Interface ValidationEvidenceBody.Builder

  • Method Details

    • exploitable

      ValidationEvidenceBody.Builder exploitable(String exploitable)

      Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state exploitable: true | false | null, so an absent verdict is never confused with a negative one.

      Parameters:
      exploitable - Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state exploitable: true | false | null, so an absent verdict is never confused with a negative one.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • exploitable

      Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state exploitable: true | false | null, so an absent verdict is never confused with a negative one.

      Parameters:
      exploitable - Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state exploitable: true | false | null, so an absent verdict is never confused with a negative one.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • terminalStatus

      ValidationEvidenceBody.Builder terminalStatus(String terminalStatus)

      How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.

      Parameters:
      terminalStatus - How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • terminalStatus

      How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.

      Parameters:
      terminalStatus - How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • flowVerdicts

      One verdict per attack flow assessed in the bundle.

      Parameters:
      flowVerdicts - One verdict per attack flow assessed in the bundle.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • flowVerdicts

      ValidationEvidenceBody.Builder flowVerdicts(FlowVerdict... flowVerdicts)

      One verdict per attack flow assessed in the bundle.

      Parameters:
      flowVerdicts - One verdict per attack flow assessed in the bundle.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • flowVerdicts

      One verdict per attack flow assessed in the bundle.

      This is a convenience method that creates an instance of the FlowVerdict.Builder avoiding the need to create one manually via FlowVerdict.builder().

      When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to flowVerdicts(List<FlowVerdict>).

      Parameters:
      flowVerdicts - a consumer that will call methods on FlowVerdict.Builder
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • attackFlowsConfirmed

      ValidationEvidenceBody.Builder attackFlowsConfirmed(Collection<String> attackFlowsConfirmed)

      Identifiers of attack flows upgraded to Confirmed provenance.

      Parameters:
      attackFlowsConfirmed - Identifiers of attack flows upgraded to Confirmed provenance.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • attackFlowsConfirmed

      ValidationEvidenceBody.Builder attackFlowsConfirmed(String... attackFlowsConfirmed)

      Identifiers of attack flows upgraded to Confirmed provenance.

      Parameters:
      attackFlowsConfirmed - Identifiers of attack flows upgraded to Confirmed provenance.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • exploitArtifact

      Concrete payload and its observed effect, when validation produced one by sending an HTTP request.

      Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects executedProof, and one that proves it by reading the source projects sourceAnalysis. All three are mutually exclusive: at most one is present.

      Parameters:
      exploitArtifact - Concrete payload and its observed effect, when validation produced one by sending an HTTP request.

      Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects executedProof, and one that proves it by reading the source projects sourceAnalysis. All three are mutually exclusive: at most one is present.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • exploitArtifact

      Concrete payload and its observed effect, when validation produced one by sending an HTTP request.

      Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects executedProof, and one that proves it by reading the source projects sourceAnalysis. All three are mutually exclusive: at most one is present.

      This is a convenience method that creates an instance of the ValidationExploitArtifact.Builder avoiding the need to create one manually via ValidationExploitArtifact.builder().

      When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to exploitArtifact(ValidationExploitArtifact).

      Parameters:
      exploitArtifact - a consumer that will call methods on ValidationExploitArtifact.Builder
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • executedProof

      Proof the agent produced by executing code against the repository under test, with the output that execution produced.

      Parameters:
      executedProof - Proof the agent produced by executing code against the repository under test, with the output that execution produced.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • executedProof

      Proof the agent produced by executing code against the repository under test, with the output that execution produced.

      This is a convenience method that creates an instance of the ValidationExecutedProof.Builder avoiding the need to create one manually via ValidationExecutedProof.builder().

      When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to executedProof(ValidationExecutedProof).

      Parameters:
      executedProof - a consumer that will call methods on ValidationExecutedProof.Builder
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • sourceAnalysis

      Proof the agent produced by reading the repository's source, with nothing built or run.

      Parameters:
      sourceAnalysis - Proof the agent produced by reading the repository's source, with nothing built or run.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • sourceAnalysis

      Proof the agent produced by reading the repository's source, with nothing built or run.

      This is a convenience method that creates an instance of the ValidationSourceAnalysis.Builder avoiding the need to create one manually via ValidationSourceAnalysis.builder().

      When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to sourceAnalysis(ValidationSourceAnalysis).

      Parameters:
      sourceAnalysis - a consumer that will call methods on ValidationSourceAnalysis.Builder
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • perFindingResults

      ValidationEvidenceBody.Builder perFindingResults(Collection<PerFindingResult> perFindingResults)

      Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.

      Parameters:
      perFindingResults - Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • perFindingResults

      ValidationEvidenceBody.Builder perFindingResults(PerFindingResult... perFindingResults)

      Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.

      Parameters:
      perFindingResults - Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • perFindingResults

      ValidationEvidenceBody.Builder perFindingResults(Consumer<PerFindingResult.Builder>... perFindingResults)

      Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.

      This is a convenience method that creates an instance of the PerFindingResult.Builder avoiding the need to create one manually via PerFindingResult.builder().

      When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to perFindingResults(List<PerFindingResult>).

      Parameters:
      perFindingResults - a consumer that will call methods on PerFindingResult.Builder
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also: