fix: derive runDuration from assessment timestamps and capture new SDK fields

privateer-sdk v1.24.0 removed `run-duration` in favor of `start`/`end`
timestamps; compute the duration locally so the existing column stays
populated. Adds the new optional `plan` and `confidence-level` fields
to the YAML types so they survive parsing into Redis.

Signed-off-by: Joana Maia <jmaia@contractor.linuxfoundation.org>

Author: joanagmaia

services/apps/security_best_practices_worker/src/activities/index.ts

@@ -132,6 +132,9 @@ export async function saveOSPSBaselineInsightsToDB(
 
     const controlEvaluation = await findSuiteControlEvaluation(qx, repo.repoUrl, controlId, suite.id)
     for (const assessment of evaluation['assessment-logs']) {
+      const runDuration = assessment.end
+        ? `${new Date(assessment.end).getTime() - new Date(assessment.start).getTime()}ms`
+        : ''
       await addControlEvaluationAssessment(qx, {
         applicability: assessment.applicability,
         description: assessment.description,
@@ -141,7 +144,7 @@ export async function saveOSPSBaselineInsightsToDB(
         insightsProjectSlug: repo.insightsProjectSlug,
         requirementId: assessment.requirement['entry-id'],
         result: assessment.result,
-        runDuration: '',
+        runDuration,
         steps: assessment.steps,
         stepsExecuted: assessment['steps-executed'] || 0,
         securityInsightsEvaluationId: controlEvaluation.id,

services/apps/security_best_practices_worker/src/types.ts

@@ -25,6 +25,7 @@ export interface ISecurityInsightsPrivateerResultControlEvaluations {
 
 export interface ISecurityInsightsPrivateerResultAssessment {
   requirement: { 'reference-id': string; 'entry-id': string }
+  plan?: { 'reference-id': string; 'entry-id': string }
   applicability: string[]
   description: string
   result: string
@@ -34,6 +35,7 @@ export interface ISecurityInsightsPrivateerResultAssessment {
   start: string
   end?: string
   recommendation?: string
+  'confidence-level'?: string
 }
 
 export interface IUpsertOSPSBaselineSecurityInsightsParams {