View a markdown version of this page

ValidationEvidenceBody - AWS Continuum for Code Vulnerabilities

ValidationEvidenceBody

Projected content for a VALIDATION_EVIDENCE artifact: the validation agent's durable proof of exploitability.

Contents

exploitable

The exploitable.

Type: String

Valid Values: EXPLOITABLE | NOT_EXPLOITABLE | UNCERTAIN

Required: Yes

attackFlowsConfirmed

The attack Flows Confirmed.

Type: Array of strings

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Length Constraints: Minimum length of 1. Maximum length of 256.

Required: No

executedProof

Proof of exploitability the validation agent produced by executing code against the repository under test, with the output that execution produced.

Type: ValidationExecutedProof object

Required: No

exploitArtifact

A concrete exploit payload and the effect validation observed from it.

Type: ValidationExploitArtifact object

Required: No

flowVerdicts

The flow Verdicts.

Type: Array of FlowVerdict objects

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Required: No

perFindingResults

The per Finding Results.

Type: Array of PerFindingResult objects

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Required: No

sourceAnalysis

Proof of exploitability the validation agent produced by reading the repository's source, with nothing built or run. Further members, such as diagram and references, can be added later as optional details.

Type: ValidationSourceAnalysis object

Required: No

terminalStatus

The terminal Status.

Type: String

Valid Values: COMPLETED | FAILED | NO_SOURCE_AVAILABLE | PARTIAL

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: