docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/containeranalysis_v1alpha1.providers.notes.occurrences.html b/docs/dyn/containeranalysis_v1alpha1.providers.notes.occurrences.html
index 82716a1..b53963c 100644
--- a/docs/dyn/containeranalysis_v1alpha1.providers.notes.occurrences.html
+++ b/docs/dyn/containeranalysis_v1alpha1.providers.notes.occurrences.html
@@ -104,53 +104,17 @@
     { # Response including listed occurrences for a note.
     "occurrences": [ # The occurrences attached to the specified note.
       { # `Occurrence` includes information about analysis occurrences for an image.
-        "updateTime": "A String", # Output only. The time this `Occurrence` was last updated.
-        "remediation": "A String", # A description of actions that can be taken to remedy the `Note`
-        "derivedImage": { # Derived describes the derived image portion (Occurrence) of the # Describes how this resource derives from the basis
-            # in the associated note.
-            # DockerImage relationship.  This image would be produced from a Dockerfile
-            # with FROM <DockerImage.Basis in attached Note>.
-          "baseResourceUrl": "A String", # Output only. This contains the base image URL for the derived image
-              # occurrence.
-          "fingerprint": { # A set of properties that uniquely identify a given Docker image. # The fingerprint of the derived image.
-            "v2Blob": [ # The ordered list of v2 blobs that represent a given image.
-              "A String",
-            ],
-            "v1Name": "A String", # The layer-id of the final layer in the Docker image's v1
-                # representation.
-                # This field can be used as a filter in list requests.
-            "v2Name": "A String", # Output only. The name of the image's v2 blobs computed via:
-                #   [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1])
-                # Only the name of the final blob is kept.
-                # This field can be used as a filter in list requests.
-          },
-          "layerInfo": [ # This contains layer-specific metadata, if populated it has length
-              # "distance" and is ordered with [distance] being the layer immediately
-              # following the base image and [1] being the final layer.
-            { # Layer holds metadata specific to a layer of a Docker image.
-              "directive": "A String", # The recovered Dockerfile directive used to construct this layer.
-              "arguments": "A String", # The recovered arguments to the Dockerfile directive.
-            },
-          ],
-          "distance": 42, # Output only. The number of layers by which this image differs from the
-              # associated image basis.
-        },
         "buildDetails": { # Message encapsulating build provenance details. # Build details for a verifiable build.
-          "provenanceBytes": "A String", # Serialized JSON representation of the provenance, used in generating the
-              # `BuildSignature` in the corresponding Result. After verifying the
-              # signature, `provenance_bytes` can be unmarshalled and compared to the
-              # provenance to confirm that it is unchanged. A base64-encoded string
-              # representation of the provenance bytes is used for the signature in order
-              # to interoperate with openssl which expects this format for signature
-              # verification.
-              #
-              # The serialized form is captured both to avoid ambiguity in how the
-              # provenance is marshalled to json as well to prevent incompatibilities with
-              # future changes.
           "provenance": { # Provenance of a build. Contains all information needed to verify the full # The actual provenance
               # details about the build from source to completion.
+            "id": "A String", # Unique identifier of the build.
+            "buildOptions": { # Special options applied to this build. This is a catch-all field where
+                # build providers can enter any desired additional details.
+              "a_key": "A String",
+            },
             "startTime": "A String", # Time at which execution of the build was started.
             "triggerId": "A String", # Trigger identifier if the build was triggered automatically; empty if not.
+            "createTime": "A String", # Time at which the build was created.
             "sourceProvenance": { # Source describes the location of the source used for the build. # Details of the Source input to the build.
               "repoSource": { # RepoSource describes the location of the source in a Google Cloud Source # If provided, get source from this location in a Cloud Repo.
                   # Repository.
@@ -163,11 +127,11 @@
               "storageSource": { # StorageSource describes the location of the source in an archive file in # If provided, get the source from this location in in Google Cloud
                   # Storage.
                   # Google Cloud Storage.
+                "generation": "A String", # Google Cloud Storage generation for the object.
                 "bucket": "A String", # Google Cloud Storage bucket containing source (see [Bucket Name
                     # Requirements]
                     # (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
                 "object": "A String", # Google Cloud Storage object containing source.
-                "generation": "A String", # Google Cloud Storage generation for the object.
