pub fn security_finding_id(
finding: &SecurityFinding,
relative_path: &Path,
) -> StringExpand description
The stable per-finding correlation id: an FNV-1a hex digest of
rule:path:line.
This is the single source of truth for both the JSON finding_id field and
the SARIF partialFingerprints value, so an agent can join the two and they
never drift. The digest is computed on the project-relative path, so callers
must pass the relativized path (issue #900).