feature: secret scanning architecture and github data source (wip)

frontend/src/layouts/OrganizationLayout/OrganizationLayout.tsx

@@ -55,16 +55,15 @@ export const OrganizationLayout = () => {
       linkOptions({ to: "/organization/kms/overview" }).to,
       linkOptions({ to: "/organization/kms/settings" }).to,
       linkOptions({ to: "/organization/ssh/overview" }).to,
-      linkOptions({ to: "/organization/ssh/settings" }).to
+      linkOptions({ to: "/organization/ssh/settings" }).to,
+      linkOptions({ to: "/organization/secret-scanning/overview" }).to,
+      linkOptions({ to: "/organization/secret-scanning/settings" }).to
     ] as string[]
   ).includes(location.pathname);
 
   const shouldShowOrgSidebar =
     location.pathname.startsWith("/organization") &&
-    (!isSecretSharingPage || shouldShowProductsSidebar) &&
-    !([linkOptions({ to: "/organization/secret-scanning" }).to] as string[]).includes(
-      location.pathname
-    );
+    (!isSecretSharingPage || shouldShowProductsSidebar);
 
   const containerHeight = config.pageFrameContent ? "h-[94vh]" : "h-screen";
 

frontend/src/layouts/OrganizationLayout/ProductsSideBar/ProjectOverviewSideBar.tsx

@@ -42,6 +42,11 @@ export const ProjectOverviewSideBar = ({ type }: TProjectOverviewSideBarProps) =
       icon = "verified";
       link = "https://infisical.com/docs/documentation/platform/ssh/overview";
       break;
+    case ProjectType.SecretScanning:
+      label = "Secret Scanning";
+      icon = "secret-scan";
+      link = "https://infisical.com/docs/documentation/platform/secret-scanning/overview";
+      break;
     default:
       throw new Error("Unknown project type");
   }

frontend/src/layouts/OrganizationLayout/components/MinimizedOrgSidebar/MinimizedOrgSidebar.tsx

@@ -332,18 +332,26 @@ export const MinimizedOrgSidebar = () => {
                   )}
                 </Link>
               )}
-              {(currentOrg.scannerProductEnabled || currentOrg.shareSecretsProductEnabled) && (
-                <div className="w-full bg-mineshaft-500" style={{ height: "1px" }} />
-              )}
               {currentOrg.scannerProductEnabled && (
-                <Link to="/organization/secret-scanning">
+                <Link to="/organization/secret-scanning/overview">
                   {({ isActive }) => (
-                    <MenuIconButton isSelected={isActive} icon="secret-scan">
+                    <MenuIconButton
+                      isSelected={
+                        isActive ||
+                        window.location.pathname.startsWith(
+                          `/organization/${ProjectType.SecretScanning}`
+                        )
+                      }
+                      icon="secret-scan"
+                    >
                       Scanner
                     </MenuIconButton>
                   )}
                 </Link>
               )}
+              {(currentOrg.scannerProductEnabled || currentOrg.shareSecretsProductEnabled) && (
+                <div className="w-full bg-mineshaft-500" style={{ height: "1px" }} />
+              )}
               {currentOrg.shareSecretsProductEnabled && (
                 <Link to="/organization/secret-sharing">
                   {({ isActive }) => (

frontend/src/layouts/ProjectLayout/ProjectLayout.tsx

@@ -6,6 +6,7 @@ import { motion } from "framer-motion";
 
 import { ProjectPermissionCan } from "@app/components/permissions";
 import {
+  Badge,
   BreadcrumbContainer,
   Menu,
   MenuGroup,
@@ -19,11 +20,13 @@ import {
   useSubscription,
   useWorkspace
 } from "@app/context";
+import { ProjectPermissionSecretScanningFindingActions } from "@app/context/ProjectPermissionContext/types";
 import {
   useGetAccessRequestsCount,
   useGetSecretApprovalRequestCount,
   useGetSecretRotations
 } from "@app/hooks/api";
+import { useGetSecretScanningUnresolvedFindingCount } from "@app/hooks/api/secretScanningV2";
 import { ProjectType } from "@app/hooks/api/workspace/types";
 
 import { AssumePrivilegeModeBanner } from "./components/AssumePrivilegeModeBanner";
@@ -36,6 +39,8 @@ export const ProjectLayout = () => {
   const matches = useRouterState({ select: (s) => s.matches.at(-1)?.context });
   const breadcrumbs = matches && "breadcrumbs" in matches ? matches.breadcrumbs : undefined;
 
+  const { permission } = useProjectPermission();
+
   const { t } = useTranslation();
   const { assumedPrivilegeDetails } = useProjectPermission();
   const workspaceId = currentWorkspace?.id || "";
@@ -46,6 +51,7 @@ export const ProjectLayout = () => {
   const isCertManager = currentWorkspace?.type === ProjectType.CertificateManager;
   const isCmek = currentWorkspace?.type === ProjectType.KMS;
   const isSSH = currentWorkspace?.type === ProjectType.SSH;
+  const isSecretScanning = currentWorkspace?.type === ProjectType.SecretScanning;
 
   const { data: secretApprovalReqCount } = useGetSecretApprovalRequestCount({
     workspaceId,
@@ -68,6 +74,16 @@ export const ProjectLayout = () => {
   const pendingRequestsCount =
     (secretApprovalReqCount?.open || 0) + (accessApprovalRequestCount?.pendingCount || 0);
 
+  const { data: unresolvedFindings } = useGetSecretScanningUnresolvedFindingCount(workspaceId, {
+    enabled:
+      isSecretScanning &&
+      permission.can(
+        ProjectPermissionSecretScanningFindingActions.Read,
+        ProjectPermissionSub.SecretScanningFindings
+      ),
+    refetchInterval: 30000
+  });
+
   return (
     <>
       <div className="dark hidden h-screen w-full flex-col overflow-x-hidden md:flex">
@@ -240,6 +256,41 @@ export const ProjectLayout = () => {
                           </ProjectPermissionCan>
                         </>
                       )}
+                      {isSecretScanning && (
+                        <Link
+                          to={`/${ProjectType.SecretScanning}/$projectId/data-sources` as const}
+                          params={{
+                            projectId: currentWorkspace.id
+                          }}
+                        >
+                          {({ isActive }) => (
+                            <MenuItem isSelected={isActive} icon="jigsaw-puzzle">
+                              Data Sources
+                            </MenuItem>
+                          )}
+                        </Link>
+                      )}
+                      {isSecretScanning && (
+                        <Link
+                          to={`/${ProjectType.SecretScanning}/$projectId/findings` as const}
+                          params={{
+                            projectId: currentWorkspace.id
+                          }}
+                        >
+                          {({ isActive }) => (
+                            <MenuItem isSelected={isActive} icon="search">
+                              <div className="flex w-full items-center justify-between">
+                                <span>Findings</span>
+                                {Boolean(unresolvedFindings) && (
+                                  <Badge variant="primary" className="mr-2">
+                                    {unresolvedFindings}
+                                  </Badge>
+                                )}
+                              </div>
+                            </MenuItem>
+                          )}
+                        </Link>
+                      )}
                       {isSecretManager && (
                         <Link
                           to={`/${ProjectType.SecretManager}/$projectId/integrations` as const}