output

type BumpResponse struct {
	Results map[string]*gobump.Result `json:"results" yaml:"results"`
	Summary BumpSummary               `json:"summary" yaml:"summary"`
}

type BumpSummary struct {
	TotalPackages       int `json:"total_packages" yaml:"total_packages"`
	PackagesWithVulns   int `json:"packages_with_vulns" yaml:"packages_with_vulns"`
	PackagesFixed       int `json:"packages_fixed" yaml:"packages_fixed"`
	PackagesPartial     int `json:"packages_partial" yaml:"packages_partial"`
	PackagesUnvalidated int `json:"packages_unvalidated" yaml:"packages_unvalidated"`
	TotalVulnsFound     int `json:"total_vulns_found" yaml:"total_vulns_found"`
	TotalVulnsFixed     int `json:"total_vulns_fixed" yaml:"total_vulns_fixed"`
	TotalVulnsResidual  int `json:"total_vulns_residual" yaml:"total_vulns_residual"`
	// TotalVulnsUnreachable counts advisories affecting only modules not
	// linked into any build artifact (informational; not fixed, not residual).
	TotalVulnsUnreachable int `json:"total_vulns_unreachable" yaml:"total_vulns_unreachable"`
	TotalModulesBumped    int `json:"total_modules_bumped" yaml:"total_modules_bumped"`
	// TotalHygieneModulesBumped counts scanner-hygiene entries written (see
	// Result.HygieneBumps) - never part of TotalModulesBumped.
	TotalHygieneModulesBumped int `json:"total_hygiene_modules_bumped,omitempty" yaml:"total_hygiene_modules_bumped,omitempty"`
	Errors                    int `json:"errors" yaml:"errors"`
	// PackagesSkipped counts files (or parts of files) not analyzed - see
	// Result.SkipReasons.
	PackagesSkipped int `json:"packages_skipped" yaml:"packages_skipped"`
	// PackagesExcluded counts files that opted out of bumping via the
	// choam/bump-exclude-reason annotation (see Result.ExcludedReason).
	PackagesExcluded int `json:"packages_excluded" yaml:"packages_excluded"`

	// PackagesStdlibStale counts files with at least one distinct fixable
	// stdlib vulnerability ID (see DistinctStdlibVulnIDs); TotalStdlibVulns
	// sums those per-file distinct counts across all files. Deliberately
	// separate from the dependency-vulnerability counters above: a stdlib
	// staleness fix is a toolchain rebuild, not a dependency bump, and a file
	// can carry stdlib fixes with zero dependency vulnerabilities found.
	PackagesStdlibStale int `json:"packages_stdlib_stale" yaml:"packages_stdlib_stale"`
	TotalStdlibVulns    int `json:"total_stdlib_vulns" yaml:"total_stdlib_vulns"`

	// PackagesPatchNeeded counts files with at least one first-party apk
	// advisory (see Result.FirstPartyVulnIDs); TotalFirstPartyVulns sums
	// those IDs. Not dependency fixes: they need a source patch.
	PackagesPatchNeeded  int `json:"packages_patch_needed" yaml:"packages_patch_needed"`
	TotalFirstPartyVulns int `json:"total_first_party_vulns" yaml:"total_first_party_vulns"`

	// PackagesChanged counts files whose epoch moved or that were rewritten;
	// PackagesActionNeeded files that errored or carry Result.ActionsNeeded.
	PackagesChanged      int `json:"packages_changed" yaml:"packages_changed"`
	PackagesActionNeeded int `json:"packages_action_needed" yaml:"packages_action_needed"`
}

type CheckResponse struct {
	Results map[string]*updater.UpdateResult `json:"results" yaml:"results"`
	Summary CheckSummary                     `json:"summary" yaml:"summary"`
}

type CheckSummary struct {
	TotalPackages    int `json:"total_packages" yaml:"total_packages"`
	UpdatesAvailable int `json:"updates_available" yaml:"updates_available"`
	Errors           int `json:"errors" yaml:"errors"`
	Manual           int `json:"manual" yaml:"manual"`
}

type UpdateResponse struct {
	Results map[string]*updater.ApplyResult `json:"results" yaml:"results"`
	Summary UpdateSummary                   `json:"summary" yaml:"summary"`
}

type UpdateSummary struct {
	TotalPackages     int `json:"total_packages" yaml:"total_packages"`
	SuccessfulUpdates int `json:"successful_updates" yaml:"successful_updates"`
	Errors            int `json:"errors" yaml:"errors"`
	Manual            int `json:"manual" yaml:"manual"`
}