datasecurity: add sdsresult proto (first step)

Author: aimenebelfodil

.golangci.yml

@@ -162,6 +162,7 @@ linters:
             - "!**/comp/forwarder/eventplatform/impl/epforwarder.go"
             - "!**/comp/forwarder/eventplatform/impl/pipelines_container.go"
             - "!**/comp/forwarder/eventplatform/impl/pipelines_dataobservability.go"
+            - "!**/comp/forwarder/eventplatform/impl/pipelines_datasecurity.go"
             - "!**/comp/forwarder/eventplatform/impl/pipelines_datastreams.go"
             - "!**/comp/forwarder/eventplatform/impl/pipelines_dbm.go"
             - "!**/comp/forwarder/eventplatform/impl/pipelines_eventmanagement.go"

comp/forwarder/eventplatform/def/component.go

@@ -47,6 +47,8 @@ const (
 	EventTypeKubeActions = "kube-actions"
 	// EventTypeAgentDiscovery represents an Agent Discovery configuration files event
 	EventTypeAgentDiscovery = "agentdiscovery"
+	// EventTypeSDSResult represents a sensitive-data-scanner result event
+	EventTypeSDSResult = "sds-result"
 )
 
 // Component is the interface of the event platform forwarder component.

comp/forwarder/eventplatform/impl/BUILD.bazel

@@ -9,6 +9,7 @@ go_library(
         "pipelines_agentdiscovery.go",
         "pipelines_container.go",
         "pipelines_dataobservability.go",
+        "pipelines_datasecurity.go",
         "pipelines_datastreams.go",
         "pipelines_dbm.go",
         "pipelines_eventmanagement.go",

comp/forwarder/eventplatform/impl/epforwarder.go

@@ -80,6 +80,7 @@ func getPassthroughPipelines() []passthroughPipelineDesc {
 		getDataObservabilityPipelines,
 		getSoftwareInventoryPipelines,
 		getAgentDiscoveryPipelines,
+		getDataSecurityPipelines,
 	}
 	var descs []passthroughPipelineDesc
 	for _, get := range getters {

comp/forwarder/eventplatform/impl/pipelines_datasecurity.go

@@ -0,0 +1,29 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2016-present Datadog, Inc.
+
+package eventplatformimpl
+
+import (
+	eventplatform "github.com/DataDog/datadog-agent/comp/forwarder/eventplatform/def"
+	logshttp "github.com/DataDog/datadog-agent/comp/logs-library/client/http"
+	pkgconfigsetup "github.com/DataDog/datadog-agent/pkg/config/setup"
+)
+
+func getDataSecurityPipelines() []passthroughPipelineDesc {
+	return []passthroughPipelineDesc{
+		{
+			eventType:                     eventplatform.EventTypeSDSResult,
+			category:                      "Data Security",
+			contentType:                   logshttp.ProtobufContentType,
+			endpointsConfigPrefix:         "sds_result.forwarder.",
+			hostnameEndpointPrefix:        "sds-intake.",
+			intakeTrackType:               "sdsresult",
+			defaultBatchMaxConcurrentSend: 10,
+			defaultBatchMaxContentSize:    pkgconfigsetup.DefaultBatchMaxContentSize,
+			defaultBatchMaxSize:           pkgconfigsetup.DefaultBatchMaxSize,
+			defaultInputChanSize:          pkgconfigsetup.DefaultInputChanSize,
+		},
+	}
+}

pkg/collector/sharedlibrary/rustchecks/Cargo.lock

@@ -2,6 +2,7 @@
 name = "datasecurity"
 version = "0.1.0"
 edition = "2024"
+build = "build.rs"
 
 [features]
 default = ["engine-postgres"]
@@ -11,13 +12,18 @@ engine-postgres = ["dep:postgres"]
 
 [dependencies]
 anyhow = "1.0.100"
-core = { path = "../../core" }
+shlib_core = { path = "../../core", package = "core" }
 dd_sds = { package = "dd-sensitive-data-scanner", version = "=0.1.0-20260715-fcd8f9716b61", default-features = false, features = ["dd-sds"] }
 libc = "0.2.182"
 postgres = { version = "0.19", optional = true }
+prost = "0.14"
+prost-types = "0.14"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 
+[build-dependencies]
+prost-build = "0.14"
+
 [dev-dependencies]
 serde_yaml = "0.9.34"
 

pkg/collector/sharedlibrary/rustchecks/checks/datasecurity/Cargo.toml

@@ -0,0 +1,21 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2026-present Datadog, Inc.
+
+// Compiles the canonical SDS result proto with prost-build so the check can
+// serialize `SdsResultPayload` messages. The crate is built with cargo.
+//
+// Canonical source: pkg/proto/datadog/sds/sds_result.proto
+// Requires `protoc` on PATH (e.g. `brew install protobuf`).
+
+fn main() -> Result<(), Box<dyn std::error::Error>> {
+    let proto_root = "../../../../../proto";
+    let proto_file = "../../../../../proto/datadog/sds/sds_result.proto";
+
+    println!("cargo:rerun-if-changed={proto_file}");
+
+    prost_build::compile_protos(&[proto_file], &[proto_root])?;
+
+    Ok(())
+}