ism_coverage_impact
Report how a newer ISM version affects project coverage by categorizing entries needing re-review, removed controls, and new uncovered controls.
Instructions
Report what a newer ISM version means for the project's coverage. Never writes.
Buckets covered/partial entries into re_review (control changed since it was
assessed), removed_upstream (control gone at target), and new_uncovered (now in
scope, no entry). target_version defaults to scope.baseline_version or the
active version. Reads the manifest like ism_coverage_read, walking up from cwd
when project_path is omitted. Run this after ingesting a new ISM release, then
curate the buckets with ism_coverage_upsert.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| project_path | No | ||
| target_version | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| summary | Yes | ||
| re_review | Yes | ||
| manifest_path | Yes | ||
| new_uncovered | Yes | ||
| target_version | Yes | ||
| baseline_version | Yes | ||
| removed_upstream | Yes |