vulnerabilityv1

type Advisory struct {

	// Id is the primary vulnerability identifier (e.g., CVE-2021-44228, GHSA-xxx).
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Aliases are alternative identifiers for the same vulnerability.
	Aliases []string `protobuf:"bytes,2,rep,name=aliases,proto3" json:"aliases,omitempty"`
	// Summary is a brief description of the vulnerability.
	Summary string `protobuf:"bytes,3,opt,name=summary,proto3" json:"summary,omitempty"`
	// Details is the full vulnerability description.
	Details string `protobuf:"bytes,4,opt,name=details,proto3" json:"details,omitempty"`
	// Cve is the CVE identifier if available.
	Cve string `protobuf:"bytes,5,opt,name=cve,proto3" json:"cve,omitempty"`
	// Severity contains normalized severity information.
	Severity *Severity `protobuf:"bytes,6,opt,name=severity,proto3" json:"severity,omitempty"`
	// Published is when the advisory was first published.
	Published *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=published,proto3" json:"published,omitempty"`
	// Modified is when the advisory was last updated.
	Modified *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=modified,proto3" json:"modified,omitempty"`
	// References are URLs with additional information.
	References []string `protobuf:"bytes,9,rep,name=references,proto3" json:"references,omitempty"`
	// FixedVersions are versions containing a fix.
	FixedVersions []string `protobuf:"bytes,10,rep,name=fixed_versions,json=fixedVersions,proto3" json:"fixed_versions,omitempty"`
	// DatabaseSpecific contains source-specific metadata.
	DatabaseSpecific map[string]string `` /* 184-byte string literal not displayed */
	// Cwes contains Common Weakness Enumeration identifiers.
	Cwes []string `protobuf:"bytes,12,rep,name=cwes,proto3" json:"cwes,omitempty"`
	// contains filtered or unexported fields
}

type AffectedImport struct {

	// Path is the import path.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// Symbols are the affected symbols within the import.
	Symbols []string `protobuf:"bytes,2,rep,name=symbols,proto3" json:"symbols,omitempty"`
	// contains filtered or unexported fields
}

type Finding struct {

	// AdvisoryId is the vulnerability identifier.
	AdvisoryId string `protobuf:"bytes,1,opt,name=advisory_id,json=advisoryId,proto3" json:"advisory_id,omitempty"`
	// Package contains the affected dependency information.
	Package *v1.Package `protobuf:"bytes,2,opt,name=package,proto3" json:"package,omitempty"`
	// Affected indicates whether the package is actually affected.
	Affected bool `protobuf:"varint,3,opt,name=affected,proto3" json:"affected,omitempty"`
	// AffectedImports captures import-level vulnerability details.
	AffectedImports []*AffectedImport `protobuf:"bytes,4,rep,name=affected_imports,json=affectedImports,proto3" json:"affected_imports,omitempty"`
	// Advisory contains the full advisory details.
	// This may be populated inline or referenced by advisory_id.
	Advisory *Advisory `protobuf:"bytes,5,opt,name=advisory,proto3" json:"advisory,omitempty"`
	// Epss is the EPSS score (0.0-1.0): probability of exploitation in next 30 days.
	Epss *float64 `protobuf:"fixed64,10,opt,name=epss,proto3,oneof" json:"epss,omitempty"`
	// EpssPercentile is the EPSS percentile (0.0-1.0).
	EpssPercentile *float64 `protobuf:"fixed64,11,opt,name=epss_percentile,json=epssPercentile,proto3,oneof" json:"epss_percentile,omitempty"`
	// InKev indicates whether this CVE is in CISA's Known Exploited Vulnerabilities catalog.
	InKev *bool `protobuf:"varint,12,opt,name=in_kev,json=inKev,proto3,oneof" json:"in_kev,omitempty"`
	// KevDateAdded is when the CVE was added to the KEV catalog.
	KevDateAdded *string `protobuf:"bytes,13,opt,name=kev_date_added,json=kevDateAdded,proto3,oneof" json:"kev_date_added,omitempty"`
	// KevDueDate is the federal agency compliance deadline.
	KevDueDate *string `protobuf:"bytes,14,opt,name=kev_due_date,json=kevDueDate,proto3,oneof" json:"kev_due_date,omitempty"`
	// KevRequiredAction is CISA's required remediation action.
	KevRequiredAction *string `protobuf:"bytes,15,opt,name=kev_required_action,json=kevRequiredAction,proto3,oneof" json:"kev_required_action,omitempty"`
	// KevKnownRansomwareCampaignUse indicates ransomware involvement.
	KevKnownRansomwareCampaignUse *string `` /* 161-byte string literal not displayed */
	// Path is the dependency chain from root to vulnerable package.
	Path []string `protobuf:"bytes,20,rep,name=path,proto3" json:"path,omitempty"`
	// Depth is the distance from root (0 = direct, 1+ = transitive).
	Depth *int32 `protobuf:"varint,21,opt,name=depth,proto3,oneof" json:"depth,omitempty"`
	// contains filtered or unexported fields
}

