Struct ComplianceChecker 

pub struct ComplianceChecker { /* private fields */ }

Compliance checker for SBOMs

Implementations

impl ComplianceChecker

pub const fn new(level: ComplianceLevel) -> Self

Create a new compliance checker

pub fn with_sidecar(self, sidecar: CraSidecarMetadata) -> Self

Attach CRA sidecar metadata to supplement SBOM-level fields.

Sidecar values are only consulted as fallbacks — fields present in the SBOM always take precedence. Used by validate, quality, and view CLIs via the --cra-sidecar flag (with auto-discovery for adjacent <sbom>.cra.{json,yaml} files).

pub const fn with_product_class(self, class: CraProductClass) -> Self

Set the CRA Annex III/IV product class explicitly.

Sidecar productClass (when set on the attached sidecar) wins over this; resolve via Self::effective_product_class.

pub fn effective_product_class(&self) -> CraProductClass

Resolve the effective product class:

1. sidecar productClass if present,
2. otherwise with_product_class value,
3. otherwise CraProductClass::Default.

pub fn effective_route(&self) -> ConformityRoute

Resolve the effective conformity-assessment route. Falls back to CraProductClass::default_route() when the sidecar doesn’t pin one.

pub fn class_severity(&self, check: ClassCheck) -> Option<ViolationSeverity>

CRA-P3.2 calibration table — severity for a given check at the effective product class. Returns None when the check does not apply for that class (e.g., EUCC reference at Default).

pub fn vendor_hash_threshold(&self) -> f64

Vendor-hash coverage threshold (single-stage) below which a violation fires. The severity is class_severity(VendorHashCoverage). Values: Default 50%, Important-1 80%, Important-2 80%, Critical 100%.

pub fn has_explicit_product_class(&self) -> bool

Whether a CRA product class has been explicitly configured (either via with_product_class() or the attached sidecar). Used by the per-check calibration to decide whether to override phase-based defaults — when no class is set, existing phase-driven behavior is preserved verbatim for backwards compatibility.

pub fn check(&self, sbom: &NormalizedSbom) -> ComplianceResult

Check an SBOM for compliance.

Selects the [StandardChecker] for the configured level (the seven dedicated profiles get their own checker; the rest take the generic path), runs it, then back-fills harmonised-standard references from the rule registry and attaches the CRA Annex VIII conformity summary when a product class has been pinned on a CRA profile.

Trait Implementations

impl Clone for ComplianceChecker

fn clone(&self) -> ComplianceChecker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ComplianceChecker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ComplianceChecker

fn default() -> Self

Returns the “default value” for a type.