使用 Security Command Center API 列出安全性发现结果

import ( 	"context" 	"fmt" 	"io"  	securitycenter "cloud.google.com/go/securitycenter/apiv2" 	"cloud.google.com/go/securitycenter/apiv2/securitycenterpb" 	"google.golang.org/api/iterator" )  // listFindings prints all findings in orgID to w. orgID is the numeric // identifier of the organization. func listFindings(w io.Writer, orgID string) error { 	// orgID := "12321311" 	// Instantiate a context and a security service client to make API calls. 	ctx := context.Background() 	client, err := securitycenter.NewClient(ctx) 	if err != nil { 		return fmt.Errorf("securitycenter.NewClient: %w", err) 	} 	defer client.Close() // Closing the client safely cleans up background resources.  	req := &securitycenterpb.ListFindingsRequest{ 		// List findings across all sources. 		// Parent must be in one of the following formats: 		//		"organizations/{orgId}/sources/-/locations/global" 		//		"projects/{projectId}/sources/-/locations/global" 		//		"folders/{folderId}/sources/-/locations/global" 		Parent: fmt.Sprintf("organizations/%s/sources/-/locations/global", orgID), 	} 	it := client.ListFindings(ctx, req) 	for { 		result, err := it.Next() 		if err == iterator.Done { 			break 		} 		if err != nil { 			return fmt.Errorf("it.Next: %w", err) 		} 		finding := result.Finding 		fmt.Fprintf(w, "Finding Name: %s, ", finding.Name) 		fmt.Fprintf(w, "Resource Name %s, ", finding.ResourceName) 		fmt.Fprintf(w, "Category: %s\n", finding.Category) 	} 	return nil } 

 import com.google.cloud.securitycenter.v2.ListFindingsRequest; import com.google.cloud.securitycenter.v2.ListFindingsResponse.ListFindingsResult; import com.google.cloud.securitycenter.v2.SecurityCenterClient; import java.io.IOException;  public class ListAllFindings {    public static void main(String[] args) throws IOException {     // organizationId: The source to list all findings for.     // You can also use project/ folder as the parent resource.     String organizationId = "google-cloud-organization-id";      // Specify the location to list the findings.     String location = "global";      // The source id to scope the findings.     String sourceId = "source-id";      listAllFindings(organizationId, sourceId, location);   }    // List all findings under a given parent resource.   public static void listAllFindings(String organizationId, String sourceId, String location)       throws IOException {     // Initialize client that will be used to send requests. This client only needs to be created     // once, and can be reused for multiple requests.     try (SecurityCenterClient client = SecurityCenterClient.create()) {       ListFindingsRequest request =           ListFindingsRequest.newBuilder()               // To list findings across all sources, use "-".               .setParent(                   String.format("organizations/%s/sources/%s/locations/%s", organizationId,                       sourceId,                       location))               .build();        for (ListFindingsResult result : client.listFindings(request).iterateAll()) {         System.out.printf("Finding: %s", result.getFinding().getName());       }       System.out.println("\nListing complete.");     }   } }

// Imports the Google Cloud client library. const {SecurityCenterClient} = require('@google-cloud/security-center').v2;  // Creates a new client. const client = new SecurityCenterClient();  // TODO(developer): Update the following for your own environment. const organizationId = '1081635000895'; const location = 'global';  // Required. Name of the source the findings belong to. If no location is // specified, the default is global. The following list shows some examples: // - `organizations/[organization_id]/sources/[source_id]/locations/[location_id]` // - `folders/[folder_id]/sources/[source_id]` // - `folders/[folder_id]/sources/[source_id]/locations/[location_id]` // - `projects/[project_id]/sources/[source_id]` // - `projects/[project_id]/sources/[source_id]/locations/[location_id]` // To groupBy across all sources provide a source_id of `-`. const parent = `organizations/${organizationId}/sources/-/locations/${location}`;  // Build the list findings request. const listFindingsRequest = {   parent, };  async function listAllFindings() {   // Call the API.   const iterable = client.listFindingsAsync(listFindingsRequest);   let count = 0;    for await (const response of iterable) {     // Just print a few for demonstration.     if (count > 5) break;     console.log(       `${++count} ${response.finding.name} ${response.finding.resourceName}`     );   } }  await listAllFindings();

def list_all_findings(organization_id, source_name, location_id) -> int:     """     lists all findings for a source     Args:        organization_id: organization_id is the numeric ID of the organization. e.g.:organization_id = "111122222444"        source_name: is the resource path for a source that has been created        location_id: GCP location id; example: 'global'     Returns:         int: returns the count of all findings for a source     """     from google.cloud import securitycenter_v2      # Create a client.     client = securitycenter_v2.SecurityCenterClient()     parent = f"organizations/{organization_id}"     all_sources = f"{parent}/sources/{source_name}/locations/{location_id}"      # Create the request dictionary     request = {"parent": all_sources}      # Print the request for debugging     print("Request: ", request)      finding_result_iterator = client.list_findings(request={"parent": all_sources})     for count, finding_result in enumerate(finding_result_iterator):         print(             "{}: name: {} resource: {}".format(                 count, finding_result.finding.name, finding_result.finding.resource_name             )         )     return finding_result_iterator  