type GetAdvisoriesRequest struct {

	// Ids are the vulnerability identifiers to look up.
	Ids []string `protobuf:"bytes,1,rep,name=ids,proto3" json:"ids,omitempty"`
	// contains filtered or unexported fields
}

type GetAdvisoriesResponse struct {

	// Advisories maps vulnerability IDs to their details.
	// Missing entries indicate the vulnerability was not found.
	Advisories map[string]*Advisory `` /* 147-byte string literal not displayed */
	// NotFound lists IDs that were not found in the database.
	NotFound []string `protobuf:"bytes,2,rep,name=not_found,json=notFound,proto3" json:"not_found,omitempty"`
	// Errors maps IDs to error messages for lookup failures.
	Errors map[string]string `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GetAdvisoryRequest struct {

	// Id is the vulnerability identifier (CVE-2021-44228, GHSA-xxx, etc.).
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetAdvisoryResponse struct {

	// Advisory contains the full vulnerability details.
	// Nil if the vulnerability was not found.
	Advisory *Advisory `protobuf:"bytes,1,opt,name=advisory,proto3" json:"advisory,omitempty"`
	// Found indicates whether the advisory was found.
	Found bool `protobuf:"varint,2,opt,name=found,proto3" json:"found,omitempty"`
	// contains filtered or unexported fields
}

type Severity struct {

	// Level is the normalized severity level.
	Level SeverityLevel `protobuf:"varint,1,opt,name=level,proto3,enum=deputy.vulnerability.v1.SeverityLevel" json:"level,omitempty"`
	// Type is the scoring methodology (CVSS v2/v3/v4, GHSA, etc.).
	Type SeverityType `protobuf:"varint,2,opt,name=type,proto3,enum=deputy.vulnerability.v1.SeverityType" json:"type,omitempty"`
	// Score is the numeric score if available (0-10 for CVSS), -1 if none.
	Score float64 `protobuf:"fixed64,3,opt,name=score,proto3" json:"score,omitempty"`
	// Raw is the original raw value preserved.
	Raw string `protobuf:"bytes,4,opt,name=raw,proto3" json:"raw,omitempty"`
	// RawType is the original type descriptor.
	RawType string `protobuf:"bytes,5,opt,name=raw_type,json=rawType,proto3" json:"raw_type,omitempty"`
	// contains filtered or unexported fields
}

type SeverityLevel int32

type SeverityType int32

type Stats struct {

	// Total is the total number of vulnerabilities (including duplicates).
	Total int32 `protobuf:"varint,1,opt,name=total,proto3" json:"total,omitempty"`
	// Critical is the count of critical severity vulnerabilities.
	Critical int32 `protobuf:"varint,2,opt,name=critical,proto3" json:"critical,omitempty"`
	// High is the count of high severity vulnerabilities.
	High int32 `protobuf:"varint,3,opt,name=high,proto3" json:"high,omitempty"`
	// Medium is the count of medium severity vulnerabilities.
	Medium int32 `protobuf:"varint,4,opt,name=medium,proto3" json:"medium,omitempty"`
	// Low is the count of low severity vulnerabilities.
	Low int32 `protobuf:"varint,5,opt,name=low,proto3" json:"low,omitempty"`
	// Unknown is the count of vulnerabilities with unknown severity.
	Unknown int32 `protobuf:"varint,6,opt,name=unknown,proto3" json:"unknown,omitempty"`
	// Unique is the count of unique vulnerabilities (deduplicated by advisory ID).
	Unique int32 `protobuf:"varint,7,opt,name=unique,proto3" json:"unique,omitempty"`
	// CveCount is the count of CVE identifiers found.
	CveCount int32 `protobuf:"varint,8,opt,name=cve_count,json=cveCount,proto3" json:"cve_count,omitempty"`
	// DirectDeps is the count of vulnerabilities in direct dependencies.
	DirectDeps int32 `protobuf:"varint,9,opt,name=direct_deps,json=directDeps,proto3" json:"direct_deps,omitempty"`
	// IndirectDeps is the count of vulnerabilities in transitive dependencies.
	IndirectDeps int32 `protobuf:"varint,10,opt,name=indirect_deps,json=indirectDeps,proto3" json:"indirect_deps,omitempty"`
	// FixAvailable is the count of vulnerabilities with a known fix.
	FixAvailable int32 `protobuf:"varint,11,opt,name=fix_available,json=fixAvailable,proto3" json:"fix_available,omitempty"`
	// Duplicates is the count of duplicate vulnerability entries.
	Duplicates int32 `protobuf:"varint,12,opt,name=duplicates,proto3" json:"duplicates,omitempty"`
	// contains filtered or unexported fields
}