feat: add optional CSV export for findings and warnings

Author: stacknil

.gitattributes

@@ -0,0 +1,12 @@
+* text=auto
+*.cpp text eol=lf
+*.hpp text eol=lf
+*.h text eol=lf
+*.md text eol=lf
+*.json text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.txt text eol=lf
+*.csv text eol=lf
+CMakeLists.txt text eol=lf
+CMakePresets.json text eol=lf

CHANGELOG.md

@@ -9,6 +9,7 @@ All notable user-visible changes should be recorded here.
 - Added sanitized golden `report.md` / `report.json` regression fixtures to lock report contracts.
 - Expanded parser coverage for `Accepted publickey` and selected `pam_faillock` / `pam_sss` variants.
 - Added compact host-level summaries for multi-host reports.
+- Added optional CSV export for findings and warnings when explicitly requested.
 
 ### Changed
 
@@ -45,7 +46,7 @@ All notable user-visible changes should be recorded here.
 ## v0.1.0
 
 ### Added
-
+
 - Parser support for `syslog_legacy` and `journalctl_short_full` authentication log input.
 - Rule-based detections for SSH brute force, multi-user probing, and sudo burst activity.
 - Parser coverage telemetry including parsed/unparsed counts and unknown-pattern buckets.
@@ -54,11 +55,11 @@ All notable user-visible changes should be recorded here.
 ### Changed
 
 - Established deterministic Markdown and JSON reporting for the MVP release.
-
-### Fixed
-
-- None.
-
+
+### Fixed
+
+- None.
+
 ### Docs
 
 - Added CI, CodeQL, repository hardening guidance, and release-facing project documentation for the first public release.