feat: add image_manifest field in DockerImage

Google APIs · copybara-github · commit cf0434f4bd20 · 2025-11-11T09:36:56.000-08:00
feat: add artifact_type field in DockerImage
feat: add Ruby format in VulnerabilityScanningConfig
docs: A comment for field `name` in message `.google.devtools.artifactregistry.v1.DockerImage` is changed
docs: A comment for enum value `ENABLEMENT_CONFIG_UNSPECIFIED` in enum `EnablementConfig` is changed
docs: A comment for field `satisfies_pzs` in message `.google.devtools.artifactregistry.v1.Repository` is changed
docs: A comment for field `satisfies_pzi` in message `.google.devtools.artifactregistry.v1.Repository` is changed

PiperOrigin-RevId: 830951552
diff --git a/google/devtools/artifactregistry/v1/artifact.proto b/google/devtools/artifactregistry/v1/artifact.proto
@@ -42,7 +42,7 @@ message DockerImage {
 
   // Required. registry_location, project_id, repository_name and image id forms
   // a unique image
-  // name:`projects/<project_id>/locations/<location>/repository/<repository_name>/dockerImages/<docker_image>`.
+  // name:`projects/<project_id>/locations/<location>/repositories/<repository_name>/dockerImages/<docker_image>`.
   // For example,
   // "projects/test-project/locations/us-west4/repositories/test-repo/dockerImages/
   // nginx@sha256:e9954c1fc875017be1c3e36eca16be2d9e9bccc4bf072163515467d6a823c7cf",
@@ -84,6 +84,50 @@ message DockerImage {
   // Output only. The time when the docker image was last updated.
   google.protobuf.Timestamp update_time = 8
       [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // ArtifactType of this image, e.g. "application/vnd.example+type".
+  // If the `subject_digest` is set and no `artifact_type` is given, the
+  // `media_type` will be considered as the `artifact_type`. This field is
+  // returned as the `metadata.artifactType` field in the Version resource.
+  string artifact_type = 9;
+
+  // Optional. For multi-arch images (manifest lists), this field contains the
+  // list of image manifests.
+  repeated ImageManifest image_manifests = 11
+      [(google.api.field_behavior) = OPTIONAL];
+}
+
+// Details of a single image manifest within a multi-arch image.
+message ImageManifest {
+  // Optional. The CPU architecture of the image.
+  // Values are provided by the Docker client and are not validated by Artifact
+  // Registry. Example values include "amd64", "arm64", "ppc64le", "s390x",
+  // "riscv64", "mips64le", etc.
+  string architecture = 1 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The operating system of the image.
+  // Values are provided by the Docker client and are not validated by Artifact
+  // Registry. Example values include "linux", "windows", "darwin", "aix", etc.
+  string os = 2 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The manifest digest, in the format "sha256:<sha256_hex_digest>".
+  string digest = 3 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The media type of the manifest, e.g.,
+  // "application/vnd.docker.distribution.manifest.v2+json"
+  string media_type = 4 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The OS version of the image, for example on Windows
+  // `10.0.14393.1066`.
+  string os_version = 5 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The required OS features for the image, for example on Windows
+  // `win32k`.
+  repeated string os_features = 6 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The variant of the CPU in the image, for example `v7` to specify
+  // ARMv7 when architecture is `arm`.
+  string variant = 7 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // The request to list docker images.
diff --git a/google/devtools/artifactregistry/v1/repository.proto b/google/devtools/artifactregistry/v1/repository.proto
@@ -470,7 +470,8 @@ message Repository {
   message VulnerabilityScanningConfig {
     // Config for vulnerability scanning of resources in this repository.
     enum EnablementConfig {
-      // Not set. This will be treated as INHERITED.
+      // Not set. This will be treated as INHERITED for Docker repositories and
+      // DISABLED for non-Docker repositories.
       ENABLEMENT_CONFIG_UNSPECIFIED = 0;
 
       // Scanning is Enabled, but dependent on API enablement.
@@ -547,6 +548,9 @@ message Repository {
 
     // Generic package format.
     GENERIC = 11;
+
+    // Ruby package format.
+    RUBY = 12;
   }
 
   // The mode configures the repository to serve artifacts from different
@@ -633,7 +637,7 @@ message Repository {
   //  use this to calculate storage costs.
   int64 size_bytes = 13 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. If set, the repository satisfies physical zone separation.
+  // Output only. Whether or not this repository satisfies PZS.
   bool satisfies_pzs = 16 [(google.api.field_behavior) = OUTPUT_ONLY];
 
   // Optional. If true, the cleanup pipeline is prevented from deleting versions
@@ -649,7 +653,7 @@ message Repository {
   // error rather than defaulting to standard.
   bool disallow_unspecified_mode = 21 [(google.api.field_behavior) = OPTIONAL];
 
-  // Output only. If set, the repository satisfies physical zone isolation.
+  // Output only. Whether or not this repository satisfies PZI.
   bool satisfies_pzi = 22 [(google.api.field_behavior) = OUTPUT_ONLY];
 
   // Output only. The repository endpoint, for example:
