audit

type Audit struct {
	ID        string `yaml:"id"`
	Title     string `yaml:"title"`
	Date      string `yaml:"date"`
	Assurance string `yaml:"assurance"`
	Scope     string `yaml:"scope"`
	Method    string `yaml:"method"`
}

type AuditFile struct {
	Audit    Audit     `yaml:"audit"`
	Findings []Finding `yaml:"findings"`
}

type AuditSet struct {
	Files             []LoadedFile
	FindingsByID      map[string]*FindingRef
	FindingsByControl map[string][]*FindingRef
}

type Evidence struct {
	Type        string `yaml:"type"`
	Ref         string `yaml:"ref"`
	Description string `yaml:"description"`
	CollectedAt string `yaml:"collected_at,omitempty"`
}

type Finding struct {
	ID            string                     `yaml:"id"`
	Title         string                     `yaml:"title"`
	Severity      string                     `yaml:"severity"`
	Status        string                     `yaml:"status"`
	Owner         string                     `yaml:"owner"`
	Controls      []string                   `yaml:"controls"`
	Description   string                     `yaml:"description"`
	EUDIReqs      []string                   `yaml:"eudi_reqs,omitempty"`
	AnnexA        []string                   `yaml:"annex_a,omitempty"`
	GDPRItems     []string                   `yaml:"gdpr_items,omitempty"`
	ASVSSections  []string                   `yaml:"asvs_sections,omitempty"`
	FrameworkRefs map[string][]string        `yaml:"framework_refs,omitempty"` // framework ID -> requirement IDs (generic)
	TrackingIssue *IssueRef                  `yaml:"tracking_issue,omitempty"`
	Issues        []IssueRef                 `yaml:"issues,omitempty"`
	PullRequests  []IssueRef                 `yaml:"pull_requests,omitempty"`
	Evidence      []Evidence                 `yaml:"evidence,omitempty"`
	ResolvedDate  string                     `yaml:"resolved_date,omitempty"`
	Profiles      map[string]ProfileOverride `yaml:"profiles,omitempty"`
}

type FindingRef struct {
	File    *LoadedFile
	Index   int
	Finding *Finding
}

type IssueRef struct {
	Repo   string `yaml:"repo"`
	Number int    `yaml:"number"`
}

type LoadedFile struct {
	Path string
	Data AuditFile
}

type ProfileOverride struct {
	Status       string     `yaml:"status,omitempty"`
	Severity     string     `yaml:"severity,omitempty"`
	Evidence     []Evidence `yaml:"evidence,omitempty"`
	ResolvedDate string     `yaml:"resolved_date,omitempty"`
}