feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/artifacts/__init__.py

@@ -0,0 +1,36 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2019 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""API utilities for `gcloud artifacts` commands."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.util import apis
+from googlecloudsdk.calliope import base
+
+API_VERSION_FOR_TRACK = {
+    base.ReleaseTrack.ALPHA: 'v1',
+    base.ReleaseTrack.BETA: 'v1',
+    base.ReleaseTrack.GA: 'v1'
+}
+
+
+def Client(api_version):
+  return apis.GetClientInstance('artifactregistry', api_version)
+
+
+def Messages(api_version):
+  return apis.GetMessagesModule('artifactregistry', api_version)

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/artifacts/exceptions.py

@@ -0,0 +1,89 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2019 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Wrapper for user-visible raised exception."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.core import exceptions
+import six
+
+
+class InvalidInputValueError(exceptions.Error):
+  """Raised when the given input value is invalid."""
+
+
+class UnsupportedLocationError(exceptions.Error):
+  """Raised when the given location is invalid."""
+
+
+class ArtifactRegistryError(exceptions.Error):
+  """Generic Artifact Registry error."""
+
+
+class InvalidGoModuleError(exceptions.Error):
+  """Raised when the Go module source code cannot be packaged into a go.zip."""
+
+
+class DirectoryNotExistError(ArtifactRegistryError):
+  """Raised when a directory does not exist."""
+
+
+class PathNotDirectoryError(ArtifactRegistryError):
+  """Raised when a path is not a directory."""
+
+
+class NoJsonKeyCredentialsError(ArtifactRegistryError):
+  """Raised when no JSON key credentials are found."""
+
+  def __init__(self, cause):
+    super().__init__(
+        "JSON key credentials not found: {}".format(six.text_type(cause))
+    )
+
+
+class NoDefaultCredentialsError(ArtifactRegistryError):
+  """Raised when no JSON key credentials are found."""
+
+  def __init__(self, cause):
+    super().__init__(
+        "Application default credentials not found: {}".format(
+            six.text_type(cause)
+        )
+    )
+
+
+class NoUserCredentialsError(ArtifactRegistryError):
+  """Raised when no JSON key credentials are found."""
+
+  def __init__(self, cause):
+    super().__init__(
+        "User credentials not found: {}".format(six.text_type(cause))
+    )
+
+
+class NoCredentialsError(ArtifactRegistryError):
+  """Raised when no credentials are found."""
+
+  def __init__(self, json_key_err, adc_err, user_creds_err):
+    super().__init__(
+        "No credentials found. Details: {}".format(
+            "; ".join(
+                six.text_type(e)
+                for e in [json_key_err, adc_err, user_creds_err]
+            )
+        )
+    )

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/artifacts/filter_rewriter.py

@@ -0,0 +1,40 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Artifact resource filter expression rewrite backend.
+
+Refer to the core.resource.resource_expr_rewrite docstring for expression
+rewrite details.
+"""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.core.resource import resource_expr_rewrite
+
+
+class Rewriter(resource_expr_rewrite.Backend):
+  """Artifact resource filter expression rewriter backend.
+
+  Rewriter is used for all artifacts resources List APIs where filtering on
+  annotations and name is done only in the server side.
+  """
+
+  def Rewrite(self, expression, defaults=None):
+    if expression:
+      if expression.startswith("annotations") or expression.startswith("name="):
+        return None, expression
+    return expression, None

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/artifacts/vulnerabilities.py

@@ -0,0 +1,60 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2023 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""API for interacting with vulnerabilities."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.containeranalysis import filter_util
+from googlecloudsdk.api_lib.containeranalysis import requests
+
+
+def GetVulnerabilities(project, resource, query):
+  """Given image, return vulnerabilities."""
+  filter_kinds = ["VULNERABILITY"]
+  filter_ca = filter_util.ContainerAnalysisFilter()
+  filter_ca.WithKinds(filter_kinds)
+  filter_ca.WithResources([resource])
+  filter_ca.WithCustomFilter(query)
+  occurrences = requests.ListOccurrencesWithFilters(
+      project, filter_ca.GetChunkifiedFilters()
+  )
+  return occurrences
+
+
+def GetLatestScan(project, resource):
+  """Given project and resource, get the last time it was scanned."""
+  filter_kinds = ["DISCOVERY"]
+  filter_ca = filter_util.ContainerAnalysisFilter()
+  filter_ca.WithKinds(filter_kinds)
+  filter_ca.WithResources([resource])
+  occurrences = requests.ListOccurrencesWithFilters(
+      project, filter_ca.GetChunkifiedFilters()
+  )
+  latest_scan = None
+  for occ in occurrences:
+    if latest_scan is None:
+      latest_scan = occ
+      continue
+    try:
+      if latest_scan.discovery.lastScanTime < occ.discovery.lastScanTime:
+        latest_scan = occ
+    except AttributeError:
+      continue
+  return latest_scan
+
+
+