stabilize tests

src/Scanner/StellaOps.Scanner.Worker/Diagnostics/ScannerWorkerMetrics.cs

@@ -1,8 +1,9 @@
+
+using StellaOps.Scanner.Surface.Secrets;
+using StellaOps.Scanner.Worker.Processing;
 using System;
 using System.Collections.Generic;
 using System.Diagnostics.Metrics;
-using StellaOps.Scanner.Surface.Secrets;
-using StellaOps.Scanner.Worker.Processing;
 
 namespace StellaOps.Scanner.Worker.Diagnostics;
 

src/Scanner/StellaOps.Scanner.Worker/Diagnostics/TelemetryExtensions.cs

@@ -1,6 +1,4 @@
-using System;
-using System.Collections.Generic;
-using System.Reflection;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Hosting;
 using OpenTelemetry.Metrics;
@@ -8,6 +6,9 @@ using OpenTelemetry.Resources;
 using OpenTelemetry.Trace;
 using StellaOps.Scanner.Storage.Services;
 using StellaOps.Scanner.Worker.Options;
+using System;
+using System.Collections.Generic;
+using System.Reflection;
 
 namespace StellaOps.Scanner.Worker.Diagnostics;
 

src/Scanner/StellaOps.Scanner.Worker/Hosting/ScannerWorkerHostedService.cs

@@ -1,13 +1,14 @@
-using System;
-using System.Collections.Generic;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Worker.Diagnostics;
 using StellaOps.Scanner.Worker.Options;
 using StellaOps.Scanner.Worker.Processing;
+using System;
+using System.Collections.Generic;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Scanner.Worker.Hosting;
 

src/Scanner/StellaOps.Scanner.Worker/Metrics/ScanCompletionMetricsIntegration.cs

@@ -5,6 +5,7 @@
 // Description: Integrates metrics collection into scan completion pipeline
 // -----------------------------------------------------------------------------
 
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Storage.Repositories;

src/Scanner/StellaOps.Scanner.Worker/Metrics/ScanMetricsCollector.cs

@@ -5,11 +5,12 @@
 // Description: Service for collecting and persisting scan metrics during execution
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Determinism;
 using StellaOps.Scanner.Storage.Models;
 using StellaOps.Scanner.Storage.Repositories;
+using System.Diagnostics;
 
 namespace StellaOps.Scanner.Worker.Metrics;
 

src/Scanner/StellaOps.Scanner.Worker/Options/ScannerStorageSurfaceSecretConfigurator.cs

@@ -1,3 +1,4 @@
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Storage;

src/Scanner/StellaOps.Scanner.Worker/Options/ScannerWorkerOptions.cs

@@ -1,10 +1,11 @@
+
+using StellaOps.Configuration;
+using StellaOps.Scanner.Core.Contracts;
 using System;
 using System.Collections.Concurrent;
 using System.Collections.Generic;
 using System.Collections.ObjectModel;
 using System.IO;
-using StellaOps.Configuration;
-using StellaOps.Scanner.Core.Contracts;
 
 namespace StellaOps.Scanner.Worker.Options;
 

src/Scanner/StellaOps.Scanner.Worker/Options/ScannerWorkerOptionsValidator.cs

@@ -1,8 +1,9 @@
+
+using Microsoft.Extensions.Options;
 using System;
 using System.Collections.Generic;
 using System.IO;
 using System.Linq;
-using Microsoft.Extensions.Options;
 
 namespace StellaOps.Scanner.Worker.Options;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/AiMlSecurity/AiMlSecurityStageExecutor.cs

@@ -1,5 +1,4 @@
-using System;
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Concelier.SbomIntegration.Models;
@@ -8,6 +7,8 @@ using StellaOps.Scanner.AiMlSecurity;
 using StellaOps.Scanner.AiMlSecurity.Policy;
 using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Worker.Options;
+using System;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing.AiMlSecurity;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/BinaryFindingMapper.cs

