docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/containeranalysis_v1alpha1.projects.notes.html b/docs/dyn/containeranalysis_v1alpha1.projects.notes.html
index f5e84b1..9e99c58 100644
--- a/docs/dyn/containeranalysis_v1alpha1.projects.notes.html
+++ b/docs/dyn/containeranalysis_v1alpha1.projects.notes.html
@@ -147,22 +147,10 @@
   },
   "kind": "A String", # Output only. This explicitly denotes which kind of note is specified. This
       # field can be used as a filter in list requests.
-  "deployable": { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
-    "resourceUri": [ # Resource URI for the artifact being deployed.
-      "A String",
-    ],
-  },
   "buildType": { # Note holding the version of the provider's builder and the signature of # Build provenance type for a verifiable build.
       # the provenance message in linked BuildDetails.
     "signature": { # Message encapsulating the signature of the verified build. # Signature of the build in Occurrences pointing to the Note containing this
         # `BuilderDetails`.
-      "keyId": "A String", # An Id for the key used to sign. This could be either an Id for the key
-          # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
-          # CN for a cert), or a reference to an external key (such as a reference to a
-          # key in Cloud Key Management Service).
-      "keyType": "A String", # The type of the key, either stored in `public_key` or referenced in
-          # `key_id`
-      "signature": "A String", # Signature of the related `BuildProvenance`, encoded in a base64 string.
       "publicKey": "A String", # Public key of the builder which can be used to verify that the related
           # findings are valid and unchanged. If `key_type` is empty, this defaults
           # to PEM encoded public keys.
@@ -176,10 +164,22 @@
           # from `BuildDetails` are base64-decoded into a binary representation in
           # signed.bin. OpenSSL can then verify the signature:
           # `openssl sha256 -verify public.pem -signature signature.bin signed.bin`
+      "keyId": "A String", # An Id for the key used to sign. This could be either an Id for the key
+          # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
+          # CN for a cert), or a reference to an external key (such as a reference to a
+          # key in Cloud Key Management Service).
+      "keyType": "A String", # The type of the key, either stored in `public_key` or referenced in
+          # `key_id`
+      "signature": "A String", # Signature of the related `BuildProvenance`, encoded in a base64 string.
     },
     "builderVersion": "A String", # Version of the builder which produced this Note.
   },
   "longDescription": "A String", # A detailed description of this `Note`.
+  "deployable": { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
+    "resourceUri": [ # Resource URI for the artifact being deployed.
+      "A String",
+    ],
+  },
   "shortDescription": "A String", # A one sentence description of this `Note`.
   "attestationAuthority": { # Note kind that represents a logical attestation "role" or "authority".  For # A note describing an attestation role.
       # example, an organization might have one `AttestationAuthority` for "QA" and
@@ -202,7 +202,6 @@
   "name": "A String", # The name of the note in the form
       # "projects/{provider_project_id}/notes/{NOTE_ID}"
   "vulnerabilityType": { # VulnerabilityType provides metadata about a security vulnerability. # A package vulnerability type of note.
-    "cvssScore": 3.14, # The CVSS score for this Vulnerability.
     "severity": "A String", # Note provider assigned impact of the vulnerability
     "details": [ # All information about the package to specifically identify this
         # vulnerability. One entry per (version range and cpe_uri) the
@@ -210,13 +209,7 @@
       { # Identifies all occurrences of this vulnerability in the package for a
           # specific distro/location
           # For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
-        "isObsolete": True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
-            # obsolete details.
         "fixedLocation": { # The location of the vulnerability # The fix for this specific package version.
-          "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-              # format. Examples include distro or storage location for vulnerable jar.
-              # This field can be used as a filter in list requests.
-          "package": "A String", # The package being described.
           "version": { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
               # filter in list requests.
               # For a discussion of this in Debian/Ubuntu:
@@ -229,6 +222,10 @@
             "epoch": 42, # Used to correct mistakes in the version numbering scheme.
             "revision": "A String", # The iteration of the package build from the above version.
           },
+          "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+              # format. Examples include distro or storage location for vulnerable jar.
+              # This field can be used as a filter in list requests.
+          "package": "A String", # The package being described.
         },
         "packageType": "A String", # The type of package; whether native or non native(ruby gems,
             # node.js packages etc)
@@ -262,13 +259,15 @@
           "epoch": 42, # Used to correct mistakes in the version numbering scheme.
           "revision": "A String", # The iteration of the package build from the above version.
         },
+        "isObsolete": True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
+            # obsolete details.
       },
     ],
+    "cvssScore": 3.14, # The CVSS score for this Vulnerability.
   },
   "upgrade": { # An Upgrade Note represents a potential upgrade of a package to a given # A note describing an upgrade.
       # version. For each package version combination (i.e. bash 4.0, bash 4.1,
       # bash 4.1.2), there will be a Upgrade Note.
-    "package": "A String", # Required - The package this Upgrade is for.
     "version": { # Version contains structured information about the version of the package. # Required - The version of the package in machine + human readable form.
         # For a discussion of this in Debian/Ubuntu:
         # http://serverfault.com/questions/604541/debian-packages-version-convention
@@ -284,16 +283,17 @@
       { # The Upgrade Distribution represents metadata about the Upgrade for each
           # operating system (CPE). Some distributions have additional metadata around
           # updates, classifying them into various categories and severities.
-        "cve": [ # The cve that would be resolved by this upgrade.
-          "A String",
-        ],
         "classification": "A String", # The operating system classification of this Upgrade, as specified by the
             # upstream operating system upgrade feed.
         "severity": "A String", # The severity as specified by the upstream operating system.
         "cpeUri": "A String", # Required - The specific operating system this metadata applies to. See
             # https://cpe.mitre.org/specification/.
+        "cve": [ # The cve that would be resolved by this upgrade.
