Function policiesTable

app/cli/cmd/workflow_workflow_run_describe.go:254–302

(evs []*action.PolicyEvaluation, mt table.Writer, debugMode bool)

}

func policiesTable(evs []*action.PolicyEvaluation, mt table.Writer, debugMode bool) {
	for _, ev := range evs {
		msg := ""

		switch {
		case ev.Skipped:
			switch {
			case len(ev.SkipReasons) == 1:
				msg = text.Colors{text.FgHiYellow}.Sprintf("skipped - %s", ev.SkipReasons[0])
			case debugMode:
				msg = text.Colors{text.FgHiYellow}.Sprintf("skipped - multiple reasons:\n  - %s",
					strings.Join(ev.SkipReasons, "\n  - "))
			default:
				msg = text.Colors{text.FgHiYellow}.Sprint("the policy was skipped in all execution paths")
			}
		case len(ev.Violations) == 0:
			msg = text.Colors{text.FgHiGreen}.Sprint("Ok")
		default:
			hasActive := false
			lines := make([]string, 0, len(ev.Violations))
			for _, v := range ev.Violations {
				color := text.FgHiRed
				if v.Suppress {
					color = text.FgHiYellow
				} else {
					hasActive = true
				}
				lines = append(lines, text.Colors{color}.Sprint(violationSummary(v)))
			}
			// When every finding is suppressed the gate passed; lead with
			// "Ok" so the row carries the same signal as the no-violations
			// case rather than reading like a failure.
			switch {
			case !hasActive:
				msg = text.Colors{text.FgHiGreen}.Sprint("Ok") + "\n  - " + strings.Join(lines, "\n  - ")
			case len(lines) == 1:
				msg = lines[0]
			default:
				msg = "\n  - " + strings.Join(lines, "\n  - ")
			}
		}

		name := ev.Name
		if ev.Gate {
			name = fmt.Sprintf("%s (gate)", ev.Name)
		}
		mt.AppendRow(table.Row{"", fmt.Sprintf("%s: %s", name, msg)})
	}
}

// violationSummary builds a single-line description of a violation using the
// structured finding when present (CVE id + severity + package + fix info,