Output only. The type of the Finding.\nDetailed and up-to-date information on findings can be found here:\nhttps://cloud.google.com/security-scanner/docs/scan-result-details",
"description": "The type of the Finding.\nDetailed and up-to-date information on findings can be found here:\nhttps://cloud.google.com/security-scanner/docs/scan-result-details",
"type": "string"
},
"form": {
"$ref": "Form",
"description": "Output only. An addon containing information reported for a vulnerability with an HTML\nform, if any."
"description": "An addon containing information reported for a vulnerability with an HTML\nform, if any."
},
"frameUrl": {
"description": "Output only. If the vulnerability was originated from nested IFrame, the immediate\nparent IFrame is reported.",
"description": "If the vulnerability was originated from nested IFrame, the immediate\nparent IFrame is reported.",
"type": "string"
},
"fuzzedUrl": {
"description": "Output only. The URL produced by the server-side fuzzer and used in the request that\ntriggered the vulnerability.",
"description": "The URL produced by the server-side fuzzer and used in the request that\ntriggered the vulnerability.",
"type": "string"
},
"httpMethod": {
"description": "Output only. The http method of the request that triggered the vulnerability, in\nuppercase.",
"description": "The http method of the request that triggered the vulnerability, in\nuppercase.",
"type": "string"
},
"name": {
"description": "Output only. The resource name of the Finding. The name follows the format of\n'projects/{projectId}/scanConfigs/{scanConfigId}/scanruns/{scanRunId}/findings/{findingId}'.\nThe finding IDs are generated by the system.",
"description": "The resource name of the Finding. The name follows the format of\n'projects/{projectId}/scanConfigs/{scanConfigId}/scanruns/{scanRunId}/findings/{findingId}'.\nThe finding IDs are generated by the system.",
"type": "string"
},
"outdatedLibrary": {
"$ref": "OutdatedLibrary",
"description": "Output only. An addon containing information about outdated libraries."
"description": "An addon containing information about outdated libraries."
},
"reproductionUrl": {
"description": "Output only. The URL containing human-readable payload that user can leverage to\nreproduce the vulnerability.",
"description": "The URL containing human-readable payload that user can leverage to\nreproduce the vulnerability.",
"type": "string"
},
"severity": {
"description": "The severity level of the reported vulnerability.",
"enum": [
"SEVERITY_UNSPECIFIED",
"CRITICAL",
"HIGH",
"MEDIUM",
"LOW"
],
"enumDescriptions": [
"No severity specified. The default value.",
"Critical severity.",
"High severity.",
"Medium severity.",
"Low severity."
],
"type": "string"
},
"trackingId": {
"description": "Output only. The tracking ID uniquely identifies a vulnerability instance across\nmultiple ScanRuns.",
"description": "The tracking ID uniquely identifies a vulnerability instance across\nmultiple ScanRuns.",
"type": "string"
},
"violatingResource": {
"$ref": "ViolatingResource",
"description": "Output only. An addon containing detailed information regarding any resource causing the\nvulnerability such as JavaScript sources, image, audio files, etc."
"description": "An addon containing detailed information regarding any resource causing the\nvulnerability such as JavaScript sources, image, audio files, etc."
},
"vulnerableHeaders": {
"$ref": "VulnerableHeaders",
"description": "Output only. An addon containing information about vulnerable or missing HTTP headers."
"description": "An addon containing information about vulnerable or missing HTTP headers."
},
"vulnerableParameters": {
"$ref": "VulnerableParameters",
"description": "Output only. An addon containing information about request parameters which were found\nto be vulnerable."
"description": "An addon containing information about request parameters which were found\nto be vulnerable."
},
"xss": {
"$ref": "Xss",
"description": "Output only. An addon containing information reported for an XSS, if any."
"description": "An addon containing information reported for an XSS, if any."
}
},
"type": "object"
@@ -663,12 +686,12 @@
"id": "FindingTypeStats",
"properties": {
"findingCount": {
"description": "Output only. The count of findings belonging to this finding type.",
"description": "The count of findings belonging to this finding type.",
"format": "int32",
"type": "integer"
},
"findingType": {
"description": "Output only. The finding type associated with the stats.",
"description": "The finding type associated with the stats.",
"type": "string"
}
},
@@ -722,6 +745,28 @@
},
"type": "object"
},
"IapCredential": {
"description": "Describes authentication configuration for Identity-Aware-Proxy (IAP).",
"id": "IapCredential",
"properties": {
"iapTestServiceAccountInfo": {
"$ref": "IapTestServiceAccountInfo",
"description": "Authentication configuration when Web-Security-Scanner service\naccount is added in Identity-Aware-Proxy (IAP) access policies."
