pub struct FindingWithFingerprint {
pub rule_id: String,
pub finding: Finding,
pub fingerprint: String,
pub suppression_key: String,
}Expand description
Per-finding wrapper that flattens the upstream Finding fields and
appends a stable fingerprint. The fingerprint matches the value
surfaced by SARIF partialFingerprints[primaryLocationLineHash] and
CloudEvents extension attribute tauditfindingfingerprint, so a SIEM
keying on any of the three sees the same identifier per finding.
See docs/finding-fingerprint.md for the contract.
The rule_id field carries the snake_case rule identifier (custom-rule
id when the finding came from a YAML rule with a [id] … message
prefix, otherwise the snake_case form of the category enum). This is
the same id surfaced in SARIF result.ruleId and CloudEvents
taudit.rule_id, so JSON consumers can filter/group by rule without
re-deriving it from the category serialization.
The wrapper owns its Finding so the JSON sink can populate
extras.finding_group_id from the fingerprint without mutating the
caller’s finding list. See docs/finding-output-enhancements.md.
Fields§
§rule_id: String§finding: Finding§fingerprint: String§suppression_key: String