@@ -4,13 +4,14 @@
 // Task: SCANINT-08 - Create BinaryFindingMapper to convert matches to findings
 // -----------------------------------------------------------------------------
 
-using System.Collections.Immutable;
-using System.Security.Cryptography;
-using System.Text;
+
+using FixStatusResult = StellaOps.BinaryIndex.Core.Services.FixStatusResult;
 using Microsoft.Extensions.Logging;
 using StellaOps.BinaryIndex.Core.Models;
 using StellaOps.BinaryIndex.Core.Services;
-using FixStatusResult = StellaOps.BinaryIndex.Core.Services.FixStatusResult;
+using System.Collections.Immutable;
+using System.Security.Cryptography;
+using System.Text;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/BinaryLookupStageExecutor.cs

@@ -4,12 +4,13 @@
 // Task: SCANINT-02 - Create IBinaryLookupStep in scan pipeline
 // -----------------------------------------------------------------------------
 
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.BinaryIndex.Core.Models;
 using StellaOps.BinaryIndex.Core.Services;
 using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Worker.Extensions;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/BinaryVulnerabilityAnalyzer.cs

@@ -2,10 +2,11 @@
 // Sprint: SPRINT_6000_0004_0001 - Scanner Worker Integration
 // Task: T3 - Create Scanner.Worker Integration Point
 
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.BinaryIndex.Core.Models;
 using StellaOps.BinaryIndex.Core.Services;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/BuildProvenance/BuildProvenanceStageExecutor.cs

@@ -1,4 +1,4 @@
-using System;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Concelier.SbomIntegration.Models;
@@ -7,6 +7,7 @@ using StellaOps.Scanner.BuildProvenance.Analyzers;
 using StellaOps.Scanner.BuildProvenance.Policy;
 using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Worker.Options;
+using System;
 
 namespace StellaOps.Scanner.Worker.Processing.BuildProvenance;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/CompositeScanAnalyzerDispatcher.cs

@@ -1,14 +1,8 @@
-using System;
-using System.Collections.Generic;
-using System.Collections.Immutable;
-using System.Collections.ObjectModel;
-using System.Linq;
-using System.IO;
-using System.Text;
-using System.Security.Cryptography;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
+using StellaOps.Cryptography;
 using StellaOps.Scanner.Analyzers.Lang;
 using StellaOps.Scanner.Analyzers.Lang.Internal;
 using StellaOps.Scanner.Analyzers.Lang.Plugin;
@@ -21,10 +15,17 @@ using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.FS;
 using StellaOps.Scanner.Surface.Validation;
-using StellaOps.Scanner.Worker.Options;
-using StellaOps.Scanner.Worker.Extensions;
 using StellaOps.Scanner.Worker.Diagnostics;
-using StellaOps.Cryptography;
+using StellaOps.Scanner.Worker.Extensions;
+using StellaOps.Scanner.Worker.Options;
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Collections.ObjectModel;
+using System.IO;
+using System.Linq;
+using System.Security.Cryptography;
+using System.Text;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/CryptoAnalysis/CryptoAnalysisStageExecutor.cs

@@ -1,5 +1,4 @@
-using System;
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Concelier.SbomIntegration.Models;
@@ -8,6 +7,8 @@ using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.CryptoAnalysis;
 using StellaOps.Scanner.CryptoAnalysis.Policy;
 using StellaOps.Scanner.Worker.Options;
+using System;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing.CryptoAnalysis;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/DeltaSigAnalyzer.cs

@@ -2,12 +2,13 @@
 // Sprint: SPRINT_20260102_001_BE - Binary Delta Signatures
 // Task: DS-040 - Scanner integration (match service)
 
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.BinaryIndex.Core.Services;
 using StellaOps.BinaryIndex.DeltaSig;
 using StellaOps.BinaryIndex.Disassembly;
 using StellaOps.BinaryIndex.Normalization;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/DeterministicRandomService.cs

@@ -1,5 +1,6 @@
-using System;
+
 using StellaOps.Scanner.Worker.Determinism;
+using System;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Entropy/EntropyStageExecutor.cs

@@ -1,12 +1,13 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Core.Entropy;
 using System;
 using System.Collections.Generic;
 using System.IO;
 using System.Linq;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.Core.Entropy;
 
 namespace StellaOps.Scanner.Worker.Processing.Entropy;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/EntryTraceExecutionService.cs

@@ -1,3 +1,17 @@
+
+using IOPath = System.IO.Path;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Cryptography;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.EntryTrace;
+using StellaOps.Scanner.EntryTrace.FileSystem;
+using StellaOps.Scanner.EntryTrace.Runtime;
+using StellaOps.Scanner.Surface.Env;
+using StellaOps.Scanner.Surface.FS;
+using StellaOps.Scanner.Surface.Secrets;
+using StellaOps.Scanner.Surface.Validation;
+using StellaOps.Scanner.Worker.Options;
 using System;
 using System.Collections.Generic;
 using System.Collections.Immutable;
@@ -8,19 +22,6 @@ using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.EntryTrace;
-using StellaOps.Scanner.EntryTrace.FileSystem;
-using StellaOps.Scanner.EntryTrace.Runtime;
-using StellaOps.Scanner.Surface.Env;
-using StellaOps.Scanner.Surface.FS;
-using StellaOps.Scanner.Surface.Secrets;
-using StellaOps.Scanner.Surface.Validation;
-using StellaOps.Scanner.Worker.Options;
-using IOPath = System.IO.Path;
-using StellaOps.Cryptography;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/EpssEnrichmentJob.cs

@@ -5,15 +5,16 @@
 // Description: Background job that enriches vulnerability instances with current EPSS scores.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
-using System.Diagnostics.Metrics;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Core.Epss;
-using StellaOps.Scanner.Worker.Diagnostics;
 using StellaOps.Scanner.Storage.Epss;
 using StellaOps.Scanner.Storage.Repositories;
+using StellaOps.Scanner.Worker.Diagnostics;
+using System.Diagnostics;
+using System.Diagnostics.Metrics;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/EpssIngestJob.cs

@@ -5,15 +5,16 @@
 // Description: Background job that ingests EPSS data from online or bundle sources.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
-using System.Runtime.CompilerServices;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Storage.Epss;
 using StellaOps.Scanner.Storage.Repositories;
+using System.Diagnostics;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/EpssSignalJob.cs

@@ -5,9 +5,7 @@
 // Description: Background job that generates tenant-scoped EPSS signals.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
-using System.Diagnostics.Metrics;
-using System.Text.Json;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
@@ -15,6 +13,9 @@ using StellaOps.Scanner.Core.Epss;
 using StellaOps.Scanner.Storage.Epss;
 using StellaOps.Scanner.Storage.Repositories;
 using StellaOps.Scanner.Worker.Diagnostics;
+using System.Diagnostics;
+using System.Diagnostics.Metrics;
+using System.Text.Json;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/LeaseHeartbeatService.cs

@@ -1,10 +1,11 @@
-using System;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Worker.Determinism;
 using StellaOps.Scanner.Worker.Options;
+using System;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/NativeAnalyzerExecutor.cs

@@ -6,7 +6,7 @@
 // Note: NUC-004 (unknown classification) deferred - requires project reference.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Analyzers.Native;
@@ -14,6 +14,7 @@ using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Emit.Native;
 using StellaOps.Scanner.Worker.Diagnostics;
 using StellaOps.Scanner.Worker.Options;
+using System.Diagnostics;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/NativeBinaryDiscovery.cs

@@ -5,6 +5,7 @@
 // Description: Discovers native binaries in container filesystem layers.
 // -----------------------------------------------------------------------------
 
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Worker.Options;

src/Scanner/StellaOps.Scanner.Worker/Processing/NullScanJobSource.cs

@@ -1,6 +1,7 @@
+
+using Microsoft.Extensions.Logging;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/PoE/PoEGenerationStageExecutor.cs

