mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-06 13:10:37 -04:00
033f0c84da
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com> Co-authored-by: Aditya Tripathi <aditya@climactic.co>
86 lines
3.6 KiB
PHP
86 lines
3.6 KiB
PHP
<?php
|
|
|
|
namespace App\Services\ImageScan;
|
|
|
|
use App\Enums\SecurityActionType;
|
|
|
|
/**
|
|
* One action that fixes relevant findings of a scanned image (spec 15.5).
|
|
*/
|
|
final readonly class SecurityAction
|
|
{
|
|
/**
|
|
* `parts`: an update_image that merges the images of several applications or databases of a service lists each
|
|
* image it updates (owner morph type and key, scanned image, candidate ref). A button for it must update every
|
|
* part. Empty for an action of one image, which uses `image` and `ref`.
|
|
*
|
|
* @param string $sentence The text of spec 15.5.
|
|
* @param ?string $target The tag (update_image, pull_latest), the new base image (change_base), or the package.
|
|
* @param ?string $copy Text for the copy button: `FROM {new}` or `{package} {fixed_in}`.
|
|
* @param list<string> $fixedIds The IDs of the findings it fixes.
|
|
* @param bool $button Coolify can do it with a button (update_image, pull_latest, rebuild). Callers still authorize.
|
|
* @param ?string $image The scanned image it belongs to.
|
|
* @param ?string $ref The candidate image to switch to (update_image, pull_latest).
|
|
* @param list<array{owner_type: string, owner_id: int|string, image: ?string, ref: ?string}> $parts See above.
|
|
*/
|
|
public function __construct(
|
|
public SecurityActionType $type,
|
|
public string $sentence,
|
|
public ?string $target,
|
|
public ?string $copy,
|
|
public array $fixedIds,
|
|
public bool $button,
|
|
public ?string $image,
|
|
public ?string $ref = null,
|
|
public array $parts = [],
|
|
) {}
|
|
|
|
/**
|
|
* @return array{type: string, sentence: string, target: ?string, copy: ?string, fixed_ids: list<string>, button: bool, image: ?string, ref: ?string, parts: list<array{owner_type: string, owner_id: int|string, image: ?string, ref: ?string}>}
|
|
*/
|
|
public function toArray(): array
|
|
{
|
|
return [
|
|
'type' => $this->type->value,
|
|
'sentence' => $this->sentence,
|
|
'target' => $this->target,
|
|
'copy' => $this->copy,
|
|
'fixed_ids' => $this->fixedIds,
|
|
'button' => $this->button,
|
|
'image' => $this->image,
|
|
'ref' => $this->ref,
|
|
'parts' => $this->parts,
|
|
];
|
|
}
|
|
|
|
/**
|
|
* Null for data that is not an action.
|
|
*
|
|
* @param array<string, mixed> $data
|
|
*/
|
|
public static function fromArray(array $data): ?self
|
|
{
|
|
$type = SecurityActionType::tryFrom((string) ($data['type'] ?? ''));
|
|
if ($type === null) {
|
|
return null;
|
|
}
|
|
|
|
return new self(
|
|
type: $type,
|
|
sentence: (string) ($data['sentence'] ?? ''),
|
|
target: isset($data['target']) ? (string) $data['target'] : null,
|
|
copy: isset($data['copy']) ? (string) $data['copy'] : null,
|
|
fixedIds: array_values(array_map('strval', (array) ($data['fixed_ids'] ?? []))),
|
|
button: (bool) ($data['button'] ?? false),
|
|
image: isset($data['image']) ? (string) $data['image'] : null,
|
|
ref: isset($data['ref']) ? (string) $data['ref'] : null,
|
|
parts: array_values(array_map(fn ($part): array => [
|
|
'owner_type' => (string) data_get($part, 'owner_type', ''),
|
|
'owner_id' => data_get($part, 'owner_id'),
|
|
'image' => is_string(data_get($part, 'image')) ? data_get($part, 'image') : null,
|
|
'ref' => is_string(data_get($part, 'ref')) ? data_get($part, 'ref') : null,
|
|
], array_filter((array) ($data['parts'] ?? []), 'is_array'))),
|
|
);
|
|
}
|
|
}
|