import ( 	"context" 	"fmt" 	"io"  	securitycenter "cloud.google.com/go/securitycenter/apiv2" 	"cloud.google.com/go/securitycenter/apiv2/securitycenterpb" 	"google.golang.org/api/iterator" )  // listFilteredFindings prints findings with category 'MEDIUM_RISK_ONE' for a // specific source to w. sourceName is the full resource name of the source // to search for findings under. func listFilteredFindings(w io.Writer, sourceName string) error { 	// Specific source: 	// 		sourceName := "{parent}/sources/{sourceId}" 	// All sources: 	// 		sourceName := "{parent}/sources/-" 	// where, 	// Parent must be in one of the following formats: 	//		"organizations/{orgId}" 	//		"projects/{projectId}" 	//		"folders/{folderId}" 	// Instantiate a context and a security service client to make API calls. 	ctx := context.Background() 	client, err := securitycenter.NewClient(ctx) 	if err != nil { 		return fmt.Errorf("securitycenter.NewClient: %w", err) 	} 	defer client.Close() // Closing the client safely cleans up background resources.  	req := &securitycenterpb.ListFindingsRequest{ 		Parent: sourceName, 		Filter: `category="MEDIUM_RISK_ONE"`, 	} 	it := client.ListFindings(ctx, req) 	for { 		result, err := it.Next() 		if err == iterator.Done { 			break 		} 		if err != nil { 			return fmt.Errorf("it.Next: %w", err) 		} 		finding := result.Finding 		fmt.Fprintf(w, "Finding Name: %s, ", finding.Name) 		fmt.Fprintf(w, "Resource Name %s, ", finding.ResourceName) 		fmt.Fprintf(w, "Category: %s\n", finding.Category) 	} 	return nil } 

 import com.google.cloud.securitycenter.v2.ListFindingsRequest; import com.google.cloud.securitycenter.v2.ListFindingsResponse.ListFindingsResult; import com.google.cloud.securitycenter.v2.SecurityCenterClient; import java.io.IOException;  public class ListFindingsWithFilter {    public static void main(String[] args) throws IOException {     // TODO: Replace the variables within {}     // organizationId: Google Cloud Organization id.     // You can also use project/ folder as the parent resource.     String organizationId = "google-cloud-organization-id";      // Specify the location to list the findings.     String location = "global";      // The source id to scope the findings.     String sourceId = "source-id";      listFilteredFindings(organizationId, sourceId, location);   }    // List filtered findings under a source.   public static void listFilteredFindings(String organizationId, String sourceId, String location)       throws IOException {     // Initialize client that will be used to send requests. This client only needs to be created     // once, and can be reused for multiple requests.     try (SecurityCenterClient client = SecurityCenterClient.create()) {        // Use any one of the following formats:       //  * organizations/{organization_id}/sources/{source_id}/locations/{location}       //  * folders/{folder_id}/sources/{source_id}/locations/{location}       //  * projects/{project_id}/sources/{source_id}/locations/{location}       String parent = String.format("organizations/%s/sources/%s/locations/%s", organizationId,           sourceId,           location);        // Listing all findings of category "MEDIUM_RISK_ONE".       String filter = "category=\"MEDIUM_RISK_ONE\"";        ListFindingsRequest request =           ListFindingsRequest.newBuilder()               .setParent(parent)               .setFilter(filter)               .build();        for (ListFindingsResult result : client.listFindings(request).iterateAll()) {         System.out.printf("Finding: %s", result.getFinding().getName());       }       System.out.println("\nListing complete.");     }   } }

// Imports the Google Cloud client library. const {SecurityCenterClient} = require('@google-cloud/security-center').v2;  // Creates a new client. const client = new SecurityCenterClient();  // TODO(developer): Update the following for your own environment. const organizationId = '1081635000895'; const location = 'global';  // Required. Name of the source to groupBy. If no location is specified, // finding is assumed to be in global. //  The following list shows some examples: // - `organizations/[organization_id]/sources/[source_id]` // - `organizations/[organization_id]/sources/[source_id]/locations/[location_id]` // - `folders/[folder_id]/sources/[source_id]` // - `folders/[folder_id]/sources/[source_id]/locations/[location_id]` // - `projects/[project_id]/sources/[source_id]` // - `projects/[project_id]/sources/[source_id]/locations/[location_id]` // To groupBy across all sources provide a source_id of `-`. const parent = `organizations/${organizationId}/sources/-/locations/${location}`;  // Listing all findings of category "MEDIUM_RISK_ONE". const filter = 'category="MEDIUM_RISK_ONE"';  // Build the list findings with filter request. const listFilteredFindingsRequest = {   parent,   filter, };  async function listFilteredFindings() {   // Call the API.   const iterable = client.listFindingsAsync(listFilteredFindingsRequest);   let count = 0;   console.log('Findings:');   for await (const response of iterable) {     // Just print a few for demonstration.     if (count > 5) break;     console.log(       `${++count} ${response.finding.name} ${response.finding.resourceName}`     );   } } await listFilteredFindings();

def list_filtered_findings(organization_id, source_name, location_id) -> int:     """     lists filtered findings for a source     Args:         organization_id: organization_id is the numeric ID of the organization. e.g.:organization_id = "111122222444"         source_name: is the resource path for a source that has been created         location_id: GCP location id; example: 'global'     Returns:          int: returns the filtered findings for a source     """     count = 0     from google.cloud import securitycenter_v2      # Create a new client.     client = securitycenter_v2.SecurityCenterClient()     parent = f"organizations/{organization_id}"     all_sources = f"{parent}/sources/{source_name}/locations/{location_id}"     finding_result_iterator = client.list_findings(         request={"parent": all_sources, "filter": 'severity="LOW"'}     )     # Iterate an print all finding names and the resource they are     # in reference to.     for count, finding_result in enumerate(finding_result_iterator):         print(             "{}: name: {} resource: {}".format(                 count, finding_result.finding.name, finding_result.finding.resource_name             )         )     return count