"""Compact, evidence-based presentation of the full assessment.""" import re # Name hints for server workloads, not a comprehensive application classifier. WORKLOAD = re.compile(r'(?:nginx|apache|httpd|iis|w3svc|sql|postgres|mariadb|mysql|redis|mongo|oracle|tomcat|haproxy|docker|containerd|podman|samba|smbd|nfs|bind|named|rabbitmq|kafka|jenkins|backup|reporting)', re.I) def summarize(data, assessment): server, inventory = data['server'], data['inventory'] os_name = str(server.get('operating_system') or 'Not collected') version = server.get('os_version') if not version: match = re.search(r'\b(?:20\d{2}|\d+(?:\.\d+)+)\b', os_name) version = match[0] if match else 'Not collected' version = str(version) important = [] for row in inventory.get('software', []): if WORKLOAD.search(row['name']) and not row['name'].lower().startswith('lib') and not row['name'].lower().endswith(('-dev', '-devel', '-doc')): important.append({'name': row['name'], 'version': row.get('version', 'Not collected'), 'evidence': 'Installed software name matches a server-workload hint; use unverified'}) names = {row['name'].lower().split(':')[0] for row in important} for row in inventory.get('services', []): if row.get('state') == 'Running' and WORKLOAD.search(row['name']) and row['name'].lower().removesuffix('.service') not in names: important.append({'name': row['name'], 'version': 'Not collected', 'evidence': 'Running service; application ownership requires review'}) jobs = [] for row in inventory.get('tasks', []): if row.get('enabled') or row.get('state') == 'Running': jobs.append({'name': row['name'], 'schedule': row.get('triggers', 'Schedule not collected'), 'status': row.get('state', 'Enabled schedule; execution unverified'), 'account': row.get('account', 'Not collected')}) return {'os_type': os_name, 'version': version, 'risk_score': assessment['score'], 'risk_level': assessment['level'], 'software': important, 'jobs': jobs, 'incomplete': sum(check['status'] != 'complete' for check in data['checks'].values())}