Struct VulnerabilityScanningControl 

pub struct VulnerabilityScanningControl;

Validates that dependency vulnerability scanning is enabled on the repository.

Maps to SOC2 CC7.1: detect vulnerabilities in third-party components. ASPM signal — continuous vulnerability scanning ensures known CVEs in dependencies are flagged before they reach production.

Evaluates both dependency scanning (SCA) and code scanning (SAST) when available.

Trait Implementations

impl Control for VulnerabilityScanningControl

fn id(&self) -> ControlId

Returns the unique identifier for this control.

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.