Finding

package connector

type Finding struct {
    Name        string
    Severity    string
    Description string
    Tags        []string
    References  []string
    CVEID       []string
    CWEID       []string
    CVSSScore   float64
    CVSSMetrics string
    EPSSScore   float64
    Solution    string
    MatchedAt   string
    Host        string
    IP          string
    Timestamp   time.Time

    Synopsis         string
    Ports            []string
    Authors          []string
    VPRScore         float64
    BIDID            []string
    CEAID            []string
    IAVAID           []string
    PublicationDate  time.Time
    ModificationDate time.Time
    Confidence       float64
}

func (f Finding) Validate() error

var Severities = []string{"info", "low", "medium", "high", "critical"}

func normalizeSeverity(s string) string {
    switch strings.ToLower(strings.TrimSpace(s)) {
    case "info", "low", "medium", "high", "critical":
        return strings.ToLower(strings.TrimSpace(s))
    case "unknown", "informational":
        return "info"
    default:
        return "info"
    }
}

func toFinding(raw ToolResult) (connector.Finding, error) {
    if raw.Name == "" {
        return connector.Finding{}, fmt.Errorf("finding has no name")
    }
    return connector.Finding{
        Name:        raw.Name,
        Severity:    normalizeSeverity(raw.Severity),
        Description: raw.Description,
        Solution:    raw.Remediation,
        MatchedAt:   raw.Matched,
        Host:        raw.Host,
        IP:          raw.IP,
        Tags:        raw.Tags,
        References:  raw.References,
        CVEID:       raw.CVEs,
        CWEID:       raw.CWEs,
        CVSSScore:   raw.CVSSScore,
        CVSSMetrics: raw.CVSSVector,
        Timestamp:   raw.Timestamp,
    }, nil
}