feat(onboarding): unified multi-target model + scan matrix foundation (#134)

compliance-core/src/models/scan.rs

@@ -3,7 +3,7 @@ use serde::{Deserialize, Serialize};
 
 use super::repository::ScanTrigger;
 
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]
 #[serde(rename_all = "lowercase")]
 pub enum ScanType {
     Sast,
@@ -16,6 +16,14 @@ pub enum ScanType {
     SecretDetection,
     Lint,
     CodeReview,
+    /// Static analysis of a firmware image (unpack + component CVE).
+    FirmwareStatic,
+    /// Control-logic security analysis of PLC / SPS programs.
+    PlcControlLogic,
+    /// Static analysis of a mobile package (APK / AAB / IPA).
+    MobileStatic,
+    /// Static analysis of a container image.
+    ContainerScan,
 }
 
 impl std::fmt::Display for ScanType {
@@ -31,6 +39,10 @@ impl std::fmt::Display for ScanType {
             Self::SecretDetection => write!(f, "secret_detection"),
             Self::Lint => write!(f, "lint"),
             Self::CodeReview => write!(f, "code_review"),
+            Self::FirmwareStatic => write!(f, "firmware_static"),
+            Self::PlcControlLogic => write!(f, "plc_control_logic"),
+            Self::MobileStatic => write!(f, "mobile_static"),
+            Self::ContainerScan => write!(f, "container_scan"),
         }
     }
 }
@@ -47,6 +59,8 @@ pub enum ScanRunStatus {
 #[serde(rename_all = "snake_case")]
 pub enum ScanPhase {
     ChangeDetection,
+    ArtifactIngest,
+    Classification,
     Sast,
     SbomGeneration,
     CveScanning,
@@ -55,6 +69,10 @@ pub enum ScanPhase {
     LintScanning,
     CodeReview,
     GraphBuilding,
+    FirmwareStatic,
+    PlcAnalysis,
+    MobileStatic,
+    ContainerScan,
     LlmTriage,
     IssueCreation,
     DastScanning,