secretsv1

type ArchiveContext struct {

	// ArchivePath is the path to the archive file.
	ArchivePath string `protobuf:"bytes,1,opt,name=archive_path,json=archivePath,proto3" json:"archive_path,omitempty"`
	// EntryPath is the path within the archive.
	EntryPath string `protobuf:"bytes,2,opt,name=entry_path,json=entryPath,proto3" json:"entry_path,omitempty"`
	// NestingDepth is how many archives deep this is (0 = top-level).
	NestingDepth int32 `protobuf:"varint,3,opt,name=nesting_depth,json=nestingDepth,proto3" json:"nesting_depth,omitempty"`
	// contains filtered or unexported fields
}

type Baseline struct {

	// Version of the baseline format.
	Version string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	// GeneratedAt is when this baseline was created.
	GeneratedAt string `protobuf:"bytes,2,opt,name=generated_at,json=generatedAt,proto3" json:"generated_at,omitempty"`
	// Entries are the baselined findings.
	Entries []*BaselineEntry `protobuf:"bytes,3,rep,name=entries,proto3" json:"entries,omitempty"`
	// contains filtered or unexported fields
}

type BaselineEntry struct {

	// Type of the secret.
	Type SecretType `protobuf:"varint,1,opt,name=type,proto3,enum=deputy.secrets.v1.SecretType" json:"type,omitempty"`
	// File where the secret was found.
	File string `protobuf:"bytes,2,opt,name=file,proto3" json:"file,omitempty"`
	// Line number.
	Line int32 `protobuf:"varint,3,opt,name=line,proto3" json:"line,omitempty"`
	// Hash is a content-based hash (avoids storing actual secret).
	Hash string `protobuf:"bytes,4,opt,name=hash,proto3" json:"hash,omitempty"`
	// Reason for baselining (e.g., "false_positive", "test_data", "rotated").
	Reason string `protobuf:"bytes,5,opt,name=reason,proto3" json:"reason,omitempty"`
	// AddedAt is when this entry was baselined.
	AddedAt string `protobuf:"bytes,6,opt,name=added_at,json=addedAt,proto3" json:"added_at,omitempty"`
	// contains filtered or unexported fields
}

type ContainerContext struct {

	// LayerIndex is the layer position (0 = oldest/base layer).
	LayerIndex int32 `protobuf:"varint,1,opt,name=layer_index,json=layerIndex,proto3" json:"layer_index,omitempty"`
	// LayerDigest is the layer content digest.
	LayerDigest string `protobuf:"bytes,2,opt,name=layer_digest,json=layerDigest,proto3" json:"layer_digest,omitempty"`
	// LayerCommand is the Dockerfile instruction that created this layer.
	LayerCommand string `protobuf:"bytes,3,opt,name=layer_command,json=layerCommand,proto3" json:"layer_command,omitempty"`
	// InBaseImage indicates whether this layer is from the base image (FROM).
	InBaseImage bool `protobuf:"varint,4,opt,name=in_base_image,json=inBaseImage,proto3" json:"in_base_image,omitempty"`
	// contains filtered or unexported fields
}

type DetectorInfo struct {

	// ID is a unique identifier for this detector.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Name is a human-readable name.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Description explains what the detector finds.
	Description string `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	// Types are the secret types this detector can find.
	Types []SecretType `protobuf:"varint,4,rep,packed,name=types,proto3,enum=deputy.secrets.v1.SecretType" json:"types,omitempty"`
	// Source indicates the detector's origin.
	Source DetectorSource `protobuf:"varint,5,opt,name=source,proto3,enum=deputy.secrets.v1.DetectorSource" json:"source,omitempty"`
	// Version of the detector (for plugins).
	Version string `protobuf:"bytes,6,opt,name=version,proto3" json:"version,omitempty"`
	// Enabled indicates if this detector is active.
	Enabled bool `protobuf:"varint,7,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

