importcom.google.cloud.devtools.containeranalysis.v1.ContainerAnalysisClient;importio.grafeas.v1.GrafeasClient;importio.grafeas.v1.Note;importio.grafeas.v1.ProjectName;importio.grafeas.v1.Version;importio.grafeas.v1.AttestationNote;importjava.io.IOException;importjava.lang.InterruptedException;publicclassCreateNote{// Creates and returns a new NotepublicstaticNotecreateNote(StringnoteId,StringprojectId)throwsIOException,InterruptedException{// String noteId = "my-note";// String projectId = "my-project-id";finalStringprojectName=ProjectName.format(projectId);NotenewNote=Note.newBuilder()// Associate the Note with the metadata type// https://cloud.google.com/container-registry/docs/container-analysis#supported_metadata_types// Here, we use the type "attestation".setAttestation(AttestationNote.newBuilder().setHint(AttestationNote.Hint.newBuilder().setHumanReadableName("my-attestation-authority"))).build();// Initialize client that will be used to send requests. After completing all of your requests,// call the "close" method on the client to safely clean up any remaining background resources.GrafeasClientclient=ContainerAnalysisClient.create().getGrafeasClient();Noteresult=client.createNote(projectName,noteId,newNote);returnresult;}}

import("context""fmt"containeranalysis"cloud.google.com/go/containeranalysis/apiv1"grafeaspb"google.golang.org/genproto/googleapis/grafeas/v1")// createNote creates and returns a new attestation Note.funccreateNote(noteID,projectIDstring)(*grafeaspb.Note,error){ctx:=context.Background()client,err:=containeranalysis.NewClient(ctx)iferr!=nil{returnnil,fmt.Errorf("NewClient: %w",err)}deferclient.Close()projectName:=fmt.Sprintf("projects/%s",projectID)req:=&grafeaspb.CreateNoteRequest{Parent:projectName,NoteId:noteID,Note:&grafeaspb.Note{Type:&grafeaspb.Note_Attestation{Attestation:&grafeaspb.AttestationNote{Hint:&grafeaspb.AttestationNote_Hint{HumanReadableName:"my-attestation-authority",},},},},}returnclient.GetGrafeasClient().CreateNote(ctx,req)}

/*** TODO(developer): Uncomment these variables before running the sample*/// const projectId = 'your-project-id', // Your Google Cloud Project ID// const noteId = 'my-note-id' // Id of the note// Import the library and create a clientconst{ContainerAnalysisClient}=require('@google-cloud/containeranalysis');constclient=newContainerAnalysisClient();// Construct request// Associate the Note with a metadata type// https://cloud.google.com/container-registry/docs/container-analysis#supported_metadata_types// Here, we use the type "attestation"constformattedParent=client.getGrafeasClient().projectPath(projectId);// Creates and returns a new Noteconst[note]=awaitclient.getGrafeasClient().createNote({parent:formattedParent,noteId:noteId,note:{attestation:{hint:{humanReadableName:'my-attestation-authority',},},},});console.log(`Note${note.name} created.`);

# note_id = "A user-specified identifier for the note"# project_id = "Your Google Cloud project ID"require"google/cloud/container_analysis"# Initialize the clientclient=Google::Cloud::ContainerAnalysis.container_analysis.grafeas_clientparent=client.project_pathproject:project_idnote={attestation:{hint:{human_readable_name:"attestation-authority"}}}response=client.create_noteparent:parent,note_id:note_id,note:noteputsresponse.name

fromgoogle.cloud.devtoolsimportcontaineranalysis_v1fromgrafeas.grafeas_v1importtypes,Versiondefcreate_note(note_id:str,project_id:str)->types.grafeas.Note:"""Creates and returns a new attestation note."""# note_id = 'my-note'# project_id = 'my-gcp-project'client=containeranalysis_v1.ContainerAnalysisClient()grafeas_client=client.get_grafeas_client()project_name=f"projects/{project_id}"note={"attestation":{"hint":{"human_readable_name":"attestation-authority",}}}response=grafeas_client.create_note(parent=project_name,note_id=note_id,note=note)returnresponse

importcom.google.cloud.devtools.containeranalysis.v1.ContainerAnalysisClient;importcom.google.protobuf.ByteString;importio.grafeas.v1.AttestationOccurrence;importio.grafeas.v1.GrafeasClient;importio.grafeas.v1.NoteName;importio.grafeas.v1.Occurrence;importio.grafeas.v1.ProjectName;importio.grafeas.v1.Signature;importjava.io.IOException;publicclassCreateOccurrence{// Creates and returns a new attestation Occurrence associated with an existing NotepublicstaticOccurrencecreateOccurrence(StringresourceUrl,StringnoteId,StringoccProjectId,StringnoteProjectId)throwsIOException{// String resourceUrl = "https://gcr.io/project/image@sha256:123";// String noteId = "my-note";// String occProjectId = "my-project-id";// String noteProjectId = "my-project-id";finalNoteNamenoteName=NoteName.of(noteProjectId,noteId);finalStringoccProjectName=ProjectName.format(occProjectId);OccurrencenewOcc=Occurrence.newBuilder().setNoteName(noteName.toString()).setResourceUri(resourceUrl).setAttestation(AttestationOccurrence.newBuilder().setSerializedPayload(ByteString.copyFrom("your-payload-here","UTF-8")).addSignatures(Signature.newBuilder().setPublicKeyId("your-key-id-here").setSignature(ByteString.copyFrom("your-signature-here","UTF-8")))).build();// Initialize client that will be used to send requests. After completing all of your requests,// call the "close" method on the client to safely clean up any remaining background// resources.GrafeasClientclient=ContainerAnalysisClient.create().getGrafeasClient();Occurrenceresult=client.createOccurrence(occProjectName,newOcc);returnresult;}}