+          "A String",
+        ],
       },
     ],
+    "package": "A String", # Required - The package this Upgrade is for.
   },
   "package": { # This represents a particular package that is distributed over # A note describing a package hosted by various package managers.
       # various channels.
@@ -302,7 +302,6 @@
     "distribution": [ # The various channels by which a package is distributed.
       { # This represents a particular channel of distribution for a given package.
           # e.g. Debian's jessie-backports dpkg mirror
-        "maintainer": "A String", # A freeform string denoting the maintainer of this package.
         "latestVersion": { # Version contains structured information about the version of the package. # The latest available version of this package in
             # this distribution channel.
             # For a discussion of this in Debian/Ubuntu:
@@ -321,13 +320,12 @@
         "url": "A String", # The distribution channel-specific homepage for this package.
         "architecture": "A String", # The CPU architecture for which packages in this distribution
             # channel were built
+        "maintainer": "A String", # A freeform string denoting the maintainer of this package.
       },
     ],
   },
   "createTime": "A String", # Output only. The time this note was created. This field can be used as a
       # filter in list requests.
-  "updateTime": "A String", # Output only. The time this note was last updated. This field can be used as
-      # a filter in list requests.
   "discovery": { # A note that indicates a type of analysis a provider would perform. This note # A note describing a provider/analysis type.
       # exists in a provider's project. A `Discovery` occurrence is created in a
       # consumer's project at the start of analysis. The occurrence's operation will
@@ -335,6 +333,8 @@
       # note for a resource indicates that analysis hasn't started.
     "analysisKind": "A String", # The kind of analysis that is handled by this discovery.
   },
+  "updateTime": "A String", # Output only. The time this note was last updated. This field can be used as
+      # a filter in list requests.
 }
 
   name: string, The name of the project.
@@ -379,22 +379,10 @@
     },
     "kind": "A String", # Output only. This explicitly denotes which kind of note is specified. This
         # field can be used as a filter in list requests.
-    "deployable": { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
-      "resourceUri": [ # Resource URI for the artifact being deployed.
-        "A String",
-      ],
-    },
     "buildType": { # Note holding the version of the provider's builder and the signature of # Build provenance type for a verifiable build.
         # the provenance message in linked BuildDetails.
       "signature": { # Message encapsulating the signature of the verified build. # Signature of the build in Occurrences pointing to the Note containing this
           # `BuilderDetails`.
-        "keyId": "A String", # An Id for the key used to sign. This could be either an Id for the key
-            # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
-            # CN for a cert), or a reference to an external key (such as a reference to a
-            # key in Cloud Key Management Service).
-        "keyType": "A String", # The type of the key, either stored in `public_key` or referenced in
-            # `key_id`
-        "signature": "A String", # Signature of the related `BuildProvenance`, encoded in a base64 string.
         "publicKey": "A String", # Public key of the builder which can be used to verify that the related
             # findings are valid and unchanged. If `key_type` is empty, this defaults
             # to PEM encoded public keys.
@@ -408,10 +396,22 @@
             # from `BuildDetails` are base64-decoded into a binary representation in
             # signed.bin. OpenSSL can then verify the signature:
             # `openssl sha256 -verify public.pem -signature signature.bin signed.bin`
+        "keyId": "A String", # An Id for the key used to sign. This could be either an Id for the key
+            # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
+            # CN for a cert), or a reference to an external key (such as a reference to a
+            # key in Cloud Key Management Service).
+        "keyType": "A String", # The type of the key, either stored in `public_key` or referenced in
+            # `key_id`
+        "signature": "A String", # Signature of the related `BuildProvenance`, encoded in a base64 string.
       },
       "builderVersion": "A String", # Version of the builder which produced this Note.
     },
     "longDescription": "A String", # A detailed description of this `Note`.
+    "deployable": { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
+      "resourceUri": [ # Resource URI for the artifact being deployed.
+        "A String",
+      ],
+    },
     "shortDescription": "A String", # A one sentence description of this `Note`.
     "attestationAuthority": { # Note kind that represents a logical attestation "role" or "authority".  For # A note describing an attestation role.
         # example, an organization might have one `AttestationAuthority` for "QA" and
@@ -434,7 +434,6 @@
     "name": "A String", # The name of the note in the form
         # "projects/{provider_project_id}/notes/{NOTE_ID}"
     "vulnerabilityType": { # VulnerabilityType provides metadata about a security vulnerability. # A package vulnerability type of note.
-      "cvssScore": 3.14, # The CVSS score for this Vulnerability.
       "severity": "A String", # Note provider assigned impact of the vulnerability
       "details": [ # All information about the package to specifically identify this
           # vulnerability. One entry per (version range and cpe_uri) the
@@ -442,13 +441,7 @@
         { # Identifies all occurrences of this vulnerability in the package for a
             # specific distro/location
             # For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
-          "isObsolete": True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
-              # obsolete details.
           "fixedLocation": { # The location of the vulnerability # The fix for this specific package version.
-            "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-                # format. Examples include distro or storage location for vulnerable jar.
-                # This field can be used as a filter in list requests.
-            "package": "A String", # The package being described.
             "version": { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
                 # filter in list requests.
                 # For a discussion of this in Debian/Ubuntu:
@@ -461,6 +454,10 @@
               "epoch": 42, # Used to correct mistakes in the version numbering scheme.
               "revision": "A String", # The iteration of the package build from the above version.
             },
+            "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+                # format. Examples include distro or storage location for vulnerable jar.
+                # This field can be used as a filter in list requests.
+            "package": "A String", # The package being described.
           },
           "packageType": "A String", # The type of package; whether native or non native(ruby gems,
               # node.js packages etc)
@@ -494,13 +491,15 @@
             "epoch": 42, # Used to correct mistakes in the version numbering scheme.
