added artifacts

cmd/forgebucket/main.go

@@ -20,6 +20,9 @@ import (
 	"github.com/forgeo/forgebucket/internal/domain/ci"
 	gitdomain "github.com/forgeo/forgebucket/internal/domain/git"
 	"github.com/forgeo/forgebucket/internal/domain/gitops"
+	"github.com/forgeo/forgebucket/internal/domain/oci"
+	"github.com/forgeo/forgebucket/internal/domain/scanning"
+	"github.com/forgeo/forgebucket/internal/domain/vulnscan"
 	"github.com/forgeo/forgebucket/internal/domain/sbom"
 	"github.com/forgeo/forgebucket/internal/domain/signing"
 	"github.com/forgeo/forgebucket/internal/events"
@@ -52,6 +55,12 @@ func main() {
 		log.Fatalf("artifact root: %v", err)
 	}
 
+	ociRegistry, err := oci.New(cfg.OCIRoot)
+	if err != nil {
+		log.Fatalf("oci: %v", err)
+	}
+	log.Printf("oci: registry initialised at %s", cfg.OCIRoot)
+
 	bus, err := events.New(cfg.NATSUrl)
 	if err != nil {
 		log.Fatalf("events: %v", err)
@@ -100,7 +109,16 @@ func main() {
 	}
 	log.Printf("signing: key store initialised (keyId=%s)", keyStore.KeyID())
 
-	handler := api.New(cfg, engine, store, bus, cfg.ArtifactRoot, web.FS(), *keyStore, sbomGen)
+	secretScanner, err := scanning.New(engine, bus)
+	if err != nil {
+		log.Fatalf("secret scanner: %v", err)
+	}
+	go secretScanner.Start(ciCtx)
+
+	vulnScanner := vulnscan.NewScanner(engine, bus)
+	go vulnScanner.Start(ciCtx)
+
+	handler := api.New(cfg, engine, store, bus, cfg.ArtifactRoot, web.FS(), *keyStore, sbomGen, ociRegistry, secretScanner, vulnScanner)
 
 	srv := &http.Server{
 		Addr:         fmt.Sprintf(":%s", cfg.Port),