Function aggregateAllSectionsData

cmd/validate/vsa.go:843–900

aggregateAllSectionsData - Single pass aggregation, collects all data needed

(allResults []vsa.ComponentResult)

// aggregateAllSectionsData - Single pass aggregation, collects all data needed
func aggregateAllSectionsData(allResults []vsa.ComponentResult) AllSectionsData {
	data := AllSectionsData{
		TotalImages:      len(allResults),
		FallbackReasons:  make(map[string]bool),
		PolicyDiffCounts: make(map[string]PolicyDiffCounts),
		SignatureStatus:  "VERIFIED", // Default, will be overridden if any not verified
	}

	// Single iteration - collect everything at once
	for i, result := range allResults {
		shortDigest := shortenImageDigest(result.ImageRef)

		// Collect image status
		imgStatus := ImageStatus{
			Index:  i + 1,
			Digest: shortDigest,
		}

		// Process VSA result (always process if available, even if there's an error)
		if result.Result != nil {
			processVSAResult(result.Result, &imgStatus, &data, shortDigest)
		} else if result.Error != nil {
			// If there's an error but no Result, create a status from the error
			reason := extractReasonFromMessage(result.Error.Error())
			imgStatus.VSAStatus = fmt.Sprintf("FAILED(reason=%s)", reason)
			data.VSAFailed++
			data.FallbackReasons[reason] = true
			// When VSA retrieval fails, signature cannot be verified
			data.SignatureStatus = "NOT VERIFIED"
		}

		// Handle fallback
		if result.FallbackResult != nil {
			data.FallbackUsed = true
			data.FallbackCount++
			data.FallbackResults = append(data.FallbackResults, *result.FallbackResult)

			if result.FallbackResult.Component.Success {
				imgStatus.FallbackStatus = "PASSED"
				data.FallbackPassed++
			} else {
				imgStatus.FallbackStatus = "FAILED"
				data.FallbackFailed++
			}
		} else {
			data.FallbackNotUsed++
		}

		data.ImageStatuses = append(data.ImageStatuses, imgStatus)
	}

	// Determine overall result
	// Overall passes if: all VSA passed, OR fallback was used and at least one fallback passed
	data.OverallPassed = (data.VSAPassed == data.TotalImages) ||
		(data.FallbackUsed && data.FallbackPassed > 0)

	return data
}