pub enum Coverage {
NotRun,
Ran(Vec<(String, String)>),
}Expand description
What a member’s analyzer coverage actually is — the distinction the vault must never blur.
An empty findings list means one of two completely different things, and
printing both as “no findings” is the failure roteiro security status
records as no-analyzer-on-record: nothing has been analyzed is not
nothing is wrong. A shareable artifact is the worst place to conflate
them, because its reader is the one person who cannot check.
Coverage::NotRun is the Default deliberately. A VaultSummary built
from Default has had no analyzer run against it, and defaulting the other
way would render “no findings” for a member nobody looked at — the exact
conflation this type exists to prevent, arrived at by omission.
Variants§
NotRun
No analyzer has ever run against this member. Not a clean result.
Ran(Vec<(String, String)>)
At least one analyzer ran, as (analyzer, version) per run — so an empty
findings list is attributable to a tool that actually looked.