gobump

type Analyzer struct {
	// contains filtered or unexported fields
}

type BumpAction struct {
	Action       string   `json:"action" yaml:"action"`             // "insert", "update", "remove"
	PipelineIdx  int      `json:"pipeline_idx" yaml:"pipeline_idx"` // pipeline index for update/remove
	Dependencies []string `json:"dependencies" yaml:"dependencies"` // dependencies to insert/update with
	Reason       string   `json:"reason" yaml:"reason"`             // human-readable reason
}

type BumpAnalysis struct {
	Module       string
	BumpVersion  string
	GoModVersion string
	Action       string // "keep", "remove-noop", "remove-downgrade", "remove-missing"
	Reason       string
}

type Fetcher struct {
	// contains filtered or unexported fields
}

type GitHubFileResponse struct {
	Content  string `json:"content"`
	Encoding string `json:"encoding"`
}

type GoBumpApplier struct {
	processor.BaseStage
	Analyzer *Analyzer
}

type GoBumpProcessor struct {
	*processor.BaseProcessor

	// Security-specific fields
	VulnerabilityAnalysis *VulnerabilityAnalysis `json:"vulnerability_analysis,omitempty"`
	SecurityFixes         []SecurityFix          `json:"security_fixes"`
	ActualChangesApplied  bool                   `json:"actual_changes_applied"`
}

type GoBumpResult struct {
	PackageName          string        `json:"package_name" yaml:"package_name"`
	FilePath             string        `json:"file_path" yaml:"file_path"`
	VulnerabilitiesFound int           `json:"vulnerabilities_found" yaml:"vulnerabilities_found"`
	VulnerabilitiesFixed int           `json:"vulnerabilities_fixed" yaml:"vulnerabilities_fixed"`
	CriticalFixed        int           `json:"critical_fixed" yaml:"critical_fixed"`
	HighFixed            int           `json:"high_fixed" yaml:"high_fixed"`
	SecurityFixes        []SecurityFix `json:"security_fixes" yaml:"security_fixes"`
	ActionsApplied       []BumpAction  `json:"actions_applied" yaml:"actions_applied"`
	OldEpoch             int64         `json:"old_epoch" yaml:"old_epoch"`
	NewEpoch             int64         `json:"new_epoch" yaml:"new_epoch"`
	EpochChanged         bool          `json:"epoch_changed" yaml:"epoch_changed"`
	FileWasWritten       bool          `json:"file_was_written" yaml:"file_was_written"`
	Messages             []string      `json:"messages" yaml:"messages"`
	Error                string        `json:"error,omitempty" yaml:"error,omitempty"`
}

type GoModInfo struct {
	Requirements    map[string]string           // module -> version (direct dependencies)
	AllRequirements map[string]string           // module -> version (all dependencies including indirect)
	Replacements    map[string]*modfile.Replace // module -> replacement
}

type Parser struct{}

type ProcessorOptions struct {
	DryRun       bool   `json:"dry_run" yaml:"dry_run"`
	BackupSuffix string `json:"backup_suffix" yaml:"backup_suffix"`
	TempDir      string `json:"temp_dir" yaml:"temp_dir"`
}

type SecurityFix struct {
	Module        string `json:"module" yaml:"module"`               // Go module affected
	Vulnerability string `json:"vulnerability" yaml:"vulnerability"` // CVE or vulnerability ID
	OldVersion    string `json:"old_version" yaml:"old_version"`     // version before fix
	NewVersion    string `json:"new_version" yaml:"new_version"`     // version after fix
	Severity      string `json:"severity" yaml:"severity"`           // critical, high, medium, low
}

type VulnerabilityAnalysis struct {
	GoModInfo            *GoModInfo       `json:"go_mod_info" yaml:"go_mod_info"`
	ScanResult           *scan.ScanResult `json:"scan_result" yaml:"scan_result"`
	VulnerabilitiesFound int              `json:"vulnerabilities_found" yaml:"vulnerabilities_found"`
	CriticalCount        int              `json:"critical_count" yaml:"critical_count"`
	HighCount            int              `json:"high_count" yaml:"high_count"`
	SecurityBumps        []string         `json:"security_bumps" yaml:"security_bumps"`
	BumpActions          []BumpAction     `json:"bump_actions" yaml:"bump_actions"`
	Analysis             []BumpAnalysis   `json:"analysis" yaml:"analysis"`
}

type VulnerabilityChecker struct {
	processor.BaseStage
	Analyzer *Analyzer
}