type DetectorSource int32

type Finding struct {

	// Type identifies what kind of secret was found.
	Type SecretType `protobuf:"varint,1,opt,name=type,proto3,enum=deputy.secrets.v1.SecretType" json:"type,omitempty"`
	// Description provides human-readable context.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// Location describes where the secret was found.
	Location *Location `protobuf:"bytes,3,opt,name=location,proto3" json:"location,omitempty"`
	// Redacted is a safe representation for display (e.g., "[REDACTED:github_token:ghp_...]").
	Redacted string `protobuf:"bytes,4,opt,name=redacted,proto3" json:"redacted,omitempty"`
	// Confidence indicates detection certainty (0.0-1.0).
	Confidence float32 `protobuf:"fixed32,5,opt,name=confidence,proto3" json:"confidence,omitempty"`
	// Verification status if the secret was validated.
	Verification *VerificationStatus `protobuf:"bytes,6,opt,name=verification,proto3" json:"verification,omitempty"`
	// Metadata contains additional context specific to the secret type or source.
	Metadata map[string]string `` /* 143-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GitContext struct {

	// CommitHash where the secret was introduced.
	CommitHash string `protobuf:"bytes,1,opt,name=commit_hash,json=commitHash,proto3" json:"commit_hash,omitempty"`
	// Author of the commit.
	Author string `protobuf:"bytes,2,opt,name=author,proto3" json:"author,omitempty"`
	// AuthorEmail of the commit author.
	AuthorEmail string `protobuf:"bytes,3,opt,name=author_email,json=authorEmail,proto3" json:"author_email,omitempty"`
	// CommitDate when the secret was introduced.
	CommitDate string `protobuf:"bytes,4,opt,name=commit_date,json=commitDate,proto3" json:"commit_date,omitempty"`
	// CommitMessage summary.
	CommitMessage string `protobuf:"bytes,5,opt,name=commit_message,json=commitMessage,proto3" json:"commit_message,omitempty"`
	// RemovedIn is the commit where the secret was removed (empty if still present).
	RemovedIn string `protobuf:"bytes,6,opt,name=removed_in,json=removedIn,proto3" json:"removed_in,omitempty"`
	// StillPresent indicates if the secret exists in HEAD.
	StillPresent bool `protobuf:"varint,7,opt,name=still_present,json=stillPresent,proto3" json:"still_present,omitempty"`
	// contains filtered or unexported fields
}

type ListDetectorsRequest struct {

	// IncludeDisabled includes detectors that are currently disabled.
	IncludeDisabled bool `protobuf:"varint,1,opt,name=include_disabled,json=includeDisabled,proto3" json:"include_disabled,omitempty"`
	// Sources filters to specific detector sources.
	// Maximum 10 sources to prevent abuse.
	Sources []DetectorSource `protobuf:"varint,2,rep,packed,name=sources,proto3,enum=deputy.secrets.v1.DetectorSource" json:"sources,omitempty"`
	// contains filtered or unexported fields
}

type ListDetectorsResponse struct {

	// Detectors are all matching detectors.
	Detectors []*DetectorInfo `protobuf:"bytes,1,rep,name=detectors,proto3" json:"detectors,omitempty"`
	// contains filtered or unexported fields
}

type Location struct {

	// File is the source file path (relative to scan root).
	File string `protobuf:"bytes,1,opt,name=file,proto3" json:"file,omitempty"`
	// Line number (1-indexed, 0 if unknown).
	Line int32 `protobuf:"varint,2,opt,name=line,proto3" json:"line,omitempty"`
	// Column where the secret starts (1-indexed, 0 if unknown).
	Column int32 `protobuf:"varint,3,opt,name=column,proto3" json:"column,omitempty"`
	// Source indicates where the secret was found (file, env_var, history, layer, etc.).
	Source SecretSource `protobuf:"varint,4,opt,name=source,proto3,enum=deputy.secrets.v1.SecretSource" json:"source,omitempty"`
	// ContainerContext is populated when scanning container images.
	ContainerContext *ContainerContext `protobuf:"bytes,5,opt,name=container_context,json=containerContext,proto3" json:"container_context,omitempty"`
	// GitContext is populated when scanning git history.
	GitContext *GitContext `protobuf:"bytes,6,opt,name=git_context,json=gitContext,proto3" json:"git_context,omitempty"`
	// ArchiveContext is populated when scanning archives.
	ArchiveContext *ArchiveContext `protobuf:"bytes,7,opt,name=archive_context,json=archiveContext,proto3" json:"archive_context,omitempty"`
	// contains filtered or unexported fields
}

