feat: add agent, agent_sessions, and agent_anomaly fields to Finding

google-cloud-security_center-v2/.owlbot-manifest.json

@@ -28,6 +28,9 @@
     "lib/google/cloud/security_center/v2/version.rb",
     "lib/google/cloud/securitycenter/v2/access_pb.rb",
     "lib/google/cloud/securitycenter/v2/affected_resources_pb.rb",
+    "lib/google/cloud/securitycenter/v2/agent_anomaly_pb.rb",
+    "lib/google/cloud/securitycenter/v2/agent_pb.rb",
+    "lib/google/cloud/securitycenter/v2/agent_session_pb.rb",
     "lib/google/cloud/securitycenter/v2/ai_model_pb.rb",
     "lib/google/cloud/securitycenter/v2/application_pb.rb",
     "lib/google/cloud/securitycenter/v2/attack_exposure_pb.rb",
@@ -90,6 +93,9 @@
     "proto_docs/google/api/routing.rb",
     "proto_docs/google/cloud/securitycenter/v2/access.rb",
     "proto_docs/google/cloud/securitycenter/v2/affected_resources.rb",
+    "proto_docs/google/cloud/securitycenter/v2/agent.rb",
+    "proto_docs/google/cloud/securitycenter/v2/agent_anomaly.rb",
+    "proto_docs/google/cloud/securitycenter/v2/agent_session.rb",
     "proto_docs/google/cloud/securitycenter/v2/ai_model.rb",
     "proto_docs/google/cloud/securitycenter/v2/application.rb",
     "proto_docs/google/cloud/securitycenter/v2/attack_exposure.rb",

google-cloud-security_center-v2/proto_docs/google/cloud/securitycenter/v2/agent.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module SecurityCenter
+      module V2
+        # Represents a monitored AI Agent.
+        # @!attribute [rw] id
+        #   @return [::String]
+        #     Identifier of the agent.
+        # @!attribute [rw] display_name
+        #   @return [::String]
+        #     The user friendly name of the specific agent instance where the finding was
+        #     detected, for example, "Banking Agent".
+        class Agent
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

google-cloud-security_center-v2/proto_docs/google/cloud/securitycenter/v2/agent_anomaly.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module SecurityCenter
+      module V2
+        # Represents details about an anomaly detected in an AI agent's behavior.
+        # @!attribute [rw] confidence_score
+        #   @return [::Float]
+        #     The overall confidence score indicating the likelihood that this session
+        #     contains a true anomaly. The score ranges from 0.0 to 1.0, where 1.0
+        #     signifies 100% confidence in the presence of an anomaly and 0.0 signifies
+        #     0% confidence.
+        # @!attribute [rw] detector_references
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::DetectorReference>]
+        #     The list of references to specific detectors that identified anomalies
+        #     within this session.
+        # @!attribute [rw] invocation_references
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::InvocationReference>]
+        #     References to the OpenTelemetry invocations.
+        class AgentAnomaly
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Represents a reference to a specific anomaly detector.
+        # @!attribute [rw] severity
+        #   @return [::Google::Cloud::SecurityCenter::V2::DetectorReference::Severity]
+        #     The severity of the detector.
+        # @!attribute [rw] detector_id
+        #   @return [::String]
+        #     The unique identifier of the detector.
+        # @!attribute [rw] display_name
+        #   @return [::String]
+        #     A human readable name for the detector, providing context on its purpose.
+        #     For example, "ASI02: Tool Misuse", or "Excessive API Calls".
+        # @!attribute [rw] explanation
+        #   @return [::String]
+        #     A detailed explanation generated by an LLM or the detector itself,
+        #     describing why this specific anomaly was flagged. This provides rationale
+        #     and context for the detection.
+        # @!attribute [rw] recommendation
+        #   @return [::String]
+        #     Recommended steps or actions to remediate or investigate the anomaly
+        #     flagged by this detector. These could include configuration changes, code
+        #     adjustments, or further diagnostic procedures.
+        class DetectorReference
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Severity levels for detectors.
+          module Severity
+            # Unspecified severity.
+            SEVERITY_UNSPECIFIED = 0
+
+            # Critical severity.
+            CRITICAL = 1
+
+            # High severity.
+            HIGH = 2
+
+            # Medium severity.
+            MEDIUM = 3
+
+            # Low severity.
+            LOW = 4
+          end
+        end
+
+        # Represents a reference to a specific OpenTelemetry invocation.
+        # @!attribute [rw] invocation_id
+        #   @return [::String]
+        #     The unique identifier of the invocation.
+        class InvocationReference
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

google-cloud-security_center-v2/proto_docs/google/cloud/securitycenter/v2/agent_session.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module SecurityCenter
+      module V2
+        # Represents a conversational session where the finding occurred.
+        # @!attribute [rw] session_id
+        #   @return [::String]
+        #     The session ID of a conversation.
+        class AgentSession
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

google-cloud-security_center-v2/proto_docs/google/cloud/securitycenter/v2/finding.rb

@@ -316,6 +316,15 @@ module V2
         # @!attribute [rw] vertex_ai
         #   @return [::Google::Cloud::SecurityCenter::V2::VertexAi]
         #     VertexAi associated with the finding.
+        # @!attribute [rw] agent
+        #   @return [::Google::Cloud::SecurityCenter::V2::Agent]
+        #     Primary Agent that the specified finding was flagged for
+        # @!attribute [rw] agent_sessions
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::AgentSession>]
+        #     Conversational session(s) where the finding occurred.
+        # @!attribute [rw] agent_anomaly
+        #   @return [::Google::Cloud::SecurityCenter::V2::AgentAnomaly]
+        #     Details about behavior anomalies detected in AI agents.
         class Finding
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods