Files
wehub-resource-sync a06f331eb8
CI / benchmark (push) Has been skipped
install-script / posix-syntax (push) Successful in 6m1s
CI / build-onnx (push) Failing after 6m43s
init-smoke / dry-run (push) Failing after 15m57s
security / govulncheck (push) Has been cancelled
security / trivy-fs (push) Has been cancelled
CI / test (1.26, ubuntu-latest) (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
CI / test (1.26, macos-latest) (push) Has been cancelled
CI / build-windows (push) Has been cancelled
CI / lint (push) Has been cancelled
install-script / powershell-syntax (push) Has been cancelled
install-script / install (macos-14) (push) Has been cancelled
install-script / install (ubuntu-latest) (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:33:42 +08:00

30 lines
746 B
Go

package review
import "github.com/zzet/gortex/internal/analysis"
// FromRisk bridges the impact-analysis risk ladder into a review verdict:
// CRITICAL / HIGH → BLOCK, MEDIUM → REVIEW, LOW → APPROVE.
func FromRisk(r analysis.RiskLevel) Verdict {
switch r {
case analysis.RiskCritical, analysis.RiskHigh:
return VerdictBlock
case analysis.RiskMedium:
return VerdictReview
default:
return VerdictApprove
}
}
// FromSeverity bridges a single finding's severity into a verdict:
// critical / error → BLOCK, warning → REVIEW, info → APPROVE.
func FromSeverity(s Severity) Verdict {
switch s {
case SevCritical, SevError:
return VerdictBlock
case SevWarning:
return VerdictReview
default:
return VerdictApprove
}
}