feat: [containeranalysis] A new field version is added to message `…

….grafeas.v1.ComplianceOccurrence` (#5586)

* feat: A new field `version` is added to message `.grafeas.v1.ComplianceOccurrence`
feat: A new message `VulnerabilityAttestation` is added
feat: A new field `vulnerability_attestation` is added to message `.grafeas.v1.DiscoveryOccurrence`

PiperOrigin-RevId: 657298794

Source-Link: googleapis/googleapis@ad5c477

Source-Link: googleapis/googleapis-gen@882414c
Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWRldnRvb2xzLWNvbnRhaW5lcmFuYWx5c2lzLy5Pd2xCb3QueWFtbCIsImgiOiI4ODI0MTRjM2Y2NDIzN2UxODAwMTRmMWY1ZDc5NTQxNzAyMDk2MjMwIn0=

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

packages/google-devtools-containeranalysis/protos/grafeas/v1/compliance.proto

@@ -69,6 +69,8 @@ message ComplianceVersion {
 message ComplianceOccurrence {
   repeated NonCompliantFile non_compliant_files = 2;
   string non_compliance_reason = 3;
+  // The OS and config version the benchmark was run on.
+  grafeas.v1.ComplianceVersion version = 4;
 }
 
 // Details about files that caused a compliance check to fail.

packages/google-devtools-containeranalysis/protos/grafeas/v1/discovery.proto

@@ -123,4 +123,29 @@ message DiscoveryOccurrence {
 
   // The status of an SBOM generation.
   SBOMStatus sbom_status = 9;
+
+  // The status of an vulnerability attestation generation.
+  message VulnerabilityAttestation {
+    // An enum indicating the state of the attestation generation.
+    enum VulnerabilityAttestationState {
+      // Default unknown state.
+      VULNERABILITY_ATTESTATION_STATE_UNSPECIFIED = 0;
+      // Attestation was successfully generated and stored.
+      SUCCESS = 1;
+      // Attestation was unsuccessfully generated and stored.
+      FAILURE = 2;
+    }
+
+    // The last time we attempted to generate an attestation.
+    google.protobuf.Timestamp last_attempt_time = 1;
+
+    // The success/failure state of the latest attestation attempt.
+    VulnerabilityAttestationState state = 2;
+
+    // If failure, the error reason for why the attestation generation failed.
+    string error = 3;
+  }
+
+  // The status of an vulnerability attestation generation.
+  VulnerabilityAttestation vulnerability_attestation = 10;
 }

packages/google-devtools-containeranalysis/protos/grafeas/v1/grafeas.proto

@@ -93,6 +93,9 @@ service Grafeas {
       returns (google.protobuf.Empty) {
     option (google.api.http) = {
       delete: "/v1/{name=projects/*/occurrences/*}"
+      additional_bindings {
+        delete: "/v1/{name=projects/*/locations/*/occurrences/*}"
+      }
     };
     option (google.api.method_signature) = "name";
   }
@@ -102,6 +105,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/occurrences"
       body: "occurrence"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/occurrences"
+        body: "occurrence"
+      }
     };
     option (google.api.method_signature) = "parent,occurrence";
   }
@@ -112,6 +119,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/occurrences:batchCreate"
       body: "*"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/occurrences:batchCreate"
+        body: "*"
+      }
     };
     option (google.api.method_signature) = "parent,occurrences";
   }
@@ -121,6 +132,10 @@ service Grafeas {
     option (google.api.http) = {
       patch: "/v1/{name=projects/*/occurrences/*}"
       body: "occurrence"
+      additional_bindings {
+        patch: "/v1/{name=projects/*/locations/*/occurrences/*}"
+        body: "occurrence"
+      }
     };
     option (google.api.method_signature) = "name,occurrence,update_mask";
   }
@@ -159,6 +174,9 @@ service Grafeas {
   rpc DeleteNote(DeleteNoteRequest) returns (google.protobuf.Empty) {
     option (google.api.http) = {
       delete: "/v1/{name=projects/*/notes/*}"
+      additional_bindings {
+        delete: "/v1/{name=projects/*/locations/*/notes/*}"
+      }
     };
     option (google.api.method_signature) = "name";
   }
@@ -168,6 +186,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/notes"
       body: "note"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/notes"
+        body: "note"
+      }
     };
     option (google.api.method_signature) = "parent,note_id,note";
   }
@@ -178,6 +200,10 @@ service Grafeas {
     option (google.api.http) = {
       post: "/v1/{parent=projects/*}/notes:batchCreate"
       body: "*"
+      additional_bindings {
+        post: "/v1/{parent=projects/*/locations/*}/notes:batchCreate"
+        body: "*"
+      }
     };
     option (google.api.method_signature) = "parent,notes";
   }
@@ -187,6 +213,10 @@ service Grafeas {
     option (google.api.http) = {
       patch: "/v1/{name=projects/*/notes/*}"
       body: "note"
+      additional_bindings {
+        patch: "/v1/{name=projects/*/locations/*/notes/*}"
+        body: "note"
+      }
     };
     option (google.api.method_signature) = "name,note,update_mask";
   }