Reference G: Scanner to issue category mapping

Configured scanners do not map one-to-one with issue categories in scan results.

Configured scanner	Issue category produced	Note
IaC	Configurations	Produces IaC misconfiguration detections in Terraform, CloudFormation, Kubernetes, and Helm templates.
SCA	Vulnerabilities and Package Integrity	One scanner produces two categories. CVEs appear under Vulnerabilities. Package operational risk and license miscompliance appear under Package Integrity.
Secrets	Secrets	Detects credentials in the scanned code.