}
},
"type": "object"
},
"IapTestServiceAccountInfo": {
"description": "Describes authentication configuration when Web-Security-Scanner\nservice account is added in Identity-Aware-Proxy (IAP) access policies.",
"id": "IapTestServiceAccountInfo",
"properties": {
"targetAudienceClientId": {
"description": "Required. Describes OAuth2 Client ID of resources protected by\nIdentity-Aware-Proxy(IAP).",
"type": "string"
}
},
"type": "object"
},
"ListCrawledUrlsResponse": {
"description": "Response for the `ListCrawledUrls` method.",
"id": "ListCrawledUrlsResponse",
@@ -867,6 +912,10 @@
"$ref": "ScanRun",
"description": "Latest ScanRun if available."
},
"managedScan": {
"description": "Whether the scan config is managed by Cloud Web Security Scanner, output\nonly.",
"type": "boolean"
},
"maxQps": {
"description": "The maximum QPS during scanning. A valid value ranges from 5 to 20\ninclusively. If the field is unspecified or its value is set 0, server will\ndefault to 15. Other values outside of [5, 20] range will be rejected with\nINVALID_ARGUMENT error.",
"format": "int32",
@@ -901,6 +950,10 @@
},
"type": "array"
},
"staticIpScan": {
"description": "Whether the scan configuration has enabled static IP address scan feature.\nIf enabled, the scanner will access applications from static IP addresses.",
"type": "boolean"
},
"targetPlatforms": {
"description": "Set of Cloud Platforms targeted by the scan. If empty, APP_ENGINE will be\nused as a default.",
"enumDescriptions": [
@@ -942,7 +995,7 @@
"id": "ScanConfigError",
"properties": {
"code": {
"description": "Output only. Indicates the reason code for a configuration failure.",
"description": "Indicates the reason code for a configuration failure.",
"enum": [
"CODE_UNSPECIFIED",
"OK",
@@ -965,6 +1018,7 @@
"FAILED_TO_AUTHENTICATE_TO_TARGET",
"FINDING_TYPE_UNSPECIFIED",
"FORBIDDEN_TO_SCAN_COMPUTE",
"FORBIDDEN_UPDATE_TO_MANAGED_SCAN",
"MALFORMED_FILTER",
"MALFORMED_RESOURCE_NAME",
"PROJECT_INACTIVE",
@@ -1008,6 +1062,7 @@
"There was an error trying to authenticate to the scan target.",
"Finding type value is not specified in the list findings request.",
"Scan targets Compute Engine, yet current project was not whitelisted for\nGoogle Compute Engine Scanning Alpha access.",
"User tries to update managed scan",
"The supplied filter is malformed. For example, it can not be parsed, does\nnot have a filter type in expression, or the same filter type appears\nmore than once.",
"The supplied resource name is malformed (can not be parsed).",
"The current project is not in an active state.",
@@ -1032,7 +1087,7 @@
"type": "string"
},
"fieldName": {
"description": "Output only. Indicates the full name of the ScanConfig field that triggers this error,\nfor example \"scan_config.max_qps\". This field is provided for\ntroubleshooting purposes only and its actual value can change in the\nfuture.",
"description": "Indicates the full name of the ScanConfig field that triggers this error,\nfor example \"scan_config.max_qps\". This field is provided for\ntroubleshooting purposes only and its actual value can change in the\nfuture.",
"type": "string"
}
},
@@ -1043,16 +1098,16 @@
"id": "ScanRun",
"properties": {
"endTime": {
"description": "Output only. The time at which the ScanRun reached termination state - that the ScanRun\nis either finished or stopped by user.",
"description": "The time at which the ScanRun reached termination state - that the ScanRun\nis either finished or stopped by user.",
"format": "google-datetime",
"type": "string"
},
"errorTrace": {
"$ref": "ScanRunErrorTrace",
"description": "Output only. If result_state is an ERROR, this field provides the primary reason for\nscan's termination and more details, if such are available."
"description": "If result_state is an ERROR, this field provides the primary reason for\nscan's termination and more details, if such are available."
