Struct Finding 

pub struct Finding {
    pub id: String,
    pub title: String,
    pub severity: Severity,
    pub affected_crate: String,
    pub affected_version: Option<String>,
    pub url: Option<String>,
    pub description: Option<String>,
    pub source: FindingSource,
}

A single security finding.

Example

use dev_security::{Finding, FindingSource};
use dev_report::Severity;

let f = Finding {
    id: "RUSTSEC-2024-0001".into(),
    title: "Use after free in foo".into(),
    severity: Severity::Critical,
    affected_crate: "foo".into(),
    affected_version: Some("1.2.3".into()),
    url: Some("https://rustsec.org/advisories/RUSTSEC-2024-0001".into()),
    description: None,
    source: FindingSource::Audit,
};
assert_eq!(f.severity, Severity::Critical);

Fields

id: String

Advisory ID (e.g. RUSTSEC-2024-0001) or cargo-deny rule code.

title: String

Short human-readable title.

severity: Severity

Severity classification mapped from the underlying tool.

affected_crate: String

Affected crate name.

affected_version: Option<String>

Affected crate version, when the underlying tool exposed it.

url: Option<String>

URL with more detail (advisory page, license SPDX page, etc.).

description: Option<String>

Long-form description, when the underlying tool exposed it.

source: FindingSource

Which tool emitted this finding.

Trait Implementations

impl Clone for Finding

fn clone(&self) -> Finding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Finding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Finding

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Finding

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.