scanner

type CLIGitBackend struct{}

type GitBackend interface {
	// IsRepo checks if the path is a git repository.
	IsRepo(path string) bool
	// GetStatus returns uncommitted changes and unpushed commits status.
	// err is non-nil when the status could not be determined (e.g. the git
	// invocation failed); callers must not treat a non-nil err as "clean".
	GetStatus(repoPath string, checkUnpushed bool) (hasUncommitted, hasUnpushed bool, err error)
}

type GoModResult struct {
	Path               string   // Path to go.mod relative to repo root
	ModuleName         string   // Module name from go.mod
	Dependencies       []string // Required module paths (direct + indirect)
	DirectDependencies []string // Required module paths without "// indirect"
	ReplaceCount       int      // Number of replace directives
}

type ProgressFunc func(current, total int, name string)

type RepoResult struct {
	Name                  string
	Path                  string
	IsGitRepo             bool
	HasGoMod              bool
	HasUncommittedChanges bool
	HasUnpushedCommits    bool
	HasReplaceDirectives  bool
	HasModuleMismatch     bool
	ModuleName            string
	ReplaceCount          int
	Dependencies          []string           // Dependencies from root go.mod (direct + indirect)
	DirectDependencies    []string           // Dependencies from root go.mod without "// indirect"
	GoModFiles            []GoModResult      // All go.mod files (when recurse=true)
	LatestModTime         time.Time          // Most recent file modification time
	WorkflowCompliance    WorkflowCompliance // Workflow compliance status (when workflow check enabled)
	StatusError           string             // Non-empty when GetStatus failed; HasUncommittedChanges/HasUnpushedCommits are unknown, not false, in that case
}

type ScanOptions struct {
	Recurse       bool                 // Search for nested go.mod files
	CheckModTime  bool                 // Compute latest modification time (expensive)
	CheckUnpushed bool                 // Check for unpushed commits
	Workers       int                  // Number of parallel workers (0 = GOMAXPROCS)
	GitBackend    GitBackend           // Git backend to use (nil = default git CLI backend)
	Workflow      WorkflowCheckOptions // Workflow compliance checking options
}

type WorkflowCheckOptions struct {
	Enabled       bool
	RefRepo       string   // e.g., "plexusone/.github"
	RefBranch     string   // e.g., "main"
	RequiredTypes []string // e.g., ["go-ci", "go-lint", "go-sast-codeql"]
}

type WorkflowCompliance struct {
	HasWorkflows      bool     `json:"hasWorkflows"`
	WorkflowFiles     []string `json:"workflowFiles"`
	UsesReusable      bool     `json:"usesReusable"`
	ReusableWorkflows []string `json:"reusableWorkflows"`
	RefRepoMatch      bool     `json:"refRepoMatch"`
	MissingWorkflows  []string `json:"missingWorkflows"`
	ComplianceLevel   string   `json:"complianceLevel"` // full, partial, none
}