secreport

type Action struct {
	ID    string `json:"id"`
	Label string `json:"label"`
	Path  string `json:"path"`
}

type Check struct {
	ID          string       `json:"id"`
	Predicate   string       `json:"predicate"`
	Subject     Subject      `json:"subject"`
	Outcome     string       `json:"outcome"`
	ReasonCode  string       `json:"reason_code"`
	Explanation string       `json:"explanation"`
	Evidence    Evidence     `json:"evidence"`
	Facts       CheckFacts   `json:"facts,omitempty"`
	Suppression *Suppression `json:"suppression,omitempty"`
	Actions     []Action     `json:"actions,omitempty"`
	Limitations []string     `json:"limitations,omitempty"`
}

type CheckFacts struct {
	DeclaredSource     string   `json:"declared_source,omitempty"`
	ReferenceSites     *int     `json:"reference_sites,omitempty"`
	WorkloadConsumers  *int     `json:"workload_consumers,omitempty"`
	UnscopedConsumers  *int     `json:"unscoped_consumers,omitempty"`
	FindingCodes       []string `json:"finding_codes,omitempty"`
	FindingSeverities  []string `json:"finding_severities,omitempty"`
	FindingConfidences []string `json:"finding_confidences,omitempty"`
	AuthType           string   `json:"auth_type,omitempty"`
	Bind               string   `json:"bind,omitempty"`
	EffectiveBind      string   `json:"effective_bind,omitempty"`
	OriginsMode        string   `json:"origins_mode,omitempty"`
	AllowedOriginCount *int     `json:"allowed_origin_count,omitempty"`
	DiscoveryRoutes    []string `json:"discovery_routes,omitempty"`
	Kind               string   `json:"kind,omitempty"`
	DefaultAction      string   `json:"default_action,omitempty"`
	RuleCount          *int     `json:"rule_count,omitempty"`
	BlockDestructive   *bool    `json:"block_destructive,omitempty"`
	RecordedOutcome    string   `json:"recorded_outcome,omitempty"`
	Instance           string   `json:"instance,omitempty"`
	Revision           string   `json:"revision,omitempty"`
}

type ContextPinRecordView struct {
	Status         string
	Source         string
	Pack           string
	PinnedAt       time.Time
	LastVerifiedAt time.Time
	FindingCodes   []string
}

type ContextPinView struct {
	Available bool
	Fragments map[string]ContextPinRecordView
}

type Coverage struct {
	Status              string   `json:"status"`
	PredicatesTotal     int      `json:"predicates_total"`
	PredicatesEvaluated int      `json:"predicates_evaluated"`
	PredicatesUnknown   int      `json:"predicates_unknown"`
	IncludedScopes      []string `json:"included_scopes"`
	ExcludedScopes      []string `json:"excluded_scopes"`
	UnknownGaps         int      `json:"unknown_gaps"`
}

type Evidence struct {
	Basis              string     `json:"basis"`
	Availability       string     `json:"availability"`
	Freshness          string     `json:"freshness"`
	FreshnessCondition string     `json:"freshness_condition,omitempty"`
	ObservedAt         *time.Time `json:"observed_at,omitempty"`
	VerifiedAt         *time.Time `json:"verified_at,omitempty"`
	ScannedAt          *time.Time `json:"scanned_at,omitempty"`
	Producer           string     `json:"producer,omitempty"`
	ProducerVersion    string     `json:"producer_version,omitempty"`
	Ruleset            string     `json:"ruleset,omitempty"`
	Digest             string     `json:"digest,omitempty"`
	VerificationMethod string     `json:"verification_method,omitempty"`
	SubjectBinding     string     `json:"subject_binding,omitempty"`
	PredicateScope     string     `json:"predicate_scope,omitempty"`
}

type ExecutionView struct {
	Server     string
	Replica    string
	Kind       string
	Mode       string
	Outcome    string
	Eligible   bool
	ObservedAt time.Time
	Runtime    string
	Instance   string
	Revision   string
}