             "revision": "A String", # The iteration of the package build from the above version.
           },
+          "isObsolete": True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
+              # obsolete details.
         },
       ],
+      "cvssScore": 3.14, # The CVSS score for this Vulnerability.
     },
     "upgrade": { # An Upgrade Note represents a potential upgrade of a package to a given # A note describing an upgrade.
         # version. For each package version combination (i.e. bash 4.0, bash 4.1,
         # bash 4.1.2), there will be a Upgrade Note.
-      "package": "A String", # Required - The package this Upgrade is for.
       "version": { # Version contains structured information about the version of the package. # Required - The version of the package in machine + human readable form.
           # For a discussion of this in Debian/Ubuntu:
           # http://serverfault.com/questions/604541/debian-packages-version-convention
@@ -516,16 +515,17 @@
         { # The Upgrade Distribution represents metadata about the Upgrade for each
             # operating system (CPE). Some distributions have additional metadata around
             # updates, classifying them into various categories and severities.
-          "cve": [ # The cve that would be resolved by this upgrade.
-            "A String",
-          ],
           "classification": "A String", # The operating system classification of this Upgrade, as specified by the
               # upstream operating system upgrade feed.
           "severity": "A String", # The severity as specified by the upstream operating system.
           "cpeUri": "A String", # Required - The specific operating system this metadata applies to. See
               # https://cpe.mitre.org/specification/.
+          "cve": [ # The cve that would be resolved by this upgrade.
+            "A String",
+          ],
         },
       ],
+      "package": "A String", # Required - The package this Upgrade is for.
     },
     "package": { # This represents a particular package that is distributed over # A note describing a package hosted by various package managers.
         # various channels.
@@ -534,7 +534,6 @@
       "distribution": [ # The various channels by which a package is distributed.
         { # This represents a particular channel of distribution for a given package.
             # e.g. Debian's jessie-backports dpkg mirror
-          "maintainer": "A String", # A freeform string denoting the maintainer of this package.
           "latestVersion": { # Version contains structured information about the version of the package. # The latest available version of this package in
               # this distribution channel.
               # For a discussion of this in Debian/Ubuntu:
@@ -553,13 +552,12 @@
           "url": "A String", # The distribution channel-specific homepage for this package.
           "architecture": "A String", # The CPU architecture for which packages in this distribution
               # channel were built
+          "maintainer": "A String", # A freeform string denoting the maintainer of this package.
         },
       ],
     },
     "createTime": "A String", # Output only. The time this note was created. This field can be used as a
         # filter in list requests.
-    "updateTime": "A String", # Output only. The time this note was last updated. This field can be used as
-        # a filter in list requests.
     "discovery": { # A note that indicates a type of analysis a provider would perform. This note # A note describing a provider/analysis type.
         # exists in a provider's project. A `Discovery` occurrence is created in a
         # consumer's project at the start of analysis. The occurrence's operation will
@@ -567,6 +565,8 @@
         # note for a resource indicates that analysis hasn't started.
       "analysisKind": "A String", # The kind of analysis that is handled by this discovery.
     },
+    "updateTime": "A String", # Output only. The time this note was last updated. This field can be used as
+        # a filter in list requests.
   }</pre>
 </div>
 
@@ -642,22 +642,10 @@
     },
     &quot;kind&quot;: &quot;A String&quot;, # Output only. This explicitly denotes which kind of note is specified. This
         # field can be used as a filter in list requests.
-    &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
-      &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
-        &quot;A String&quot;,
-      ],
-    },
     &quot;buildType&quot;: { # Note holding the version of the provider&#x27;s builder and the signature of # Build provenance type for a verifiable build.
         # the provenance message in linked BuildDetails.
       &quot;signature&quot;: { # Message encapsulating the signature of the verified build. # Signature of the build in Occurrences pointing to the Note containing this
           # `BuilderDetails`.
-        &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
-            # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
-            # CN for a cert), or a reference to an external key (such as a reference to a
-            # key in Cloud Key Management Service).
-        &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
-            # `key_id`
-        &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
         &quot;publicKey&quot;: &quot;A String&quot;, # Public key of the builder which can be used to verify that the related
             # findings are valid and unchanged. If `key_type` is empty, this defaults
             # to PEM encoded public keys.
@@ -671,10 +659,22 @@
             # from `BuildDetails` are base64-decoded into a binary representation in
             # signed.bin. OpenSSL can then verify the signature:
             # `openssl sha256 -verify public.pem -signature signature.bin signed.bin`
+        &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
+            # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
+            # CN for a cert), or a reference to an external key (such as a reference to a
+            # key in Cloud Key Management Service).
+        &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
+            # `key_id`
+        &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
       },
       &quot;builderVersion&quot;: &quot;A String&quot;, # Version of the builder which produced this Note.
     },
     &quot;longDescription&quot;: &quot;A String&quot;, # A detailed description of this `Note`.
+    &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
+      &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
+        &quot;A String&quot;,
+      ],
+    },
     &quot;shortDescription&quot;: &quot;A String&quot;, # A one sentence description of this `Note`.
     &quot;attestationAuthority&quot;: { # Note kind that represents a logical attestation &quot;role&quot; or &quot;authority&quot;.  For # A note describing an attestation role.
         # example, an organization might have one `AttestationAuthority` for &quot;QA&quot; and
@@ -697,7 +697,6 @@
     &quot;name&quot;: &quot;A String&quot;, # The name of the note in the form
         # &quot;projects/{provider_project_id}/notes/{NOTE_ID}&quot;
     &quot;vulnerabilityType&quot;: { # VulnerabilityType provides metadata about a security vulnerability. # A package vulnerability type of note.
