Reference G: Scanner to issue category mapping

Configured scanners do not correspond one-to-one with the issue categories in scan results.

Configured scanner	Issue category produced	Note
IaC	Configurations	Produces IaC misconfiguration detections in Terraform, CloudFormation, Kubernetes, and Helm templates
SCA	Vulnerabilities and Package Integrity	CVE detections appear under Vulnerabilities. Package operational risk and license miscompliance appear under Package Integrity
Secrets	Secrets	Detects credentials introduced by the pull request diff