Struct Violation 

pub struct Violation {
    pub severity: ViolationSeverity,
    pub category: ViolationCategory,
    pub message: String,
    pub element: Option<String>,
    pub requirement: String,
    pub rule_id: &'static str,
    pub standard_refs: Vec<StandardRef>,
}

A compliance violation

Fields

severity: ViolationSeverity

Severity: error, warning, info

category: ViolationCategory

Category of the violation

message: String

Human-readable message

element: Option<String>

Component or element that violated (if applicable)

requirement: String

Standard/requirement being violated

rule_id: &'static str

Stable internal rule key, set at the check site, indexing into rule_meta. This — not the human-readable message — drives the externally-visible SARIF rule ID, the harmonised-standard references, and the remediation text. Defaults to "SBOM-CRA-GENERAL" for violations built outside the checker (e.g., from external config).

Skipped during (de)serialization: it is a &'static str runtime index, not part of the JSON contract. Round-tripped payloads resolve back to the default; standard_refs already carries the serialized references.

standard_refs: Vec<StandardRef>

Structured references to harmonised-standard / regulation clauses.

Populated by ComplianceChecker::check() from Violation::rule_id via rule_meta. Empty when a violation’s rule maps to no references.

Implementations

impl Violation

pub fn registry_standard_refs(&self) -> Vec<StandardRef>

Structured standard references for this violation, looked up from the rule registry by Violation::rule_id.

References are returned in registry order — typically the most specific harmonised-standard ID first, then the regulation reference. The registry, not the human-readable requirement string, is the single source of truth, so rewording a message can never silently drop a prEN/BSI cross-reference.

ComplianceChecker::check() calls this once and stores the result in Violation::standard_refs, so most consumers should read the field directly rather than re-deriving.

pub fn remediation_guidance(&self) -> &'static str

Remediation guidance for this violation, looked up from the rule registry by Violation::rule_id.

Trait Implementations

impl Clone for Violation

fn clone(&self) -> Violation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Violation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Violation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Violation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.