},
"executionState": {
"description": "Output only. The execution state of the ScanRun.",
"description": "The execution state of the ScanRun.",
"enum": [
"EXECUTION_STATE_UNSPECIFIED",
"QUEUED",
@@ -1068,20 +1123,20 @@
"type": "string"
},
"hasVulnerabilities": {
"description": "Output only. Whether the scan run has found any vulnerabilities.",
"description": "Whether the scan run has found any vulnerabilities.",
"type": "boolean"
},
"name": {
"description": "Output only. The resource name of the ScanRun. The name follows the format of\n'projects/{projectId}/scanConfigs/{scanConfigId}/scanRuns/{scanRunId}'.\nThe ScanRun IDs are generated by the system.",
"description": "The resource name of the ScanRun. The name follows the format of\n'projects/{projectId}/scanConfigs/{scanConfigId}/scanRuns/{scanRunId}'.\nThe ScanRun IDs are generated by the system.",
"type": "string"
},
"progressPercent": {
"description": "Output only. The percentage of total completion ranging from 0 to 100.\nIf the scan is in queue, the value is 0.\nIf the scan is running, the value ranges from 0 to 100.\nIf the scan is finished, the value is 100.",
"description": "The percentage of total completion ranging from 0 to 100.\nIf the scan is in queue, the value is 0.\nIf the scan is running, the value ranges from 0 to 100.\nIf the scan is finished, the value is 100.",
"format": "int32",
"type": "integer"
},
"resultState": {
"description": "Output only. The result state of the ScanRun. This field is only available after the\nexecution state reaches \"FINISHED\".",
"description": "The result state of the ScanRun. This field is only available after the\nexecution state reaches \"FINISHED\".",
"enum": [
"RESULT_STATE_UNSPECIFIED",
"SUCCESS",
@@ -1097,22 +1152,22 @@
"type": "string"
},
"startTime": {
"description": "Output only. The time at which the ScanRun started.",
"description": "The time at which the ScanRun started.",
"format": "google-datetime",
"type": "string"
},
"urlsCrawledCount": {
"description": "Output only. The number of URLs crawled during this ScanRun. If the scan is in progress,\nthe value represents the number of URLs crawled up to now.",
"description": "The number of URLs crawled during this ScanRun. If the scan is in progress,\nthe value represents the number of URLs crawled up to now.",
"format": "int64",
"type": "string"
},
"urlsTestedCount": {
"description": "Output only. The number of URLs tested during this ScanRun. If the scan is in progress,\nthe value represents the number of URLs tested up to now. The number of\nURLs tested is usually larger than the number URLS crawled because\ntypically a crawled URL is tested with multiple test payloads.",
"description": "The number of URLs tested during this ScanRun. If the scan is in progress,\nthe value represents the number of URLs tested up to now. The number of\nURLs tested is usually larger than the number URLS crawled because\ntypically a crawled URL is tested with multiple test payloads.",
"format": "int64",
"type": "string"
},
"warningTraces": {
"description": "Output only. A list of warnings, if such are encountered during this scan run.",
"description": "A list of warnings, if such are encountered during this scan run.",
"items": {
"$ref": "ScanRunWarningTrace"
},
@@ -1126,7 +1181,7 @@
"id": "ScanRunErrorTrace",
"properties": {
"code": {
"description": "Output only. Indicates the error reason code.",
"description": "Indicates the error reason code.",
"enum": [
"CODE_UNSPECIFIED",
"INTERNAL_ERROR",
@@ -1143,18 +1198,18 @@
"Indicates an authentication error, usually due to outdated ScanConfig\nauthentication settings.",
"Indicates a scan operation timeout, usually caused by a very large site.",
"Indicates that a scan encountered excessive redirects, either to\nauthentication or some other page outside of the scan scope.",
"Indicates that a scan encountered numerous errors from the web site\npages. When available, most_common_http_error_code field indicates the\nthe most common HTTP error code encountered during the scan."
"Indicates that a scan encountered numerous errors from the web site\npages. When available, most_common_http_error_code field indicates the\nmost common HTTP error code encountered during the scan."
],
"type": "string"
},
"mostCommonHttpErrorCode": {
"description": "Output only. If the scan encounters TOO_MANY_HTTP_ERRORS, this field indicates the most\ncommon HTTP error code, if such is available. For example, if this code is\n404, the scan has encountered too many NOT_FOUND responses.",
"description": "If the scan encounters TOO_MANY_HTTP_ERRORS, this field indicates the most\ncommon HTTP error code, if such is available. For example, if this code is\n404, the scan has encountered too many NOT_FOUND responses.",
"format": "int32",
"type": "integer"
},
"scanConfigError": {
"$ref": "ScanConfigError",
"description": "Output only. If the scan encounters SCAN_CONFIG_ISSUE error, this field has the error\nmessage encountered during scan configuration validation that is performed\nbefore each scan run."
"description": "If the scan encounters SCAN_CONFIG_ISSUE error, this field has the error\nmessage encountered during scan configuration validation that is performed\nbefore each scan run."
}
},
"type": "object"
@@ -1164,7 +1219,7 @@
"id": "ScanRunWarningTrace",
"properties": {
"code": {
"description": "Output only. Indicates the warning code.",
"description": "Indicates the warning code.",
"enum": [
"CODE_UNSPECIFIED",
"INSUFFICIENT_CRAWL_RESULTS",