Function finding_result

plugins/codex-security/scripts/workbench_db.py:3275–3339

(
    connection: sqlite3.Connection,
    scan: sqlite3.Row,
    occurrence: sqlite3.Row,
)

def finding_result(
    connection: sqlite3.Connection,
    scan: sqlite3.Row,
    occurrence: sqlite3.Row,
) -> dict[str, Any]:
    details = bounded_finding_details(read_finding_details(occurrence["details_json"]))
    confidence = details.get("confidence")
    confidence = confidence if isinstance(confidence, dict) else {}
    severity = details.get("severity")
    severity = severity if isinstance(severity, dict) else {}
    locations = []
    try:
        target = require_scan_target_identity(scan)
    except SystemExit:
        target = None
    for row in connection.execute(
        """
        SELECT relative_path, start_line, end_line, role
        FROM finding_locations
        WHERE occurrence_id = ?
        ORDER BY CASE WHEN role = 'root_control' THEN 0 ELSE 1 END, sort_order
        LIMIT ?
        """,
        (occurrence["id"], FINDING_LOCATIONS_LIMIT),
    ):
        absolute_path = safe_source_path(target, row["relative_path"]) if target else None
        location = {
            "endLine": row["end_line"],
            "path": bounded_output_text(row["relative_path"], FINDING_LOCATION_PATH_BYTES),
            "role": (
                bounded_output_text(row["role"], FINDING_LOCATION_ROLE_BYTES)
                if row["role"] is not None
                else None
            ),
            "startLine": row["start_line"],
        }
        if absolute_path is not None:
            location["absolutePath"] = bounded_output_text(
                absolute_path, FINDING_ABSOLUTE_PATH_BYTES
            )
        locations.append(location)
    result = {
        **details,
        "confidence": {
            **confidence,
            "level": bounded_output_text(occurrence["confidence"], FINDING_LEVEL_BYTES),
        },
        "createdAt": occurrence["created_at"],
        "findingId": occurrence["finding_id"],
        "locations": locations,
        "occurrenceId": occurrence["id"],
        "remediationState": finding_remediation_result(connection, occurrence["id"]),
        "remediation": bounded_output_text(occurrence["remediation"], FINDING_REMEDIATION_BYTES),
        "severity": {
            **severity,
            "level": bounded_output_text(occurrence["severity"], FINDING_LEVEL_BYTES),
        },
        "summary": bounded_output_text(occurrence["summary"], FINDING_SUMMARY_BYTES),