pub fn check( input: &str, shell: ShellType, cwd: Option<&str>, scan_context: ScanContext, ) -> Vec<Finding>
Run command-shape rules.