fix(fs): check postAnalyzers for StaticPaths (#8543)

Author: DmitriyLewen

pkg/fanal/analyzer/analyzer.go

@@ -556,6 +556,14 @@ func (ag AnalyzerGroup) StaticPaths(disabled []Type) ([]string, bool) {
 		paths = append(paths, staticPathAnalyzer.StaticPaths()...)
 	}
 
+	// PostAnalyzers don't implement StaticPathAnalyzer.
+	// So if at least one postAnalyzer is enabled - we should not use StaticPath.
+	if allPostAnalyzersDisabled := lo.EveryBy(ag.postAnalyzers, func(a PostAnalyzer) bool {
+		return slices.Contains(disabled, a.Type())
+	}); !allPostAnalyzersDisabled {
+		return nil, false
+	}
+
 	// Remove duplicates
 	return lo.Uniq(paths), true
 }

pkg/fanal/artifact/local/fs_test.go

@@ -2485,6 +2485,15 @@ func TestAnalyzerGroup_StaticPaths(t *testing.T) {
 			want:          []string{},
 			wantAllStatic: false,
 		},
+		{
+			name: "only PostAnalyzers are enabled",
+			disabledAnalyzers: []analyzer.Type{
+				analyzer.TypePip,
+				analyzer.TypeSecret,
+			},
+			want:          []string{},
+			wantAllStatic: false,
+		},
 		{
 			name:              "disable all analyzers",
 			disabledAnalyzers: append(analyzer.TypeConfigFiles, analyzer.TypePip, analyzer.TypeApk, analyzer.TypeAlpine, analyzer.TypeSecret),