Struct SecurityFileChangeControl 

pub struct SecurityFileChangeControl;

Detects changes to security-sensitive files that require heightened review.

Maps to SOC2 CC7.2: monitoring for anomalies in change governance. Changes to CI configs, access control, lock files, and infrastructure definitions have outsized blast radius and should be flagged for scrutiny.

Trait Implementations

impl Control for SecurityFileChangeControl

fn id(&self) -> ControlId

Returns the unique identifier for this control.

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.