-      &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
       &quot;severity&quot;: &quot;A String&quot;, # Note provider assigned impact of the vulnerability
       &quot;details&quot;: [ # All information about the package to specifically identify this
           # vulnerability. One entry per (version range and cpe_uri) the
@@ -705,13 +704,7 @@
         { # Identifies all occurrences of this vulnerability in the package for a
             # specific distro/location
             # For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
-          &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
-              # obsolete details.
           &quot;fixedLocation&quot;: { # The location of the vulnerability # The fix for this specific package version.
-            &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-                # format. Examples include distro or storage location for vulnerable jar.
-                # This field can be used as a filter in list requests.
-            &quot;package&quot;: &quot;A String&quot;, # The package being described.
             &quot;version&quot;: { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
                 # filter in list requests.
                 # For a discussion of this in Debian/Ubuntu:
@@ -724,6 +717,10 @@
               &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
               &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
             },
+            &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+                # format. Examples include distro or storage location for vulnerable jar.
+                # This field can be used as a filter in list requests.
+            &quot;package&quot;: &quot;A String&quot;, # The package being described.
           },
           &quot;packageType&quot;: &quot;A String&quot;, # The type of package; whether native or non native(ruby gems,
               # node.js packages etc)
@@ -757,13 +754,15 @@
             &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
             &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
           },
+          &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
+              # obsolete details.
         },
       ],
+      &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
     },
     &quot;upgrade&quot;: { # An Upgrade Note represents a potential upgrade of a package to a given # A note describing an upgrade.
         # version. For each package version combination (i.e. bash 4.0, bash 4.1,
         # bash 4.1.2), there will be a Upgrade Note.
-      &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
       &quot;version&quot;: { # Version contains structured information about the version of the package. # Required - The version of the package in machine + human readable form.
           # For a discussion of this in Debian/Ubuntu:
           # http://serverfault.com/questions/604541/debian-packages-version-convention
@@ -779,16 +778,17 @@
         { # The Upgrade Distribution represents metadata about the Upgrade for each
             # operating system (CPE). Some distributions have additional metadata around
             # updates, classifying them into various categories and severities.
-          &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
-            &quot;A String&quot;,
-          ],
           &quot;classification&quot;: &quot;A String&quot;, # The operating system classification of this Upgrade, as specified by the
               # upstream operating system upgrade feed.
           &quot;severity&quot;: &quot;A String&quot;, # The severity as specified by the upstream operating system.
           &quot;cpeUri&quot;: &quot;A String&quot;, # Required - The specific operating system this metadata applies to. See
               # https://cpe.mitre.org/specification/.
+          &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
+            &quot;A String&quot;,
+          ],
         },
       ],
+      &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
     },
     &quot;package&quot;: { # This represents a particular package that is distributed over # A note describing a package hosted by various package managers.
         # various channels.
@@ -797,7 +797,6 @@
       &quot;distribution&quot;: [ # The various channels by which a package is distributed.
         { # This represents a particular channel of distribution for a given package.
             # e.g. Debian&#x27;s jessie-backports dpkg mirror
-          &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
           &quot;latestVersion&quot;: { # Version contains structured information about the version of the package. # The latest available version of this package in
               # this distribution channel.
               # For a discussion of this in Debian/Ubuntu:
@@ -816,13 +815,12 @@
           &quot;url&quot;: &quot;A String&quot;, # The distribution channel-specific homepage for this package.
           &quot;architecture&quot;: &quot;A String&quot;, # The CPU architecture for which packages in this distribution
               # channel were built
+          &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
         },
       ],
     },
     &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time this note was created. This field can be used as a
         # filter in list requests.
-    &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
-        # a filter in list requests.
     &quot;discovery&quot;: { # A note that indicates a type of analysis a provider would perform. This note # A note describing a provider/analysis type.
         # exists in a provider&#x27;s project. A `Discovery` occurrence is created in a
         # consumer&#x27;s project at the start of analysis. The occurrence&#x27;s operation will
@@ -830,6 +828,8 @@
         # note for a resource indicates that analysis hasn&#x27;t started.
       &quot;analysisKind&quot;: &quot;A String&quot;, # The kind of analysis that is handled by this discovery.
     },
+    &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
+        # a filter in list requests.
   }</pre>
 </div>
 
@@ -986,6 +986,8 @@
         # `condition` that determines how and when the `bindings` are applied. Each
         # of the `bindings` must contain at least one member.
       { # Associates `members` with a `role`.
+        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
+            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
             #
             # If the condition evaluates to `true`, then this binding applies to the
@@ -1028,8 +1030,6 @@
             # The exact variables and functions that may be referenced within an expression
             # are determined by the service that evaluates it. See the service
             # documentation for additional information.
-          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-              # syntax.
           &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
               # its purpose. This can be used e.g. in UIs which allow to enter the
               # expression.
@@ -1037,6 +1037,8 @@
               # reporting, e.g. a file name and a position in the file.
           &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
               # describes the expression, e.g. when hovered over it in a UI.
+          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+              # syntax.
         },
         &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
             # `members` can have the following values:
@@ -1083,8 +1085,6 @@
             #
           &quot;A String&quot;,
         ],
-        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
-            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
   }</pre>
@@ -1142,22 +1142,10 @@
         },
         &quot;kind&quot;: &quot;A String&quot;, # Output only. This explicitly denotes which kind of note is specified. This
             # field can be used as a filter in list requests.
-        &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
-          &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
-            &quot;A String&quot;,
-          ],
-        },
         &quot;buildType&quot;: { # Note holding the version of the provider&#x27;s builder and the signature of # Build provenance type for a verifiable build.
             # the provenance message in linked BuildDetails.
           &quot;signature&quot;: { # Message encapsulating the signature of the verified build. # Signature of the build in Occurrences pointing to the Note containing this
               # `BuilderDetails`.
-            &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
-                # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
-                # CN for a cert), or a reference to an external key (such as a reference to a
-                # key in Cloud Key Management Service).
