Skip to main content

SecretScanningControl

libverify_core::controls::secret_scanning

Struct SecretScanningControl

pub struct SecretScanningControl;

Expand description

Validates that secret scanning is enabled on the repository.

Maps to SOC2 CC6.1 / CC6.6: protect credentials and prevent leakage. ASPM signal — secret scanning prevents accidental exposure of API keys, tokens, and other credentials in source code.

Evaluation tiers:

Satisfied: scanning enabled AND push protection enabled (prevention)
Satisfied (with caveat): scanning enabled but push protection off (detection only)
Violated: scanning not enabled

Trait Implementations§

impl Control for SecretScanningControl

fn id(&self) -> ControlId

Returns the unique identifier for this control.

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.

Auto Trait Implementations§

impl Freeze for SecretScanningControl

impl RefUnwindSafe for SecretScanningControl

impl Send for SecretScanningControl

impl Sync for SecretScanningControl

impl Unpin for SecretScanningControl

impl UnsafeUnpin for SecretScanningControl

impl UnwindSafe for SecretScanningControl

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.