Function _add_cert_findings

recon_engine.py:722–747

(findings: List[VulnerabilityFinding], host: str, port: int, cert)

    matched_at: str = "",
) -> VulnerabilityFinding:
    return VulnerabilityFinding(
        finding_id=uuid.uuid4().hex,
        scanner=scanner,
        host=host,
        port=port,
        severity=severity,
        title=title,
        description=description,
        evidence=evidence,
        remediation=remediation,
        matched_at=matched_at,
    )


def _parse_sslyze_result(scan, host: str, port: int) -> tuple[List[VulnerabilityFinding], Dict[str, Any]]:
    findings: List[VulnerabilityFinding] = []
    artifacts: Dict[str, Any] = {"host": host, "port": port}

    try:
        attempts = scan.scan_result if hasattr(scan, "scan_result") else None
    except Exception:
        attempts = None
    if attempts is None:
        return findings, artifacts

    cert_attempt = getattr(attempts, "certificate_info", None)
    if cert_attempt and getattr(cert_attempt, "result", None):
        cert_result = cert_attempt.result
        deployments = getattr(cert_result, "certificate_deployments", []) or []