-            &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
-                # `key_id`
-            &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
             &quot;publicKey&quot;: &quot;A String&quot;, # Public key of the builder which can be used to verify that the related
                 # findings are valid and unchanged. If `key_type` is empty, this defaults
                 # to PEM encoded public keys.
@@ -1171,10 +1159,22 @@
                 # from `BuildDetails` are base64-decoded into a binary representation in
                 # signed.bin. OpenSSL can then verify the signature:
                 # `openssl sha256 -verify public.pem -signature signature.bin signed.bin`
+            &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
+                # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
+                # CN for a cert), or a reference to an external key (such as a reference to a
+                # key in Cloud Key Management Service).
+            &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
+                # `key_id`
+            &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
           },
           &quot;builderVersion&quot;: &quot;A String&quot;, # Version of the builder which produced this Note.
         },
         &quot;longDescription&quot;: &quot;A String&quot;, # A detailed description of this `Note`.
+        &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
+          &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
+            &quot;A String&quot;,
+          ],
+        },
         &quot;shortDescription&quot;: &quot;A String&quot;, # A one sentence description of this `Note`.
         &quot;attestationAuthority&quot;: { # Note kind that represents a logical attestation &quot;role&quot; or &quot;authority&quot;.  For # A note describing an attestation role.
             # example, an organization might have one `AttestationAuthority` for &quot;QA&quot; and
@@ -1197,7 +1197,6 @@
         &quot;name&quot;: &quot;A String&quot;, # The name of the note in the form
             # &quot;projects/{provider_project_id}/notes/{NOTE_ID}&quot;
         &quot;vulnerabilityType&quot;: { # VulnerabilityType provides metadata about a security vulnerability. # A package vulnerability type of note.
-          &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
           &quot;severity&quot;: &quot;A String&quot;, # Note provider assigned impact of the vulnerability
           &quot;details&quot;: [ # All information about the package to specifically identify this
               # vulnerability. One entry per (version range and cpe_uri) the
@@ -1205,13 +1204,7 @@
             { # Identifies all occurrences of this vulnerability in the package for a
                 # specific distro/location
                 # For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
-              &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
-                  # obsolete details.
               &quot;fixedLocation&quot;: { # The location of the vulnerability # The fix for this specific package version.
-                &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-                    # format. Examples include distro or storage location for vulnerable jar.
-                    # This field can be used as a filter in list requests.
-                &quot;package&quot;: &quot;A String&quot;, # The package being described.
                 &quot;version&quot;: { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
                     # filter in list requests.
                     # For a discussion of this in Debian/Ubuntu:
@@ -1224,6 +1217,10 @@
                   &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
                   &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
                 },
+                &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+                    # format. Examples include distro or storage location for vulnerable jar.
+                    # This field can be used as a filter in list requests.
+                &quot;package&quot;: &quot;A String&quot;, # The package being described.
               },
               &quot;packageType&quot;: &quot;A String&quot;, # The type of package; whether native or non native(ruby gems,
                   # node.js packages etc)
@@ -1257,13 +1254,15 @@
                 &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
                 &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
               },
+              &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
+                  # obsolete details.
             },
           ],
+          &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
         },
         &quot;upgrade&quot;: { # An Upgrade Note represents a potential upgrade of a package to a given # A note describing an upgrade.
             # version. For each package version combination (i.e. bash 4.0, bash 4.1,
             # bash 4.1.2), there will be a Upgrade Note.
-          &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
           &quot;version&quot;: { # Version contains structured information about the version of the package. # Required - The version of the package in machine + human readable form.
               # For a discussion of this in Debian/Ubuntu:
               # http://serverfault.com/questions/604541/debian-packages-version-convention
@@ -1279,16 +1278,17 @@
             { # The Upgrade Distribution represents metadata about the Upgrade for each
                 # operating system (CPE). Some distributions have additional metadata around
                 # updates, classifying them into various categories and severities.
-              &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
-                &quot;A String&quot;,
-              ],
               &quot;classification&quot;: &quot;A String&quot;, # The operating system classification of this Upgrade, as specified by the
                   # upstream operating system upgrade feed.
               &quot;severity&quot;: &quot;A String&quot;, # The severity as specified by the upstream operating system.
               &quot;cpeUri&quot;: &quot;A String&quot;, # Required - The specific operating system this metadata applies to. See
                   # https://cpe.mitre.org/specification/.
+              &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
+                &quot;A String&quot;,
+              ],
             },
           ],
+          &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
         },
         &quot;package&quot;: { # This represents a particular package that is distributed over # A note describing a package hosted by various package managers.
             # various channels.
@@ -1297,7 +1297,6 @@
           &quot;distribution&quot;: [ # The various channels by which a package is distributed.
             { # This represents a particular channel of distribution for a given package.
                 # e.g. Debian&#x27;s jessie-backports dpkg mirror
-              &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
               &quot;latestVersion&quot;: { # Version contains structured information about the version of the package. # The latest available version of this package in
                   # this distribution channel.
                   # For a discussion of this in Debian/Ubuntu:
@@ -1316,13 +1315,12 @@
               &quot;url&quot;: &quot;A String&quot;, # The distribution channel-specific homepage for this package.
               &quot;architecture&quot;: &quot;A String&quot;, # The CPU architecture for which packages in this distribution
                   # channel were built
+              &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
             },
           ],
         },
         &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time this note was created. This field can be used as a
             # filter in list requests.
-        &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
-            # a filter in list requests.
         &quot;discovery&quot;: { # A note that indicates a type of analysis a provider would perform. This note # A note describing a provider/analysis type.
