Struct SastFinding 

pub struct SastFinding {

    pub rule_id: String,
    pub severity: Severity,
    pub message: String,
    pub file_path: PathBuf,
    pub line: usize,
    pub column: Option<usize>,
    pub end_line: Option<usize>,
    pub end_column: Option<usize>,
    pub code_snippet: Option<String>,
    pub fix_suggestion: Option<String>,
    pub category: String,
    pub cwe_ids: Vec<String>,
    pub source: String,
    pub language: String,
}

A security finding from SAST (Static Application Security Testing) analysis.

Unlike Vulnerability which represents dependency/supply-chain issues, SastFinding represents security issues found directly in source code.

Fields

rule_id: String

Rule identifier (e.g., “python.lang.security.audit.exec-detected”)

severity: Severity

Severity level

message: String

Human-readable description of the issue

file_path: PathBuf

Source file path

line: usize

Line number (1-based)

column: Option<usize>

Column number (1-based, optional)

end_line: Option<usize>

End line number (optional)

end_column: Option<usize>

End column number (optional)

code_snippet: Option<String>

Code snippet showing the problematic code

fix_suggestion: Option<String>

Suggested fix or remediation

category: String

Category (e.g., “injection”, “crypto”, “auth”)

cwe_ids: Vec<String>

CWE identifiers (e.g., [“CWE-89”, “CWE-564”])

source: String

Source tool name (e.g., “opengrep”, “bandit”, “gosec”)

language: String

Programming language (e.g., “python”, “go”, “c”)

Implementations

impl SastFinding

pub fn summary(&self) -> String

Get a short summary string

pub fn meets_severity_threshold(&self, threshold: &Severity) -> bool

Check if this finding meets a severity threshold

Trait Implementations

impl Clone for SastFinding

fn clone(&self) -> SastFinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SastFinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SastFinding

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SastFinding

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.