               },
               "fileHashes": { # Hash(es) of the build source, which can be used to verify that the original
                   # source integrity was maintained in the build.
@@ -190,11 +154,11 @@
               "artifactStorageSource": { # StorageSource describes the location of the source in an archive file in # If provided, the input binary artifacts for the build came from this
                   # location.
                   # Google Cloud Storage.
+                "generation": "A String", # Google Cloud Storage generation for the object.
                 "bucket": "A String", # Google Cloud Storage bucket containing source (see [Bucket Name
                     # Requirements]
                     # (https://cloud.google.com/storage/docs/bucket-naming#requirements)).
                 "object": "A String", # Google Cloud Storage object containing source.
-                "generation": "A String", # Google Cloud Storage generation for the object.
               },
               "additionalContexts": [ # If provided, some of the source code used for the build may be found in
                   # these locations, in the case where the source repository had multiple
@@ -202,9 +166,27 @@
                   # the context field.
                 { # A SourceContext is a reference to a tree of files. A SourceContext together
                     # with a path point to a unique revision of a single file or directory.
+                  "labels": { # Labels with user defined metadata.
+                    "a_key": "A String",
+                  },
+                  "git": { # A GitSourceContext denotes a particular revision in a third party Git # A SourceContext referring to any third party Git repo (e.g., GitHub).
+                      # repository (e.g., GitHub).
+                    "revisionId": "A String", # Required. Git commit hash.
+                    "url": "A String", # Git repository URL.
+                  },
+                  "gerrit": { # A SourceContext referring to a Gerrit project. # A SourceContext referring to a Gerrit project.
+                    "gerritProject": "A String", # The full project name within the host. Projects may be nested, so
+                        # "project/subproject" is a valid project name. The "repo name" is
+                        # the hostURI/project.
+                    "aliasContext": { # An alias to a repo revision. # An alias, which may be a branch or tag.
+                      "name": "A String", # The alias name.
+                      "kind": "A String", # The alias kind.
+                    },
+                    "hostUri": "A String", # The URI of a running Gerrit instance.
+                    "revisionId": "A String", # A revision (commit) ID.
+                  },
                   "cloudRepo": { # A CloudRepoSourceContext denotes a particular revision in a Google Cloud # A SourceContext referring to a revision in a Google Cloud Source Repo.
                       # Source Repo.
-                    "revisionId": "A String", # A revision ID.
                     "repoId": { # A unique identifier for a Cloud Repo. # The ID of the repo.
                       "uid": "A String", # A server-assigned, globally unique identifier.
                       "projectRepoId": { # Selects a repo using a Google Cloud Platform project ID (e.g., # A combination of a project ID and a repo name.
@@ -217,33 +199,33 @@
                       "name": "A String", # The alias name.
                       "kind": "A String", # The alias kind.
                     },
-                  },
-                  "labels": { # Labels with user defined metadata.
-                    "a_key": "A String",
-                  },
-                  "git": { # A GitSourceContext denotes a particular revision in a third party Git # A SourceContext referring to any third party Git repo (e.g., GitHub).
-                      # repository (e.g., GitHub).
-                    "revisionId": "A String", # Required. Git commit hash.
-                    "url": "A String", # Git repository URL.
-                  },
-                  "gerrit": { # A SourceContext referring to a Gerrit project. # A SourceContext referring to a Gerrit project.
-                    "hostUri": "A String", # The URI of a running Gerrit instance.
-                    "revisionId": "A String", # A revision (commit) ID.
-                    "gerritProject": "A String", # The full project name within the host. Projects may be nested, so
-                        # "project/subproject" is a valid project name. The "repo name" is
-                        # the hostURI/project.
-                    "aliasContext": { # An alias to a repo revision. # An alias, which may be a branch or tag.
-                      "name": "A String", # The alias name.
-                      "kind": "A String", # The alias kind.
-                    },
+                    "revisionId": "A String", # A revision ID.
                   },
                 },
               ],
               "context": { # A SourceContext is a reference to a tree of files. A SourceContext together # If provided, the source code used for the build came from this location.
                   # with a path point to a unique revision of a single file or directory.
+                "labels": { # Labels with user defined metadata.
+                  "a_key": "A String",
+                },
+                "git": { # A GitSourceContext denotes a particular revision in a third party Git # A SourceContext referring to any third party Git repo (e.g., GitHub).
+                    # repository (e.g., GitHub).
+                  "revisionId": "A String", # Required. Git commit hash.
+                  "url": "A String", # Git repository URL.
+                },
+                "gerrit": { # A SourceContext referring to a Gerrit project. # A SourceContext referring to a Gerrit project.
