Function LabelRepositorySecurityAdvisory

pkg/ifc/ifc.go:278–283

LabelRepositorySecurityAdvisory returns the IFC label for repository- or organization-scoped security advisories. Integrity is untrusted (externally authored advisory prose). Confidentiality is public only when the repository is public AND every advisory in the result is in the "published" state.

(isPrivate bool, allPublished bool)

// prevents misclassifying an unpublished advisory from a public repo as
// public-readable. Private repositories are always private regardless of state.
func LabelRepositorySecurityAdvisory(isPrivate bool, allPublished bool) SecurityLabel {
	if isPrivate || !allPublished {
		return PrivateUntrusted()
	}
	return PublicUntrusted()
}

// LabelGist returns the IFC label for gist content.
//