feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/iac_validation_reports/__init__.py

@@ -0,0 +1,28 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command group for Cloud SCC iac-validation-reports."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class IaCValidationReports(base.Group):
+  """Manage Cloud SCC (Security Command Center) iac-validation-reports."""
+
+  category = base.SECURITY_CATEGORY

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/iac_validation_reports/create.yaml

@@ -0,0 +1,47 @@
+- release_tracks: [ALPHA, GA]
+  command_type: GENERIC
+  help_text:
+    brief: Create a Cloud Security Command Center (SCC) IaC Validation Report.
+    description: |
+      Create a  Cloud Security Command Center (SCC) IaC Validation Report. First argument is the
+      parent of the IaC defined in the plan file. It is followed by path of the terraform plan
+      file in JSON format.
+
+      LRO operation ID is returned as the response of the command.
+    examples: |
+     Create an Iac Validation report on parent `organizations/123/locations/global`:
+
+        $ {command} organizations/123/locations/global --tf-plan-file=planFile.json
+
+  request:
+    collection: securityposture.organizations.locations.reports
+    disable_resource_check: true
+    api_version: v1alpha
+    method: createIaCValidationReport
+    GA:
+      api_version: v1
+
+  arguments:
+    params:
+    - arg_name: parent
+      api_field: parent
+      is_positional: true
+      required: true
+      help_text: |
+        Name of the organization where IaC Validation Report is to be created. Format:
+        organizations/<organizationID>/locations/<location>
+
+    - arg_name: tf-plan-file
+      api_field: createIaCValidationReportRequest.iac.tfPlan
+      required: true
+      type: "googlecloudsdk.calliope.arg_parsers:FileContents:"
+      processor: googlecloudsdk.command_lib.scc.hooks:ProcessTFPlanFile
+      help_text: |
+        Path to a JSON file containing the IaC plan to be validated.
+
+  async:
+    collection: securityposture.organizations.locations.operations
+    extract_resource_result: false
+
+  output:
+    format: multi(response:format=yaml)

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/iac_validation_reports/describe.yaml

@@ -0,0 +1,28 @@
+- release_tracks: [ALPHA, GA]
+  help_text:
+    brief: Describe a Cloud Security Command Center (SCC) IaC Validation Report.
+    description: |
+      Describe a Cloud Security Command Center (SCC) IaC Validation Report. Takes the name of the report as an argument.
+
+      Returns IAC Validation Report as response.
+    examples: |
+      Describe an IAC Validation report named `organizations/123/locations/global/reports/abcef-gh` :
+
+        $ {command} organizations/123/locations/global/reports/abcef-gh
+
+        or, run:
+
+        $ {command} abcef-gh --organization=123 --location=global
+
+  request:
+    collection: securityposture.organizations.locations.reports
+    api_version: v1alpha
+    method: get
+    GA:
+      api_version: v1
+
+  arguments:
+    resource:
+      spec: !REF googlecloudsdk.command_lib.scc.resources:report
+      help_text: |
+          IAC Validation report to be described. For example `organizations/123/locations/global/reports/abcef-gh`.

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/iac_validation_reports/list.py

