security

type CapabilityProfile struct {
	// Name is the name of the profile
	Name string `json:"name"`

	// Description is the description of the profile
	Description string `json:"description"`

	// Add are capabilities to add
	Add []string `json:"add"`

	// Drop are capabilities to drop
	Drop []string `json:"drop"`
}

type DefaultsManager struct {
	// contains filtered or unexported fields
}

type DefaultsOptions struct {
	// ConfigPath is the path to the configuration directory
	ConfigPath string

	// DefaultSeccompProfile is the default seccomp profile
	DefaultSeccompProfile string

	// DefaultAppArmorProfile is the default AppArmor profile
	DefaultAppArmorProfile string

	// DefaultCapabilityProfile is the default capability profile
	DefaultCapabilityProfile string

	// Logger is the logger
	Logger *logrus.Logger

	// DockerClient is the Docker client
	DockerClient client.APIClient
}

type DockerScanClient interface {
	ImageInspectWithRaw(ctx context.Context, imageID string) (types.ImageInspect, []byte, error)
	ContainerInspect(ctx context.Context, containerID string) (types.ContainerJSON, error)
}

type ScanOptions struct {
	// Timeout is the timeout for the scan
	Timeout time.Duration

	// Logger for logging
	Logger *logrus.Logger

	// OutputFormat is the format of the scan output (e.g., JSON, XML)
	OutputFormat string

	// IncludeLayers indicates whether to include layer information
	IncludeLayers bool

	// SeverityThreshold is the minimum severity to include in results
	SeverityThreshold string // Use string for severity threshold

	// MaxConcurrentScans is the maximum number of concurrent scans
	MaxConcurrentScans int

	// AdditionalFlags are additional scanner-specific flags
	AdditionalFlags map[string]string
}

type Scanner interface {
	// Name returns the name of the scanner
	Name() string

	// Version returns the version of the scanner
	Version() string

	// IsAvailable checks if the scanner is available
	IsAvailable(ctx context.Context) bool

	// ScanImage scans an image and returns the results
	ScanImage(ctx context.Context, imageRef string, options ScanOptions) (*models.SecurityScanResult, error) // Use models type

	// ScanRunningContainer scans a running container and returns the results
	ScanRunningContainer(ctx context.Context, containerID string, options ScanOptions) (*models.SecurityScanResult, error) // Use models type
}

type ScannerFactory interface {
	// Create creates a scanner of the specified type
	Create(scannerType string) (Scanner, error)
}

type SeccompArg struct {
	// Index is the argument index
	Index uint `json:"index"`

	// Value is the argument value
	Value uint64 `json:"value"`

	// ValueTwo is the second argument value (for range-based comparisons)
	ValueTwo uint64 `json:"valueTwo,omitempty"`

	// Op is the comparison operator
	Op string `json:"op"`
}

type SeccompProfile struct {
	// Name is the name of the profile
	Name string `json:"name"`

	// Description is the description of the profile
	Description string `json:"description"`

	// DefaultAction is the default action for seccomp rules
	DefaultAction string `json:"defaultAction"`

	// Architectures are the supported architectures
	Architectures []string `json:"architectures,omitempty"`

	// Syscalls are the system call rules
	Syscalls []SeccompSyscall `json:"syscalls"`

	// Path is the path to the profile file
	Path string `json:"-"`
}

type SeccompSyscall struct {
	// Names are the syscall names
	Names []string `json:"names"`

	// Action is the action to take
	Action string `json:"action"`

	// Args are optional argument matchers
	Args []SeccompArg `json:"args,omitempty"`
}

type SecurityManager struct {
	// contains filtered or unexported fields
}