Class: Aws::Continuum::Types::GetCodeFindingOutput

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb

Overview

Contains the current state and details of the requested finding. Which type-specific members are populated depends on type.

Constant Summary collapse

SENSITIVE =
[]

Instance Attribute Summary collapse

Instance Attribute Details

#affected_packages ⇒ Array<Types::AffectedPackage>

Packages implicated by the finding.

Returns:



1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#category ⇒ String

The producer's vulnerability category. Not a stable filter key across finding types -- see FindingCategory.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#completed_at ⇒ Time

When processing finished, whether by creating an issue or discarding. Absent while the finding is still in flight.

Returns:

  • (Time)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#created_at ⇒ Time

The timestamp when the finding was ingested.

Returns:

  • (Time)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#created_issue_id ⇒ String

The issue Continuum created from this finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#cve_id ⇒ String

The CVE this finding reports, for software-composition findings. Both code types can carry one: a customer document supplies it under vulnerabilities[].cve, and Continuum's scanner reports CVEs for dependency-manifest findings.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#cvss_base_score ⇒ Float

The CVSS base score accompanying cveId, when the producer supplies one, from 0.0 to 10.0. Not computed by Continuum. The range is enforced server-side, not by a @range trait -- the smithy-rs server SDK does not support range constraints on double shapes (smithy-rs#2007).

Returns:

  • (Float)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#cwe_ids ⇒ Array<String>

CWE identifiers classifying the finding.

Returns:

  • (Array<String>)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#detailed_description ⇒ String

The full analysis.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#discard_reason ⇒ String

Why the finding was not escalated. Present only when status is DISCARDED.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#discard_reasoning ⇒ String

Customer-facing explanation accompanying discardReason.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#duplicate_of_issue_id ⇒ String

The existing issue this finding duplicates. Present only for the DUPLICATE_OF_* discard reasons.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#end_line ⇒ Integer

The last line of the affected range, from the document's affected_code[].end_line.

Returns:

  • (Integer)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#environment_id ⇒ String

The environment that owns the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#file_path ⇒ String

The file the finding is about.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#finding_arn ⇒ String

The ARN of the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#finding_id ⇒ String

The unique identifier of the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#finding_types ⇒ Array<String>

The producer's own classification of the finding (finding_info.types).

Returns:

  • (Array<String>)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#first_seen_at ⇒ Time

When the producer first observed the finding (finding_info.first_seen_time). The producer's own clock, not Continuum's.

Returns:

  • (Time)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#line_number ⇒ Integer

The 1-indexed line the finding is about. Bounds are enforced server-side rather than by a constraint trait: a numeric constraint generates a distinct newtype per enclosing structure, so the same concept would not share a type across the create input and the read output.

Returns:

  • (Integer)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#mitigation ⇒ String

How to fix the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#mitre_techniques ⇒ Array<String>

MITRE ATT&CK technique identifiers, from the document's finding_info.attacks[].technique.uid.

Returns:

  • (Array<String>)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#ocsf_class ⇒ String

The OCSF class the document declared. Determines whether posture is populated.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#ocsf_schema_version ⇒ String

The OCSF schema version the producer wrote against (metadata.version).

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#owasp_category ⇒ String

The OWASP Top 10 category, when the producer supplies one.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#posture ⇒ Types::FindingPosture

The compliance posture, for an Application Security Posture Finding. Absent for a vulnerability finding.



1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#product_name ⇒ String

The producing product and vendor (metadata.product).

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#product_vendor_name ⇒ String

A vulnerability-taxonomy label: the producer's category, sub-category, or OWASP category. Deliberately unconstrained beyond length -- producers do not share a taxonomy, so this is NOT a stable filter key across finding types. Use cweIds when a stable classification is needed.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#product_version ⇒ String

A vulnerability-taxonomy label: the producer's category, sub-category, or OWASP category. Deliberately unconstrained beyond length -- producers do not share a taxonomy, so this is NOT a stable filter key across finding types. Use cweIds when a stable classification is needed.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#relevant_inputs ⇒ Array<String>

User-controlled inputs that reach the vulnerability.

