linter

type Category int

type Context struct {
	// Path is the path of the file being linted.
	Path string
	// Type is the kind of configuration file being linted.
	Type FileType
	// Src is the raw content of the file.
	Src []byte
	// Root is the HuJSON syntax tree parsed from Src. It preserves comments and byte offsets into Src.
	Root *hujson.Value
}

type FileType string

type Finding struct {
	// Message describes the problem in a human-readable way.
	Message string
	// Offset is the byte offset into Context.Src where the problem is located, typically the
	// StartOffset of the offending value.
	Offset int
}

type Issue struct {
	Path     string   `json:"path"`
	Line     int      `json:"line"` // 1-based
	Col      int      `json:"col"`  // 1-based, in bytes
	RuleID   string   `json:"ruleId"`
	Message  string   `json:"message"`
	Severity Severity `json:"severity"`
}

type Linter struct {
	// contains filtered or unexported fields
}

type Node struct {
	// Pointer is the JSON Pointer (RFC 6901) of the value, e.g. "/image" or "/mounts/0". It is "" for
	// the document root.
	Pointer string
	// Value is the HuJSON value at Pointer.
	Value *hujson.Value
}

type Platform int

type Rule struct {
	// ID is the unique identifier of the rule, used in output and in ignore directives (e.g.
	// "no-image-latest").
	ID string
	// Description is a short human-readable description of what the rule checks.
	Description string
	// Category classifies the kind of problem this rule reports. Every rule must declare exactly
	// one category; the severity of all rules in a category can be adjusted at once.
	Category Category
	// FileTypes are the kinds of configuration files this rule applies to. The rule is only run
	// against files of these types.
	FileTypes []FileType
	// Platforms are the target platforms this rule applies to. A nil or empty value means the rule
	// applies to every platform and always runs, regardless of which platforms are selected when the
	// linter is configured.
	Platforms []Platform
	// Paths are the JSON Pointer patterns of the values this rule wants to inspect. A "*" segment
	// matches any object member name or array index (e.g. "/mounts/*"); the empty string matches the
	// document root.
	Paths []string
	// Check inspects one value matching Paths and returns any findings. It is called at most once per
	// rule for a given value, even if several patterns match it. Check must be safe for concurrent
	// use, since it may be called for multiple files.
	Check func(ctx *Context, node *Node) []Finding
}

type Severity int