app

type App struct {
	Version version.Info
	Now     func() time.Time
	// ConnectDocker opens a verified connection to the Docker daemon.
	ConnectDocker func(context.Context) (*docker.Connection, error)
	// HostFS is the host root filesystem used by the host scan for
	// daemon.json and /proc. Nil disables those checks.
	HostFS fs.FS
	GOOS   string
}

type ScanOptions struct {
	// MinSeverity hides less severe findings from the report.
	MinSeverity findings.Severity
	// FailOn is the exit code threshold; nil disables it.
	FailOn *findings.Severity
	// Only and Exclude contain normalized rule IDs.
	Only    []string
	Exclude []string
}

type SelectionError struct {
	Message string
}