finish secrets finding work and audit remarks work save

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Cbom/CbomAggregationService.cs

@@ -105,13 +105,16 @@ public sealed class CbomAggregationService : ICbomAggregationService
 {
     private readonly IEnumerable<ICryptoAssetExtractor> _extractors;
     private readonly ILogger<CbomAggregationService> _logger;
+    private readonly TimeProvider _timeProvider;
 
     public CbomAggregationService(
         IEnumerable<ICryptoAssetExtractor> extractors,
-        ILogger<CbomAggregationService> logger)
+        ILogger<CbomAggregationService> logger,
+        TimeProvider? timeProvider = null)
     {
         _extractors = extractors;
         _logger = logger;
+        _timeProvider = timeProvider ?? TimeProvider.System;
     }
 
     public async Task<CbomAggregationResult> AggregateAsync(
@@ -167,7 +170,7 @@ public sealed class CbomAggregationService : ICbomAggregationService
             ByComponent = byComponentImmutable,
             UniqueAlgorithms = uniqueAlgorithms,
             RiskAssessment = AssessRisk(assetsArray),
-            GeneratedAt = DateTimeOffset.UtcNow.ToString("o")
+            GeneratedAt = _timeProvider.GetUtcNow().ToString("o")
         };
     }
 

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Index/BomIndexBuilder.cs

@@ -17,7 +17,7 @@ public sealed record BomIndexBuildRequest
 
     public required ComponentGraph Graph { get; init; }
 
-    public DateTimeOffset GeneratedAt { get; init; } = DateTimeOffset.UtcNow;
+    public required DateTimeOffset GeneratedAt { get; init; }
 }
 
 public sealed record BomIndexArtifact

src/Scanner/__Libraries/StellaOps.Scanner.Emit/Lineage/SbomDiffEngine.cs

@@ -10,6 +10,13 @@ namespace StellaOps.Scanner.Emit.Lineage;
 /// </summary>
 public sealed class SbomDiffEngine
 {
+    private readonly TimeProvider _timeProvider;
+
+    public SbomDiffEngine(TimeProvider? timeProvider = null)
+    {
+        _timeProvider = timeProvider ?? TimeProvider.System;
+    }
+
     /// <summary>
     /// Computes the semantic diff between two SBOMs.
     /// </summary>
@@ -115,7 +122,7 @@ public sealed class SbomDiffEngine
                 Unchanged = unchanged,
                 IsBreaking = isBreaking
             },
-            ComputedAt = DateTimeOffset.UtcNow
+            ComputedAt = _timeProvider.GetUtcNow()
         };
     }