audit

var (
	CriticalCategories = []Category{
		{Name: "RCE", Description: "Remote Code Execution", Severity: "critical"},
		{Name: "SQL Injection", Description: "SQL Injection vulnerability", Severity: "critical"},
		{Name: "Auth Bypass", Description: "Authentication bypass", Severity: "critical"},
	}

	HighCategories = []Category{
		{Name: "SSRF", Description: "Server-Side Request Forgery", Severity: "high"},
		{Name: "Path Traversal", Description: "Path traversal vulnerability", Severity: "high"},
		{Name: "Command Injection", Description: "OS command injection", Severity: "high"},
	}

	MediumCategories = []Category{
		{Name: "XSS", Description: "Cross-Site Scripting", Severity: "medium"},
		{Name: "IDOR", Description: "Insecure Direct Object Reference", Severity: "medium"},
		{Name: "Missing Encryption", Description: "Missing TLS/encryption", Severity: "medium"},
	}

	LowCategories = []Category{
		{Name: "Info Exposure", Description: "Information exposure", Severity: "low"},
		{Name: "Missing Headers", Description: "Missing security headers", Severity: "low"},
		{Name: "Verbose Errors", Description: "Verbose error messages", Severity: "low"},
	}
)

var (
	SecretPatterns = []*regexp.Regexp{
		regexp.MustCompile(`(?i)(password|passwd|pwd)\s*[:=]\s*["'][^"']{8,}`),
		regexp.MustCompile(`(?i)api[_-]?key\s*[:=]\s*["'][^"']{16,}`),
		regexp.MustCompile(`(?i)secret[_-]?key\s*[:=]\s*["'][^"']{16,}`),
		regexp.MustCompile(`(?i)token\s*[:=]\s*["'][^"']{20,}`),
		regexp.MustCompile(`(?i)aws[_-]?access[_-]?key[_-]?id\s*[:=]\s*["'][A-Z0-9]{16}`),
		regexp.MustCompile(`(?i)hardcoded.*secret`),
		regexp.MustCompile(`(?i)(sk|pk)_[a-zA-Z0-9]{20,}`),
	}

	AuthBypassPatterns = []*regexp.Regexp{
		regexp.MustCompile(`(?i)(bypass|disable|skip|ignore|no.*auth|without.*auth)`),
		regexp.MustCompile(`(?i)(admin.*true|superuser|root.*access)`),
	}
)