/**
 * Security scanning module.
 * - Dependency vulnerability checking (lock file analysis)
 * - SAST-lite: common security anti-patterns
 * - Secret/credential detection
 * - No external API dependencies
 */
export interface SecurityFinding {
    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
    category: string;
    message: string;
    file: string;
    line?: number;
    snippet?: string;
    recommendation: string;
}
export interface SecurityReport {
    scanDate: string;
    totalFindings: number;
    bySeverity: Record<string, number>;
    findings: SecurityFinding[];
    dependencyInfo?: {
        total: number;
        directDeps: number;
        lockfileFound: boolean;
    };
}
/**
 * Run security scan on codebase.
 * @param cwd - The working directory
 * @param options - Scan options
 * @param options.category - Filter by finding category
 * @param options.severity - Filter by severity level
 * @param options.fileGlob - Glob pattern for files to scan
 * @returns Security report with findings and dependency info
 */
export declare function securityScan(cwd: string, options?: {
    category?: string;
    severity?: string;
    fileGlob?: string;
}): Promise<SecurityReport>;
//# sourceMappingURL=security.d.ts.map