Grafeas V1 API - Module Grafeas::V1::VulnerabilityAssessmentNote::Assessment::Justification::JustificationType (v1.4.0)

Reference documentation and code samples for the Grafeas V1 API module Grafeas::V1::VulnerabilityAssessmentNote::Assessment::Justification::JustificationType.

Provides the type of justification.

value: 0
JUSTIFICATION_TYPE_UNSPECIFIED.

value: 1
The vulnerable component is not present in the product.

value: 2
The vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.

value: 3
The vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.

value: 4
The vulnerable code cannot be controlled by an attacker to exploit the vulnerability.

value: 5
The product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.