Enum Evidence 

#[non_exhaustive]
pub enum Evidence {
    HttpResponse {
        status: u16,
        headers: Vec<(String, String)>,
        body_excerpt: Option<String>,
    },
    DnsRecord {
        record_type: String,
        value: String,
    },
    Banner {
        raw: String,
    },
    JsSnippet {
        url: String,
        line: usize,
        snippet: String,
    },
    Certificate {
        subject: String,
        san: Vec<String>,
        issuer: String,
        expires: String,
    },
    CodeSnippet {
        file: String,
        line: usize,
        column: Option<usize>,
        snippet: String,
        language: Option<String>,
    },
    HttpRequest {
        method: String,
        url: String,
        headers: Vec<(String, String)>,
        body: Option<String>,
    },
    PatternMatch {
        pattern: String,
        matched: String,
    },
    Raw(String),
}

Concrete evidence proving a finding is real.

Extensible via #[non_exhaustive] — new evidence types can be added for new tools (firmware, mobile, etc.) without breaking existing consumers.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

HttpResponse

HTTP response data (status, headers, body excerpt).

Fields

status: u16

HTTP status code.

headers: Vec<(String, String)>

Response headers as key-value pairs.

body_excerpt: Option<String>

First N bytes of the response body.

DnsRecord

DNS record evidence.

Fields

record_type: String

Record type (A, AAAA, CNAME, MX, TXT, etc.).

value: String

Record value.

Banner

Service banner captured during port scanning.

Fields

raw: String

Raw banner text.

JsSnippet

JavaScript source snippet with context.

Fields

url: String

URL of the JS file.

line: usize

Line number in the file.

snippet: String

The matched code snippet.

Certificate

TLS certificate information.

Fields

subject: String

Certificate subject (CN).

san: Vec<String>

Subject Alternative Names.

issuer: String

Certificate issuer.

expires: String

Expiration date.

CodeSnippet

Source code snippet (for SAST, malware detection).

Fields

file: String

File path.

line: usize

Line number.

column: Option<usize>

Column number (optional).

snippet: String

The matched code.

language: Option<String>

Programming language.

HttpRequest

HTTP request that triggered the finding (for template/vuln scanners).

Fields

method: String

HTTP method.

url: String

Full URL.

headers: Vec<(String, String)>

Request headers.

body: Option<String>

Request body.

PatternMatch

Matched pattern or regex (for pattern-based scanners).

Fields

pattern: String

The pattern or regex that matched.

matched: String

The matched content.

Raw(String)

Unstructured evidence — fallback for anything that doesn’t fit above.

Implementations

impl Evidence

pub fn http_status(status: u16) -> Self

Create an HTTP response evidence with just a status code.

Examples found in repository

examples/basic.rs (line 8)

fn main() {
    let finding = Finding::builder("basic-scanner", "https://example.com", Severity::High)
        .title("Potential command injection")
        .detail("Untrusted input reaches shell execution")
        .tag("rce")
        .evidence(secfinding::Evidence::http_status(500))
        .build();

    println!("{finding}");

    let json = serde_json::to_string_pretty(&finding).unwrap();
    println!("{json}");
}

pub fn code( file: impl Into<String>, line: usize, snippet: impl Into<String>, ) -> Self

Create a code snippet evidence.

Trait Implementations

impl Clone for Evidence

fn clone(&self) -> Evidence

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Evidence

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Evidence

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Evidence

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.