+                  "gerritProject": "A String", # The full project name within the host. Projects may be nested, so
+                      # "project/subproject" is a valid project name. The "repo name" is
+                      # the hostURI/project.
+                  "aliasContext": { # An alias to a repo revision. # An alias, which may be a branch or tag.
+                    "name": "A String", # The alias name.
+                    "kind": "A String", # The alias kind.
+                  },
+                  "hostUri": "A String", # The URI of a running Gerrit instance.
+                  "revisionId": "A String", # A revision (commit) ID.
+                },
                 "cloudRepo": { # A CloudRepoSourceContext denotes a particular revision in a Google Cloud # A SourceContext referring to a revision in a Google Cloud Source Repo.
                     # Source Repo.
-                  "revisionId": "A String", # A revision ID.
                   "repoId": { # A unique identifier for a Cloud Repo. # The ID of the repo.
                     "uid": "A String", # A server-assigned, globally unique identifier.
                     "projectRepoId": { # Selects a repo using a Google Cloud Platform project ID (e.g., # A combination of a project ID and a repo name.
@@ -256,29 +238,10 @@
                     "name": "A String", # The alias name.
                     "kind": "A String", # The alias kind.
                   },
-                },
-                "labels": { # Labels with user defined metadata.
-                  "a_key": "A String",
-                },
-                "git": { # A GitSourceContext denotes a particular revision in a third party Git # A SourceContext referring to any third party Git repo (e.g., GitHub).
-                    # repository (e.g., GitHub).
-                  "revisionId": "A String", # Required. Git commit hash.
-                  "url": "A String", # Git repository URL.
-                },
-                "gerrit": { # A SourceContext referring to a Gerrit project. # A SourceContext referring to a Gerrit project.
-                  "hostUri": "A String", # The URI of a running Gerrit instance.
-                  "revisionId": "A String", # A revision (commit) ID.
-                  "gerritProject": "A String", # The full project name within the host. Projects may be nested, so
-                      # "project/subproject" is a valid project name. The "repo name" is
-                      # the hostURI/project.
-                  "aliasContext": { # An alias to a repo revision. # An alias, which may be a branch or tag.
-                    "name": "A String", # The alias name.
-                    "kind": "A String", # The alias kind.
-                  },
+                  "revisionId": "A String", # A revision ID.
                 },
               },
             },
-            "createTime": "A String", # Time at which the build was created.
             "projectId": "A String", # ID of the project.
             "finishTime": "A String", # Time at which execution of the build was finished.
             "creator": "A String", # E-mail address of the user who initiated this build. Note that this was the
@@ -328,25 +291,31 @@
                     # container.
               },
             ],
-            "id": "A String", # Unique identifier of the build.
-            "buildOptions": { # Special options applied to this build. This is a catch-all field where
-                # build providers can enter any desired additional details.
-              "a_key": "A String",
-            },
           },
+          "provenanceBytes": "A String", # Serialized JSON representation of the provenance, used in generating the
+              # `BuildSignature` in the corresponding Result. After verifying the
+              # signature, `provenance_bytes` can be unmarshalled and compared to the
+              # provenance to confirm that it is unchanged. A base64-encoded string
+              # representation of the provenance bytes is used for the signature in order
+              # to interoperate with openssl which expects this format for signature
+              # verification.
+              #
+              # The serialized form is captured both to avoid ambiguity in how the
+              # provenance is marshalled to json as well to prevent incompatibilities with
+              # future changes.
         },
         "kind": "A String", # Output only. This explicitly denotes which of the `Occurrence` details are
             # specified. This field can be used as a filter in list requests.
         "resource": { #  #
             # The resource for which the `Occurrence` applies.
             # Resource is an entity that can have metadata. E.g., a Docker image.
+          "uri": "A String", # The unique URI of the resource. E.g.,
+              # "https://gcr.io/project/image@sha256:foo" for a Docker image.
           "name": "A String", # The name of the resource. E.g., the name of a Docker image - "Debian".
           "contentHash": { # Container message for hash values. # The hash of the resource content. E.g., the Docker digest.
             "type": "A String", # The type of hash that was performed.
             "value": "A String", # The hash value.
           },
-          "uri": "A String", # The unique URI of the resource. E.g.,
-              # "https://gcr.io/project/image@sha256:foo" for a Docker image.