             # exists in a provider&#x27;s project. A `Discovery` occurrence is created in a
             # consumer&#x27;s project at the start of analysis. The occurrence&#x27;s operation will
@@ -1330,6 +1328,8 @@
             # note for a resource indicates that analysis hasn&#x27;t started.
           &quot;analysisKind&quot;: &quot;A String&quot;, # The kind of analysis that is handled by this discovery.
         },
+        &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
+            # a filter in list requests.
       },
     ],
     &quot;nextPageToken&quot;: &quot;A String&quot;, # The next pagination token in the list response. It should be used as
@@ -1391,22 +1391,10 @@
   },
   &quot;kind&quot;: &quot;A String&quot;, # Output only. This explicitly denotes which kind of note is specified. This
       # field can be used as a filter in list requests.
-  &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
-    &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
-      &quot;A String&quot;,
-    ],
-  },
   &quot;buildType&quot;: { # Note holding the version of the provider&#x27;s builder and the signature of # Build provenance type for a verifiable build.
       # the provenance message in linked BuildDetails.
     &quot;signature&quot;: { # Message encapsulating the signature of the verified build. # Signature of the build in Occurrences pointing to the Note containing this
         # `BuilderDetails`.
-      &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
-          # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
-          # CN for a cert), or a reference to an external key (such as a reference to a
-          # key in Cloud Key Management Service).
-      &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
-          # `key_id`
-      &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
       &quot;publicKey&quot;: &quot;A String&quot;, # Public key of the builder which can be used to verify that the related
           # findings are valid and unchanged. If `key_type` is empty, this defaults
           # to PEM encoded public keys.
@@ -1420,10 +1408,22 @@
           # from `BuildDetails` are base64-decoded into a binary representation in
           # signed.bin. OpenSSL can then verify the signature:
           # `openssl sha256 -verify public.pem -signature signature.bin signed.bin`
+      &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
+          # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
+          # CN for a cert), or a reference to an external key (such as a reference to a
+          # key in Cloud Key Management Service).
+      &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
+          # `key_id`
+      &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
     },
     &quot;builderVersion&quot;: &quot;A String&quot;, # Version of the builder which produced this Note.
   },
   &quot;longDescription&quot;: &quot;A String&quot;, # A detailed description of this `Note`.
+  &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
+    &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
+      &quot;A String&quot;,
+    ],
+  },
   &quot;shortDescription&quot;: &quot;A String&quot;, # A one sentence description of this `Note`.
   &quot;attestationAuthority&quot;: { # Note kind that represents a logical attestation &quot;role&quot; or &quot;authority&quot;.  For # A note describing an attestation role.
       # example, an organization might have one `AttestationAuthority` for &quot;QA&quot; and
@@ -1446,7 +1446,6 @@
   &quot;name&quot;: &quot;A String&quot;, # The name of the note in the form
       # &quot;projects/{provider_project_id}/notes/{NOTE_ID}&quot;
   &quot;vulnerabilityType&quot;: { # VulnerabilityType provides metadata about a security vulnerability. # A package vulnerability type of note.
-    &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
     &quot;severity&quot;: &quot;A String&quot;, # Note provider assigned impact of the vulnerability
     &quot;details&quot;: [ # All information about the package to specifically identify this
         # vulnerability. One entry per (version range and cpe_uri) the
@@ -1454,13 +1453,7 @@
       { # Identifies all occurrences of this vulnerability in the package for a
           # specific distro/location
           # For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
-        &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
-            # obsolete details.
         &quot;fixedLocation&quot;: { # The location of the vulnerability # The fix for this specific package version.
-          &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-              # format. Examples include distro or storage location for vulnerable jar.
-              # This field can be used as a filter in list requests.
-          &quot;package&quot;: &quot;A String&quot;, # The package being described.
           &quot;version&quot;: { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
               # filter in list requests.
               # For a discussion of this in Debian/Ubuntu:
@@ -1473,6 +1466,10 @@
             &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
             &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
           },
+          &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+              # format. Examples include distro or storage location for vulnerable jar.
+              # This field can be used as a filter in list requests.
+          &quot;package&quot;: &quot;A String&quot;, # The package being described.
         },
         &quot;packageType&quot;: &quot;A String&quot;, # The type of package; whether native or non native(ruby gems,
             # node.js packages etc)
@@ -1506,13 +1503,15 @@
           &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
           &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
         },
+        &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
+            # obsolete details.
       },
     ],
+    &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
   },
   &quot;upgrade&quot;: { # An Upgrade Note represents a potential upgrade of a package to a given # A note describing an upgrade.
       # version. For each package version combination (i.e. bash 4.0, bash 4.1,
       # bash 4.1.2), there will be a Upgrade Note.
-    &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
     &quot;version&quot;: { # Version contains structured information about the version of the package. # Required - The version of the package in machine + human readable form.
         # For a discussion of this in Debian/Ubuntu:
         # http://serverfault.com/questions/604541/debian-packages-version-convention
@@ -1528,16 +1527,17 @@
       { # The Upgrade Distribution represents metadata about the Upgrade for each
           # operating system (CPE). Some distributions have additional metadata around
           # updates, classifying them into various categories and severities.
-        &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
-          &quot;A String&quot;,
-        ],
         &quot;classification&quot;: &quot;A String&quot;, # The operating system classification of this Upgrade, as specified by the
             # upstream operating system upgrade feed.
         &quot;severity&quot;: &quot;A String&quot;, # The severity as specified by the upstream operating system.
         &quot;cpeUri&quot;: &quot;A String&quot;, # Required - The specific operating system this metadata applies to. See
             # https://cpe.mitre.org/specification/.
+        &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
+          &quot;A String&quot;,
+        ],
       },
     ],
+    &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
   },
   &quot;package&quot;: { # This represents a particular package that is distributed over # A note describing a package hosted by various package managers.
