results

type Finding struct {
	RuleId string      `json:"rule_id"`
	Purl   string      `json:"purl"`
	Meta   FindingMeta `json:"meta"`
}

type FindingMeta struct {
	Path          string   `json:"path,omitempty"`
	Line          int      `json:"line,omitempty"`
	Job           string   `json:"job,omitempty"`
	Step          string   `json:"step,omitempty"`
	OsvId         string   `json:"osv_id,omitempty"`
	Details       string   `json:"details,omitempty"`
	EventTriggers []string `json:"event_triggers,omitempty"`
	BlobSHA       string   `json:"blobsha,omitempty"`

	// Structured fields for programmatic access
	InjectionSources  []string `json:"injection_sources,omitempty"`  // Sources confirmed as injected into a sink
	LOTPTool          string   `json:"lotp_tool,omitempty"`          // Living Off The Pipeline tool (e.g., npm, pip)
	LOTPAction        string   `json:"lotp_action,omitempty"`        // Living Off The Pipeline GitHub Action
	ReferencedSecrets []string `json:"referenced_secrets,omitempty"` // Secrets referenced in workflow (excludes GITHUB_TOKEN)
}

type FindingsResult struct {
	Findings []Finding       `json:"findings"`
	Rules    map[string]Rule `json:"rules"`
}

type Rule struct {
	Id          string `json:"id"`
	Title       string `json:"title"`
	Description string `json:"description"`
	Level       string `json:"level"`
	Refs        []struct {
		Ref         string `json:"ref"`
		Description string `json:"description"`
	} `json:"refs,omitempty"`
	Config map[string]RuleConfig `json:"config,omitempty"`
}

type RuleConfig struct {
	Default     interface{} `json:"default"`
	Description string      `json:"description"`
	Value       interface{} `json:"value"`
}