Function resolveTargetPaths

packages/varlock/src/cli/commands/scan.command.ts:208–249

(targets: Array<string>, cwd: string)

 * - Explicit files are included directly (if not a binary extension).
 */
export async function resolveTargetPaths(targets: Array<string>, cwd: string): Promise<Array<string>> {
  const seen = new Set<string>();
  const files: Array<string> = [];

  async function addFile(absPath: string) {
    if (seen.has(absPath)) return;
    seen.add(absPath);
    files.push(absPath);
  }

  async function addPath(absPath: string) {
    let stat;
    try {
      stat = await fs.stat(absPath);
    } catch {
      return; // path doesn't exist — silently skip
    }
    if (stat.isDirectory()) {
      for (const f of await walkDirectoryAll(absPath)) {
        await addFile(f);
      }
    } else if (stat.isFile()) {
      const ext = path.extname(absPath).toLowerCase();
      if (!BINARY_EXTENSIONS.has(ext)) {
        await addFile(absPath);
      }
    }
  }

  for (const target of targets) {
    if (GLOB_CHARS.test(target)) {
      // Expand glob pattern; paths returned by fsGlob are relative to cwd
      for await (const match of fs.glob(target, { cwd })) {
        await addPath(path.resolve(cwd, match));
      }
    } else {
      await addPath(path.resolve(cwd, target));
    }
  }

  return files;
}

/**
 * Scans a single file for occurrences of any of the provided sensitive values.