       # various channels.
@@ -1546,7 +1546,6 @@
     &quot;distribution&quot;: [ # The various channels by which a package is distributed.
       { # This represents a particular channel of distribution for a given package.
           # e.g. Debian&#x27;s jessie-backports dpkg mirror
-        &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
         &quot;latestVersion&quot;: { # Version contains structured information about the version of the package. # The latest available version of this package in
             # this distribution channel.
             # For a discussion of this in Debian/Ubuntu:
@@ -1565,13 +1564,12 @@
         &quot;url&quot;: &quot;A String&quot;, # The distribution channel-specific homepage for this package.
         &quot;architecture&quot;: &quot;A String&quot;, # The CPU architecture for which packages in this distribution
             # channel were built
+        &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
       },
     ],
   },
   &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time this note was created. This field can be used as a
       # filter in list requests.
-  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
-      # a filter in list requests.
   &quot;discovery&quot;: { # A note that indicates a type of analysis a provider would perform. This note # A note describing a provider/analysis type.
       # exists in a provider&#x27;s project. A `Discovery` occurrence is created in a
       # consumer&#x27;s project at the start of analysis. The occurrence&#x27;s operation will
@@ -1579,6 +1577,8 @@
       # note for a resource indicates that analysis hasn&#x27;t started.
     &quot;analysisKind&quot;: &quot;A String&quot;, # The kind of analysis that is handled by this discovery.
   },
+  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
+      # a filter in list requests.
 }
 
   updateMask: string, The fields to update.
@@ -1620,22 +1620,10 @@
     },
     &quot;kind&quot;: &quot;A String&quot;, # Output only. This explicitly denotes which kind of note is specified. This
         # field can be used as a filter in list requests.
-    &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
-      &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
-        &quot;A String&quot;,
-      ],
-    },
     &quot;buildType&quot;: { # Note holding the version of the provider&#x27;s builder and the signature of # Build provenance type for a verifiable build.
         # the provenance message in linked BuildDetails.
       &quot;signature&quot;: { # Message encapsulating the signature of the verified build. # Signature of the build in Occurrences pointing to the Note containing this
           # `BuilderDetails`.
-        &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
-            # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
-            # CN for a cert), or a reference to an external key (such as a reference to a
-            # key in Cloud Key Management Service).
-        &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
-            # `key_id`
-        &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
         &quot;publicKey&quot;: &quot;A String&quot;, # Public key of the builder which can be used to verify that the related
             # findings are valid and unchanged. If `key_type` is empty, this defaults
             # to PEM encoded public keys.
@@ -1649,10 +1637,22 @@
             # from `BuildDetails` are base64-decoded into a binary representation in
             # signed.bin. OpenSSL can then verify the signature:
             # `openssl sha256 -verify public.pem -signature signature.bin signed.bin`
+        &quot;keyId&quot;: &quot;A String&quot;, # An Id for the key used to sign. This could be either an Id for the key
+            # stored in `public_key` (such as the Id or fingerprint for a PGP key, or the
+            # CN for a cert), or a reference to an external key (such as a reference to a
+            # key in Cloud Key Management Service).
+        &quot;keyType&quot;: &quot;A String&quot;, # The type of the key, either stored in `public_key` or referenced in
+            # `key_id`
+        &quot;signature&quot;: &quot;A String&quot;, # Signature of the related `BuildProvenance`, encoded in a base64 string.
       },
       &quot;builderVersion&quot;: &quot;A String&quot;, # Version of the builder which produced this Note.
     },
     &quot;longDescription&quot;: &quot;A String&quot;, # A detailed description of this `Note`.
+    &quot;deployable&quot;: { # An artifact that can be deployed in some runtime. # A note describing something that can be deployed.
+      &quot;resourceUri&quot;: [ # Resource URI for the artifact being deployed.
+        &quot;A String&quot;,
+      ],
+    },
     &quot;shortDescription&quot;: &quot;A String&quot;, # A one sentence description of this `Note`.
     &quot;attestationAuthority&quot;: { # Note kind that represents a logical attestation &quot;role&quot; or &quot;authority&quot;.  For # A note describing an attestation role.
         # example, an organization might have one `AttestationAuthority` for &quot;QA&quot; and
@@ -1675,7 +1675,6 @@
     &quot;name&quot;: &quot;A String&quot;, # The name of the note in the form
         # &quot;projects/{provider_project_id}/notes/{NOTE_ID}&quot;
     &quot;vulnerabilityType&quot;: { # VulnerabilityType provides metadata about a security vulnerability. # A package vulnerability type of note.
-      &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
       &quot;severity&quot;: &quot;A String&quot;, # Note provider assigned impact of the vulnerability
       &quot;details&quot;: [ # All information about the package to specifically identify this
           # vulnerability. One entry per (version range and cpe_uri) the
@@ -1683,13 +1682,7 @@
         { # Identifies all occurrences of this vulnerability in the package for a
             # specific distro/location
             # For example: glibc in cpe:/o:debian:debian_linux:8 for versions 2.1 - 2.2
-          &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
-              # obsolete details.
           &quot;fixedLocation&quot;: { # The location of the vulnerability # The fix for this specific package version.
-            &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-                # format. Examples include distro or storage location for vulnerable jar.
-                # This field can be used as a filter in list requests.
-            &quot;package&quot;: &quot;A String&quot;, # The package being described.
             &quot;version&quot;: { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
                 # filter in list requests.
                 # For a discussion of this in Debian/Ubuntu:
@@ -1702,6 +1695,10 @@
               &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
               &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
             },
+            &quot;cpeUri&quot;: &quot;A String&quot;, # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+                # format. Examples include distro or storage location for vulnerable jar.
+                # This field can be used as a filter in list requests.
+            &quot;package&quot;: &quot;A String&quot;, # The package being described.