Returns:

  • (Array<String>)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#remediation_references ⇒ Array<String>

Remediation references, from the document's vulnerabilities[].remediation.references.

Returns:

  • (Array<String>)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#reported_at ⇒ Time

When the producer reported the finding -- its own clock, which is not Continuum's ingestion time. createdAt is when Continuum accepted it; these are genuinely different instants and a reader usually wants this one.

For CreateCodeFinding, this is the submitted OCSF document's own top-level time. For findings Continuum's scanner produces, it is the finding's own creation time.

Continuum does not validate it for plausibility: a producer's value is echoed as given, so a timestamp here asserts the unit and format, not that the instant is genuine.

Returns:

  • (Time)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#resources ⇒ Array<Types::FindingResource>

Resources the document named (resources[]).

Returns:



1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#scan_run_id ⇒ String

The scan that produced the finding, when it came from one. For a finding Continuum's scanner produced, this is the Continuum scan run (see GetCodeScan). For a finding submitted with CreateCodeFinding, it is the OCSF document's metadata.correlation_uid, when that value is a valid ScanRunId. Absent when the finding did not come from a scan.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#severity ⇒ String

The finding's severity.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#source ⇒ String

The system that produced the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#source_finding_id ⇒ String

The producer's own identifier for the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#source_status ⇒ String

The producer's own status for the finding, and the enum value behind it. Distinct from status, which is Continuum's lifecycle state -- a producer may call a finding "New" while Continuum has it SUBMITTED.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#source_status_id ⇒ Integer

The producer's numeric enum value for sourceStatus.

Returns:

  • (Integer)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#status ⇒ String

The current lifecycle status of the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#status_message ⇒ String

Human-readable context about the current status.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#status_updated_at ⇒ Time

The timestamp when the status last transitioned.

Returns:

  • (Time)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#steps_to_reproduce ⇒ Array<String>

Steps to reproduce or exploit the finding.

Returns:

  • (Array<String>)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#sub_category ⇒ String

A more specific classification within category.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#summary ⇒ String

A one-paragraph description.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#title ⇒ String

The producer's title for the finding.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#type ⇒ String

What kind of finding this is. Determines which of the type-specific members below are populated.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#validation ⇒ Types::FindingValidation

The validator's assessment. Absent when no validation ran.



1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#vulnerabilities ⇒ Array<Types::FindingVulnerability>

Every vulnerability the document reported. A document may report several; the flat cveId/cvssBaseScore/filePath/lineNumber members above carry the first one's identity so a caller that only needs "what and where" does not have to walk this list.

Returns:



1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end

#vulnerable_code ⇒ String

The vulnerable code fragment.

Returns:

  • (String)


1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
# File 'gems/aws-sdk-continuum/lib/aws-sdk-continuum/types.rb', line 1770

class GetCodeFindingOutput < Struct.new(
  :type,
  :title,
  :severity,
  :summary,
  :detailed_description,
  :category,
  :sub_category,
  :cwe_ids,
  :owasp_category,
  :mitigation,
  :file_path,
  :line_number,
  :cve_id,
  :cvss_base_score,
  :affected_packages,
  :vulnerable_code,
  :relevant_inputs,
  :steps_to_reproduce,
  :validation,
  :end_line,
  :mitre_techniques,
  :remediation_references,
  :ocsf_class,
  :ocsf_schema_version,
  :product_name,
  :product_vendor_name,
  :product_version,
  :source_status,
  :source_status_id,
  :first_seen_at,
  :finding_types,
  :vulnerabilities,
  :resources,
  :posture,
  :finding_id,
  :finding_arn,
  :environment_id,
  :source,
  :source_finding_id,
  :reported_at,
  :status,
  :status_updated_at,
  :created_at,
  :scan_run_id,
  :status_message,
  :discard_reason,
  :discard_reasoning,
  :duplicate_of_issue_id,
  :created_issue_id,
  :completed_at)
  SENSITIVE = []
  include Aws::Structure
end