adv_diff_scan
Scan git diff changes for security vulnerabilities between branches, analyze exploit examples, and filter false positives using LLM. Results saved in JSON or Markdown format.
Instructions
Scan security vulnerabilities in git diff changes between branches. Results are saved in the repository root.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| include_exploits | No | Whether to include exploit examples | |
| output_format | No | Output format for results (json or markdown) | json |
| path | No | Path to git repository (must contain .git directory) | . |
| severity_threshold | No | Minimum severity threshold (low, medium, high, critical) | medium |
| source_branch | Yes | Source branch name (e.g., 'feature-branch') | |
| target_branch | Yes | Target branch name (e.g., 'main') | |
| use_llm | No | Whether to include LLM analysis prompts (for use with your client's LLM) | |
| use_semgrep | No | Whether to include Semgrep analysis | |
| use_validation | No | Whether to use LLM validation to filter false positives |