refactor: adapter 구현중..

scripts/lib/secret-scan-evaluator.ts

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 
@@ -175,6 +176,7 @@ export async function evaluateSecretScan(input: Readonly<{
   const excluded = new Set(
     input.policy.excludedPaths.map((entry) => entry.replaceAll("\\", "/")),
   );
+  const scanInputs: Readonly<{ path: string; bytes: number; sha256: string }>[] = [];
   for (const scanFile of [...new Set(scanFiles)].sort()) {
     const normalized = scanFile.replaceAll("\\", "/");
     if (
@@ -186,8 +188,15 @@ export async function evaluateSecretScan(input: Readonly<{
     ) {
       continue;
     }
+    const content = await input.readText(scanFile);
+    const bytes = Buffer.from(content, "utf8");
+    scanInputs.push(Object.freeze({
+      path: normalized,
+      bytes: bytes.byteLength,
+      sha256: createHash("sha256").update(bytes).digest("hex"),
+    }));
     findings.push(
-      ...findSecretMatches(normalized, await input.readText(scanFile), {
+      ...findSecretMatches(normalized, content, {
         allowlist: input.policy.allowlist,
         now,
       }),
@@ -235,6 +244,8 @@ export async function evaluateSecretScan(input: Readonly<{
     findings: Object.freeze(findings),
     policyFailures: Object.freeze(policyFailures),
     scanFiles: Object.freeze([...scanFiles]),
+    scanInputs: Object.freeze(scanInputs),
+    scanInputSha256: supplyChainDigest(scanInputs),
     sarif,
   });
 }