Struct SuppressionEntry 

pub struct SuppressionEntry {

    pub id: String,
    pub fingerprint: String,
    pub rule_id: String,
    pub file_path: PathBuf,
    pub snippet_hash: Option<String>,
    pub context_hash: Option<String>,
    pub suppressed_by: String,
    pub created_at: String,
    pub expires_at: Option<String>,
    pub reason: String,
    pub ticket_ref: Option<String>,
    pub status: SuppressionStatus,
    pub original_severity: Severity,
    pub tags: HashSet<String>,
    pub groups: HashSet<String>,
    pub approval: Option<ApprovalInfo>,
    pub scheduled_revocation: Option<RevocationSchedule>,
    pub policy_id: Option<String>,
    pub priority: u8,
    pub metadata: HashMap<String, String>,
    pub version: u32,
    pub updated_at: Option<String>,
    pub updated_by: Option<String>,
}

A suppression entry representing a finding that should be ignored

Fields

id: String

Unique identifier for this suppression (UUID)

fingerprint: String

SHA256 fingerprint of the finding being suppressed

rule_id: String

Rule ID that generated the finding (e.g., “generic/hardcoded-secret”)

file_path: PathBuf

Path to the file containing the suppressed finding

snippet_hash: Option<String>

Hash of the code snippet for staleness detection (security: no raw code stored)

context_hash: Option<String>

Hash of surrounding context for additional staleness detection

suppressed_by: String

Who created this suppression

created_at: String

When this suppression was created (ISO 8601)

expires_at: Option<String>

When this suppression expires (ISO 8601, optional)

reason: String

Reason for the suppression

ticket_ref: Option<String>

Reference to a ticket/issue (e.g., “JIRA-456”)

status: SuppressionStatus

Current status of the suppression

original_severity: Severity

Original severity of the finding

tags: HashSet<String>

Tags for categorization

groups: HashSet<String>

Groups this suppression belongs to

approval: Option<ApprovalInfo>

Approval workflow info

scheduled_revocation: Option<RevocationSchedule>

Scheduled auto-revocation

policy_id: Option<String>

Policy that created this suppression (if from policy)

priority: u8

Priority level (1-5, 1 being highest)

metadata: HashMap<String, String>

Additional metadata

version: u32

Version number for optimistic locking

updated_at: Option<String>

Last modified timestamp

updated_by: Option<String>

Last modified by

Implementations

impl SuppressionEntry

pub fn new( fingerprint: impl Into<String>, rule_id: impl Into<String>, file_path: impl Into<PathBuf>, suppressed_by: impl Into<String>, reason: impl Into<String>, ) -> Self

Create a new active suppression entry

pub fn with_snippet(self, snippet: impl AsRef<str>) -> Self

Set the snippet hash for staleness detection (from raw snippet)

pub fn with_snippet_hash(self, hash: impl Into<String>) -> Self

Set the snippet hash directly

pub fn with_context_hash(self, hash: impl Into<String>) -> Self

Set the context hash for additional staleness detection

pub fn with_expiration(self, expires_at: impl Into<String>) -> Self

Set an expiration date

pub fn with_expiration_days(self, days: u32) -> Self

Set expiration from a duration string (e.g., “90d”, “30d”, “7d”)

pub fn with_ticket(self, ticket: impl Into<String>) -> Self

Set a ticket reference

pub fn with_severity(self, severity: Severity) -> Self

Set the original severity

pub fn with_tag(self, tag: impl Into<String>) -> Self

Add a tag

pub fn with_tags( self, tags: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Add multiple tags

pub fn with_group(self, group: impl Into<String>) -> Self

Add to a group

pub fn with_priority(self, priority: u8) -> Self

Set priority (1-5)

pub fn with_policy(self, policy_id: impl Into<String>) -> Self

Set policy ID

pub fn require_approval(self, min_approvals: usize) -> Self

Require approval

pub fn require_approval_from( self, approvers: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Require approval from specific approvers

pub fn schedule_revocation( self, scheduled_at: impl Into<String>, reason: impl Into<String>, scheduled_by: impl Into<String>, ) -> Self

Schedule auto-revocation

pub fn schedule_revocation_days( self, days: u32, reason: impl Into<String>, scheduled_by: impl Into<String>, ) -> Self

Schedule auto-revocation in N days

pub fn with_metadata( self, key: impl Into<String>, value: impl Into<String>, ) -> Self

Add metadata

pub fn is_expired(&self) -> bool

Check if the suppression has expired

pub fn is_active(&self) -> bool

Check if the suppression is active (not expired, revoked, or stale)

pub fn is_pending_approval(&self) -> bool

Check if approval is pending

pub fn is_approved(&self) -> bool

Check if the suppression has been approved

pub fn approve(&mut self, approver: impl Into<String>, comment: Option<String>)

Approve the suppression

pub fn reject(&mut self, rejector: impl Into<String>, reason: impl Into<String>)

Reject the suppression

pub fn revoke(&mut self)

Mark the suppression as revoked

pub fn mark_stale(&mut self)

Mark the suppression as stale

pub fn reactivate(&mut self, actor: impl Into<String>)

Reactivate the suppression

pub fn set_scheduled_revocation( &mut self, scheduled_at: impl Into<String>, reason: impl Into<String>, scheduled_by: impl Into<String>, )

Schedule auto-revocation (mutable version)

pub fn cancel_scheduled_revocation(&mut self)

Cancel scheduled revocation

pub fn add_approval( &mut self, approver: impl Into<String>, comment: Option<&str>, )

Add an approval (convenience method for mutable operations)

pub fn is_stale(&self, current_snippet: Option<&str>) -> bool

Check if the code has changed (staleness detection)

pub fn is_stale_by_hash(&self, current_snippet_hash: Option<&str>) -> bool

Check if the code has changed using a pre-computed hash

pub fn is_revocation_due(&self) -> bool

Check if scheduled revocation is due

pub fn time_until_expiry(&self) -> Option<String>

Get a human-readable description of time until expiration

pub fn has_tag(&self, tag: &str) -> bool

Check if this suppression has a specific tag

pub fn in_group(&self, group: &str) -> bool

Check if this suppression is in a specific group

pub fn tags_sorted(&self) -> Vec<&str>

Get all tags as a sorted vector

pub fn groups_sorted(&self) -> Vec<&str>

Get all groups as a sorted vector

Trait Implementations

impl Clone for SuppressionEntry

fn clone(&self) -> SuppressionEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SuppressionEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SuppressionEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SuppressionEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.