         },
         "resourceUrl": "A String", # The unique URL of the image or the container for which the `Occurrence`
             # applies. For example, https://gcr.io/project/image@sha256:foo This field
@@ -397,6 +366,7 @@
         },
         "installation": { # This represents how a particular software package may be installed on # Describes the installation of a package on the linked resource.
             # a system.
+          "name": "A String", # Output only. The name of the installed package.
           "location": [ # All of the places within the filesystem versions of this package
               # have been found.
             { # An occurrence of a particular package installation found within a
@@ -418,25 +388,10 @@
               "path": "A String", # The path from which we gathered that this package/version is installed.
             },
           ],
-          "name": "A String", # Output only. The name of the installed package.
         },
         "upgrade": { # An Upgrade Occurrence represents that a specific resource_url could install a # Describes an upgrade.
             # specific upgrade. This presence is supplied via local sources (i.e. it is
             # present in the mirror and the running system has noticed its availability).
-          "distribution": { # The Upgrade Distribution represents metadata about the Upgrade for each # Metadata about the upgrade for available for the specific operating system
-              # for the resource_url. This allows efficient filtering, as well as
-              # making it easier to use the occurrence.
-              # operating system (CPE). Some distributions have additional metadata around
-              # updates, classifying them into various categories and severities.
-            "cve": [ # The cve that would be resolved by this upgrade.
-              "A String",
-            ],
-            "classification": "A String", # The operating system classification of this Upgrade, as specified by the
-                # upstream operating system upgrade feed.
-            "severity": "A String", # The severity as specified by the upstream operating system.
-            "cpeUri": "A String", # Required - The specific operating system this metadata applies to. See
-                # https://cpe.mitre.org/specification/.
-          },
           "package": "A String", # Required - The package this Upgrade is for.
           "parsedVersion": { # Version contains structured information about the version of the package. # Required - The version of the package in a machine + human readable form.
               # For a discussion of this in Debian/Ubuntu:
@@ -449,41 +404,25 @@
             "epoch": 42, # Used to correct mistakes in the version numbering scheme.
             "revision": "A String", # The iteration of the package build from the above version.
           },
+          "distribution": { # The Upgrade Distribution represents metadata about the Upgrade for each # Metadata about the upgrade for available for the specific operating system
+              # for the resource_url. This allows efficient filtering, as well as
+              # making it easier to use the occurrence.
+              # operating system (CPE). Some distributions have additional metadata around
+              # updates, classifying them into various categories and severities.
+            "classification": "A String", # The operating system classification of this Upgrade, as specified by the
+                # upstream operating system upgrade feed.
+            "severity": "A String", # The severity as specified by the upstream operating system.
+            "cpeUri": "A String", # Required - The specific operating system this metadata applies to. See
+                # https://cpe.mitre.org/specification/.
+            "cve": [ # The cve that would be resolved by this upgrade.
+              "A String",
+            ],
+          },
         },
         "discovered": { # Provides information about the scan status of a discovered resource. # Describes the initial scan status for this resource.
           "operation": { # This resource represents a long-running operation that is the result of a # Output only. An operation that indicates the status of the current scan.
               # This field is deprecated, do not use.
               # network API call.
-            "name": "A String", # The server-assigned name, which is only unique within the same service that
-                # originally returns it. If you use the default HTTP mapping, the
-                # `name` should be a resource name ending with `operations/{unique_id}`.
-            "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-                # different programming environments, including REST APIs and RPC APIs. It is
-                # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-                # three pieces of data: error code, error message, and error details.
-                #
-                # You can find out more about this error model and how to work with it in the
-                # [API Design Guide](https://cloud.google.com/apis/design/errors).
-              "code": 42, # The status code, which should be an enum value of google.rpc.Code.
-              "message": "A String", # A developer-facing error message, which should be in English. Any
-                  # user-facing error message should be localized and sent in the
-                  # google.rpc.Status.details field, or localized by the client.
-              "details": [ # A list of messages that carry the error details.  There is a common set of
-                  # message types for APIs to use.
-                {
-                  "a_key": "", # Properties of the object. Contains field @type with type URL.
-                },
-              ],
-            },
-            "metadata": { # Service-specific metadata associated with the operation.  It typically
-                # contains progress information and common metadata such as create time.
-                # Some services might not provide such metadata.  Any method that returns a
-                # long-running operation should document the metadata type, if any.
-              "a_key": "", # Properties of the object. Contains field @type with type URL.
-            },
-            "done": True or False, # If the value is `false`, it means the operation is still in progress.
-                # If `true`, the operation is completed, and either `error` or `response` is
-                # available.