           },
           &quot;packageType&quot;: &quot;A String&quot;, # The type of package; whether native or non native(ruby gems,
               # node.js packages etc)
@@ -1735,13 +1732,15 @@
             &quot;epoch&quot;: 42, # Used to correct mistakes in the version numbering scheme.
             &quot;revision&quot;: &quot;A String&quot;, # The iteration of the package build from the above version.
           },
+          &quot;isObsolete&quot;: True or False, # Whether this Detail is obsolete. Occurrences are expected not to point to
+              # obsolete details.
         },
       ],
+      &quot;cvssScore&quot;: 3.14, # The CVSS score for this Vulnerability.
     },
     &quot;upgrade&quot;: { # An Upgrade Note represents a potential upgrade of a package to a given # A note describing an upgrade.
         # version. For each package version combination (i.e. bash 4.0, bash 4.1,
         # bash 4.1.2), there will be a Upgrade Note.
-      &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
       &quot;version&quot;: { # Version contains structured information about the version of the package. # Required - The version of the package in machine + human readable form.
           # For a discussion of this in Debian/Ubuntu:
           # http://serverfault.com/questions/604541/debian-packages-version-convention
@@ -1757,16 +1756,17 @@
         { # The Upgrade Distribution represents metadata about the Upgrade for each
             # operating system (CPE). Some distributions have additional metadata around
             # updates, classifying them into various categories and severities.
-          &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
-            &quot;A String&quot;,
-          ],
           &quot;classification&quot;: &quot;A String&quot;, # The operating system classification of this Upgrade, as specified by the
               # upstream operating system upgrade feed.
           &quot;severity&quot;: &quot;A String&quot;, # The severity as specified by the upstream operating system.
           &quot;cpeUri&quot;: &quot;A String&quot;, # Required - The specific operating system this metadata applies to. See
               # https://cpe.mitre.org/specification/.
+          &quot;cve&quot;: [ # The cve that would be resolved by this upgrade.
+            &quot;A String&quot;,
+          ],
         },
       ],
+      &quot;package&quot;: &quot;A String&quot;, # Required - The package this Upgrade is for.
     },
     &quot;package&quot;: { # This represents a particular package that is distributed over # A note describing a package hosted by various package managers.
         # various channels.
@@ -1775,7 +1775,6 @@
       &quot;distribution&quot;: [ # The various channels by which a package is distributed.
         { # This represents a particular channel of distribution for a given package.
             # e.g. Debian&#x27;s jessie-backports dpkg mirror
-          &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
           &quot;latestVersion&quot;: { # Version contains structured information about the version of the package. # The latest available version of this package in
               # this distribution channel.
               # For a discussion of this in Debian/Ubuntu:
@@ -1794,13 +1793,12 @@
           &quot;url&quot;: &quot;A String&quot;, # The distribution channel-specific homepage for this package.
           &quot;architecture&quot;: &quot;A String&quot;, # The CPU architecture for which packages in this distribution
               # channel were built
+          &quot;maintainer&quot;: &quot;A String&quot;, # A freeform string denoting the maintainer of this package.
         },
       ],
     },
     &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time this note was created. This field can be used as a
         # filter in list requests.
-    &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
-        # a filter in list requests.
     &quot;discovery&quot;: { # A note that indicates a type of analysis a provider would perform. This note # A note describing a provider/analysis type.
         # exists in a provider&#x27;s project. A `Discovery` occurrence is created in a
         # consumer&#x27;s project at the start of analysis. The occurrence&#x27;s operation will
@@ -1808,6 +1806,8 @@
         # note for a resource indicates that analysis hasn&#x27;t started.
       &quot;analysisKind&quot;: &quot;A String&quot;, # The kind of analysis that is handled by this discovery.
     },
+    &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time this note was last updated. This field can be used as
+        # a filter in list requests.
   }</pre>
 </div>
 
@@ -1943,6 +1943,8 @@
           # `condition` that determines how and when the `bindings` are applied. Each
           # of the `bindings` must contain at least one member.
         { # Associates `members` with a `role`.
+          &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
+              # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
           &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
               #
               # If the condition evaluates to `true`, then this binding applies to the
@@ -1985,8 +1987,6 @@
               # The exact variables and functions that may be referenced within an expression
               # are determined by the service that evaluates it. See the service
               # documentation for additional information.
-            &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-                # syntax.
             &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
                 # its purpose. This can be used e.g. in UIs which allow to enter the
                 # expression.
@@ -1994,6 +1994,8 @@
                 # reporting, e.g. a file name and a position in the file.
             &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
                 # describes the expression, e.g. when hovered over it in a UI.
+            &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+                # syntax.
           },
           &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
               # `members` can have the following values:
@@ -2040,8 +2042,6 @@
               #
             &quot;A String&quot;,
           ],
-          &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
-              # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         },
       ],
     },
@@ -2162,6 +2162,8 @@
         # `condition` that determines how and when the `bindings` are applied. Each
         # of the `bindings` must contain at least one member.
       { # Associates `members` with a `role`.
+        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
+            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
             #
             # If the condition evaluates to `true`, then this binding applies to the
@@ -2204,8 +2206,6 @@
             # The exact variables and functions that may be referenced within an expression
             # are determined by the service that evaluates it. See the service
             # documentation for additional information.
-          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-              # syntax.
           &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
               # its purpose. This can be used e.g. in UIs which allow to enter the
               # expression.
@@ -2213,6 +2213,8 @@
               # reporting, e.g. a file name and a position in the file.
           &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
               # describes the expression, e.g. when hovered over it in a UI.
+          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+              # syntax.
         },
         &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
             # `members` can have the following values:
@@ -2259,8 +2261,6 @@
             #
           &quot;A String&quot;,
         ],
-        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
-            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
   }</pre>