Project consumed version evidence through sequence appends

2026-10-17 04:42:23 +00:00
parent 87986a12d2
commit 4633a1b8a2
5 changed files with 116 additions and 25 deletions
--- a/internal/engine/secret.go
+++ b/internal/engine/secret.go
@@ -125,15 +125,8 @@ func classifySecretPathsWithEvidence(schema *schemaDescriptor, predicate func(Pa
 		if item == nil {
 			continue
 		}
-		candidate := item.resolvedPath
-		if !candidate.valid() {
-			candidate = item.path
-		}
-		resolved := addSecretEvidencePath(paths, item.destination, candidate)
-		addCandidate(resolved)
-		classifyPath(resolved)
-		for _, ancestor := range item.ancestors {
-			resolved := addSecretEvidencePath(paths, item.destination, ancestor.path)
+		for _, resolved := range item.sensitivityPaths() {
+			addSecretPath(paths, resolved.String())
 			addCandidate(resolved)
 			classifyPath(resolved)
 		}