scaplugin

type Finding struct {
	Sbom                 Sbom               // The raw SBOM bytes
	Metadata             Metadata           // Information about the finding
	FileExclusions       []string           // Paths for files that other plugins should ignore
	NormalisedTargetFile string             // The target file name without any qualifiers, e.g. `uv.lock` (and not `dir/uv.lock`)
	WorkspacePackages    []WorkspacePackage // Packages that are part of a workspace
	Error                error              // Error that occurred while building the finding
}

type Metadata struct {
	PackageManager string
	Name           string
	Version        string
}

type Options struct {
	AllProjects bool
	Dev         bool
}

type Sbom []byte

type ScaPlugin interface {
	BuildFindingsFromDir(ctx context.Context, dir string, options *Options, logger *zerolog.Logger) ([]Finding, error)
}

type WorkspacePackage struct {
	Name    string
	Version string
	Path    string // Relative path to the workspace package directory
}