@@ -1,16 +1,17 @@
 // Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
+
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Attestor;
+using StellaOps.Scanner.Core.Configuration;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Worker.Orchestration;
 using System;
 using System.Collections.Generic;
 using System.Linq;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Scanner.Core.Configuration;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Attestor;
-using StellaOps.Scanner.Worker.Orchestration;
 
 namespace StellaOps.Scanner.Worker.Processing.PoE;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/PollDelayStrategy.cs

@@ -1,6 +1,7 @@
-using System;
+
 
 using StellaOps.Scanner.Worker.Options;
+using System;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Reachability/ReachabilityBuildStageExecutor.cs

@@ -1,12 +1,13 @@
+
+using Microsoft.Extensions.Logging;
+using ScanAnalysisKeys = StellaOps.Scanner.Core.Contracts.ScanAnalysisKeys;
+using StellaOps.Scanner.EntryTrace;
+using StellaOps.Scanner.Reachability;
 using System;
 using System.Collections.Generic;
 using System.Linq;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.EntryTrace;
-using StellaOps.Scanner.Reachability;
-using ScanAnalysisKeys = StellaOps.Scanner.Core.Contracts.ScanAnalysisKeys;
 
 namespace StellaOps.Scanner.Worker.Processing.Reachability;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Reachability/ReachabilityEvidenceStageExecutor.cs

@@ -5,11 +5,12 @@
 // Description: Scan stage executor that generates reachability evidence for CVEs.
 // -----------------------------------------------------------------------------
 
+
+using CoreScanAnalysisKeys = StellaOps.Scanner.Core.Contracts.ScanAnalysisKeys;
 using Microsoft.Extensions.Logging;
 using StellaOps.Scanner.Reachability.Jobs;
 using StellaOps.Scanner.Reachability.Services;
 using StellaOps.Scanner.Reachability.Vex;
-using CoreScanAnalysisKeys = StellaOps.Scanner.Core.Contracts.ScanAnalysisKeys;
 
 namespace StellaOps.Scanner.Worker.Processing.Reachability;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Reachability/ReachabilityPublishStageExecutor.cs

@@ -1,9 +1,10 @@
+
+using Microsoft.Extensions.Logging;
+using ScanAnalysisKeys = StellaOps.Scanner.Core.Contracts.ScanAnalysisKeys;
+using StellaOps.Scanner.Reachability;
 using System;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Reachability;
-using ScanAnalysisKeys = StellaOps.Scanner.Core.Contracts.ScanAnalysisKeys;
 
 namespace StellaOps.Scanner.Worker.Processing.Reachability;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Reachability/SbomReachabilityStageExecutor.cs

@@ -1,4 +1,4 @@
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
@@ -13,6 +13,7 @@ using StellaOps.Scanner.Reachability;
 using StellaOps.Scanner.Reachability.Dependencies;
 using StellaOps.Scanner.Reachability.Dependencies.Reporting;
 using StellaOps.Scanner.Worker.Options;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing.Reachability;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/RegistrySecretStageExecutor.cs

@@ -1,12 +1,13 @@
-using System;
-using System.Collections.Generic;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.Secrets;
 using StellaOps.Scanner.Worker.Diagnostics;
+using System;
+using System.Collections.Generic;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Replay/ReplayBundleFetcher.cs

@@ -1,12 +1,13 @@
-using System;
-using System.IO;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Cryptography;
 using StellaOps.Replay.Core;
 using StellaOps.Scanner.Storage;
 using StellaOps.Scanner.Storage.ObjectStore;
+using System;
+using System.IO;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Scanner.Worker.Processing.Replay;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Replay/ReplaySealedBundleStageExecutor.cs

@@ -1,8 +1,9 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Core.Contracts;
 using System;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Core.Contracts;
 
 namespace StellaOps.Scanner.Worker.Processing.Replay;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/ScanJobContext.cs

@@ -1,6 +1,7 @@
+
+using StellaOps.Scanner.Core.Contracts;
 using System;
 using System.Threading;
-using StellaOps.Scanner.Core.Contracts;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/ScanJobProcessor.cs

