pub enum Verdict {
Clean,
Undetermined,
Exposed,
Misconfigured,
}Expand description
What a run concluded, as the exit code reports it.
Four values, and each one asks the operator for something different: fix the
configuration, rotate a secret, fix the checkout, or nothing at all. That is
the only reason they are separate — a gate is read as a number, and a number
that carries two questions gets the wrong answer to one of them. Both splits
were made after measuring a case where the shared code sent a reader the
wrong way: 6 because a healthy git clone --depth 1 failed the gate like a
leaking repository, and 2 because a repository that had never run init
was told an exposure had been found. See crate::util::exit::UNDETERMINED and
crate::util::exit::CONFIG.
Variants§
Clean
Everything was checked and nothing was found.
Undetermined
Nothing was found, but part of the question could not be answered.
Exposed
Something was found.
Misconfigured
Git is not set up to enforce the declarations here.
The highest of the four since 2026-08-05, and the only one that reversed
a precedence — see Report::verdict.