a06f331eb8
CI / benchmark (push) Has been skipped
install-script / posix-syntax (push) Successful in 6m1s
CI / build-onnx (push) Failing after 6m43s
init-smoke / dry-run (push) Failing after 15m57s
security / govulncheck (push) Has been cancelled
security / trivy-fs (push) Has been cancelled
CI / test (1.26, ubuntu-latest) (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
CI / test (1.26, macos-latest) (push) Has been cancelled
CI / build-windows (push) Has been cancelled
CI / lint (push) Has been cancelled
install-script / powershell-syntax (push) Has been cancelled
install-script / install (macos-14) (push) Has been cancelled
install-script / install (ubuntu-latest) (push) Has been cancelled
30 lines
746 B
Go
30 lines
746 B
Go
package review
|
|
|
|
import "github.com/zzet/gortex/internal/analysis"
|
|
|
|
// FromRisk bridges the impact-analysis risk ladder into a review verdict:
|
|
// CRITICAL / HIGH → BLOCK, MEDIUM → REVIEW, LOW → APPROVE.
|
|
func FromRisk(r analysis.RiskLevel) Verdict {
|
|
switch r {
|
|
case analysis.RiskCritical, analysis.RiskHigh:
|
|
return VerdictBlock
|
|
case analysis.RiskMedium:
|
|
return VerdictReview
|
|
default:
|
|
return VerdictApprove
|
|
}
|
|
}
|
|
|
|
// FromSeverity bridges a single finding's severity into a verdict:
|
|
// critical / error → BLOCK, warning → REVIEW, info → APPROVE.
|
|
func FromSeverity(s Severity) Verdict {
|
|
switch s {
|
|
case SevCritical, SevError:
|
|
return VerdictBlock
|
|
case SevWarning:
|
|
return VerdictReview
|
|
default:
|
|
return VerdictApprove
|
|
}
|
|
}
|