Struct ScanReportMetadata 

pub struct ScanReportMetadata {

    pub scan_id: String,
    pub scan_status: ScanCompletionStatus,
    pub backend_recoveries: Vec<ScanBackendRecoverySummary>,
    pub keyhog_version: String,
    pub git_hash: String,
    pub detector_digest: String,
    pub config_digest: Option<String>,
    pub resolved_scan: Option<ResolvedScanManifest>,
    pub generated_at: String,
    pub scan_started_at: String,
    pub scan_finished_at: String,
    pub duration_ms: u128,
    pub targets: Vec<String>,
    pub source_chunks_scanned: usize,
    pub source_bytes_scanned: u64,
    pub detector_count: usize,
}

Format-neutral operator-visible metadata for a scan report.

The metadata belongs to the report, not to one renderer. Individual output formats project the fields they can represent: HTML renders the complete object, while schema-constrained formats retain their established fields. Keeping this model in keyhog-core prevents the CLI and a single reporter from growing competing definitions of scan identity and timing.

Fields

scan_id: String

Stable non-secret identifier shared by artifacts from one scan run. Missing values deserialize as empty for reports produced before this field was introduced; current producers always populate it.

scan_status: ScanCompletionStatus

Terminal state for detached artifacts. Older reports default to success because they predate this explicit field and have no state to recover.

backend_recoveries: Vec<ScanBackendRecoverySummary>

Completed automatic backend recovery events. Empty means the scan did not recover a selected backend fault.

keyhog_version: String

KeyHog crate/binary version that produced the report.

git_hash: String

Git identity of the binary that produced the report.

detector_digest: String

Digest of the embedded detector set compiled into the binary.

config_digest: Option<String>

Digest of the effective scan configuration, when the orchestrator had a resolved configuration identity available.

resolved_scan: Option<ResolvedScanManifest>

Stable resolved preset and override manifest for mode comparisons. Absent only for reports produced by callers that do not have a CLI scan configuration (for example a library-created report).

generated_at: String

UTC generation timestamp formatted as YYYY-MM-DDTHH:MM:SS.

scan_started_at: String

UTC scan start timestamp formatted as YYYY-MM-DDTHH:MM:SS.

scan_finished_at: String

UTC scan finish timestamp formatted as YYYY-MM-DDTHH:MM:SS.

duration_ms: u128

Wall-clock scan duration in milliseconds.

targets: Vec<String>

Redacted operator-visible target labels for the requested scan sources.

source_chunks_scanned: usize

Number of source chunks the scanner consumed for this report.

source_bytes_scanned: u64

Number of source bytes the scanner consumed for this report.

detector_count: usize

Number of loaded detector specs used by this scan.

Trait Implementations

impl Clone for ScanReportMetadata

fn clone(&self) -> ScanReportMetadata

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScanReportMetadata

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ScanReportMetadata

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ScanReportMetadata

impl PartialEq for ScanReportMetadata

fn eq(&self, other: &ScanReportMetadata) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ScanReportMetadata

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ScanReportMetadata