refactor: simplify auth scanner logging by removing individual test results and using attack chains

Author: CodeMonkeyCybersecurity

internal/orchestrator/bounty_engine.go

@@ -797,20 +797,10 @@ func (e *BugBountyEngine) runAuthenticationTests(ctx context.Context, target str
 		} else if report != nil {
 			e.logger.Infow("SAML scan complete",
 				"vulnerabilities_found", len(report.Vulnerabilities),
-				"tests_run", len(report.Tests),
+				"attack_chains", len(report.AttackChains),
 				"component", "auth_scanner",
 			)
 
-			// Log each test result for audit trail
-			for _, test := range report.Tests {
-				e.logger.Infow("SAML test result",
-					"test_name", test.Name,
-					"vulnerable", test.Vulnerable,
-					"severity", test.Severity,
-					"component", "auth_scanner",
-				)
-			}
-
 			// Convert vulnerabilities to findings
 			for _, vuln := range report.Vulnerabilities {
 				finding := convertVulnerabilityToFinding(vuln, target)
@@ -857,20 +847,10 @@ func (e *BugBountyEngine) runAuthenticationTests(ctx context.Context, target str
 		} else if report != nil {
 			e.logger.Infow("OAuth2 scan complete",
 				"vulnerabilities_found", len(report.Vulnerabilities),
-				"tests_run", len(report.Tests),
+				"attack_chains", len(report.AttackChains),
 				"component", "auth_scanner",
 			)
 
-			// Log each test result for audit trail
-			for _, test := range report.Tests {
-				e.logger.Infow("OAuth2 test result",
-					"test_name", test.Name,
-					"vulnerable", test.Vulnerable,
-					"severity", test.Severity,
-					"component", "auth_scanner",
-				)
-			}
-
 			for _, vuln := range report.Vulnerabilities {
 				finding := convertVulnerabilityToFinding(vuln, target)
 				findings = append(findings, finding)
@@ -914,20 +894,10 @@ func (e *BugBountyEngine) runAuthenticationTests(ctx context.Context, target str
 		} else if report != nil {
 			e.logger.Infow("WebAuthn scan complete",
 				"vulnerabilities_found", len(report.Vulnerabilities),
-				"tests_run", len(report.Tests),
+				"attack_chains", len(report.AttackChains),
 				"component", "auth_scanner",
 			)
 
-			// Log each test result for audit trail
-			for _, test := range report.Tests {
-				e.logger.Infow("WebAuthn test result",
-					"test_name", test.Name,
-					"vulnerable", test.Vulnerable,
-					"severity", test.Severity,
-					"component", "auth_scanner",
-				)
-			}
-
 			for _, vuln := range report.Vulnerabilities {
 				finding := convertVulnerabilityToFinding(vuln, target)
 				findings = append(findings, finding)