finish secrets finding work and audit remarks work save

src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/IFingerprintIndex.cs

@@ -140,7 +140,18 @@ public sealed class InMemoryFingerprintIndex : IFingerprintIndex
     private readonly ConcurrentDictionary<FingerprintAlgorithm, List<FingerprintMatch>> _algorithmIndex = new();
     private readonly HashSet<string> _packages = new();
     private readonly object _packagesLock = new();
-    private DateTimeOffset _lastUpdated = DateTimeOffset.UtcNow;
+    private readonly TimeProvider _timeProvider;
+    private DateTimeOffset _lastUpdated;
+    
+    /// <summary>
+    /// Creates a new in-memory fingerprint index.
+    /// </summary>
+    /// <param name="timeProvider">Optional time provider for deterministic timestamps.</param>
+    public InMemoryFingerprintIndex(TimeProvider? timeProvider = null)
+    {
+        _timeProvider = timeProvider ?? TimeProvider.System;
+        _lastUpdated = _timeProvider.GetUtcNow();
+    }
     
     /// <inheritdoc/>
     public int Count => _exactIndex.Count;
@@ -182,7 +193,7 @@ public sealed class InMemoryFingerprintIndex : IFingerprintIndex
                 _packages.Add(match.SourcePackage);
             }
             
-            _lastUpdated = DateTimeOffset.UtcNow;
+            _lastUpdated = _timeProvider.GetUtcNow();
         }
         
         return Task.FromResult(added);
@@ -302,7 +313,7 @@ public sealed class InMemoryFingerprintIndex : IFingerprintIndex
             SourceLine: null,
             VulnerabilityIds: ImmutableArray<string>.Empty,
             Similarity: 1.0f,
-            MatchedAt: DateTimeOffset.UtcNow);
+            MatchedAt: _timeProvider.GetUtcNow());
         
         return AddAsync(match, cancellationToken).ContinueWith(_ => { }, cancellationToken);
     }
@@ -313,9 +324,20 @@ public sealed class InMemoryFingerprintIndex : IFingerprintIndex
 /// </summary>
 public sealed class VulnerableFingerprintIndex : IFingerprintIndex
 {
-    private readonly InMemoryFingerprintIndex _baseIndex = new();
+    private readonly InMemoryFingerprintIndex _baseIndex;
+    private readonly TimeProvider _timeProvider;
     private readonly ConcurrentDictionary<string, VulnerabilityInfo> _vulnerabilities = new();
     
+    /// <summary>
+    /// Creates a new vulnerability-aware fingerprint index.
+    /// </summary>
+    /// <param name="timeProvider">Optional time provider for deterministic timestamps.</param>
+    public VulnerableFingerprintIndex(TimeProvider? timeProvider = null)
+    {
+        _timeProvider = timeProvider ?? TimeProvider.System;
+        _baseIndex = new InMemoryFingerprintIndex(_timeProvider);
+    }
+    
     /// <inheritdoc/>
     public int Count => _baseIndex.Count;
     
@@ -344,7 +366,7 @@ public sealed class VulnerableFingerprintIndex : IFingerprintIndex
             SourceLine: null,
             VulnerabilityIds: ImmutableArray.Create(vulnerabilityId),
             Similarity: 1.0f,
-            MatchedAt: DateTimeOffset.UtcNow);
+            MatchedAt: _timeProvider.GetUtcNow());
         
         var added = await _baseIndex.AddAsync(match, cancellationToken);