Class: Aws::Continuum::Types::ValidationEvidenceBody

Inherits:

Struct

• Object
• Struct
• Aws::Continuum::Types::ValidationEvidenceBody

Defined in:

gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb

Overview

Projected content for a VALIDATION_EVIDENCE artifact: the validation agent's durable proof of exploitability.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #attack_flows_confirmed ⇒ Array<String>

  Identifiers of attack flows upgraded to Confirmed provenance.

• #executed_proof ⇒ Types::ValidationExecutedProof

  Proof the agent produced by executing code against the repository under test, with the output that execution produced.

• #exploit_artifact ⇒ Types::ValidationExploitArtifact

  Concrete payload and its observed effect, when validation produced one by sending an HTTP request.

• #exploitable ⇒ String

  Exploitability verdict.

• #flow_verdicts ⇒ Array<Types::FlowVerdict>

  One verdict per attack flow assessed in the bundle.

• #per_finding_results ⇒ Array<Types::PerFindingResult>

  Per-finding breakdown for a multi-finding bundle.

• #source_analysis ⇒ Types::ValidationSourceAnalysis

  Proof the agent produced by reading the repository's source, with nothing built or run.

• #terminal_status ⇒ String

  How the validation run ended.

Instance Attribute Details

#attack_flows_confirmed ⇒ Array<String>

Identifiers of attack flows upgraded to Confirmed provenance.

Returns:

• (Array<String>)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#executed_proof ⇒ Types::ValidationExecutedProof

Proof the agent produced by executing code against the repository under test, with the output that execution produced.

Returns:

• (Types::ValidationExecutedProof)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#exploit_artifact ⇒ Types::ValidationExploitArtifact

Concrete payload and its observed effect, when validation produced one by sending an HTTP request.

Only an HTTP proof projects here. A validation agent that proves exploitability by RUNNING code against the repository projects executedProof, and one that proves it by reading the source projects sourceAnalysis. All three are mutually exclusive: at most one is present.

Returns:

• (Types::ValidationExploitArtifact)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#exploitable ⇒ String

Exploitability verdict. Explicit UNCERTAIN replaces the producer's tri-state exploitable: true | false | null, so an absent verdict is never confused with a negative one.

Returns:

• (String)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#flow_verdicts ⇒ Array<Types::FlowVerdict>

One verdict per attack flow assessed in the bundle.

Returns:

• (Array<Types::FlowVerdict>)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#per_finding_results ⇒ Array<Types::PerFindingResult>

Per-finding breakdown for a multi-finding bundle. Absent for a single-finding bundle.

Returns:

• (Array<Types::PerFindingResult>)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#source_analysis ⇒ Types::ValidationSourceAnalysis

Proof the agent produced by reading the repository's source, with nothing built or run.

Returns:

• (Types::ValidationSourceAnalysis)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end

#terminal_status ⇒ String

How the validation run ended. Absent when the producer reported a status with no mapping yet: the rest of the body still projects, so one unmapped enum never costs a customer the whole artifact.

Returns:

• (String)

# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 4552

class ValidationEvidenceBody < Struct.new(
  :exploitable,
  :terminal_status,
  :flow_verdicts,
  :attack_flows_confirmed,
  :exploit_artifact,
  :executed_proof,
  :source_analysis,
  :per_finding_results)
  SENSITIVE = []
  include Aws::Structure
end