Struct EnvironmentProtectionRulesControl 

pub struct EnvironmentProtectionRulesControl;

Validates that production/release environments have required reviewer protection rules.

Maps to SOC2 CC6.1 / CC8.1: enforce separation of duties for production deployments. GitHub environment protection rules ensure that deployments to production require explicit approval from designated reviewers.

Evaluation:

• Satisfied: production environment has required reviewer rules
• Violated: production environment lacks required reviewer rules
• Indeterminate: branch protection is not configured (cannot assess environment rules)

Trait Implementations

impl Control for EnvironmentProtectionRulesControl

fn id(&self) -> ControlId

Returns the unique identifier for this control.

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.