Function classifyBuild

internal/cmdutil/secheader.go:141–160

classifyBuild is the pure classification logic used by computeBuildKind. Callers supply concrete values so every branch is reachable from tests without touching debug.ReadBuildInfo or the extension registries. Priority order mirrors the design doc: 1. no build info → unknown 2. main module path not

(mainPath string, haveBuildInfo bool, credProviders []any, transportProvider, fileioProvider any)

//  3. any non-builtin provider (credential / transport / fileio) → extended
//  4. otherwise → official
func classifyBuild(mainPath string, haveBuildInfo bool, credProviders []any, transportProvider, fileioProvider any) string {
	if !haveBuildInfo {
		return BuildKindUnknown
	}
	if mainPath != "" && mainPath != officialModulePath {
		return BuildKindExtended
	}
	for _, p := range credProviders {
		if !isBuiltinProvider(p) {
			return BuildKindExtended
		}
	}
	if transportProvider != nil && !isBuiltinProvider(transportProvider) {
		return BuildKindExtended
	}
	if fileioProvider != nil && !isBuiltinProvider(fileioProvider) {
		return BuildKindExtended
	}
	return BuildKindOfficial
}

// isBuiltinProvider reports whether p is declared under the official module
// path. Third-party providers live under their own module and fail this check.