{% extends "base.html" %}
{% block title %}{{ finding.secret_type }} — secfoo{% endblock %}
{% block content %}
<a href="/activities/secret-scanning/findings" class="ds-caption">&larr; Back to all findings</a>

<div style="display:flex;align-items:center;gap:var(--space-3);flex-wrap:wrap;margin-top:var(--space-4)">
  <span class="badge {{ finding.severity | severity_badge }}">{{ finding.severity }}</span>
  {% if finding.validity.lower() == 'looks live' %}<span class="badge badge--error">{{ finding.validity }}</span>
  {% else %}<span class="badge badge--neutral">{{ finding.validity }}</span>{% endif %}
  <h1 style="margin:0">{{ finding.secret_type }}</h1>
</div>
<p class="ds-body" style="color:var(--color-text-muted)">
  {{ finding.project_display_name }} &middot; {{ finding.source }} &middot; <code>{{ finding.location }}</code>
</p>

{% if finding.validity.lower() == 'looks live' %}
<div class="alert alert--error" style="margin-top:var(--space-4)">
  <div>This credential looks live. Rotate it now, then address the location it was found in.</div>
</div>
{% endif %}

<div style="display:grid;grid-template-columns:2fr 1fr;gap:var(--space-6);margin-top:var(--space-6)">
  <div>
    {% if finding.evidence %}
    <div class="card">
      <h4 class="card__title">Evidence</h4>
      <p class="ds-body"><code>{{ finding.evidence }}</code></p>
      <p class="ds-caption" style="color:var(--color-text-muted)">Redacted — only a short prefix is stored, never the full secret value.</p>
    </div>
    {% endif %}

    {% if finding.exposure %}
    <div class="card" style="margin-top:var(--space-6)">
      <h4 class="card__title">Exposure</h4>
      <p class="ds-body">{{ finding.exposure }}</p>
    </div>
    {% endif %}
  </div>

  <div>
    <div class="card">
      <h4 class="card__title">Remediation</h4>
      {% if finding.remediation %}
      <p class="ds-body">{{ finding.remediation }}</p>
      {% else %}
      <div class="alert alert--warning"><div>Rotate this credential and confirm it's removed from the tracked location.</div></div>
      {% endif %}
    </div>
  </div>
</div>
{% endblock %}