Class ValidationEvidenceBody
- All Implemented Interfaces:
Serializable,SdkPojo,ToCopyableBuilder<ValidationEvidenceBody.Builder,ValidationEvidenceBody>
Projected content for a VALIDATION_EVIDENCE artifact: the validation agent's durable proof of exploitability.
- See Also:
-
Nested Class Summary
Nested Classes -
Method Summary
Modifier and TypeMethodDescriptionIdentifiers of attack flows upgraded to Confirmed provenance.builder()final booleanfinal booleanequalsBySdkFields(Object obj) Indicates whether some other object is "equal to" this one by SDK fields.final ValidationExecutedProofProof the agent produced by executing code against the repository under test, with the output that execution produced.final ExploitabilityVerdictExploitability verdict.final StringExploitability verdict.Concrete payload and its observed effect, when validation produced one by sending an HTTP request.final List<FlowVerdict> One verdict per attack flow assessed in the bundle.final <T> Optional<T> getValueForField(String fieldName, Class<T> clazz) final booleanFor responses, this returns true if the service returned a value for the AttackFlowsConfirmed property.final booleanFor responses, this returns true if the service returned a value for the FlowVerdicts property.final inthashCode()final booleanFor responses, this returns true if the service returned a value for the PerFindingResults property.final List<PerFindingResult> Per-finding breakdown for a multi-finding bundle.static Class<? extends ValidationEvidenceBody.Builder> final ValidationSourceAnalysisProof the agent produced by reading the repository's source, with nothing built or run.final ValidationTerminalStatusHow the validation run ended.final StringHow the validation run ended.Take this object and create a builder that contains all of the current property values of this object.final StringtoString()Returns a string representation of this object.Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
Method Details
-
exploitable
Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state
exploitable: true | false | null, so an absent verdict is never confused with a negative one.If the service returns an enum value that is not available in the current SDK version,
exploitablewill returnExploitabilityVerdict.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available fromexploitableAsString().- Returns:
- Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state
exploitable: true | false | null, so an absent verdict is never confused with a negative one. - See Also:
-
exploitableAsString
Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state
exploitable: true | false | null, so an absent verdict is never confused with a negative one.If the service returns an enum value that is not available in the current SDK version,
exploitablewill returnExploitabilityVerdict.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available fromexploitableAsString().- Returns:
- Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state
exploitable: true | false | null, so an absent verdict is never confused with a negative one. - See Also:
-
terminalStatus
How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.
If the service returns an enum value that is not available in the current SDK version,
terminalStatuswill returnValidationTerminalStatus.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available fromterminalStatusAsString().- Returns:
- How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.
- See Also:
-
terminalStatusAsString
How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.
If the service returns an enum value that is not available in the current SDK version,
terminalStatuswill returnValidationTerminalStatus.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available fromterminalStatusAsString().- Returns:
- How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.
- See Also:
-
hasFlowVerdicts
public final boolean hasFlowVerdicts()For responses, this returns true if the service returned a value for the FlowVerdicts property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
flowVerdicts
One verdict per attack flow assessed in the bundle.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasFlowVerdicts()method.- Returns:
- One verdict per attack flow assessed in the bundle.
-
hasAttackFlowsConfirmed
public final boolean hasAttackFlowsConfirmed()For responses, this returns true if the service returned a value for the AttackFlowsConfirmed property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
attackFlowsConfirmed
Identifiers of attack flows upgraded to Confirmed provenance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasAttackFlowsConfirmed()method.- Returns:
- Identifiers of attack flows upgraded to Confirmed provenance.
-
exploitArtifact
Concrete payload and its observed effect, when validation produced one by sending an HTTP request.
Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects
executedProof, and one that proves it by reading the source projectssourceAnalysis. All three are mutually exclusive: at most one is present.- Returns:
- Concrete payload and its observed effect, when validation produced one by sending an HTTP request.
Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects
executedProof, and one that proves it by reading the source projectssourceAnalysis. All three are mutually exclusive: at most one is present.
-
executedProof
Proof the agent produced by executing code against the repository under test, with the output that execution produced.
- Returns:
- Proof the agent produced by executing code against the repository under test, with the output that execution produced.
-
sourceAnalysis
Proof the agent produced by reading the repository's source, with nothing built or run.
- Returns:
- Proof the agent produced by reading the repository's source, with nothing built or run.
-
hasPerFindingResults
public final boolean hasPerFindingResults()For responses, this returns true if the service returned a value for the PerFindingResults property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
perFindingResults
Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasPerFindingResults()method.- Returns:
- Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.
-
toBuilder
Description copied from interface:ToCopyableBuilderTake this object and create a builder that contains all of the current property values of this object.- Specified by:
toBuilderin interfaceToCopyableBuilder<ValidationEvidenceBody.Builder,ValidationEvidenceBody> - Returns:
- a builder for type T
-
builder
-
serializableBuilderClass
-
hashCode
-
equals
-
equalsBySdkFields
Description copied from interface:SdkPojoIndicates whether some other object is "equal to" this one by SDK fields. An SDK field is a modeled, non-inherited field in anSdkPojoclass, and is generated based on a service model.If an
SdkPojoclass does not have any inherited fields,equalsBySdkFieldsandequalsare essentially the same.- Specified by:
equalsBySdkFieldsin interfaceSdkPojo- Parameters:
obj- the object to be compared with- Returns:
- true if the other object equals to this object by sdk fields, false otherwise.
-
toString
-
getValueForField
-
sdkFields
-
sdkFieldNameToField
- Specified by:
sdkFieldNameToFieldin interfaceSdkPojo- Returns:
- The mapping between the field name and its corresponding field.
-