@@ -1,10 +1,11 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Reachability;
 using System;
 using System.Collections.Generic;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.Reachability;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/ScanProgressReporter.cs

@@ -1,9 +1,10 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Worker.Diagnostics;
 using System;
 using System.Diagnostics;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Worker.Diagnostics;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Secrets/SecretsAnalyzerStageExecutor.cs

@@ -1,3 +1,10 @@
+
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Scanner.Analyzers.Secrets;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Worker.Diagnostics;
+using StellaOps.Scanner.Worker.Options;
 using System;
 using System.Collections.Generic;
 using System.Collections.Immutable;
@@ -5,12 +12,6 @@ using System.IO;
 using System.Linq;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Scanner.Analyzers.Secrets;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.Worker.Diagnostics;
-using StellaOps.Scanner.Worker.Options;
 
 namespace StellaOps.Scanner.Worker.Processing.Secrets;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/ServiceSecurity/ServiceSecurityStageExecutor.cs

@@ -1,4 +1,4 @@
-using System;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Concelier.SbomIntegration.Models;
@@ -7,6 +7,7 @@ using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.ServiceSecurity;
 using StellaOps.Scanner.ServiceSecurity.Policy;
 using StellaOps.Scanner.Worker.Options;
+using System;
 
 namespace StellaOps.Scanner.Worker.Processing.ServiceSecurity;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Surface/BunPackageInventoryBuilder.cs

@@ -1,8 +1,9 @@
+
+using StellaOps.Scanner.Analyzers.Lang;
+using StellaOps.Scanner.Core.Contracts;
 using System;
 using System.Collections.Generic;
 using System.Linq;
-using StellaOps.Scanner.Analyzers.Lang;
-using StellaOps.Scanner.Core.Contracts;
 
 namespace StellaOps.Scanner.Worker.Processing.Surface;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Surface/HmacDsseEnvelopeSigner.cs

@@ -1,10 +1,4 @@
-using System;
-using System.Buffers.Text;
-using System.IO;
-using System.Security.Cryptography;
-using System.Text;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Attestation;
@@ -12,6 +6,13 @@ using StellaOps.Cryptography;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.Secrets;
 using StellaOps.Scanner.Worker.Options;
+using System;
+using System.Buffers.Text;
+using System.IO;
+using System.Security.Cryptography;
+using System.Text;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Scanner.Worker.Processing.Surface;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Surface/IDsseEnvelopeSigner.cs

@@ -1,10 +1,11 @@
+
+using StellaOps.Canonical.Json;
 using System.Text;
 using System.Text.Encodings.Web;
 using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Threading;
 using System.Threading.Tasks;
-using StellaOps.Canonical.Json;
 
 namespace StellaOps.Scanner.Worker.Processing.Surface;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Surface/RubyPackageInventoryBuilder.cs

@@ -1,8 +1,9 @@
+
+using StellaOps.Scanner.Analyzers.Lang;
+using StellaOps.Scanner.Core.Contracts;
 using System;
 using System.Collections.Generic;
 using System.Linq;
-using StellaOps.Scanner.Analyzers.Lang;
-using StellaOps.Scanner.Core.Contracts;
 
 namespace StellaOps.Scanner.Worker.Processing.Surface;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Surface/SurfaceManifestPublisher.cs

@@ -1,20 +1,21 @@
-using System.Collections.Generic;
-using System.Collections.Immutable;
-using System.IO;
-using System.Text;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
+using StellaOps.Cryptography;
 using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.Surface.FS;
 using StellaOps.Scanner.Storage;
 using StellaOps.Scanner.Storage.Catalog;
 using StellaOps.Scanner.Storage.ObjectStore;
 using StellaOps.Scanner.Storage.Repositories;
 using StellaOps.Scanner.Storage.Services;
 using StellaOps.Scanner.Surface.Env;
-using StellaOps.Cryptography;
+using StellaOps.Scanner.Surface.FS;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.IO;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Scanner.Worker.Processing.Surface;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/Surface/SurfaceManifestStageExecutor.cs

