rules

type Rule struct {
	ID       string   `yaml:"id"`
	Severity string   `yaml:"severity"`
	Resource string   `yaml:"resource"` // resource-type filter, e.g. aws_security_group ("" = any)
	On       []string `yaml:"on"`       // change actions this rule applies to ("" = any)
	When     string   `yaml:"when"`     // CEL predicate, must evaluate to bool
	Title    string   `yaml:"title"`
	Fix      string   `yaml:"fix"`
	Refs     []string `yaml:"refs"`

	// Provenance — where this rule came from.
	Source   string `yaml:"source"`   // "custom" | "trivy"
	AVD      string `yaml:"avd"`      // original Trivy/AVD id, e.g. AVD-AWS-0180 ("" for custom)
	Provider string `yaml:"provider"` // "aws" | "gcp" | ... ("" = infer from resource prefix)
	// contains filtered or unexported fields
}

type Set struct {
	Rules []*Rule
	// contains filtered or unexported fields
}