cargo-allow 0.1.11

Source-tree exception ledger and policy scanner for Rust repositories.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

use allow_core::{AllowEntry, Finding};
use allow_report::MutationReceipt;

use super::AddContext;

/// Shared mutation-receipt envelope for `add` (GOAL-0004 PR 5A;
/// CARGO-ALLOW-SPEC-0008 "Mutation Receipt Envelope"). Provenance and
/// changed-entry metadata only; does not change `add`'s write behavior.
pub(super) fn add_mutation_receipt<'a, 'b>(
    entry: &'a AllowEntry,
    context: &'a AddContext<'b>,
    policy_output: Option<&'a str>,
) -> MutationReceipt<'a> {
    let result = if policy_output.is_some() {
        "written"
    } else {
        "stdout"
    };
    MutationReceipt {
        operation: "add",
        tool_version: env!("CARGO_PKG_VERSION"),
        repo_root: context.repo_root.as_deref(),
        config_source: context.config_source.as_deref(),
        ledger_ids: Vec::new(),
        changed_allow_ids: vec![&entry.id],
        before_fingerprints: vec![None],
        after_fingerprints: vec![Some(allow_core::allow_entry_content_fingerprint(entry))],
        result,
        next_commands: vec![
            format!("cargo-allow explain --id {}", entry.id),
            "cargo-allow check --mode no-new".to_string(),
        ],
    }
}

pub(super) fn render_add_summary(
    entry: &AllowEntry,
    finding: &Finding,
    policy_output: Option<&str>,
    context: AddContext<'_>,
) -> String {
    let mutation_receipt = add_mutation_receipt(entry, &context, policy_output);
    allow_report::render_add_human(allow_report::AddReport::new(
        context.inventory,
        entry,
        finding,
        policy_output,
        false,
        mutation_receipt,
    ))
}

pub(super) fn render_add_summary_json(
    entry: &AllowEntry,
    finding: &Finding,
    policy_output: Option<&str>,
    force: bool,
    context: AddContext<'_>,
) -> String {
    let mutation_receipt = add_mutation_receipt(entry, &context, policy_output);
    allow_report::render_add_json(allow_report::AddReport::new(
        context.inventory,
        entry,
        finding,
        policy_output,
        force,
        mutation_receipt,
    ))
}