pub struct RepositoryPosture {
pub codeowners_entries: Vec<CodeownersEntry>,
pub secret_scanning_enabled: bool,
pub secret_push_protection_enabled: bool,
pub vulnerability_scanning_enabled: bool,
pub code_scanning_enabled: bool,
pub security_policy_present: bool,
pub security_policy_has_disclosure: bool,
pub default_branch_protected: bool,
}Expand description
Repository-level security posture evidence for ASPM controls.
Captures configuration-level signals that are independent of any single change request: code ownership, scanning settings, and security policy. Designed to be populated from GitHub REST API, GitLab API, or other platform adapters.
Fields§
§codeowners_entries: Vec<CodeownersEntry>Parsed CODEOWNERS entries. Empty vec means no CODEOWNERS file found.
secret_scanning_enabled: boolWhether secret scanning is enabled (detection).
secret_push_protection_enabled: boolWhether push protection is enabled (prevention). Requires GHAS on private repos.
vulnerability_scanning_enabled: boolWhether dependency vulnerability scanning (Dependabot, Snyk, etc.) is enabled.
code_scanning_enabled: boolWhether code scanning / SAST (CodeQL, Semgrep, etc.) is enabled.
security_policy_present: boolWhether a SECURITY.md or equivalent security policy file exists.
security_policy_has_disclosure: boolWhether the security policy describes a responsible disclosure process.
default_branch_protected: boolWhether the default branch has protection rules configured.
Trait Implementations§
Source§impl Clone for RepositoryPosture
impl Clone for RepositoryPosture
Source§fn clone(&self) -> RepositoryPosture
fn clone(&self) -> RepositoryPosture
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more