Skip to main content

Control

Trait Control 

Source
pub trait Control: Send + Sync {
    // Required methods
    fn id(&self) -> ControlId;
    fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>;

    // Provided methods
    fn description(&self) -> &'static str { ... }
    fn tsc_criteria(&self) -> &'static [&'static str] { ... }
}
Expand description

A verifiable SDLC control that produces findings from evidence.

Required Methods§

Source

fn id(&self) -> ControlId

Returns the unique identifier for this control.

Source

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

Provided Methods§

Source

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

Source

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.

Implementors§

Source§

impl Control for ActionsPinnedDependenciesControl

Source§

impl Control for BranchHistoryIntegrityControl

Source§

impl Control for BranchProtectionAdminEnforcementControl

Source§

impl Control for BranchProtectionEnforcementControl

Source§

impl Control for BuildIsolationControl

Source§

impl Control for BuildProvenanceControl

Source§

impl Control for ChangeRequestSizeControl

Source§

impl Control for CodeScanningAlertsResolvedControl

Source§

impl Control for CodeownersCoverageControl

Source§

impl Control for ConventionalTitleControl

Source§

impl Control for DependencyCompletenessControl

Source§

impl Control for DependencyLicenseComplianceControl

Source§

impl Control for DependencyProvenanceControl

Source§

impl Control for DependencySignatureControl

Source§

impl Control for DependencySignerVerifiedControl

Source§

impl Control for DescriptionQualityControl

Source§

impl Control for DismissStaleReviewsOnPushControl

Source§

impl Control for EnvironmentProtectionRulesControl

Source§

impl Control for HostedBuildPlatformControl

Source§

impl Control for IssueLinkageControl

Source§

impl Control for MergeCommitPolicyControl

Source§

impl Control for PrivilegedWorkflowDetectionControl

Source§

impl Control for ProvenanceAuthenticityControl

Source§

impl Control for ReleaseAssetAttestationControl

Source§

impl Control for ReleaseTraceabilityControl

Source§

impl Control for RequiredStatusChecksControl

Source§

impl Control for ReviewIndependenceControl

Source§

impl Control for SbomAttestationControl

Source§

impl Control for ScopedChangeControl

Source§

impl Control for SecretScanningControl

Source§

impl Control for SecretScanningPushProtectionControl

Source§

impl Control for SecurityFileChangeControl

Source§

impl Control for SecurityPolicyControl

Source§

impl Control for SourceAuthenticityControl

Source§

impl Control for StaleReviewControl

Source§

impl Control for TestCoverageControl

Source§

impl Control for TwoPartyReviewControl

Source§

impl Control for VulnerabilityScanningControl