{# Secret Scanning program dashboard: findings funnel, severity donut,
   source breakdown, and a "Top findings" preview linking to the full
   register at /activities/secret-scanning/findings. #}

<span class="ds-overline" style="display:block;margin-top:var(--space-8)">Program dashboard</span>

<div class="stat-card-grid" style="margin-top:var(--space-4)">
  <div class="stat-card">
    <span class="stat-card__value">{{ secret_dash.total }}</span>
    <span class="stat-card__label">Secrets found</span>
  </div>
  <div class="stat-card" style="{% if secret_dash.looks_live_count %}border-top-color:var(--color-error){% endif %}">
    <span class="stat-card__value" style="{% if secret_dash.looks_live_count %}color:var(--color-error){% endif %}">{{ secret_dash.looks_live_count }}</span>
    <span class="stat-card__label">Looks live — rotate now</span>
  </div>
  <div class="stat-card">
    <span class="stat-card__value">{{ secret_dash.docs_count }}</span>
    <span class="stat-card__label">Found in documentation</span>
  </div>
  <div class="stat-card">
    <span class="stat-card__value">{{ secret_dash.history_count }}</span>
    <span class="stat-card__label">Version-control history only</span>
  </div>
</div>

<div style="display:grid;grid-template-columns:1fr 1fr;gap:var(--space-6);margin-top:var(--space-8)">
  <div class="card">
    <h4 class="card__title">Severity</h4>
    {% set severity_total = secret_dash.severity_counts.high + secret_dash.severity_counts.medium + secret_dash.severity_counts.low %}
    <div class="donut-row" style="margin-top:var(--space-4)">
      <div class="donut" style="--donut-gradient: {{ secret_severity_gradient }}">
        <div class="donut__hole">{{ severity_total }}</div>
      </div>
      <div class="donut-legend">
        <span class="donut-legend__item"><span class="donut-legend__dot" style="background-color:var(--color-error)"></span>High ({{ secret_dash.severity_counts.high }})</span>
        <span class="donut-legend__item"><span class="donut-legend__dot" style="background-color:var(--color-warning)"></span>Medium ({{ secret_dash.severity_counts.medium }})</span>
        <span class="donut-legend__item"><span class="donut-legend__dot" style="background-color:var(--color-teal-500)"></span>Low ({{ secret_dash.severity_counts.low }})</span>
      </div>
    </div>
  </div>

  <div class="card">
    <h4 class="card__title">By source</h4>
    <p class="card__body" style="margin-bottom:var(--space-4)">Where each secret was found.</p>
    {% for key, label in [("code", "Code"), ("config", "Config"), ("history", "Version-control history"), ("docs", "Documentation")] %}
    <div class="severity-bar">
      <span class="severity-bar__dot severity-bar__dot--{{ 'high' if key in ('code', 'config') else 'medium' }}"></span>
      <span class="severity-bar__label" style="width:10rem">{{ label }}</span>
      <div class="severity-bar__track"><div class="severity-bar__fill severity-bar__fill--low" style="width:{{ (secret_dash.source_counts[key] / secret_dash.total * 100) if secret_dash.total else 0 }}%"></div></div>
      <span class="severity-bar__count">{{ secret_dash.source_counts[key] }}</span>
    </div>
    {% endfor %}
  </div>
</div>

{% set top_findings = secret_dash.findings[:5] %}
<div style="display:flex;justify-content:space-between;align-items:flex-end;flex-wrap:wrap;gap:var(--space-4);margin-top:var(--space-10)">
  <div>
    <h2 style="margin:0">Top findings</h2>
    <p class="ds-body" style="color:var(--color-text-muted);margin-top:var(--space-1)">The highest-severity secrets found across all projects.</p>
  </div>
  <a class="btn btn--outline btn--sm" href="/activities/secret-scanning/findings">View all findings ({{ secret_dash.total }}) &rarr;</a>
</div>

{% if top_findings %}
<div class="table-wrap" style="margin-top:var(--space-4)">
  <table class="table">
    <thead>
      <tr>
        <th>Project</th><th>Severity</th><th>Secret type</th><th>Location</th><th>Source</th><th>Validity</th>
      </tr>
    </thead>
    <tbody>
      {% for f in top_findings %}
      <tr class="run-row" onclick="location.href='/activities/secret-scanning/findings/{{ f.key }}'">
        <td>{{ f.project_display_name }}</td>
        <td><span class="badge {{ f.severity | severity_badge }}">{{ f.severity }}</span></td>
        <td>{{ f.secret_type }}</td>
        <td><code>{{ f.location }}</code></td>
        <td>{{ f.source }}</td>
        <td>
          {% if f.validity.lower() == 'looks live' %}<span class="badge badge--error">{{ f.validity }}</span>
          {% else %}<span class="badge badge--neutral">{{ f.validity }}</span>{% endif %}
        </td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</div>
{% else %}
<div class="alert alert--info" style="margin-top:var(--space-4)"><div>No secrets found yet.</div></div>
{% endif %}

<div style="border-bottom:1px solid var(--color-border);margin-top:var(--space-8)"></div>