"dZddlmZddlmZddlmZddlZddlmZddlm Z ddlm Z dd l m Z dd l mZdd lmZdd lmZdd lmZgdZdZdZdZej4ej6j8Gddej:Zej4ej6j>ej6j@GddeZ!y)z>Command to show Container Analysis Data for a specified image.)absolute_import)division)unicode_literalsN) docker_name)container_data_util)util) filter_util)base)requests)flags)log)BUILD VULNERABILITYIMAGE DEPLOYMENT DISCOVERYz_^(?P([^\/]+\.[^\/]+\/)?([^\/\.]+))\/(?P(us\.|eu\.|asia\.)?gcr.io)\/(?P.*)c d|jvr|Stjt|j}|s|St j }t j|jd}|j|jjjk(rtjd|Stjdj|jd|jdt!j"dj|jddj|jd|jd|j$ S) zConverts gcr.io repos on AR from pkg.dev->gcr.io. Args: image_name: Image to convert to GCR. Returns: The same image_name, but maybe in GCR format. zpkg.devprojectzgcr.io repositories in Artifact Registry are only scanned if redirected. Redirect this project before checking scanning resultsz{Container Analysis API uses the gcr.io hostname for scanning results of gcr.io repositories. Using https://{}/{} instead...repoz {registry}/{repository}@{sha256}z{}/{}image)registry repositorysha256)rrematchGCR_REPO_REGEXr ar_requests GetMessagesGetProjectSettingsgrouplegacyRedirectionStateProjectSettings%LegacyRedirectionStateValueValuesEnum REDIRECTION_FROM_GCR_IO_DISABLEDr warningformatrDigestdigest) image_namematchesmessagessettingss (lib/surface/container/images/describe.pyMaybeConvertToGCRr..s4j)))  HH^Z%:%: ;'    $ $ &(  + +GMM),D E(%%  ! ! G G h hiKK N ++==CV -- y!9>   (//==(^^mmI& g(> "" 0 c4tj|ddy)NdescribeF)verbrepeated)r AddTagOrDigestPositionalparsers r- _CommonArgsr7]s  j5Ir/c&eZdZdZedZdZy)DescribeaLists information about the specified image. ## EXAMPLES Describe the specified image: $ {command} gcr.io/myproject/myimage@digest Or: $ {command} gcr.io/myproject/myimage:tag Find the digest for a tag: $ {command} gcr.io/myproject/myimage:tag \ --format="value(image_summary.digest)" Or: $ {command} gcr.io/myproject/myimage:tag \ --format="value(image_summary.fully_qualified_digest)" ct|y)N)r7r5s r-Argsz Describe.Args|s r/c(tj|j5ttj|j}t j |j|j|jcdddS#1swYyxYw)NThis is what gets called when the user runs this command. Args: args: an argparse namespace. All the arguments that were provided to this command invocation. Raises: InvalidImageNameError: If the user specified an invalid image name. Returns: Some value that we want to have printed later. rrr(N) rWrapExpectedDockerlessErrorsr)r.GetDigestFromNamer ContainerDatarrr()selfargsimg_names r-Runz Describe.Runsb  * *4?? ;"4#9#9$//#JKh . .$$((" < ; ;s ABBN__name__ __module__ __qualname____doc__ staticmethodr;rEr/r-r9r9bs 0"r/r9c&eZdZdZedZdZy)DescribeAlphaAndBetaaLists container analysis data for a given image. Lists container analysis data for a valid image. ## EXAMPLES Describe the specified image: $ {command} gcr.io/myproject/myimage@digest Or: $ {command} gcr.io/myproject/myimage:tag Find the digest for a tag: $ {command} gcr.io/myproject/myimage:tag \ --format="value(image_summary.digest)" Or: $ {command} gcr.io/myproject/myimage:tag \ --format="value(image_summary.fully_qualified_digest)" See package vulnerabilities found by the Container Analysis API for the specified image: $ {command} gcr.io/myproject/myimage@digest --show-package-vulnerability c t||jddd|jddd|jd dd |jd dd |jd dd|jdddy)Nz--metadata-filterzPAdditional filter to fetch metadata for a given fully qualified image reference.)defaulthelpz--show-build-details store_truez%Include build metadata in the output.)actionrRz--show-package-vulnerabilityz-Include vulnerability metadata in the output.z--show-image-basisz*Include base image metadata in the output.z--show-deploymentz*Include deployment metadata in the output.z--show-all-metadataz#Include all metadata in the output.)r7 add_argumentr5s r-r;zDescribeAlphaAndBeta.Argss 9;   46 & <>  9;  9;  24r/cg}|jr|jd|jr"|jd|jd|jr|jd|jr|jd|j rt }|s |jrtj}|j||j|jtj|j5ttj |j}|j#dj%|gtj&||}|j(j*s|js|j s|`|j,j.s|js|j s|`|j0j2s|js|j s|`|j4j6s|js|j s|`|j8j:s|js|j s|`|cdddStj|j5ttj |j}t=j>|j@|jB|jDcdddS#1swYyxYw#1swYyxYw) r=rrrrrz https://{}Nr>)#show_build_detailsappendshow_package_vulnerabilityshow_image_basisshow_deploymentshow_all_metadata_DEFAULT_KINDSmetadata_filterr ContainerAnalysisFilter WithKindsWithCustomFilterrr?r)r.r@ WithResourcesr&TransformContainerAnalysisDatabuild_details_summary build_detailspackage_vulnerability_summaryvulnerabilitiesdiscovery_summary discoveryimage_basis_summary base_imagesdeployment_summary deploymentsrrArrr()rBrC filter_kindsfrDdatas r-rEzDescribeAlphaAndBeta.RunsJL '" &&/*+& '" ,' #lt++  - - /akk,--.  , ,T__ =$T%;%;DOO%LM ,,X678228Q?**88''0F0F(22BB//8N8N0&&00//8N8N$((44%%d.D.D&''33$$T-C-C%- > =0  , ,T__ =$T%;%;DOO%LM"00&&**??$ > =1 > =0 > =sEK*AK6*K36K?NrFrLr/r-rNrNs <44<=$r/rN)"rJ __future__rrrrcontainerregistry.clientr'googlecloudsdk.api_lib.container.imagesrr(googlecloudsdk.api_lib.containeranalysisr googlecloudsdk.callioper $googlecloudsdk.command_lib.artifactsr r$googlecloudsdk.command_lib.containerr googlecloudsdk.corer r]rr.r7 ReleaseTracks ReleaseTrackGADescribeCommandr9ALPHABETArNrLr/r-rsE&' 0G8@(H6#t,^J D%%(()/"t##/"*/"dD%%++T->->-C-CD{$8{$E{$r/