86 lines
2.3 KiB
Protocol Buffer
86 lines
2.3 KiB
Protocol Buffer
|
// Copyright 2019 The Grafeas Authors. All rights reserved.
|
||
|
|
//
|
||
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
// you may not use this file except in compliance with the License.
|
||
|
|
// You may obtain a copy of the License at
|
||
|
|
//
|
||
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
//
|
||
|
|
// Unless required by applicable law or agreed to in writing, software
|
||
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
// See the License for the specific language governing permissions and
|
||
|
|
// limitations under the License.
|
||
|
|
|
||
|
|
syntax = "proto3";
|
||
|
|
|
||
|
|
package grafeas.v1;
|
||
|
|
|
||
|
|
option go_package = "google.golang.org/genproto/googleapis/grafeas/v1;grafeas";
|
||
|
|
option java_multiple_files = true;
|
||
|
|
option java_package = "io.grafeas.v1";
|
||
|
|
option objc_class_prefix = "GRA";
|
||
|
|
|
||
|
|
// Common Vulnerability Scoring System version 3.
|
||
|
|
// For details, see https://www.first.org/cvss/specification-document
|
||
|
|
message CVSSv3 {
|
||
|
|
// The base score is a function of the base metric scores.
|
||
|
|
float base_score = 1;
|
||
|
|
|
||
|
|
float exploitability_score = 2;
|
||
|
|
|
||
|
|
float impact_score = 3;
|
||
|
|
|
||
|
|
// Base Metrics
|
||
|
|
// Represents the intrinsic characteristics of a vulnerability that are
|
||
|
|
// constant over time and across user environments.
|
||
|
|
AttackVector attack_vector = 5;
|
||
|
|
AttackComplexity attack_complexity = 6;
|
||
|
|
PrivilegesRequired privileges_required = 7;
|
||
|
|
UserInteraction user_interaction = 8;
|
||
|
|
Scope scope = 9;
|
||
|
|
Impact confidentiality_impact = 10;
|
||
|
|
Impact integrity_impact = 11;
|
||
|
|
Impact availability_impact = 12;
|
||
|
|
|
||
|
|
enum AttackVector {
|
||
|
|
ATTACK_VECTOR_UNSPECIFIED = 0;
|
||
|
|
ATTACK_VECTOR_NETWORK = 1;
|
||
|
|
ATTACK_VECTOR_ADJACENT = 2;
|
||
|
|
ATTACK_VECTOR_LOCAL = 3;
|
||
|
|
ATTACK_VECTOR_PHYSICAL = 4;
|
||
|
|
}
|
||
|
|
|
||
|
|
enum AttackComplexity {
|
||
|
|
ATTACK_COMPLEXITY_UNSPECIFIED = 0;
|
||
|
|
ATTACK_COMPLEXITY_LOW = 1;
|
||
|
|
ATTACK_COMPLEXITY_HIGH = 2;
|
||
|
|
}
|
||
|
|
|
||
|
|
enum PrivilegesRequired {
|
||
|
|
PRIVILEGES_REQUIRED_UNSPECIFIED = 0;
|
||
|
|
PRIVILEGES_REQUIRED_NONE = 1;
|
||
|
|
PRIVILEGES_REQUIRED_LOW = 2;
|
||
|
|
PRIVILEGES_REQUIRED_HIGH = 3;
|
||
|
|
}
|
||
|
|
|
||
|
|
enum UserInteraction {
|
||
|
|
USER_INTERACTION_UNSPECIFIED = 0;
|
||
|
|
USER_INTERACTION_NONE = 1;
|
||
|
|
USER_INTERACTION_REQUIRED = 2;
|
||
|
|
}
|
||
|
|
|
||
|
|
enum Scope {
|
||
|
|
SCOPE_UNSPECIFIED = 0;
|
||
|
|
SCOPE_UNCHANGED = 1;
|
||
|
|
SCOPE_CHANGED = 2;
|
||
|
|
}
|
||
|
|
|
||
|
|
enum Impact {
|
||
|
|
IMPACT_UNSPECIFIED = 0;
|
||
|
|
IMPACT_HIGH = 1;
|
||
|
|
IMPACT_LOW = 2;
|
||
|
|
IMPACT_NONE = 3;
|
||
|
|
}
|
||
|
|
}
|