finding

type Attempt struct {
	ID          string
	Request     *http.Request
	RequestBody []byte
	Response    *Response
	Err         error
}

type Finding struct {
	// Operation identifies the affected operation for ScopeGlobal checks
	// (which have no harnessx.Result.ResourceID to resolve one from). Leave
	// nil for ScopePerResource checks - the bridge resolves the operation
	// from the resource that was scanned.
	Operation *operation.Operation

	// Parameter is the crafted payload / discovered value (e.g. the cracked
	// secret, the alg=none variant used, the discovered path).
	Parameter string

	// Attempt is the decisive request/response that proves the finding, if
	// any (nil for offline checks, e.g. cryptographic secret cracking).
	Attempt *Attempt

	// Extra carries anything else worth keeping in the report.
	Extra map[string]string

	// Data carries check-specific structured data for dependent checks to
	// read back out via harnessx.ResultStore (e.g. the winning
	// *operation.Operation a downstream check needs to replay). Most checks
	// leave this nil - it exists for the rare case where a check both
	// reports its own finding and feeds a typed payload to a dependent
	// check.
	Data any
}

type Response struct {
	StatusCode int
	Header     http.Header
	Body       *bytes.Buffer
}