feat(query): expose severity on config insight search results

Add a Severity *string field to SelectedResource, populated only for
config insights. Severity is orthogonal to Health (healthy/unhealthy/
warning/unknown) and Status, so it gets its own field rather than
overloading either. Other resource kinds leave it nil, which is omitted
from the JSON response.

Author: adityathebe

query/resource_selector.go

@@ -78,6 +78,9 @@ type SelectedResource struct {
 	// Status is the resource's free-form operational status (e.g. "Running",
 	// "Pending"). Populated for configs and components.
 	Status string `json:"status,omitempty"`
+	// Severity is populated for resource kinds that carry a severity
+	// (e.g. config insights). nil for other kinds.
+	Severity *string `json:"severity,omitempty"`
 }
 
 func SearchResources(ctx context.Context, req SearchResourcesRequest) (*SearchResourcesResponse, error) {
@@ -197,11 +200,16 @@ func SearchResources(ctx context.Context, req SearchResourcesRequest) (*SearchRe
 			return err
 		} else {
 			for i := range items {
+				var severity *string
+				if s := string(items[i].Severity); s != "" {
+					severity = &s
+				}
 				output.ConfigAnalysis = append(output.ConfigAnalysis, SelectedResource{
-					ID:     items[i].ID.String(),
-					Name:   items[i].Analyzer,
-					Type:   string(items[i].AnalysisType),
-					Status: items[i].Status,
+					ID:       items[i].ID.String(),
+					Name:     items[i].Analyzer,
+					Type:     string(items[i].AnalysisType),
+					Status:   items[i].Status,
+					Severity: severity,
 				})
 			}
 		}

tests/query_resource_selector_test.go

@@ -791,6 +791,7 @@ var _ = ginkgo.Describe("Config Analysis Resource Selector", func() {
 		Expect(response.ConfigAnalysis[0].ID).To(Equal(dummy.LogisticsDBRDSAnalysis.ID.String()))
 		Expect(response.ConfigAnalysis[0].Name).To(Equal("rds-port-exposed"))
 		Expect(response.ConfigAnalysis[0].Type).To(Equal(string(models.AnalysisTypeSecurity)))
+		Expect(response.ConfigAnalysis[0].Severity).To(Equal(lo.ToPtr(string(models.SeverityCritical))))
 	})
 })