chore: pass processed files out of plugin

Author: thomasschafer

internal/mocks/uvclient.go

@@ -1,6 +1,8 @@
 package mocks
 
 import (
+	"path"
+
 	"github.com/rs/zerolog"
 
 	"github.com/snyk/cli-extension-dep-graph/internal/uv"
@@ -18,9 +20,12 @@ func (m *MockUVClient) ExportSBOM(inputDir string) (*scaplugin.Finding, error) {
 		return m.ExportSBOMFunc(inputDir)
 	}
 	return &scaplugin.Finding{
-		Sbom:           []byte(`{"mock":"sbom"}`),
-		TargetFile:     "",
-		FilesProcessed: []string{},
+		Sbom: []byte(`{"mock":"sbom"}`),
+		FilesProcessed: []string{
+			path.Join(inputDir, uv.RequirementsTxtFileName),
+			path.Join(inputDir, uv.PyprojectTomlFileName),
+		},
+		TargetFile: path.Join(inputDir, uv.UvLockFileName),
 	}, nil
 }
 

internal/uv/uv.go

@@ -8,7 +8,11 @@ import (
 	"github.com/rs/zerolog"
 )
 
-const UvLockFileName = "uv.lock"
+const (
+	UvLockFileName          = "uv.lock"
+	RequirementsTxtFileName = "requirements.txt"
+	PyprojectTomlFileName   = "pyproject.toml"
+)
 
 // This is copied from cli-extension-os-flows. We could export from here via GAF config and re-use if this duplication
 // becomes a problem, but this duplication is only temporary.

internal/uv/uvclient.go

@@ -53,9 +53,12 @@ func (c client) ExportSBOM(inputDir string) (*scaplugin.Finding, error) {
 	}
 
 	return &scaplugin.Finding{
-		Sbom:           output,
-		FilesProcessed: []string{},
-		TargetFile:     path.Join(inputDir, UvLockFileName),
+		Sbom: output,
+		FilesProcessed: []string{
+			path.Join(inputDir, RequirementsTxtFileName),
+			path.Join(inputDir, PyprojectTomlFileName),
+		},
+		TargetFile: path.Join(inputDir, UvLockFileName),
 	}, nil
 }