models

type ConfidenceLevel string

type ConsensusResult struct {
	// Target is the image or filesystem that was analyzed.
	Target string `json:"target"`

	// Scanners lists all scanners that participated in the analysis.
	Scanners []string `json:"scanners"`

	// Consensus contains vulnerabilities found by ALL scanners.
	Consensus []Vulnerability `json:"consensus"`

	// UniqueFindings maps scanner name to vulnerabilities only that scanner found.
	UniqueFindings map[string][]Vulnerability `json:"unique_findings"`

	Statistics Statistics `json:"statistics"`

	// AllVulnerabilities contains the complete deduplicated list.
	AllVulnerabilities []Vulnerability `json:"all_vulnerabilities"`

	// OverlapPercentage is the percentage of vulnerabilities found by all scanners.
	OverlapPercentage float64 `json:"overlap_percentage"`

	// ScanResults contains the original results from each scanner.
	ScanResults []ScanResult `json:"scan_results"`

	// AnalysisTime is when the consensus analysis was performed.
	AnalysisTime time.Time `json:"analysis_time"`

	// TotalDuration is the total time for all scans and analysis.
	TotalDuration time.Duration `json:"total_duration"`
}

type KEVInfo struct {
	IsKEV             bool   `json:"is_kev"`
	VulnerabilityName string `json:"vulnerability_name,omitempty"`
	DateAdded         string `json:"date_added,omitempty"`
	RequiredAction    string `json:"required_action,omitempty"`
	DueDate           string `json:"due_date,omitempty"`
	ShortDescription  string `json:"short_description,omitempty"`
}

type ParseError struct {
	Scanner  string // Which scanner's output we were parsing
	Field    string // Which field caused the issue (if known)
	RawValue string // The problematic raw value (if applicable)
	Err      error  // The underlying error
}

type ScanConfig struct {
	// Target is the container image or filesystem path to scan.
	Target string

	// Timeout is the maximum duration for each scanner.
	Timeout time.Duration

	// Scanners lists which scanners to use. Empty means use all available.
	Scanners []string

	// OutputFormat specifies the desired output format(s).
	OutputFormat []string

	// OutputPath is where to write the output (empty for stdout).
	OutputPath string

	// Verbose enables detailed logging.
	Verbose bool

	// FailOnVulnerability causes the tool to exit with error if vulnerabilities found.
	FailOnVulnerability bool

	// MinSeverity sets the minimum severity to report.
	MinSeverity Severity
}

type ScanError struct {
	Scanner string // Which scanner produced this error
	Target  string // What was being scanned
	Op      string // What operation failed
	Err     error  // The underlying error
}

type ScanResult struct {
	// Scanner identifies which scanner produced this result.
	Scanner string `json:"scanner"`

	Scanners []string `json:"scanners"`

	AnalysisTime string `json:"analysis_time"`

	// Target is the image or filesystem that was scanned.
	Target string `json:"target"`

	Consensus []Vulnerability `json:"consensus"`

	UniqueFindings map[string][]Vulnerability `json:"unique_findings"`

	Statistics Statistics `json:"statistics"`

	// Vulnerabilities is the list of detected vulnerabilities.
	Vulnerabilities []Vulnerability `json:"vulnerabilities"`

	// ScanTime is when the scan was performed.
	ScanTime time.Time `json:"scan_time"`

	// Duration is how long the scan took.
	Duration time.Duration `json:"duration"`

	// Error contains any error message if the scan failed.
	Error string `json:"error,omitempty"`

	// Success indicates whether the scan completed successfully.
	Success bool `json:"success"`

	// RawOutput stores the original JSON output for debugging.
	RawOutput []byte `json:"-"`
}

type ScannerInfo struct {
	// Name is the identifier for this scanner.
	Name string `json:"name"`

	// Version is the scanner's version string.
	Version string `json:"version"`

	// Available indicates if the scanner is installed and accessible.
	Available bool `json:"available"`

	// Path is the filesystem path to the scanner executable.
	Path string `json:"path,omitempty"`
}

type Severity string

type Statistics struct {
	TotalUnique       int     `json:"total_unique"`
	ConsensusCount    int     `json:"consensus_count"`
	OverlapPercentage float64 `json:"overlap_percentage"`
	KEVCount          int     `json:"kev_count"`           // NEW: how many are actively exploited
	KEVConsensusCount int     `json:"kev_consensus_count"` // NEW: KEV vulns confirmed by all scanners
}

type Vulnerability struct {
	// CVE is the Common Vulnerabilities and Exposures identifier.
	// Example: "CVE-2021-44228"
	CVE string `json:"cve"`

	CVEID string `json:"cve_id"`

	// Package is the name of the affected software package.
	// Example: "log4j-core"
	Package string `json:"package"`

	// InstalledVersion is the version of the package that was scanned.
	// Example: "2.14.1"
	InstalledVersion string `json:"installed_version"`

	// FixedVersion is the version that resolves this vulnerability (if known).
	// May be empty if no fix is available.
	FixedVersion string `json:"fixed_version,omitempty"`

	// Severity indicates the severity level of the vulnerability.
	Severity Severity `json:"severity"`

	// Scanner identifies which scanner detected this vulnerability.
	// Example: "trivy", "grype"
	Scanner string `json:"scanner"`

	Version string `json:"version"`

	// Title is a brief description of the vulnerability.
	Title string `json:"title,omitempty"`

	// Description provides detailed information about the vulnerability.
	Description string `json:"description,omitempty"`

	// References contains URLs to additional information.
	References []string `json:"references,omitempty"`

	KEV *KEVInfo `json:"kev"`
}