@@ -0,0 +1,183 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command for listing an organization IaC validation reports."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import print_function
+from __future__ import unicode_literals
+
+from apitools.base.py import list_pager
+from googlecloudsdk.api_lib.scc.postures import util as securityposture_client
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc import errors
+from googlecloudsdk.command_lib.scc import util as scc_util
+from googlecloudsdk.command_lib.scc.iac_validation_reports import flags
+
+
+@base.ReleaseTracks(
+    base.ReleaseTrack.GA
+)
+@base.DefaultUniverseOnly
+class List(base.ListCommand):
+  """Lists all the Cloud Security Command Center (SCC) IaC validation reports for an organization."""
+
+  detailed_help = {
+      "DESCRIPTION": """
+          Lists all the Cloud Security Command Center (SCC) IaC validation
+          reports for an organization.""",
+      "EXAMPLES": (
+          """
+          To list Cloud Security Command Center IaC validation reports for organization `123` in the `global` location, run:
+
+            $ {command} organizations/123/locations/global/reports
+
+          Or using flags:
+
+            $ {command} --organization=123 --location=global
+
+            """
+      ),
+      "API REFERENCE": """
+      This command uses the securityposture/v1 API. For more information,
+      see Security Command Center API. (https://cloud.google.com/security-command-center)""",
+  }
+
+  @staticmethod
+  def Args(parser):
+    # Remove URI flag.
+    base.URI_FLAG.RemoveFromParser(parser)
+
+    # Add shared flags and parent positional argument.
+    flags.AddParentOrFlagsGroup(parser)
+
+  def Run(self, args):
+    version = scc_util.GetVersionFromArguments(
+        args, version_specific_existing_resource=True
+    )
+
+    messages = securityposture_client.GetMessagesModule(base.ReleaseTrack.GA)
+    client = securityposture_client.GetClientInstance(base.ReleaseTrack.GA)
+
+    location = scc_util.ValidateAndGetLocation(args, version)
+
+    if (args.PARENT) and (args.organization and args.location):
+      raise errors.InvalidSCCInputError(
+          "Cannot provide both a positional `PARENT` and argument "
+          "(`--organization`, `--location`) flags."
+      )
+
+    if (args.IsKnownAndSpecified("PARENT")):
+      parent = args.PARENT
+    elif (args.IsSpecified("organization") and args.IsSpecified("location")):
+      parent = f"{scc_util.GetParentFromPositionalArguments(args)}/locations/{location}"
+    else:
+      raise errors.InvalidSCCInputError(
+          "Must provide either positional `PARENT` or both `--organization` "
+          "and `--location` flags."
+      )
+
+    # Build request.
+    request = messages.SecuritypostureOrganizationsLocationsReportsListRequest(
+        parent=parent,
+        filter=getattr(args, "filter", None),
+        pageSize=getattr(args, "page_size", None),
+    )
+
+    return list_pager.YieldFromList(
+        client.organizations_locations_reports,
+        request,
+        batch_size_attribute="pageSize",
+        batch_size=args.page_size,
+        field="reports",
+    )
+
+
+@base.ReleaseTracks(
+    base.ReleaseTrack.ALPHA
+)
+@base.DefaultUniverseOnly
+class ListAlpha(base.ListCommand):
+  """Lists all the Cloud Security Command Center (SCC) IaC validation reports for an organization."""
+
+  detailed_help = {
+      "DESCRIPTION": """
+          Lists all the Cloud Security Command Center (SCC) IaC validation
+          reports for an organization.""",
+      "EXAMPLES": (
+          """
+          To list Cloud Security Command Center IaC validation reports for organization `123` in the `global` location, run:
+
+            $ {command} organizations/123/locations/global/reports
+
+          Or using flags:
+
+            $ {command} --organization=123 --location=global
+
+            """
+      ),
+      "API REFERENCE": """
+      This command uses the securityposture/v1alpha API. The full documentation for this API can be found at:
+      https://cloud.google.com/security-command-center""",
+  }
+
+  @staticmethod
+  def Args(parser):
+    # Remove URI flag.
+    base.URI_FLAG.RemoveFromParser(parser)
+
+    # Add shared flags and parent positional argument.
+    flags.AddParentOrFlagsGroup(parser)
+
+  def Run(self, args):
+    version = scc_util.GetVersionFromArguments(
+        args, version_specific_existing_resource=True
+    )
+
+    messages = securityposture_client.GetMessagesModule(base.ReleaseTrack.ALPHA)
+    client = securityposture_client.GetClientInstance(base.ReleaseTrack.ALPHA)
+
+    location = scc_util.ValidateAndGetLocation(args, version)
+
+    if (args.PARENT) and (args.organization and args.location):
+      raise errors.InvalidSCCInputError(
+          "Cannot provide both a positional `PARENT` and argument "
+          "(`--organization`, `--location`) flags."
+      )
+
+    if (args.IsKnownAndSpecified("PARENT")):
+      parent = args.PARENT
+    elif (args.IsSpecified("organization") and args.IsSpecified("location")):
+      parent = f"{scc_util.GetParentFromPositionalArguments(args)}/locations/{location}"
+    else:
+      raise errors.InvalidSCCInputError(
+          "Must provide either positional `PARENT` or both `--organization` "
+          "and `--location` flags."
+      )
+
+    # Build request.
+    request = messages.SecuritypostureOrganizationsLocationsReportsListRequest(
+        parent=parent,
+        filter=getattr(args, "filter", None),
+        pageSize=getattr(args, "page_size", None),
+    )
+
+    return list_pager.YieldFromList(
+        client.organizations_locations_reports,
+        request,
+        batch_size_attribute="pageSize",
+        batch_size=args.page_size,
+        field="reports",
+    )