engine

type FuncRule[T any] struct {
	Meta Metadata
	Fn   func(target T) []Issue
}

type Issue struct {
	TargetType findings.TargetType
	TargetName string
	Location   *findings.Location
	Evidence   []string

	// Severity overrides the rule's default severity when set.
	Severity findings.Severity
	// Confidence defaults to high when empty.
	Confidence findings.Confidence
	// Description overrides the rule's generic description when set.
	Description string
	// Remediation overrides the rule's generic remediation when set.
	Remediation string
}

type Metadata struct {
	ID          string
	Version     string
	Title       string
	Category    findings.Category
	Severity    findings.Severity
	Scope       Scope
	Description string
	Rationale   string
	Remediation string
	Detection   string
	Limitations string
	References  []string
}

type Registry[T any] struct {
	// contains filtered or unexported fields
}

type Result struct {
	Findings   []findings.Finding
	Suppressed []SuppressedFinding
	Evaluated  []string
	Errors     []RuleError
}

type Rule[T any] interface {
	Metadata() Metadata
	Check(target T) []Issue
}

type RuleError struct {
	RuleID  string
	Message string
}

type RunConfig struct {
	ScannerVersion string
	Now            time.Time
	// Suppress optionally reports whether a finding was suppressed by the
	// scanned configuration itself, returning the documented reason.
	Suppress func(findings.Finding) (reason string, suppressed bool)
}

type Scope string

type Selection struct {
	Only    []string
	Exclude []string
}

type SkippedRule struct {
	RuleID string `json:"rule_id"`
	Title  string `json:"title"`
	Reason string `json:"reason"`
}

type SuppressedFinding struct {
	findings.Finding
	SuppressionReason string `json:"suppression_reason"`
}