type RegisterDetectorRequest struct {

	// Detector describes the detector to register.
	// Required field.
	Detector *DetectorInfo `protobuf:"bytes,1,opt,name=detector,proto3" json:"detector,omitempty"`
	// Pattern is the regex pattern for detection (required for pattern-based detectors).
	// Maximum 4096 characters to prevent ReDoS via complex patterns.
	Pattern string `protobuf:"bytes,2,opt,name=pattern,proto3" json:"pattern,omitempty"`
	// PluginPath is the path to the plugin binary (required for plugin-based detectors).
	// Maximum 1024 characters.
	PluginPath string `protobuf:"bytes,3,opt,name=plugin_path,json=pluginPath,proto3" json:"plugin_path,omitempty"`
	// contains filtered or unexported fields
}

type RegisterDetectorResponse struct {

	// Detector is the registered detector with assigned ID.
	Detector *DetectorInfo `protobuf:"bytes,1,opt,name=detector,proto3" json:"detector,omitempty"`
	// contains filtered or unexported fields
}

type ScanDiffRequest struct {

	// Target is the git repository to scan.
	// Maximum length prevents denial-of-service via excessively long strings.
	Target string `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// BaseRef is the base reference for comparison (branch, tag, commit).
	// Required field.
	BaseRef string `protobuf:"bytes,2,opt,name=base_ref,json=baseRef,proto3" json:"base_ref,omitempty"`
	// TargetRef is the target reference for comparison.
	// Required field.
	TargetRef string `protobuf:"bytes,3,opt,name=target_ref,json=targetRef,proto3" json:"target_ref,omitempty"`
	// Options configure scan behavior.
	Options *ScanOptions `protobuf:"bytes,4,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type ScanDiffResponse struct {

	// Target describes what was scanned.
	Target *v1.Target `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// GeneratedAt is when this report was generated.
	GeneratedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=generated_at,json=generatedAt,proto3" json:"generated_at,omitempty"`
	// BaseRef is the base reference that was compared.
	BaseRef string `protobuf:"bytes,3,opt,name=base_ref,json=baseRef,proto3" json:"base_ref,omitempty"`
	// TargetRef is the target reference that was compared.
	TargetRef string `protobuf:"bytes,4,opt,name=target_ref,json=targetRef,proto3" json:"target_ref,omitempty"`
	// AddedFindings are secrets introduced in target_ref.
	AddedFindings []*Finding `protobuf:"bytes,5,rep,name=added_findings,json=addedFindings,proto3" json:"added_findings,omitempty"`
	// RemovedFindings are secrets present in base_ref but not target_ref.
	RemovedFindings []*Finding `protobuf:"bytes,6,rep,name=removed_findings,json=removedFindings,proto3" json:"removed_findings,omitempty"`
	// Stats summarizes the scan results.
	Stats *Stats `protobuf:"bytes,7,opt,name=stats,proto3" json:"stats,omitempty"`
	// PolicyActions lists policy evaluation outcomes.
	PolicyActions []*v11.Action `protobuf:"bytes,8,rep,name=policy_actions,json=policyActions,proto3" json:"policy_actions,omitempty"`
	// Warnings contains non-fatal issues encountered during scanning.
	Warnings []string `protobuf:"bytes,9,rep,name=warnings,proto3" json:"warnings,omitempty"`
	// contains filtered or unexported fields
}

