Method shouldInclude

pkg/sql/security/scanner.go:1115–1130

shouldInclude checks if a finding meets the minimum severity threshold. Unknown severities are treated as highest priority (always included) for security.

(severity Severity)

// shouldInclude checks if a finding meets the minimum severity threshold.
// Unknown severities are treated as highest priority (always included) for security.
func (s *Scanner) shouldInclude(severity Severity) bool {
	findingSeverity, findingExists := severityOrder[severity]
	minSeverity, minExists := severityOrder[s.MinSeverity]

	// Unknown severities are always included (fail-safe: don't hide potential issues)
	if !findingExists {
		return true
	}

	// If minimum severity is unknown, default to showing all
	if !minExists {
		return true
	}

	return findingSeverity >= minSeverity
}

// updateCounts updates the count fields in the result.
func (s *Scanner) updateCounts(result *ScanResult) {