security

type DataLeakageCheck struct{}

type DefaultTemplateSecurityReporter struct {
}

type DefaultTemplateVerifier struct {
	// contains filtered or unexported fields
}

type InjectionPatternCheck struct{}

type InputValidationCheck struct{}

type NotificationConfig struct {
	Enabled         bool     `json:"enabled"`
	EmailRecipients []string `json:"email_recipients,omitempty"`
	SlackWebhook    string   `json:"slack_webhook,omitempty"`
	NotifyOnFailure bool     `json:"notify_on_failure"`
	NotifyOnSuccess bool     `json:"notify_on_success"`
}

type Pipeline struct {
	// contains filtered or unexported fields
}

type PipelineConfig struct {
	TemplateDirectories []string              `json:"template_directories"`
	OutputDirectory     string                `json:"output_directory"`
	VerificationOptions *VerificationOptions  `json:"verification_options"`
	ReportFormats       []common.ReportFormat `json:"report_formats"`
	NotificationConfig  *NotificationConfig   `json:"notification_config,omitempty"`
	ScheduleConfig      *ScheduleConfig       `json:"schedule_config,omitempty"`
}

type RegexSafetyCheck struct{}

type ScheduleConfig struct {
	Enabled       bool   `json:"enabled"`
	CronSchedule  string `json:"cron_schedule,omitempty"`
	IntervalHours int    `json:"interval_hours,omitempty"`
}

type SecurityCheck interface {
	// Name returns the name of the check
	Name() string

	// Description returns a description of the check
	Description() string

	// Check checks a template for security issues
	Check(template *format.Template, options *VerificationOptions) []*SecurityIssue
}

type SecurityIssue struct {
	ID          string               `json:"id"`
	Type        SecurityIssueType    `json:"type"`
	Description string               `json:"description"`
	Location    string               `json:"location"`
	Severity    common.SeverityLevel `json:"severity"`
	Remediation string               `json:"remediation"`
	Context     string               `json:"context,omitempty"`
	LineNumber  int                  `json:"line_number,omitempty"`
	RawData     interface{}          `json:"raw_data,omitempty"`
}

type SecurityIssueType string

type TemplateFormatCheck struct{}

type TemplateSecurityReporter interface {
	// GenerateReport generates a report from verification results
	GenerateReport(results []*VerificationResult) (*VerificationReport, error)

	// CalculateSummary calculates a summary of verification results
	CalculateSummary(results []*VerificationResult) *VerificationSummary
}

type TemplateVerifier interface {
	// VerifyTemplate verifies a template for security issues
	VerifyTemplate(ctx context.Context, template *format.Template, options *VerificationOptions) (*VerificationResult, error)

	// VerifyTemplateFile verifies a template file for security issues
	VerifyTemplateFile(ctx context.Context, templatePath string, options *VerificationOptions) (*VerificationResult, error)

	// VerifyTemplateDirectory verifies all templates in a directory for security issues
	VerifyTemplateDirectory(ctx context.Context, directoryPath string, options *VerificationOptions) ([]*VerificationResult, error)

	// RegisterCheck registers a custom security check
	RegisterCheck(name string, check SecurityCheck)

	// GetChecks returns all registered security checks
	GetChecks() map[string]SecurityCheck
}

type VerificationOptions struct {
	StrictMode         bool                   `json:"strict_mode"`
	IgnorePatterns     []string               `json:"ignore_patterns,omitempty"`
	CustomChecks       []string               `json:"custom_checks,omitempty"`
	SeverityThreshold  common.SeverityLevel   `json:"severity_threshold,omitempty"`
	IncludeInfo        bool                   `json:"include_info"`
	TemplateCategories []string               `json:"template_categories,omitempty"`
	Metadata           map[string]interface{} `json:"metadata,omitempty"`
}

type VerificationReport struct {
	// Results is the list of verification results
	Results []*VerificationResult

	// Summary is a summary of the verification results
	Summary *VerificationSummary

	// GeneratedAt is the timestamp when the report was generated
	GeneratedAt time.Time
}

type VerificationResult struct {
	TemplatePath string                 `json:"template_path"`
	TemplateID   string                 `json:"template_id"`
	TemplateName string                 `json:"template_name"`
	Issues       []*SecurityIssue       `json:"issues"`
	Passed       bool                   `json:"passed"`
	Score        float64                `json:"score"`
	MaxScore     float64                `json:"max_score"`
	Metadata     map[string]interface{} `json:"metadata,omitempty"`
}

type VerificationSummary struct {
	// TotalTemplates is the total number of templates verified
	TotalTemplates int

	// PassedTemplates is the number of templates that passed verification
	PassedTemplates int

	// FailedTemplates is the number of templates that failed verification
	FailedTemplates int

	// TotalIssues is the total number of issues found
	TotalIssues int

	// IssuesBySeverity is a map of issues by severity
	IssuesBySeverity map[string]int

	// IssuesByType is a map of issues by type
	IssuesByType map[string]int

	// ComplianceStatus is a map of compliance status by standard
	ComplianceStatus map[string]bool

	// CompliancePercentage is the overall compliance percentage
	CompliancePercentage float64
}