guac 0.3.1

A library that provides toolkit for working with [Guac](https://guac.sh) from Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127

mod ingest;
mod query;

use super::vulnerability::Vulnerability;
use crate::client::intrinsic::certify_vex_statement::ingest::IngestCertifyVexStatement;
use crate::client::intrinsic::certify_vex_statement::query::{query_certify_vex_statement, QueryCertifyVexStatement};
use crate::client::intrinsic::vulnerability::{VulnerabilityInputSpec, VulnerabilitySpec};
use crate::client::intrinsic::{IntrinsicGuacClient, PackageOrArtifact, PackageOrArtifactInput, PackageOrArtifactSpec};
use crate::client::{Error, Id};
use chrono::Utc;
use graphql_client::reqwest::post_graphql;
use serde::{Deserialize, Serialize};

type Time = chrono::DateTime<Utc>;

impl IntrinsicGuacClient {
    pub async fn ingest_certify_vex_statement(
        &self,
        subject: &PackageOrArtifactInput,
        vulnerability: &VulnerabilityInputSpec,
        vex_statement: &VexStatementInputSpec,
    ) -> Result<Id, Error> {
        use self::ingest::ingest_certify_vex_statement;

        let variables = ingest_certify_vex_statement::Variables {
            subject: subject.into(),
            vulnerability: vulnerability.into(),
            vex_statement: vex_statement.into(),
        };

        let response_body = post_graphql::<IngestCertifyVexStatement, _>(self.client(), self.url(), variables).await?;

        if let Some(errors) = response_body.errors {
            return Err(Error::GraphQL(errors));
        }

        let data = response_body.data.ok_or(Error::GraphQL(vec![]))?;

        Ok(data.ingest_vex_statement)
    }

    pub async fn certify_vex_statement(
        &self,
        certify_vex_statement_spec: &CertifyVexStatementSpec,
    ) -> Result<Vec<CertifyVexStatement>, Error> {
        use self::query::query_certify_vex_statement;

        let variables = query_certify_vex_statement::Variables {
            certify_vex_statement_spec: certify_vex_statement_spec.into(),
        };

        let response_body = post_graphql::<QueryCertifyVexStatement, _>(self.client(), self.url(), variables).await?;

        if let Some(errors) = response_body.errors {
            return Err(Error::GraphQL(errors));
        }

        let data = response_body.data.ok_or(Error::GraphQL(vec![]))?;

        let mut certified = Vec::new();

        for entry in &data.certify_vex_statement {
            certified.push(entry.into());
        }

        Ok(certified)
    }
}

#[derive(Debug, Clone)]
pub struct CertifyVexStatement {
    pub id: Id,
    pub subject: PackageOrArtifact,
    pub vulnerability: Vulnerability,
    pub status: VexStatus,
    pub vex_justification: VexJustification,
    pub statement: String,
    pub status_notes: String,
    pub known_since: Time,
    pub origin: String,
    pub collector: String,
}

#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq)]
pub enum VexStatus {
    NotAffected,
    Affected,
    Fixed,
    UnderInvestigation,
    Other(String),
}

#[derive(Serialize, Deserialize, Debug, Clone)]
pub enum VexJustification {
    ComponentNotPresent,
    VulnerableCodeNotPresent,
    VulnerableCodeNotInExecutePath,
    VulnerableCodeCannotBeControlledByAdversary,
    InlineMitigationsAlreadyExist,
    NotProvided,
    Other(String),
}

#[derive(Clone, Debug)]
pub struct VexStatementInputSpec {
    pub status: VexStatus,
    pub vex_justification: VexJustification,
    pub statement: String,
    pub status_notes: String,
    pub known_since: Time,
    pub origin: String,
    pub collector: String,
}

#[derive(Debug, Default)]
pub struct CertifyVexStatementSpec {
    pub id: Option<Id>,
    pub subject: Option<PackageOrArtifactSpec>,
    pub vulnerability: Option<VulnerabilitySpec>,
    pub status: Option<VexStatus>,
    pub vex_justification: Option<VexJustification>,
    pub statement: Option<String>,
    pub status_notes: Option<String>,
    pub known_since: Option<Time>,
    pub origin: Option<String>,
    pub collector: Option<String>,
}