Struct google_api_proto::google::cloud::websecurityscanner::v1::Finding

pub struct Finding {

    pub name: String,
    pub finding_type: String,
    pub severity: i32,
    pub http_method: String,
    pub fuzzed_url: String,
    pub body: String,
    pub description: String,
    pub reproduction_url: String,
    pub frame_url: String,
    pub final_url: String,
    pub tracking_id: String,
    pub form: Option<Form>,
    pub outdated_library: Option<OutdatedLibrary>,
    pub violating_resource: Option<ViolatingResource>,
    pub vulnerable_headers: Option<VulnerableHeaders>,
    pub vulnerable_parameters: Option<VulnerableParameters>,
    pub xss: Option<Xss>,
    pub xxe: Option<Xxe>,
}

A Finding resource represents a vulnerability instance identified during a ScanRun.

Fields

name: String

Output only. The resource name of the Finding. The name follows the format of ‘projects/{projectId}/scanConfigs/{scanConfigId}/scanruns/{scanRunId}/findings/{findingId}’. The finding IDs are generated by the system.

finding_type: String

Output only. The type of the Finding. Detailed and up-to-date information on findings can be found here: https://cloud.google.com/security-command-center/docs/how-to-remediate-web-security-scanner-findings

severity: i32

Output only. The severity level of the reported vulnerability.

http_method: String

Output only. The http method of the request that triggered the vulnerability, in uppercase.

fuzzed_url: String

Output only. The URL produced by the server-side fuzzer and used in the request that triggered the vulnerability.

body: String

Output only. The body of the request that triggered the vulnerability.

description: String

Output only. The description of the vulnerability.

reproduction_url: String

Output only. The URL containing human-readable payload that user can leverage to reproduce the vulnerability.

frame_url: String

Output only. If the vulnerability was originated from nested IFrame, the immediate parent IFrame is reported.

final_url: String

Output only. The URL where the browser lands when the vulnerability is detected.

tracking_id: String

Output only. The tracking ID uniquely identifies a vulnerability instance across multiple ScanRuns.

form: Option<Form>

Output only. An addon containing information reported for a vulnerability with an HTML form, if any.

outdated_library: Option<OutdatedLibrary>

Output only. An addon containing information about outdated libraries.

violating_resource: Option<ViolatingResource>

Output only. An addon containing detailed information regarding any resource causing the vulnerability such as JavaScript sources, image, audio files, etc.

vulnerable_headers: Option<VulnerableHeaders>

Output only. An addon containing information about vulnerable or missing HTTP headers.

vulnerable_parameters: Option<VulnerableParameters>

Output only. An addon containing information about request parameters which were found to be vulnerable.

xss: Option<Xss>

Output only. An addon containing information reported for an XSS, if any.

xxe: Option<Xxe>

Output only. An addon containing information reported for an XXE, if any.

Implementations

impl Finding

pub fn severity(&self) -> Severity

Returns the enum value of severity, or the default if the field is set to an invalid enum value.

pub fn set_severity(&mut self, value: Severity)

Sets severity to the provided enum value.

Trait Implementations

impl Clone for Finding

fn clone(&self) -> Finding

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Finding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Finding

fn default() -> Self

Returns the “default value” for a type.

impl Message for Finding

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for Finding

fn eq(&self, other: &Finding) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Finding