Struct TierCFinding 

pub struct TierCFinding<'a> {

    pub ecosystem: Ecosystem,
    pub advisory_id: String,
    pub aliases: Vec<String>,
    pub title: String,
    pub severity: Severity,
    pub cvss_score: Option<f32>,
    pub package: String,
    pub installed: Version,
    pub patched: Vec<VersionReq>,
    pub direct: bool,
    pub dependency_path: Vec<String>,
    pub repo: &'a RepoId,
    pub reach_reason: &'static str,
}

The inputs a feeder supplies to build one Tier-C VulnFinding. The version-matching decision (and any to_semver coercion of the installed/patched versions) happens in the feeder; everything here is already in the shared model’s types.

Fields

ecosystem: Ecosystem

The ecosystem this finding came from.

advisory_id: String

The advisory id (the osv.dev URL is derived from it).

aliases: Vec<String>

CVE/GHSA/… cross-reference aliases.

title: String

Display title — typically the advisory summary, falling back to the id.

severity: Severity

Severity band.

cvss_score: Option<f32>

CVSS base score when the advisory carries one (None where the feeder does not extract it).

package: String

The affected package name.

installed: Version

The installed version, in the shared SemVer model (already coerced by the feeder).

patched: Vec<VersionReq>

Versions that fix the advisory; empty means “no fix available”.

direct: bool

Whether the package is a direct dependency.

dependency_path: Vec<String>

A representative introducer chain [root, …, package]; empty when the feeder cannot compute a dependency graph.

repo: &'a RepoId

The repo the package was found in.

reach_reason: &'static str

The reason string for the Tier-C Unknown reachability verdict (the feeder names the fidelity, e.g. “package-level scan (no toolchain): version match only”).

Implementations

impl TierCFinding<'_>

pub fn build(self) -> VulnFinding

Assemble the VulnFinding. Package-level only: affected_functions is empty, reachable is None, and reachability is the Tier-C Unknown contract (never NotReachable — see Reachability::tier_c_unknown).