Class GapFillFinding

contrib/multilingual/gap_fill.py:55–84

A single vulnerability finding from a gap-fill LLM call.

class GapFillFinding(BaseModel):
    """A single vulnerability finding from a gap-fill LLM call."""

    rule_id: str = Field(description="Identifier matching one of the gap-fill rule IDs")
    message: str = Field(description="Short description of the finding")
    severity: Literal["LOW", "MEDIUM", "HIGH", "CRITICAL"] = Field(
        description="Severity level"
    )
    confidence: float = Field(
        ge=0.0, le=1.0, default=0.7, description="Confidence score (0.0-1.0)"
    )
    explanation: str = Field(
        default="", description="Why this is dangerous (2-3 sentences)"
    )
    remediation: str = Field(
        default="", description="Actionable steps to fix the issue"
    )

    def to_finding(self, file: str) -> Finding:
        """Convert to a :class:`~skillspector.models.Finding` for the report."""
        return Finding(
            rule_id=self.rule_id,
            message=self.message,
            severity=self.severity,
            confidence=self.confidence,
            file=file,
            category="Security",
            explanation=self.explanation,
            remediation=self.remediation,
        )


class GapFillResult(BaseModel):