Function isFindingEligibleForAutoAnalysis

services/security-sync/src/sync.ts:1125–1147

(params: {
  findingCreatedAt: string;
  findingStatus: string;
  severity: string | null;
  ownerAutoAnalysisEnabledAt: string | null;
  isAgentEnabled: boolean;
  autoAnalysisEnabled: boolean;
  autoAnalysisMinSeverity: AutoAnalysisMinSeverity;
  autoAnalysisIncludeExisting?: boolean;
})

  effectiveSeverity: securitySeveritySchema,
  findingCreatedAt: dbTimestampSchema,
  ownedByUserId: z.string().nullable(),
  ownedByOrganizationId: z.string().uuid().nullable(),
  source: z.string(),
  sourceId: z.string(),
  repoFullName: z.string(),
  title: z.string(),
  packageName: z.string(),
  packageEcosystem: z.string(),
  manifestPath: z.string().nullable(),
  patchedVersion: z.string().nullable(),
  ghsaId: z.string().nullable(),
  cveId: z.string().nullable(),
  cweIds: z.array(z.string()).nullable(),
  cvssScore: z.union([z.string(), z.number()]).nullable(),
  dependabotHtmlUrl: z.string().nullable(),
  firstDetectedAt: dbTimestampSchema,
  fixedAt: nullableDbTimestampSchema,
  slaDueAt: nullableDbTimestampSchema,
});

type UpsertSecurityFindingResult = z.infer<typeof upsertSecurityFindingResultSchema>;
const supersededSecurityFindingResultSchema = upsertSecurityFindingResultSchema.extend({
  canonicalFindingId: z.string().uuid(),
});
type SupersededSecurityFindingResult = z.infer<typeof supersededSecurityFindingResultSchema>;