pub struct BaselineDiff {
pub new: Vec<Finding>,
pub fixed: Vec<BaselineFinding>,
pub preexisting: Vec<Finding>,
pub waived_count: usize,
}Expand description
Result of diffing a fresh scan against a baseline. All three buckets
are independently consumable by verify’s exit-code logic.
Fields§
§new: Vec<Finding>Findings present in the current scan whose fingerprint is NOT in the baseline. These are regressions and drive the verify exit code.
fixed: Vec<BaselineFinding>Baseline entries whose fingerprint is NOT present in the current
scan — the underlying issue was fixed (or refactored away). Useful
for the taudit baseline diff summary.
preexisting: Vec<Finding>Findings present in BOTH the current scan and the baseline. Reported
for visibility but do not drive exit-1 unless they are critical-
without-valid-waiver (see Self::critical_without_valid_waiver).
waived_count: usizeSubset of preexisting baseline entries that carry reason_waived.
Drives the “X waived, Y unwaived” summary.
Implementations§
Source§impl BaselineDiff
impl BaselineDiff
Sourcepub fn critical_without_valid_waiver(
&self,
baseline: &Baseline,
graph: &AuthorityGraph,
now: DateTime<Utc>,
) -> Vec<Finding>
pub fn critical_without_valid_waiver( &self, baseline: &Baseline, graph: &AuthorityGraph, now: DateTime<Utc>, ) -> Vec<Finding>
Critical findings in preexisting whose baseline entry does NOT
carry a valid critical waiver. These ALWAYS count toward exit 1 —
the council’s load-bearing constraint that critical waivers must be
explicit, time-bounded, and re-reviewed.
Trait Implementations§
Source§impl Clone for BaselineDiff
impl Clone for BaselineDiff
Source§fn clone(&self) -> BaselineDiff
fn clone(&self) -> BaselineDiff
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more