audit

type Audit struct {
	ID        string `yaml:"id"`
	Title     string `yaml:"title"`
	Date      string `yaml:"date"`
	Assurance string `yaml:"assurance"`
	Scope     string `yaml:"scope"`
	Method    string `yaml:"method"`
}

type AuditFile struct {
	Audit    Audit     `yaml:"audit"`
	Findings []Finding `yaml:"findings"`
}

type AuditSet struct {
	Files             []LoadedFile
	FindingsByID      map[string]*FindingRef
	FindingsByControl map[string][]*FindingRef
}

type Evidence struct {
	Type        string `yaml:"type"`
	Ref         string `yaml:"ref"`
	Description string `yaml:"description"`
	CollectedAt string `yaml:"collected_at,omitempty"`
}

type Finding struct {
	ID            string              `yaml:"id"`
	Title         string              `yaml:"title"`
	Severity      string              `yaml:"severity"`
	Status        string              `yaml:"status"`
	Owner         string              `yaml:"owner"`
	Controls      []string            `yaml:"controls"`
	Description   string              `yaml:"description"`
	EUDIReqs      []string            `yaml:"eudi_reqs,omitempty"`
	AnnexA        []string            `yaml:"annex_a,omitempty"`
	GDPRItems     []string            `yaml:"gdpr_items,omitempty"`
	ASVSSections  []string            `yaml:"asvs_sections,omitempty"`
	FrameworkRefs map[string][]string `yaml:"framework_refs,omitempty"` // framework ID -> requirement IDs (generic)
	TrackingIssue *IssueRef           `yaml:"tracking_issue,omitempty"`
	Issues        []IssueRef          `yaml:"issues,omitempty"`
	PullRequests  []IssueRef          `yaml:"pull_requests,omitempty"`
	Evidence      []Evidence          `yaml:"evidence,omitempty"`
	ResolvedDate  string              `yaml:"resolved_date,omitempty"`
}

type FindingRef struct {
	File    *LoadedFile
	Index   int
	Finding *Finding
}

type IssueRef struct {
	Repo   string `yaml:"repo"`
	Number int    `yaml:"number"`
}

type LoadedFile struct {
	Path string
	Data AuditFile
}