import("context""fmt"containeranalysis"cloud.google.com/go/containeranalysis/apiv1"grafeaspb"google.golang.org/genproto/googleapis/grafeas/v1")// createsOccurrence creates and returns a new Occurrence of a previously created attestation note.// Use this style of URL when you use Google Artifact Registry.// resourceURL := "https://LOCATION-docker.pkg.dev/my-project/my-repo/my-image"// noteID := "my-note"ctx:=context.Background()client,err:=containeranalysis.NewClient(ctx)iferr!=nil{returnnil,fmt.Errorf("NewClient: %w",err)}deferclient.Close()req:=&grafeaspb.CreateOccurrenceRequest{Parent:fmt.Sprintf("projects/%s",occProjectID),Occurrence:&grafeaspb.Occurrence{NoteName:fmt.Sprintf("projects/%s/notes/%s",noteProjectID,noteID),// Attach the occurrence to the associated resource uri.ResourceUri:resourceURL,// Details about the attestation can be added here.Details:&grafeaspb.Occurrence_Attestation{Attestation:&grafeaspb.AttestationOccurrence{SerializedPayload:[]byte("..."),Signatures:[]*grafeaspb.Signature{{PublicKeyId:"...",Signature:[]byte("..."),},},},},},}returnclient.GetGrafeasClient().CreateOccurrence(ctx,req)}

/** * TODO(developer): Uncomment these variables before running the sample */// const noteProjectId = 'your-project-id', // Your Google Cloud Project ID// const noteId = 'my-note-id', // Id of the note// const occurrenceProjectId = 'your-project-id', // The Google Cloud Project ID of the occurrence// If you are using Google Artifact Registry// const imageUrl = 'https://LOCATION-docker.pkg.dev/my-project/my-repo/my-image:123' // Image to attach metadata to// Import the library and create a clientconst{ContainerAnalysisClient}=require('@google-cloud/containeranalysis');constclient=newContainerAnalysisClient();// Construct requestconstformattedParent=client.getGrafeasClient().projectPath(occurrenceProjectId);constformattedNote=client.getGrafeasClient().notePath(noteProjectId,noteId);// Creates and returns a new Occurrence associated with an existing Noteconst[occurrence]=awaitclient.getGrafeasClient().createOccurrence({parent:formattedParent,occurrence:{noteName:formattedNote,resourceUri:imageUrl,attestation:{serializedPayload:Buffer.from('your-payload-here').toString('base64'),signatures:[{publicKeyId:'your-key-id-here',signature:Buffer.from('your-signature-here').toString('base64'),},],},},});console.log(`Occurrence created${occurrence.name}.`);returnoccurrence;

# note_id    = "A user-specified identifier for the note"# project_id = "Your Google Cloud project ID"# note_project = "The project that contains the note"# occurrence_project = "The project that contains the occurrence"require"google/cloud/container_analysis"require"base64"# Initialize the clientclient=Google::Cloud::ContainerAnalysis.container_analysis.grafeas_clientnote_path=client.note_pathproject:note_project,note:note_idproject_path=client.project_pathproject:occurrence_projectoccurrence={note_name:note_path,resource_uri:resource_url,attestation:{serialized_payload:Base64.encode64("your-payload-here"),signatures:[{public_key_id:"your-key-id-here",signature:Base64.encode64("your-signature-here")}]}}response=client.create_occurrenceparent:project_path,occurrence:occurrenceputsresponse.name

importbase64fromgoogle.cloud.devtoolsimportcontaineranalysis_v1fromgrafeas.grafeas_v1importtypesdefcreate_occurrence(resource_url:str,note_id:str,occurrence_project:str,note_project:str)->types.grafeas.Occurrence:"""Creates and returns a new occurrence of a previously    created attestation note."""# note_id = 'my-note'# project_id = 'my-gcp-project'client=containeranalysis_v1.ContainerAnalysisClient()grafeas_client=client.get_grafeas_client()formatted_note=f"projects/{note_project}/notes/{note_id}"formatted_project=f"projects/{occurrence_project}"occurrence={"note_name":formatted_note,"resource_uri":resource_url,"attestation":{"serialized_payload":base64.b64encode(b"your-payload-here").decode("utf-8"),"signatures":[{"public_key_id":"your-key-id-here","signature":base64.b64encode(b"your-signature-here").decode("utf-8"),}],},}returngrafeas_client.create_occurrence(parent=formatted_project,occurrence=occurrence)

GET https://containeranalysis.googleapis.com/v1/projects/PROJECT_ID/notes/NOTE_ID/occurrences