             "response": { # The normal response of the operation in case of success.  If the original
                 # method returns no data on success, such as `Delete`, the response is
                 # `google.protobuf.Empty`.  If the original method is standard
@@ -494,6 +433,36 @@
                 # `TakeSnapshotResponse`.
               "a_key": "", # Properties of the object. Contains field @type with type URL.
             },
+            "name": "A String", # The server-assigned name, which is only unique within the same service that
+                # originally returns it. If you use the default HTTP mapping, the
+                # `name` should be a resource name ending with `operations/{unique_id}`.
+            "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+                # different programming environments, including REST APIs and RPC APIs. It is
+                # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+                # three pieces of data: error code, error message, and error details.
+                #
+                # You can find out more about this error model and how to work with it in the
+                # [API Design Guide](https://cloud.google.com/apis/design/errors).
+              "details": [ # A list of messages that carry the error details.  There is a common set of
+                  # message types for APIs to use.
+                {
+                  "a_key": "", # Properties of the object. Contains field @type with type URL.
+                },
+              ],
+              "code": 42, # The status code, which should be an enum value of google.rpc.Code.
+              "message": "A String", # A developer-facing error message, which should be in English. Any
+                  # user-facing error message should be localized and sent in the
+                  # google.rpc.Status.details field, or localized by the client.
+            },
+            "metadata": { # Service-specific metadata associated with the operation.  It typically
+                # contains progress information and common metadata such as create time.
+                # Some services might not provide such metadata.  Any method that returns a
+                # long-running operation should document the metadata type, if any.
+              "a_key": "", # Properties of the object. Contains field @type with type URL.
+            },
+            "done": True or False, # If the value is `false`, it means the operation is still in progress.
+                # If `true`, the operation is completed, and either `error` or `response` is
+                # available.
           },
           "analysisStatus": "A String", # The status of discovery for the resource.
           "continuousAnalysis": "A String", # Whether the resource is continuously analyzed.
@@ -507,40 +476,36 @@
               #
               # You can find out more about this error model and how to work with it in the
               # [API Design Guide](https://cloud.google.com/apis/design/errors).
-            "code": 42, # The status code, which should be an enum value of google.rpc.Code.
-            "message": "A String", # A developer-facing error message, which should be in English. Any
-                # user-facing error message should be localized and sent in the
-                # google.rpc.Status.details field, or localized by the client.
             "details": [ # A list of messages that carry the error details.  There is a common set of
                 # message types for APIs to use.
               {
                 "a_key": "", # Properties of the object. Contains field @type with type URL.
               },
             ],
+            "code": 42, # The status code, which should be an enum value of google.rpc.Code.
+            "message": "A String", # A developer-facing error message, which should be in English. Any
+                # user-facing error message should be localized and sent in the
+                # google.rpc.Status.details field, or localized by the client.
           },
         },
+        "noteName": "A String", # An analysis note associated with this image, in the form
+            # "providers/{provider_id}/notes/{NOTE_ID}"
+            # This field can be used as a filter in list requests.
         "deployment": { # The period during which some deployable was active in a runtime. # Describes the deployment of an artifact on a runtime.
+          "deployTime": "A String", # Beginning of the lifetime of this deployment.
           "address": "A String", # Address of the runtime element hosting this deployment.
           "resourceUri": [ # Output only. Resource URI for the artifact being deployed taken from the
               # deployable field with the same name.
             "A String",
           ],
-          "userEmail": "A String", # Identity of the user that triggered this deployment.
           "config": "A String", # Configuration used to create this deployment.
+          "userEmail": "A String", # Identity of the user that triggered this deployment.
           "undeployTime": "A String", # End of the lifetime of this deployment.
           "platform": "A String", # Platform hosting this deployment.
-          "deployTime": "A String", # Beginning of the lifetime of this deployment.
         },
-        "noteName": "A String", # An analysis note associated with this image, in the form
-            # "providers/{provider_id}/notes/{NOTE_ID}"
-            # This field can be used as a filter in list requests.
+        "createTime": "A String", # Output only. The time this `Occurrence` was created.
         "vulnerabilityDetails": { # Used by Occurrence to point to where the vulnerability exists and how # Details of a security vulnerability note.
             # to fix it.
-          "cvssScore": 3.14, # Output only. The CVSS score of this vulnerability. CVSS score is on a
-              # scale of 0-10 where 0 indicates low severity and 10 indicates high
-              # severity.