@@ -1,3 +1,22 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Canonical.Json;
+using StellaOps.Cryptography;
+using StellaOps.Scanner.AiMlSecurity.Models;
+using StellaOps.Scanner.Analyzers.Lang;
+using StellaOps.Scanner.BuildProvenance.Models;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Core.Entropy;
+using StellaOps.Scanner.CryptoAnalysis.Models;
+using StellaOps.Scanner.EntryTrace;
+using StellaOps.Scanner.EntryTrace.Serialization;
+using StellaOps.Scanner.Reachability.Dependencies.Reporting;
+using StellaOps.Scanner.Sarif.Models;
+using StellaOps.Scanner.ServiceSecurity.Models;
+using StellaOps.Scanner.Storage.Catalog;
+using StellaOps.Scanner.Surface.Env;
+using StellaOps.Scanner.Surface.FS;
+using StellaOps.Scanner.Worker.Diagnostics;
 using System.Collections.Generic;
 using System.Collections.Immutable;
 using System.Collections.ObjectModel;
@@ -8,24 +27,6 @@ using System.Text;
 using System.Text.Encodings.Web;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.Logging;
-using StellaOps.Canonical.Json;
-using StellaOps.Scanner.AiMlSecurity.Models;
-using StellaOps.Scanner.CryptoAnalysis.Models;
-using StellaOps.Scanner.BuildProvenance.Models;
-using StellaOps.Scanner.Analyzers.Lang;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.Core.Entropy;
-using StellaOps.Scanner.EntryTrace;
-using StellaOps.Scanner.EntryTrace.Serialization;
-using StellaOps.Scanner.Reachability.Dependencies.Reporting;
-using StellaOps.Scanner.Sarif.Models;
-using StellaOps.Scanner.ServiceSecurity.Models;
-using StellaOps.Scanner.Surface.Env;
-using StellaOps.Scanner.Surface.FS;
-using StellaOps.Scanner.Storage.Catalog;
-using StellaOps.Scanner.Worker.Diagnostics;
-using StellaOps.Cryptography;
 
 namespace StellaOps.Scanner.Worker.Processing.Surface;
 

src/Scanner/StellaOps.Scanner.Worker/Processing/VexGateStageExecutor.cs

@@ -5,13 +5,14 @@
 // Description: Scan stage executor that applies VEX gate filtering to findings.
 // -----------------------------------------------------------------------------
 
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Attestor;
 using StellaOps.Scanner.Core.Contracts;
 using StellaOps.Scanner.Gate;
 using StellaOps.Scanner.Worker.Metrics;
+using System.Collections.Immutable;
 
 namespace StellaOps.Scanner.Worker.Processing;
 