type ScanHistoryRequest struct {

	// Target is the git repository to scan.
	// Maximum length prevents denial-of-service via excessively long strings.
	Target string `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// Options configure scan behavior.
	Options *ScanOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// MaxCommits limits the number of commits to scan (0 = unlimited).
	// Maximum 100000 to prevent excessive scanning.
	MaxCommits int32 `protobuf:"varint,3,opt,name=max_commits,json=maxCommits,proto3" json:"max_commits,omitempty"`
	// Since is the start date for history scanning (RFC 3339 format).
	Since string `protobuf:"bytes,4,opt,name=since,proto3" json:"since,omitempty"`
	// Until is the end date for history scanning (RFC 3339 format).
	Until string `protobuf:"bytes,5,opt,name=until,proto3" json:"until,omitempty"`
	// Branch limits scanning to a specific branch.
	Branch string `protobuf:"bytes,6,opt,name=branch,proto3" json:"branch,omitempty"`
	// IncludeRemoved includes secrets that have been removed from HEAD.
	IncludeRemoved bool `protobuf:"varint,7,opt,name=include_removed,json=includeRemoved,proto3" json:"include_removed,omitempty"`
	// contains filtered or unexported fields
}

type ScanHistoryResponse struct {

	// Target describes what was scanned.
	Target *v1.Target `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// GeneratedAt is when this report was generated.
	GeneratedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=generated_at,json=generatedAt,proto3" json:"generated_at,omitempty"`
	// Findings are all detected secrets with git context.
	Findings []*Finding `protobuf:"bytes,3,rep,name=findings,proto3" json:"findings,omitempty"`
	// CommitsScanned is the number of commits analyzed.
	CommitsScanned int32 `protobuf:"varint,4,opt,name=commits_scanned,json=commitsScanned,proto3" json:"commits_scanned,omitempty"`
	// Stats summarizes the scan results.
	Stats *Stats `protobuf:"bytes,5,opt,name=stats,proto3" json:"stats,omitempty"`
	// PolicyActions lists policy evaluation outcomes.
	PolicyActions []*v11.Action `protobuf:"bytes,6,rep,name=policy_actions,json=policyActions,proto3" json:"policy_actions,omitempty"`
	// Warnings contains non-fatal issues encountered during scanning.
	Warnings []string `protobuf:"bytes,7,rep,name=warnings,proto3" json:"warnings,omitempty"`
	// contains filtered or unexported fields
}

type ScanOptions struct {

	// DetectorIds filters to specific detectors. Empty means all enabled detectors.
	// Maximum 100 detectors to prevent abuse.
	DetectorIds []string `protobuf:"bytes,1,rep,name=detector_ids,json=detectorIds,proto3" json:"detector_ids,omitempty"`
	// SecretTypes filters to specific secret types. Empty means all types.
	// Maximum 100 types to prevent abuse.
	SecretTypes []SecretType `` /* 136-byte string literal not displayed */
	// MinConfidence filters findings below this threshold (0.0-1.0).
	MinConfidence float32 `protobuf:"fixed32,3,opt,name=min_confidence,json=minConfidence,proto3" json:"min_confidence,omitempty"`
	// Verify enables automatic verification of detected secrets.
	Verify bool `protobuf:"varint,4,opt,name=verify,proto3" json:"verify,omitempty"`
	// IncludePatterns are glob patterns for files to include.
	// Maximum 100 patterns to prevent abuse.
	IncludePatterns []string `protobuf:"bytes,5,rep,name=include_patterns,json=includePatterns,proto3" json:"include_patterns,omitempty"`
	// ExcludePatterns are glob patterns for files to exclude.
	// Defaults include: node_modules, .git, vendor, __pycache__, etc.
	// Maximum 100 patterns to prevent abuse.
	ExcludePatterns []string `protobuf:"bytes,6,rep,name=exclude_patterns,json=excludePatterns,proto3" json:"exclude_patterns,omitempty"`
	// EntropyDetection enables high-entropy string detection.
	// Disabled by default to reduce false positives.
	EntropyDetection bool `protobuf:"varint,7,opt,name=entropy_detection,json=entropyDetection,proto3" json:"entropy_detection,omitempty"`
	// EntropyThreshold is the minimum Shannon entropy to flag (0.0-8.0).
	// Only used when entropy_detection is enabled. Default is 4.5.
	EntropyThreshold float32 `protobuf:"fixed32,8,opt,name=entropy_threshold,json=entropyThreshold,proto3" json:"entropy_threshold,omitempty"`
	// Deep enables deep scanning (container layer extraction, binary strings).
	Deep bool `protobuf:"varint,9,opt,name=deep,proto3" json:"deep,omitempty"`
	// BaselinePath is the path to a baseline file for filtering known secrets.
	// Maximum length prevents abuse.
	BaselinePath string `protobuf:"bytes,10,opt,name=baseline_path,json=baselinePath,proto3" json:"baseline_path,omitempty"`
	// PolicyPaths are paths to policy files to evaluate.
	// Maximum 20 policy paths to prevent abuse.
	PolicyPaths []string `protobuf:"bytes,11,rep,name=policy_paths,json=policyPaths,proto3" json:"policy_paths,omitempty"`
	// Platform specifies the target platform for container images (e.g., "linux/amd64").
	Platform string `protobuf:"bytes,12,opt,name=platform,proto3" json:"platform,omitempty"`
	// TargetHint provides disambiguation when the target string is ambiguous.
	TargetHint *TargetHint `protobuf:"bytes,13,opt,name=target_hint,json=targetHint,proto3" json:"target_hint,omitempty"`
	// contains filtered or unexported fields
}

