fix: pass all data file paths to OPA

Signed-off-by: nikpivkin <[email protected]>

Author: nikpivkin

pkg/iac/rego/store.go

@@ -3,26 +3,42 @@ package rego
 import (
 	"fmt"
 	"io/fs"
-	"os"
-	"path/filepath"
+	"path"
 	"slices"
 	"strings"
 
+	"github.com/aquasecurity/trivy/pkg/log"
+	"github.com/aquasecurity/trivy/pkg/set"
 	"github.com/open-policy-agent/opa/v1/loader"
 	"github.com/open-policy-agent/opa/v1/storage"
 )
 
 // initialize a store populated with OPA data files found in dataPaths
 func initStore(dataFS fs.FS, dataPaths, namespaces []string) (storage.Store, error) {
-	// FilteredPaths will recursively find all file paths that contain a valid document
-	// extension from the given list of data paths.
-	allDocumentPaths, _ := loader.FilteredPathsFS(dataFS, dataPaths,
-		func(abspath string, info os.FileInfo, depth int) bool {
-			return !info.IsDir() && !isDataFile(info)
-		},
-	)
-
-	documents, err := loader.NewFileLoader().WithFS(dataFS).All(allDocumentPaths)
+	dataFiles := set.New[string]()
+
+	// The virtual file system uses a slash ('/') as a path separator,
+	// but OPA uses the filepath package, which is OS-dependent.
+	// Therefore, we need to collect all the paths ourselves and pass them to OPA.
+	for _, root := range dataPaths {
+		if err := fs.WalkDir(dataFS, root, func(path string, d fs.DirEntry, err error) error {
+			if err != nil {
+				return err
+			}
+			if d.IsDir() {
+				return nil
+			}
+
+			if isDataFile(path) {
+				dataFiles.Append(path)
+			}
+			return nil
+		}); err != nil {
+			log.Error("Failed to collect data file paths", log.String("root", root), log.Err(err))
+		}
+	}
+
+	documents, err := loader.NewFileLoader().WithFS(dataFS).All(dataFiles.Items())
 	if err != nil {
 		return nil, fmt.Errorf("load documents: %w", err)
 	}
@@ -37,10 +53,10 @@ func initStore(dataFS fs.FS, dataPaths, namespaces []string) (storage.Store, err
 	return store, nil
 }
 
-func isDataFile(fi fs.FileInfo) bool {
+func isDataFile(filePath string) bool {
 	return slices.Contains([]string{
 		".yaml",
 		".yml",
 		".json",
-	}, strings.ToLower(filepath.Ext(fi.Name())))
+	}, strings.ToLower(path.Ext(filePath)))
 }