From 8af0ac8a915b8b72d379b4e2a14c888ef98dfcf1 Mon Sep 17 00:00:00 2001
From: "gcf-owl-bot[bot]" <78513119+gcf-owl-bot[bot]@users.noreply.github.com>
Date: Thu, 11 Nov 2021 16:22:20 -0800
Subject: [PATCH] feat: Update OSConfig API (#578)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat: Update OSConfig API

PiperOrigin-RevId: 409204961

Source-Link: https://github.com/googleapis/googleapis/commit/a85beae06501cc06091191781ec06d778f525365

Source-Link: https://github.com/googleapis/googleapis-gen/commit/b334c5d7b45f4af1133af971789048299b66dc39
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiYjMzNGM1ZDdiNDVmNGFmMTEzM2FmOTcxNzg5MDQ4Mjk5YjY2ZGMzOSJ9

* 🦉 Updates from OwlBot

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
---
 .../cloud/osconfig/v1/vulnerability.proto     | 33 +++++++++++++++++--
 1 file changed, 31 insertions(+), 2 deletions(-)

diff --git a/protos/google/cloud/osconfig/v1/vulnerability.proto b/protos/google/cloud/osconfig/v1/vulnerability.proto
index af86fbe0..b8ca5175 100644
--- a/protos/google/cloud/osconfig/v1/vulnerability.proto
+++ b/protos/google/cloud/osconfig/v1/vulnerability.proto
@@ -75,6 +75,32 @@ message VulnerabilityReport {
       repeated Reference references = 6;
     }
 
+    // OS inventory item that is affected by a vulnerability or fixed as a
+    // result of a vulnerability.
+    message Item {
+      // Corresponds to the `INSTALLED_PACKAGE` inventory item on the VM.
+      // This field displays the inventory items affected by this vulnerability.
+      // If the vulnerability report was not updated after the VM inventory
+      // update, these values might not display in VM inventory. For some
+      // operating systems, this field might be empty.
+      string installed_inventory_item_id = 1;
+
+      // Corresponds to the `AVAILABLE_PACKAGE` inventory item on the VM.
+      // If the vulnerability report was not updated after the VM inventory
+      // update, these values might not display in VM inventory. If there is no
+      // available fix, the field is empty. The `inventory_item` value specifies
+      // the latest `SoftwarePackage` available to the VM that fixes the
+      // vulnerability.
+      string available_inventory_item_id = 2;
+
+      // The recommended [CPE URI](https://cpe.mitre.org/specification/) update
+      // that contains a fix for this vulnerability.
+      string fixed_cpe_uri = 3;
+
+      // The upstream OS patch, packages or KB that fixes the vulnerability.
+      string upstream_fix = 4;
+    }
+
     // Contains metadata as per the upstream feed of the operating system and
     // NVD.
     Details details = 1;
@@ -84,7 +110,7 @@ message VulnerabilityReport {
     // If the vulnerability report was not updated after the VM inventory
     // update, these values might not display in VM inventory. For some distros,
     // this field may be empty.
-    repeated string installed_inventory_item_ids = 2;
+    repeated string installed_inventory_item_ids = 2 [deprecated = true];
 
     // Corresponds to the `AVAILABLE_PACKAGE` inventory item on the VM.
     // If the vulnerability report was not updated after the VM inventory
@@ -92,13 +118,16 @@ message VulnerabilityReport {
     // available fix, the field is empty. The `inventory_item` value specifies
     // the latest `SoftwarePackage` available to the VM that fixes the
     // vulnerability.
-    repeated string available_inventory_item_ids = 3;
+    repeated string available_inventory_item_ids = 3 [deprecated = true];
 
     // The timestamp for when the vulnerability was first detected.
     google.protobuf.Timestamp create_time = 4;
 
     // The timestamp for when the vulnerability was last modified.
     google.protobuf.Timestamp update_time = 5;
+
+    // List of items affected by the vulnerability.
+    repeated Item items = 6;
   }
 
   // Output only. The `vulnerabilityReport` API resource name.