norn

type ControlOutcome ¶

type ControlOutcome struct {
	Control         string
	Verdict         Verdict
	Highest         sarif.Level
	HighestPriority string
	Counts          sarif.Counts
	Threshold       sarif.Level
}

ControlOutcome is the verdict for a single control.

type Policy ¶

type Policy struct {
	FailOn         sarif.Level
	PerControl     map[string]sarif.Level
	FailOnPriority string
}

Policy decides verdicts from findings. A control fails when its most severe finding is at least as severe as the applicable threshold. FailOn is the default threshold; PerControl overrides it for named controls. The zero value fails on error.

FailOnPriority adds component-aware gating: when set (e.g. "P1"), a control also fails if any of its findings has a priority band at least that urgent. Because a finding's priority already combines its severity with its component's exposure and criticality, this gates per component without a separate per-component threshold.

func (p Policy) Evaluate(reports map[string]sarif.Report) Result

type Result ¶

type Result struct {
	Verdict  Verdict
	Controls []ControlOutcome
}

Result is the overall evaluation across all controls.

type Verdict ¶

type Verdict string

Verdict is the outcome of a policy evaluation.

const (
	Pass Verdict = "pass"
	Fail Verdict = "fail"
)