type ScanPhase int32

type ScanProgress struct {

	// Phase indicates the current scan phase.
	Phase ScanPhase `protobuf:"varint,1,opt,name=phase,proto3,enum=deputy.secrets.v1.ScanPhase" json:"phase,omitempty"`
	// Message provides human-readable progress information.
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// Progress is the completion percentage (0-100) for the current phase.
	Progress int32 `protobuf:"varint,3,opt,name=progress,proto3" json:"progress,omitempty"`
	// FilesScanned is the running count of scanned files.
	FilesScanned int32 `protobuf:"varint,4,opt,name=files_scanned,json=filesScanned,proto3" json:"files_scanned,omitempty"`
	// SecretsFound is the running count of discovered secrets.
	SecretsFound int32 `protobuf:"varint,5,opt,name=secrets_found,json=secretsFound,proto3" json:"secrets_found,omitempty"`
	// CurrentFile is the file currently being scanned.
	CurrentFile string `protobuf:"bytes,6,opt,name=current_file,json=currentFile,proto3" json:"current_file,omitempty"`
	// Result is populated only in the final message when phase is SCAN_PHASE_COMPLETE.
	Result *ScanResponse `protobuf:"bytes,10,opt,name=result,proto3" json:"result,omitempty"`
	// Error is populated if the scan failed.
	Error string `protobuf:"bytes,11,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ScanRequest struct {

	// Target is the scan target (path, URL, image reference, archive, etc.).
	// When empty, defaults to current working directory.
	// Maximum length prevents denial-of-service via excessively long strings.
	Target string `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// Options configure scan behavior.
	Options *ScanOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type ScanResponse struct {

	// Target describes what was scanned.
	Target *v1.Target `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// GeneratedAt is when this report was generated.
	GeneratedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=generated_at,json=generatedAt,proto3" json:"generated_at,omitempty"`
	// Findings are all detected secrets.
	Findings []*Finding `protobuf:"bytes,3,rep,name=findings,proto3" json:"findings,omitempty"`
	// Stats summarizes the scan results.
	Stats *Stats `protobuf:"bytes,4,opt,name=stats,proto3" json:"stats,omitempty"`
	// PolicyActions lists policy evaluation outcomes.
	PolicyActions []*v11.Action `protobuf:"bytes,5,rep,name=policy_actions,json=policyActions,proto3" json:"policy_actions,omitempty"`
	// Warnings contains non-fatal issues encountered during scanning.
	Warnings []string `protobuf:"bytes,6,rep,name=warnings,proto3" json:"warnings,omitempty"`
	// contains filtered or unexported fields
}