src/Scanner/StellaOps.Scanner.Worker/Program.cs

@@ -1,57 +1,58 @@
-using System.Diagnostics;
-using System.IO;
+
+using GateDetectors = StellaOps.Scanner.Reachability.Gates.Detectors;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
+using Reachability = StellaOps.Scanner.Worker.Processing.Reachability;
+using ReachabilityEvidenceStageExecutor = StellaOps.Scanner.Worker.Processing.Reachability.ReachabilityEvidenceStageExecutor;
 using StellaOps.Auth.Client;
+using StellaOps.BinaryIndex.ML;
 using StellaOps.Concelier.SbomIntegration;
 using StellaOps.Concelier.SbomIntegration.Parsing;
 using StellaOps.Configuration;
+using StellaOps.Scanner.AiMlSecurity;
+using StellaOps.Scanner.Analyzers.Lang.Plugin;
+using StellaOps.Scanner.Analyzers.Native;
+using StellaOps.Scanner.Analyzers.Native.Index;
+using StellaOps.Scanner.Analyzers.OS.Plugin;
+using StellaOps.Scanner.Analyzers.Secrets;
+using StellaOps.Scanner.BuildProvenance;
 using StellaOps.Scanner.Cache;
+using StellaOps.Scanner.Core.Contracts;
+using StellaOps.Scanner.Core.Security;
+using StellaOps.Scanner.CryptoAnalysis;
+using StellaOps.Scanner.Emit.Native;
+using StellaOps.Scanner.EntryTrace;
 using StellaOps.Scanner.Reachability;
 using StellaOps.Scanner.Reachability.Dependencies;
 using StellaOps.Scanner.Reachability.Dependencies.Reporting;
 using StellaOps.Scanner.Reachability.Gates;
-using StellaOps.Scanner.Analyzers.OS.Plugin;
-using StellaOps.Scanner.Analyzers.Lang.Plugin;
-using StellaOps.Scanner.Analyzers.Native;
-using StellaOps.Scanner.Analyzers.Native.Index;
-using StellaOps.Scanner.EntryTrace;
-using StellaOps.Scanner.Core.Contracts;
-using StellaOps.Scanner.Core.Security;
-using StellaOps.Scanner.Emit.Native;
+using StellaOps.Scanner.Sarif;
+using StellaOps.Scanner.ServiceSecurity;
+using StellaOps.Scanner.Storage;
+using StellaOps.Scanner.Storage.Extensions;
+using StellaOps.Scanner.Storage.Services;
 using StellaOps.Scanner.Surface.Env;
 using StellaOps.Scanner.Surface.FS;
 using StellaOps.Scanner.Surface.Secrets;
 using StellaOps.Scanner.Surface.Validation;
-using StellaOps.Scanner.CryptoAnalysis;
-using StellaOps.Scanner.ServiceSecurity;
+using StellaOps.Scanner.Worker.Determinism;
 using StellaOps.Scanner.Worker.Diagnostics;
+using StellaOps.Scanner.Worker.Extensions;
 using StellaOps.Scanner.Worker.Hosting;
 using StellaOps.Scanner.Worker.Options;
 using StellaOps.Scanner.Worker.Processing;
 using StellaOps.Scanner.Worker.Processing.AiMlSecurity;
 using StellaOps.Scanner.Worker.Processing.BuildProvenance;
+using StellaOps.Scanner.Worker.Processing.CryptoAnalysis;
 using StellaOps.Scanner.Worker.Processing.Entropy;
 using StellaOps.Scanner.Worker.Processing.Secrets;
 using StellaOps.Scanner.Worker.Processing.ServiceSecurity;
-using StellaOps.Scanner.Worker.Processing.CryptoAnalysis;
-using StellaOps.Scanner.Worker.Determinism;
-using StellaOps.Scanner.Analyzers.Secrets;
-using StellaOps.Scanner.Worker.Extensions;
 using StellaOps.Scanner.Worker.Processing.Surface;
-using StellaOps.Scanner.Storage.Extensions;
-using StellaOps.Scanner.Storage;
-using StellaOps.Scanner.Storage.Services;
-using StellaOps.BinaryIndex.ML;
-using StellaOps.Scanner.AiMlSecurity;
-using StellaOps.Scanner.BuildProvenance;
-using StellaOps.Scanner.Sarif;
-using Reachability = StellaOps.Scanner.Worker.Processing.Reachability;
-using ReachabilityEvidenceStageExecutor = StellaOps.Scanner.Worker.Processing.Reachability.ReachabilityEvidenceStageExecutor;
-using GateDetectors = StellaOps.Scanner.Reachability.Gates.Detectors;
+using System.Diagnostics;
+using System.IO;
 
 var builder = Host.CreateApplicationBuilder(args);
 

src/Scanner/StellaOps.Scanner.Worker/TASKS.md

@@ -8,3 +8,4 @@ Source of truth: `docs/implplan/SPRINT_20260113_001_001_SCANNER_elf_section_hash
 | ELF-SECTION-EVIDENCE-0001 | DONE | Populate section hashes into native metadata for SBOM emission. |
 | ELF-SECTION-DI-0001 | DONE | Register section hash extractor options and services. |
 | AUDIT-HOTLIST-SCANNER-WORKER-0001 | DONE | Apply audit hotlist findings for Scanner.Worker. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |