pub struct SecurityListReport {
pub layers: Vec<ToolFindingsLayer>,
pub findings: usize,
pub returned: usize,
pub truncated: bool,
pub cross_reference: Vec<CrossReference>,
pub cross_reference_total: usize,
}Expand description
The listing itself, present only when an analyzer result is on record.
Fields§
§layers: Vec<ToolFindingsLayer>Every live layer, with its run evidence and a bounded page of findings.
findings: usizeTotal findings across those layers — the true count, never reduced by the page bound. Unchanged by the cross-reference below, which is a view over these findings and not a replacement for them (ADR-0018 v1.1).
returned: usizeHow many findings this document actually carries. Below findings
whenever any layer was truncated.
truncated: boolTrue when returned < findings — i.e. this document is a page and not the
whole listing. Each layer says which one of them was cut, and by how much.
cross_reference: Vec<CrossReference>Dependency advisories seen across analyzers, most-corroborated first, and bounded by the same page size.
Empty unless at least two analyzers appear on the dependency axis, and
that emptiness is an explicit guard, not something the data does on its
own: crate::cross_reference happily returns one row per advisory for a
single analyzer, each reading confirmed_by: 1, which is noise dressed as
information. crate::cross_reference_across_analyzers is the suppression,
it is the only implementation of it, and
a_single_dependency_analyzer_yields_no_cross_reference is what keeps this
sentence true.
Do not remove the guard believing the emptiness is emergent — this comment
once claimed it was, and it was wrong (PR #468 review). Do not add a second
one either: the CLI’s security list --json reaches the same suppression
through the same function.
cross_reference_total: usizeHow many advisories the cross-reference found in total, before the page
bound. Equal to cross_reference.len() when nothing was cut.
Trait Implementations§
Source§impl Clone for SecurityListReport
impl Clone for SecurityListReport
Source§fn clone(&self) -> SecurityListReport
fn clone(&self) -> SecurityListReport
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more