type SecretSource int32

type SecretType int32

type Stats struct {

	// Total secrets found.
	Total int32 `protobuf:"varint,1,opt,name=total,proto3" json:"total,omitempty"`
	// CountByType breaks down findings by secret type.
	CountByType map[string]int32 `` /* 171-byte string literal not displayed */
	// HighConfidenceCount is findings with confidence >= 0.9.
	HighConfidenceCount int32 `protobuf:"varint,3,opt,name=high_confidence_count,json=highConfidenceCount,proto3" json:"high_confidence_count,omitempty"`
	// VerifiedCount is findings that were verified as valid/active.
	VerifiedCount int32 `protobuf:"varint,4,opt,name=verified_count,json=verifiedCount,proto3" json:"verified_count,omitempty"`
	// FilesScanned is the number of files analyzed.
	FilesScanned int32 `protobuf:"varint,5,opt,name=files_scanned,json=filesScanned,proto3" json:"files_scanned,omitempty"`
	// SkippedFiles is files that were skipped (binary, too large, etc.).
	SkippedFiles int32 `protobuf:"varint,6,opt,name=skipped_files,json=skippedFiles,proto3" json:"skipped_files,omitempty"`
	// contains filtered or unexported fields
}

type StreamScanRequest struct {

	// Target is the scan target.
	// Maximum length prevents denial-of-service via excessively long strings.
	Target string `protobuf:"bytes,1,opt,name=target,proto3" json:"target,omitempty"`
	// Options configure scan behavior.
	Options *ScanOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type TargetHint struct {

	// Kind explicitly specifies the target type.
	Kind v1.TargetKind `protobuf:"varint,1,opt,name=kind,proto3,enum=deputy.target.v1.TargetKind" json:"kind,omitempty"`
	// ImageTransport specifies how to fetch container images.
	// Values: "remote" (default), "daemon", "tarball", "oci-archive", "oci-layout".
	ImageTransport string `protobuf:"bytes,2,opt,name=image_transport,json=imageTransport,proto3" json:"image_transport,omitempty"`
	// contains filtered or unexported fields
}

type VerificationResult int32

type VerificationStatus struct {

	// Status indicates the verification result.
	Status VerificationResult `protobuf:"varint,1,opt,name=status,proto3,enum=deputy.secrets.v1.VerificationResult" json:"status,omitempty"`
	// Message provides additional context.
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// Identity is extracted from the verified token (e.g., username, service account).
	Identity string `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"`
	// Scopes are permissions associated with the token (if extractable).
	Scopes []string `protobuf:"bytes,4,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// ExpiresAt is when the credential expires (if determinable).
	ExpiresAt string `protobuf:"bytes,5,opt,name=expires_at,json=expiresAt,proto3" json:"expires_at,omitempty"`
	// VerifiedAt is when verification was performed.
	VerifiedAt string `protobuf:"bytes,6,opt,name=verified_at,json=verifiedAt,proto3" json:"verified_at,omitempty"`
	// contains filtered or unexported fields
}

type VerifyRequest struct {

	// Findings to verify. These should come from a previous scan.
	// Maximum 1000 findings per request to prevent abuse.
	Findings []*Finding `protobuf:"bytes,1,rep,name=findings,proto3" json:"findings,omitempty"`
	// RateLimit is max verification requests per second (0 = no limit).
	// Maximum 100 to prevent API abuse.
	RateLimit int32 `protobuf:"varint,2,opt,name=rate_limit,json=rateLimit,proto3" json:"rate_limit,omitempty"`
	// Timeout is max time per verification in seconds.
	// Maximum 60 seconds per verification.
	TimeoutSeconds int32 `protobuf:"varint,3,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type VerifyResponse struct {

	// Results are findings with updated verification status.
	Results []*Finding `protobuf:"bytes,1,rep,name=results,proto3" json:"results,omitempty"`
	// VerifiedCount is how many were successfully verified.
	VerifiedCount int32 `protobuf:"varint,2,opt,name=verified_count,json=verifiedCount,proto3" json:"verified_count,omitempty"`
	// FailedCount is how many verification attempts failed.
	FailedCount int32 `protobuf:"varint,3,opt,name=failed_count,json=failedCount,proto3" json:"failed_count,omitempty"`
	// SkippedCount is how many were skipped (unsupported type, rate limited, etc.).
	SkippedCount int32 `protobuf:"varint,4,opt,name=skipped_count,json=skippedCount,proto3" json:"skipped_count,omitempty"`
	// contains filtered or unexported fields
}