feat: Implement BerkeleyDB reader for RPM databases

- Added BerkeleyDbReader class to read and extract RPM header blobs from BerkeleyDB hash databases.
- Implemented methods to detect BerkeleyDB format and extract values, including handling of page sizes and magic numbers.
- Added tests for BerkeleyDbReader to ensure correct functionality and header extraction.

feat: Add Yarn PnP data tests

- Created YarnPnpDataTests to validate package resolution and data loading from Yarn PnP cache.
- Implemented tests for resolved keys, package presence, and loading from cache structure.

test: Add egg-info package fixtures for Python tests

- Created egg-info package fixtures for testing Python analyzers.
- Included PKG-INFO, entry_points.txt, and installed-files.txt for comprehensive coverage.

test: Enhance RPM database reader tests

- Added tests for RpmDatabaseReader to validate fallback to legacy packages when SQLite is missing.
- Implemented helper methods to create legacy package files and RPM headers for testing.

test: Implement dual signing tests

- Added DualSignTests to validate secondary signature addition when configured.
- Created stub implementations for crypto providers and key resolvers to facilitate testing.

chore: Update CI script for Playwright Chromium installation

- Modified ci-console-exports.sh to ensure deterministic Chromium binary installation for console exports tests.
- Added checks for Windows compatibility and environment variable setups for Playwright browsers.

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Dpkg/DpkgPackageAnalyzer.cs

@@ -10,6 +10,7 @@ using StellaOps.Scanner.Analyzers.OS;
 using StellaOps.Scanner.Analyzers.OS.Abstractions;
 using StellaOps.Scanner.Analyzers.OS.Analyzers;
 using StellaOps.Scanner.Analyzers.OS.Helpers;
+using StellaOps.Scanner.Core.Contracts;
 
 namespace StellaOps.Scanner.Analyzers.OS.Dpkg;
 
@@ -39,6 +40,8 @@ internal sealed class DpkgPackageAnalyzer : OsPackageAnalyzerBase
         using var stream = File.OpenRead(statusPath);
         var entries = _parser.Parse(stream, cancellationToken);
 
+        context.Metadata.TryGetValue(ScanMetadataKeys.CurrentLayerDigest, out var layerDigest);
+
         var infoDirectory = Path.Combine(context.RootPath, "var", "lib", "dpkg", "info");
         var records = new List<OSPackageRecord>();
 
@@ -83,7 +86,7 @@ internal sealed class DpkgPackageAnalyzer : OsPackageAnalyzerBase
             var dependencies = entry.Depends.Concat(entry.PreDepends).ToArray();
             var provides = entry.Provides.ToArray();
 
-            var fileEvidence = BuildFileEvidence(infoDirectory, entry, cancellationToken);
+            var fileEvidence = BuildFileEvidence(infoDirectory, entry, layerDigest, cancellationToken);
 
             var cveHints = CveHintExtractor.Extract(entry.Description, string.Join(' ', dependencies), string.Join(' ', provides));
 
@@ -125,7 +128,7 @@ internal sealed class DpkgPackageAnalyzer : OsPackageAnalyzerBase
         return parts.Length == 0 ? null : parts[0];
     }
 
-    private static IReadOnlyList<OSPackageFileEvidence> BuildFileEvidence(string infoDirectory, DpkgPackageEntry entry, CancellationToken cancellationToken)
+    private static IReadOnlyList<OSPackageFileEvidence> BuildFileEvidence(string infoDirectory, DpkgPackageEntry entry, string? layerDigest, CancellationToken cancellationToken)
     {
         if (!Directory.Exists(infoDirectory))
         {
@@ -137,7 +140,7 @@ internal sealed class DpkgPackageAnalyzer : OsPackageAnalyzerBase
         {
             if (!files.TryGetValue(path, out _))
             {
-                files[path] = new FileEvidenceBuilder(path);
+                files[path] = new FileEvidenceBuilder(path, layerDigest);
             }
         }
 
@@ -248,20 +251,23 @@ internal sealed class DpkgPackageAnalyzer : OsPackageAnalyzerBase
 
     private sealed class FileEvidenceBuilder
     {
-        public FileEvidenceBuilder(string path)
+        public FileEvidenceBuilder(string path, string? layerDigest)
         {
             Path = path;
+            LayerDigest = layerDigest;
         }
 
         public string Path { get; }
 
+        public string? LayerDigest { get; }
+
         public bool IsConfig { get; set; }
 
         public Dictionary<string, string> Digests { get; } = new(StringComparer.OrdinalIgnoreCase);
 
         public OSPackageFileEvidence ToEvidence()
         {
-            return new OSPackageFileEvidence(Path, isConfigFile: IsConfig, digests: Digests);
+            return new OSPackageFileEvidence(Path, layerDigest: LayerDigest, isConfigFile: IsConfig, digests: Digests);
         }
     }
 }