feat: Add detailed findings output to GitHub Actions logs

[williambrady]

Summary

• Add detailed findings output to GitHub Actions console logs for better visibility
• Each finding displays scanner name, rule ID, file path, and line number
• Findings are grouped by severity for easier triage

Problem

The GitHub Actions logs only showed summary counts and a brief list of top findings in the step summary. This made it difficult to:

• Identify which scanner detected each issue
• Find exact file and line locations
• Understand the full scope of findings without downloading artifacts

Solution

Added a "Detailed Findings" section in entrypoint.sh that outputs all findings to the console with:

• [tool] prefix (e.g., [checkov], [gitleaks])
• Rule ID and title
• File path and line number
• Resource name (for IaC findings)
• Truncated description and remediation guidance

Example output:

--- CRITICAL ---

[gitleaks] github-pat: Secret detected: GitHub Personal Access Token
  Location: .claude/settings.local.json:10
  Remediation: Remove the hardcoded secret and use environment variables...

--- HIGH ---

[trivy] AVD-AWS-0057: IAM policy should avoid use of wildcards
  Location: cloudformation/github-oidc-terraform-state.yaml
  Resource: cloudformation/github-oidc-terraform-state.yaml:171-218

Test plan

• Run scanner locally and verify detailed output appears
• Trigger GitHub Actions workflow and check logs for findings details
• Verify findings are grouped by severity

[augmentcode]

🤖 Augment PR Summary

Summary: Adds a “Detailed Findings” section to GitHub Actions logs so all scanner findings are visible in the console, not just counts/top items.
Changes:

• Reads the generated JSON report and sorts/group findings by severity.
• Logs each finding with tool, rule ID/title, file+line, and optional resource/description/remediation (with truncation).

Notes: Uses GitHub Actions log groups (via ::group::/::endgroup::) to keep output collapsible.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 2 suggestions posted.

Comment augment review to trigger a new review at any time.

[ghaworkflow]

Lets see what this looks like downstream.