-          "type": "A String", # The type of package; whether native or non native(ruby gems,
-              # node.js packages etc)
           "effectiveSeverity": "A String", # The distro assigned severity for this vulnerability when that is
               # available and note provider assigned severity when distro has not yet
               # assigned a severity for this vulnerability.
@@ -548,11 +513,8 @@
               # the associated resource.
             { # This message wraps a location affected by a vulnerability and its
                 # associated fix (if one is available).
+              "severityName": "A String",
               "affectedLocation": { # The location of the vulnerability # The location of the vulnerability.
-                "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-                    # format. Examples include distro or storage location for vulnerable jar.
-                    # This field can be used as a filter in list requests.
-                "package": "A String", # The package being described.
                 "version": { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
                     # filter in list requests.
                     # For a discussion of this in Debian/Ubuntu:
@@ -565,12 +527,12 @@
                   "epoch": 42, # Used to correct mistakes in the version numbering scheme.
                   "revision": "A String", # The iteration of the package build from the above version.
                 },
+                "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+                    # format. Examples include distro or storage location for vulnerable jar.
+                    # This field can be used as a filter in list requests.
+                "package": "A String", # The package being described.
               },
               "fixedLocation": { # The location of the vulnerability # The location of the available fix for vulnerability.
-                "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
-                    # format. Examples include distro or storage location for vulnerable jar.
-                    # This field can be used as a filter in list requests.
-                "package": "A String", # The package being described.
                 "version": { # Version contains structured information about the version of the package. # The version of the package being described. This field can be used as a
                     # filter in list requests.
                     # For a discussion of this in Debian/Ubuntu:
@@ -583,13 +545,51 @@
                   "epoch": 42, # Used to correct mistakes in the version numbering scheme.
                   "revision": "A String", # The iteration of the package build from the above version.
                 },
+                "cpeUri": "A String", # The cpe_uri in [cpe format] (https://cpe.mitre.org/specification/)
+                    # format. Examples include distro or storage location for vulnerable jar.
+                    # This field can be used as a filter in list requests.
+                "package": "A String", # The package being described.
               },
-              "severityName": "A String",
             },
           ],
           "severity": "A String", # Output only. The note provider assigned Severity of the vulnerability.
+          "cvssScore": 3.14, # Output only. The CVSS score of this vulnerability. CVSS score is on a
+              # scale of 0-10 where 0 indicates low severity and 10 indicates high
+              # severity.
+          "type": "A String", # The type of package; whether native or non native(ruby gems,
+              # node.js packages etc)
         },
-        "createTime": "A String", # Output only. The time this `Occurrence` was created.
+        "updateTime": "A String", # Output only. The time this `Occurrence` was last updated.
+        "remediation": "A String", # A description of actions that can be taken to remedy the `Note`
+        "derivedImage": { # Derived describes the derived image portion (Occurrence) of the # Describes how this resource derives from the basis
+            # in the associated note.
+            # DockerImage relationship.  This image would be produced from a Dockerfile
+            # with FROM <DockerImage.Basis in attached Note>.
+          "distance": 42, # Output only. The number of layers by which this image differs from the
+              # associated image basis.
+          "baseResourceUrl": "A String", # Output only. This contains the base image URL for the derived image
+              # occurrence.
+          "fingerprint": { # A set of properties that uniquely identify a given Docker image. # The fingerprint of the derived image.
+            "v2Blob": [ # The ordered list of v2 blobs that represent a given image.
+              "A String",
+            ],
+            "v1Name": "A String", # The layer-id of the final layer in the Docker image's v1
+                # representation.
+                # This field can be used as a filter in list requests.
+            "v2Name": "A String", # Output only. The name of the image's v2 blobs computed via:
+                #   [bottom] := v2_blobbottom := sha256(v2_blob[N] + " " + v2_name[N+1])
+                # Only the name of the final blob is kept.
+                # This field can be used as a filter in list requests.
+          },
+          "layerInfo": [ # This contains layer-specific metadata, if populated it has length
+              # "distance" and is ordered with [distance] being the layer immediately
+              # following the base image and [1] being the final layer.
+            { # Layer holds metadata specific to a layer of a Docker image.
+              "directive": "A String", # The recovered Dockerfile directive used to construct this layer.
+              "arguments": "A String", # The recovered arguments to the Dockerfile directive.
+            },
+          ],
+        },
       },
     ],
     "nextPageToken": "A String", # Token to receive the next page of notes.