improved access map viewer

src/cli/commands/access_map.rs

@@ -156,4 +156,7 @@ pub enum AccessMapProvider {
     Monday,
     /// Asana
     Asana,
+    /// Pinecone
+    #[clap(alias = "pinecone.io")]
+    Pinecone,
 }

src/cli/commands/scan.rs

@@ -132,7 +132,7 @@ pub struct ScanArgs {
     /// Map validated cloud credentials to their effective identities; use only when
     /// authorized for the target account because this triggers additional network
     /// requests to determine granted access
-    #[arg(global = true, long, default_value_t = false)]
+    #[arg(global = true, long, alias = "blast-radius", default_value_t = false)]
     pub access_map: bool,
 
     // /// Optional path to write a consolidated access-map HTML report

src/cli/global.rs

@@ -79,7 +79,7 @@ pub enum Command {
     Revoke(RevokeArgs),
 
     /// Map a cloud credential to its identity, permissions, and blast radius
-    #[command(name = "access-map", alias = "access_map")]
+    #[command(name = "access-map", aliases = ["access_map", "blast-radius", "blast_radius"])]
     AccessMap(AccessMapArgs),
 
     /// View Kingfisher JSON/JSONL reports in a local web UI