Enum Recommendation 

pub enum Recommendation {
    TsafeRemediation {
        command: String,
        explanation: String,
    },
    CellosRemediation {
        reason: String,
        spec_hint: String,
    },
    PinAction {
        current: String,
        pinned: String,
    },
    ReducePermissions {
        current: String,
        minimum: String,
    },
    FederateIdentity {
        static_secret: String,
        oidc_provider: String,
    },
    Manual {
        action: String,
    },
}

Routing: scope findings -> TsafeRemediation; isolation findings -> CellosRemediation.

Variants

TsafeRemediation

Remediate via tsafe — narrow / rotate / revoke a credential or scope.

Fields

command: String

explanation: String

CellosRemediation

Remediate via CellOS isolation primitives.

Fields

reason: String

spec_hint: String

PinAction

Pin a floating action reference to an immutable SHA.

Fields

current: String

pinned: String

ReducePermissions

Reduce the permissions block on the scope-bearing step.

Fields

current: String

minimum: String

FederateIdentity

Replace a long-lived static credential with a federated OIDC identity.

Fields

static_secret: String

oidc_provider: String

Manual

Free-form manual remediation — used when no canned action applies.

Fields

action: String

Trait Implementations

impl Clone for Recommendation

fn clone(&self) -> Recommendation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Recommendation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Recommendation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Recommendation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.