Versions in this module Expand all Collapse all v1 v1.0.8 Feb 10, 2026 Changes in this version + type ContextAnalyzer struct + func NewContextAnalyzer() *ContextAnalyzer + func (ca *ContextAnalyzer) AdjustSeverity(ruleID string, baseSeverity string, ctx *WorkflowContext) string + func (ca *ContextAnalyzer) Analyze(workflow *parser.Workflow) *WorkflowContext + func (ca *ContextAnalyzer) GetRecommendations(ctx *WorkflowContext) []string + func (ca *ContextAnalyzer) GetRiskScore(ctx *WorkflowContext) int + func (ca *ContextAnalyzer) ShouldSuppress(ruleID string, ctx *WorkflowContext) bool + type IntentDetector struct + func NewIntentDetector() *IntentDetector + func (d *IntentDetector) DetectIntent(workflow *parser.Workflow) WorkflowIntent + type PermissionAnalyzer struct + func NewPermissionAnalyzer() *PermissionAnalyzer + func (a *PermissionAnalyzer) AnalyzeNeeds(workflow *parser.Workflow) PermissionNeeds + func (a *PermissionAnalyzer) GetGrantedPermissions(workflow *parser.Workflow) map[string]string + func (a *PermissionAnalyzer) HasSufficientPermissions(needs PermissionNeeds, granted map[string]string) bool + func (a *PermissionAnalyzer) ShouldHaveExplicitPermissions(workflow *parser.Workflow, intent WorkflowIntent) bool + type PermissionNeeds struct + Actions bool + Checks bool + Contents bool + Deployments bool + Issues bool + Packages bool + PullRequests bool + SecurityEvents bool + Statuses bool + func (p *PermissionNeeds) IsEmpty() bool + type TriggerAnalyzer struct + func NewTriggerAnalyzer() *TriggerAnalyzer + func (a *TriggerAnalyzer) AnalyzeRisk(workflow *parser.Workflow) TriggerRisk + func (a *TriggerAnalyzer) GetTriggerType(workflow *parser.Workflow) string + func (a *TriggerAnalyzer) HasUntrustedInput(workflow *parser.Workflow) bool + func (a *TriggerAnalyzer) IsTrustedTrigger(workflow *parser.Workflow) bool + func (a *TriggerAnalyzer) RequiresCredentialProtection(workflow *parser.Workflow) bool + type TriggerRisk int + const RiskCritical + const RiskHigh + const RiskLow + const RiskMedium + const RiskUnknown + func (t TriggerRisk) String() string + type WorkflowContext struct + GrantedPerms map[string]string + HasUntrustedInput bool + Intent WorkflowIntent + IsTrusted bool + PermissionNeeds PermissionNeeds + TriggerRisk TriggerRisk + type WorkflowIntent int + const IntentDeploy + const IntentReadOnly + const IntentReadWrite + const IntentRelease + const IntentUnknown + func (w WorkflowIntent) IsCritical() bool + func (w WorkflowIntent) IsReadOnly() bool + func (w WorkflowIntent) RequiresStrictSecurity() bool + func (w WorkflowIntent) String() string
Go to main page