fix(glob): add dot:true to micromatch for dot directory matching

Adds { dot: true } option to micromatch.some() calls in
filterBySupportedScanFiles() and isReportSupportedFile() to ensure
patterns like **/poetry.lock match files in dot directories such as
.mcp-servers/neo4j/poetry.lock.

Author: jdalton

src/utils/glob.mts

@@ -161,7 +161,7 @@ export function filterBySupportedScanFiles(
   supportedFiles: SocketSdkSuccessResult<'getReportSupportedFiles'>['data'],
 ): string[] {
   const patterns = getSupportedFilePatterns(supportedFiles)
-  return filepaths.filter(p => micromatch.some(p, patterns))
+  return filepaths.filter(p => micromatch.some(p, patterns, { dot: true }))
 }
 
 export function getSupportedFilePatterns(
@@ -286,7 +286,7 @@ export function isReportSupportedFile(
   supportedFiles: SocketSdkSuccessResult<'getReportSupportedFiles'>['data'],
 ) {
   const patterns = getSupportedFilePatterns(supportedFiles)
-  return micromatch.some(filepath, patterns)
+  return micromatch.some(filepath, patterns, { dot: true })
 }
 
 export function pathsToGlobPatterns(

test/glob.test.mts

@@ -0,0 +1,83 @@
+import { describe, expect, it } from 'vitest'
+
+import {
+  filterBySupportedScanFiles,
+  isReportSupportedFile,
+} from '../src/utils/glob.mts'
+
+import type { SocketSdkSuccessResult } from '@socketsecurity/sdk'
+
+describe('glob', () => {
+  const mockSupportedFiles: SocketSdkSuccessResult<'getReportSupportedFiles'>['data'] =
+    {
+      npm: {
+        'package.json': { pattern: 'package.json' },
+        'poetry.lock': { pattern: 'poetry.lock' },
+      },
+    }
+
+  describe('filterBySupportedScanFiles', () => {
+    it('should match files in dot directories', () => {
+      const filepaths = [
+        '.mcp-servers/neo4j/poetry.lock',
+        '.hidden/package.json',
+        'regular/poetry.lock',
+        'node_modules/package.json',
+      ]
+
+      const result = filterBySupportedScanFiles(filepaths, mockSupportedFiles)
+
+      expect(result).toEqual([
+        '.mcp-servers/neo4j/poetry.lock',
+        '.hidden/package.json',
+        'regular/poetry.lock',
+        'node_modules/package.json',
+      ])
+    })
+
+    it('should filter out non-matching files', () => {
+      const filepaths = [
+        '.mcp-servers/neo4j/poetry.lock',
+        '.hidden/random.txt',
+        'package.json',
+        'src/index.ts',
+      ]
+
+      const result = filterBySupportedScanFiles(filepaths, mockSupportedFiles)
+
+      expect(result).toEqual(['.mcp-servers/neo4j/poetry.lock', 'package.json'])
+    })
+  })
+
+  describe('isReportSupportedFile', () => {
+    it('should return true for files in dot directories', () => {
+      expect(
+        isReportSupportedFile(
+          '.mcp-servers/neo4j/poetry.lock',
+          mockSupportedFiles,
+        ),
+      ).toBe(true)
+      expect(
+        isReportSupportedFile('.hidden/package.json', mockSupportedFiles),
+      ).toBe(true)
+    })
+
+    it('should return true for regular files', () => {
+      expect(
+        isReportSupportedFile('regular/poetry.lock', mockSupportedFiles),
+      ).toBe(true)
+      expect(isReportSupportedFile('package.json', mockSupportedFiles)).toBe(
+        true,
+      )
+    })
+
+    it('should return false for non-matching files', () => {
+      expect(
+        isReportSupportedFile('.hidden/random.txt', mockSupportedFiles),
+      ).toBe(false)
+      expect(isReportSupportedFile('src/index.ts', mockSupportedFiles)).toBe(
+        false,
+      )
+    })
+  })
+})