feat(codeaction): extend remy to IaC, SCA, Code findings [IDE-2052]

Remy remediation is now offered for Snyk Code (HasAIFix), Snyk Open
Source (upgradable), and Snyk IaC findings. Secrets are excluded
because automated secret remediation requires credential rotation
outside remy's scope.

IaC bypasses the IsFixable guard (which always returns false for IaC)
so remy can be offered. Code and OSS retain the IsFixable check to
ensure a fixability signal exists before invoking the agent.

Add tests for Secrets (excluded), ProductUnknown (excluded), and IaC
(offered) product filter branches.

Author: basti-snyk

application/codeaction/codeaction.go

@@ -34,6 +34,7 @@ import (
 	"github.com/snyk/snyk-ls/domain/snyk/remediation"
 	"github.com/snyk/snyk-ls/infrastructure/featureflag"
 	noti "github.com/snyk/snyk-ls/internal/notification"
+	"github.com/snyk/snyk-ls/internal/product"
 	"github.com/snyk/snyk-ls/internal/types"
 	"github.com/snyk/snyk-ls/internal/uri"
 )
@@ -144,14 +145,17 @@ func (c *CodeActionsService) remediationCodeActions(issues []types.Issue, path t
 		if findingId == "" {
 			continue
 		}
+		issueProduct := issue.GetProduct()
+		if issueProduct == product.ProductSecrets || issueProduct == product.ProductUnknown {
+			continue
+		}
 		additionalData := issue.GetAdditionalData()
-		if additionalData == nil || !additionalData.IsFixable() {
+		if issueProduct != product.ProductInfrastructureAsCode && (additionalData == nil || !additionalData.IsFixable()) {
 			continue
 		}
 		// Capture loop variables for the closure.
 		issueFindingId := findingId
 		issueRange := r
-		issueProduct := issue.GetProduct()
 		provider := c.remediationProvider
 		deferredEdit := func() *types.WorkspaceEdit {
 			edit, err := provider.Remediate(context.Background(), remediation.RemediationRequest{

application/codeaction/remediation_test.go

@@ -33,6 +33,7 @@ import (
 	"github.com/snyk/snyk-ls/domain/snyk/remediation"
 	"github.com/snyk/snyk-ls/infrastructure/featureflag"
 	"github.com/snyk/snyk-ls/internal/notification"
+	"github.com/snyk/snyk-ls/internal/product"
 	"github.com/snyk/snyk-ls/internal/testutil"
 	"github.com/snyk/snyk-ls/internal/testutil/workspaceutil"
 	"github.com/snyk/snyk-ls/internal/types"
@@ -53,6 +54,7 @@ func (f *fakeRemediationProvider) Remediate(_ context.Context, _ remediation.Rem
 func buildFixableIssue(findingId string) *snyk.Issue {
 	return &snyk.Issue{
 		FindingId: findingId,
+		Product:   product.ProductCode,
 		AdditionalData: snyk.CodeIssueData{
 			HasAIFix: true,
 		},
@@ -211,3 +213,60 @@ func TestGetCodeActions_RemediationAgent_DoesNotMutateIssueCodeActions(t *testin
 	}
 	assert.True(t, found, "expected RemediationAgentQuickFix in returned actions")
 }
+
+func TestGetCodeActions_RemediationAgent_SecretsIssue_NoAction(t *testing.T) {
+	fake := &fakeRemediationProvider{edit: &types.WorkspaceEdit{}}
+	issue := &snyk.Issue{
+		FindingId:      "finding-secret",
+		Product:        product.ProductSecrets,
+		AdditionalData: snyk.SecretsIssueData{},
+	}
+
+	service, params := setupWithIssueAndProvider(t, issue, fake)
+
+	actions := service.GetCodeActions(params)
+
+	for _, a := range actions {
+		assert.NotEqual(t, types.RemediationAgentQuickFix, a.Kind,
+			"Secrets product must not produce RemediationAgentQuickFix actions")
+	}
+}
+
+func TestGetCodeActions_RemediationAgent_UnknownProduct_NoAction(t *testing.T) {
+	fake := &fakeRemediationProvider{edit: &types.WorkspaceEdit{}}
+	issue := &snyk.Issue{
+		FindingId:      "finding-unknown",
+		Product:        product.ProductUnknown,
+		AdditionalData: snyk.CodeIssueData{HasAIFix: true},
+	}
+
+	service, params := setupWithIssueAndProvider(t, issue, fake)
+
+	actions := service.GetCodeActions(params)
+
+	for _, a := range actions {
+		assert.NotEqual(t, types.RemediationAgentQuickFix, a.Kind,
+			"unknown product must not produce RemediationAgentQuickFix actions")
+	}
+}
+
+func TestGetCodeActions_RemediationAgent_IaCIssue_WithFindingId_OfferedAction(t *testing.T) {
+	fake := &fakeRemediationProvider{edit: &types.WorkspaceEdit{}}
+	issue := &snyk.Issue{
+		FindingId:      "finding-iac",
+		Product:        product.ProductInfrastructureAsCode,
+		AdditionalData: snyk.IaCIssueData{},
+	}
+
+	service, params := setupWithIssueAndProvider(t, issue, fake)
+
+	actions := service.GetCodeActions(params)
+
+	found := false
+	for _, a := range actions {
+		if a.Kind == types.RemediationAgentQuickFix {
+			found = true
+		}
+	}
+	assert.True(t, found, "IaC issue with FindingId must produce RemediationAgentQuickFix action")
+}