Struct VerifiedFinding 

pub struct VerifiedFinding {

    pub detector_id: Arc<str>,
    pub detector_name: Arc<str>,
    pub service: Arc<str>,
    pub severity: Severity,
    pub credential_redacted: Cow<'static, str>,
    pub credential_hash: CredentialHash,
    pub companions_redacted: HashMap<String, String>,
    pub location: MatchLocation,
    pub verification: VerificationResult,
    pub metadata: HashMap<String, String>,
    pub additional_locations: Vec<MatchLocation>,
    pub entropy: Option<f64>,
    pub confidence: Option<f64>,
}

A finding after verification - the final output.

Fields

detector_id: Arc<str>

Stable detector identifier.

detector_name: Arc<str>

Human-readable detector name.

service: Arc<str>

Service namespace associated with the detector.

severity: Severity

Detector severity level.

credential_redacted: Cow<'static, str>

Redacted version of the credential for reporting.

credential_hash: CredentialHash

SHA-256 digest of the original credential for internal correlation. Raw 32 inline bytes; hex-encoded lazily at the serde/reporter boundary.

companions_redacted: HashMap<String, String>

Redacted companion credentials or context values extracted nearby.

Companion values follow the same boundary rule as the primary credential: reports may expose a safe preview, never plaintext.

location: MatchLocation

Source location for the match.

verification: VerificationResult

Verification result.

metadata: HashMap<String, String>

Additional provider-specific metadata (e.g. account ID, scope).

additional_locations: Vec<MatchLocation>

Additional duplicate locations found for this credential.

entropy: Option<f64>

Shannon entropy measured by the detection path, when available.

confidence: Option<f64>

Confidence score (0.0 - 1.0) combining entropy, keyword proximity, file type, etc.

Implementations

impl VerifiedFinding

pub fn from_deduped( group: DedupedMatch, severity: Severity, verification: VerificationResult, metadata: HashMap<String, String>, ) -> Self

Construct the report-safe view of a deduplicated match.

This is the single conversion boundary for verifier and skipped paths: every new report field must be initialized here, while callers retain ownership of policy-specific severity and verification decisions.

Trait Implementations

impl Clone for VerifiedFinding

fn clone(&self) -> VerifiedFinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifiedFinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for VerifiedFinding

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for VerifiedFinding

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.