violationutils

type CveViolation struct {
	ScaViolation
	CveVulnerability   cyclonedx.Vulnerability
	ContextualAnalysis *formats.Applicability        `json:"contextual_analysis,omitempty"`
	FixedVersions      *[]cyclonedx.AffectedVersions `json:"fixed_versions,omitempty"`
	// TODO: remove comment after information displayed in cyclonedx.Vulnerability
	JfrogResearchInformation *formats.JfrogResearchInformation `json:"jfrogResearchInformation,omitempty"`
}

type JasViolation struct {
	Violation
	Rule     *sarif.ReportingDescriptor `json:"rule,omitempty"`
	Result   *sarif.Result              `json:"result,omitempty"`
	Location *sarif.Location            `json:"location,omitempty"`
}

type LicenseViolation struct {
	ScaViolation
	LicenseKey  string `json:"license_key"`
	LicenseName string `json:"license_name"`
}

type OperationalRiskViolation struct {
	ScaViolation
	OperationalRiskViolationReadableData
}

type OperationalRiskViolationReadableData struct {
	RiskReason    string `json:"riskReason"`
	IsEol         string `json:"isEndOfLife"`
	EolMessage    string `json:"endOfLifeMessage"`
	Cadence       string `json:"cadence"`
	Commits       string `json:"commits"`
	Committers    string `json:"committers"`
	NewerVersions string `json:"newerVersions"`
	LatestVersion string `json:"latestVersion"`
}

type Policy struct {
	PolicyName        string `json:"policy"`
	Rule              string `json:"rule"`
	FailBuild         bool   `json:"fail_build,omitempty"`
	FailPullRequest   bool   `json:"fail_pull_request,omitempty"`
	SkipNotApplicable bool   `json:"skip_not_applicable,omitempty"`
}

type ScaViolation struct {
	Violation
	ImpactedComponent cyclonedx.Component      `json:"impacted_component"`
	DirectComponents  []formats.ComponentRow   `json:"direct_components,omitempty"`
	ImpactPaths       [][]formats.ComponentRow `json:"impact_paths,omitempty"`
}

type ScaViolationIssueType string

type Violation struct {
	ViolationId   string                 `json:"violation_id"`
	ViolationType ViolationIssueType     `json:"violation_type"`
	Severity      severityutils.Severity `json:"severity"`
	Watch         string                 `json:"watch_name"`
	Policies      []Policy               `json:"matched_policies,omitempty"`
}

type ViolationIssueType string

type Violations struct {
	Sca     []CveViolation             `json:"sca,omitempty"`
	License []LicenseViolation         `json:"license,omitempty"`
	OpRisk  []OperationalRiskViolation `json:"operational_risk,omitempty"`
	Secrets []JasViolation             `json:"secrets,omitempty"`
	Iac     []JasViolation             `json:"iac,omitempty"`
	Sast    []JasViolation             `json:"sast,omitempty"`
}