pub struct Finding {Show 13 fields
pub file: String,
pub function: String,
pub function_line: usize,
pub call_line: usize,
pub call_col: usize,
pub call_text: String,
pub category: Category,
pub subcategory: String,
pub risk: Risk,
pub description: String,
pub is_build_script: bool,
pub crate_name: String,
pub crate_version: String,
}Expand description
A single instance of ambient authority usage found in source code.
Each finding represents one call site where code exercises authority over the filesystem, network, environment, or process table. Findings are the primary output of the audit pipeline.
§Deduplication
The detector deduplicates findings by (file, function, call_line, call_col),
so each unique call site appears at most once even if multiple import paths
could match it.
Fields§
§file: StringSource file path.
function: StringName of the function containing the call.
function_line: usizeLine where the containing function is defined.
call_line: usizeLine of the call expression.
call_col: usizeColumn of the call expression.
call_text: StringThe expanded call path (e.g., "std::fs::read").
category: CategoryWhat kind of ambient authority this exercises.
subcategory: StringFiner-grained classification (e.g., "read", "connect", "spawn").
risk: RiskHow dangerous this call is.
description: StringHuman-readable description.
is_build_script: boolWhether this call is inside a build.rs main() function.
crate_name: StringName of the crate containing this call.
crate_version: StringVersion of the crate containing this call.