refactor: JSON data column for findings, code snippets captured and displayed

guarddog_nexus/api/scans.py

@@ -1,7 +1,7 @@
 """REST API for scans."""
 
 from fastapi import APIRouter, Depends, Query
-from sqlalchemy import func, select
+from sqlalchemy import func, select, text
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy.orm import selectinload
 
@@ -63,9 +63,12 @@ async def scan_stats(session: AsyncSession = Depends(get_session)):
 
     top_rules = (
         await session.execute(
-            select(Finding.rule, func.count(Finding.id).label("cnt"))
-            .group_by(Finding.rule)
-            .order_by(func.count(Finding.id).desc())
+            select(
+                func.json_extract(Finding.data, "$.rule").label("rule"),
+                func.count(Finding.id).label("cnt"),
+            )
+            .group_by(text("rule"))
+            .order_by(text("cnt DESC"))
             .limit(10)
         )
     ).all()
@@ -103,14 +106,5 @@ async def get_scan(scan_id: int, session: AsyncSession = Depends(get_session)):
         "started_at": scan.started_at.isoformat() if scan.started_at else None,
         "finished_at": scan.finished_at.isoformat() if scan.finished_at else None,
         "error_message": scan.error_message,
-        "findings": [
-            {
-                "id": f.id,
-                "rule": f.rule,
-                "severity": f.severity,
-                "message": f.message,
-                "location": f.location,
-            }
-            for f in scan.findings
-        ],
+        "findings": [{"id": f.id, **f.data} for f in scan.findings],
     }