Struct DefaultBranchSettingsBaselineControl 

pub struct DefaultBranchSettingsBaselineControl;

Validates that the default branch has a minimum security baseline.

Maps to NIST 800-53 CM-2 (Baseline Configuration).

Requires ALL of the following to be satisfied:

• Branch protection is enabled on the default branch
• Admin enforcement is enabled (no bypass for admins)
• Stale reviews are dismissed on new push

This is a composite control that verifies multiple branch protection settings together, providing a holistic “baseline” check rather than individual setting checks.

Trait Implementations

impl Control for DefaultBranchSettingsBaselineControl

fn id(&self) -> ControlId

Returns the unique identifier for this control.

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.

fn remediation_hint(&self) -> Option<&'static str>

Actionable remediation hint shown when the control fails or needs review.