fallow-output 3.0.0

Output contract types for fallow reports
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

//! Audit weakening-signal output contracts.

use serde::Serialize;

/// The category of a single weakening signal.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
#[cfg_attr(feature = "schema", derive(schemars::JsonSchema))]
#[serde(rename_all = "kebab-case")]
pub enum WeakeningKind {
    /// A test was removed or skipped.
    TestWeakened,
    /// A coverage or quality threshold was lowered.
    ThresholdLowered,
    /// A suppression was added.
    SuppressionAdded,
    /// A security check or step was removed from CI.
    SecurityCheckRemoved,
}

/// One weakening signal: a category, the file it was detected in, and a short
/// human-readable evidence string. Reviewer-private; never gates.
#[derive(Debug, Clone, Serialize)]
#[cfg_attr(feature = "schema", derive(schemars::JsonSchema))]
pub struct WeakeningSignal {
    /// What kind of guardrail was weakened.
    pub kind: WeakeningKind,
    /// Root-relative path of the changed file the signal was detected in.
    pub file: String,
    /// Short evidence string (e.g. the offending token or the threshold delta).
    pub evidence: String,
}