type FindingView struct {
	Code       string
	Severity   string
	Confidence string
	Field      string
	Suppressed bool
}

type GatewayDeclView struct {
	AuthDeclared bool
	AuthType     string
	Bind         string
	Insecure     bool
}

type HTTPDoer interface {
	Do(*http.Request) (*http.Response, error)
}

type Inputs struct {
	Source      SourceIdentity
	Stack       *StackView
	Pins        *PinView
	SkillPins   *SkillPinView
	ContextPins *ContextPinView
	Startup     *StartupView
	Execution   []ExecutionView
}

type PinView struct {
	Available bool
	Enabled   bool
	Scan      *ScanDeclView
	Servers   map[string]ServerPinView
}

type PinningDeclView struct {
	Enabled bool
}

type PolicyDeclView struct {
	Declared          bool
	Default           string
	RuleCount         int
	BlockDestructive  bool
	ApprovalRuleCount int
}

type ReferenceSite struct {
	Kind       string
	Name       string
	Target     string
	TargetKind string
	Untargeted bool
}

type Report struct {
	SchemaVersion      string         `json:"schema_version"`
	GeneratedAt        time.Time      `json:"generated_at"`
	Source             SourceIdentity `json:"source"`
	Coverage           Coverage       `json:"coverage"`
	Checks             []Check        `json:"checks"`
	Limitations        []string       `json:"limitations"`
	GenerationOK       bool           `json:"-"`
	FailCount          int            `json:"fail_count"`
	WarnCount          int            `json:"warn_count"`
	UnknownCount       int            `json:"unknown_count"`
	NotApplicableCount int            `json:"not_applicable_count"`
	PassCount          int            `json:"pass_count"`
}

type ScanDeclView struct {
	Enabled bool
	Ignore  []string
}

type ServerPinView struct {
	Status             string
	ToolCount          int
	PinnedAt           time.Time
	LastVerifiedAt     time.Time
	LegacySchemeCount  int
	CurrentSchemeCount int
	Findings           []FindingView
	// Approval fields are presence and the bound hash only. Reason text,
	// references, and the approver name stay out of the report.
	ApprovalRecorded bool
	ApprovedAt       time.Time
	ApprovedHash     string
}

type ServerView struct {
	Name              string
	Kind              string
	Image             string
	SourceType        string
	SourcePackage     string
	SourceVersion     string
	SourceRef         string
	SourceHostPath    string
	BuildDigest       string
	ObservedImage     string
	ObservedImageID   string
	ManifestDigest    string
	SignatureBound    bool
	ExecutionMode     string
	ExecutionDeclared bool
}

type SkillPinRecordView struct {
	Status           string
	Source           string
	PinnedAt         time.Time
	LastVerifiedAt   time.Time
	FindingCodes     []string
	ApprovalRecorded bool
	ApprovedAt       time.Time
	ApprovedHash     string
}

type SkillPinView struct {
	Available bool
	Skills    map[string]SkillPinRecordView
}

type SourceIdentity struct {
	Kind       string `json:"kind"`
	Display    string `json:"display"`
	Historical bool   `json:"historical"`
	StackName  string `json:"stack_name,omitempty"`
}

type SourceRef struct {
	Kind  string
	Value string
}

type StackView struct {
	Name             string
	Servers          []ServerView
	References       map[string][]ReferenceSite
	SetMembers       map[string][]string
	UnscopedSetCount int
	Gateway          *GatewayDeclView
	Scan             *ScanDeclView
	Pinning          *PinningDeclView
	Policy           *PolicyDeclView
}

type StartupView struct {
	AuthEnabled        bool
	AuthType           string
	Bind               string
	Insecure           bool
	OriginsMode        string
	AllowedOriginCount int
	DiscoveryRoutes    []string
}

type Subject struct {
	Kind string `json:"kind"`
	Name string `json:"name"`
}

type Suppression struct {
	Codes      []string `json:"codes,omitempty"`
	ReasonCode string   `json:"reason_code"`
}