Struct AnalysisRun 

pub struct AnalysisRun {

    pub layer: String,
    pub analyzer: String,
    pub analyzer_version: String,
    pub runner: RunnerKind,
    pub isolation: Isolation,
    pub image_digest: Option<String>,
    pub rules_digest: Option<String>,
    pub advisory_db: Option<AdvisoryDb>,
    pub command_policy: CommandPolicy,
    pub source: SourceIdentity,
    pub started_at: String,
    pub ended_at: String,
    pub exit_status: i32,
    pub report_digest: String,
}

One analyzer execution, plus everything needed to reproduce or distrust it.

This is the evidence chain graph provenance was never designed to hold: what ran, at what version, under what isolation and command policy, against which rules and advisory database, over which source identity, and with what result.

Fields

layer: String

The replaceable layer this run owns: security:<analyzer>:<worktree-id> (see layer_key). Unique — one live run per layer.

analyzer: String

The analyzer id (cargo-audit, semgrep, …).

analyzer_version: String

The analyzer’s own version string, as reported by the producer.

runner: RunnerKind

Which backend produced this run.

isolation: Isolation

The isolation boundary the run actually had.

image_digest: Option<String>

Digest of the container image, when one was used.

rules_digest: Option<String>

Digest of the rule set the analyzer was run with.

advisory_db: Option<AdvisoryDb>

The pinned advisory database consulted, and its publication date.

command_policy: CommandPolicy

What the run was permitted to do.

source: SourceIdentity

The source identity the run was executed against.

started_at: String

Producer-supplied start timestamp.

ended_at: String

Producer-supplied end timestamp.

exit_status: i32

The analyzer’s process exit status.

report_digest: String

Digest of the raw report this run was derived from — the tie between the stored findings and the exact bytes they came from.

Trait Implementations

impl Clone for AnalysisRun

fn clone(&self) -> AnalysisRun

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnalysisRun

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AnalysisRun

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AnalysisRun

impl PartialEq for AnalysisRun

fn eq(&self, other: &AnalysisRun) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AnalysisRun

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AnalysisRun