scan_all
Run all installed security scanners on a target directory, deduplicate findings using content-based hashing, and filter results by severity or confidence.
Instructions
Scan with ALL installed scanners in parallel, returning deduplicated results.
Automatically detects which scanners are installed, runs them concurrently, and deduplicates findings across scanners using content-based hashing. This is the recommended tool for comprehensive security scanning.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target_path | Yes | The absolute path to the directory or file to scan. | |
| min_severity | No | Minimum severity to report (LOW, MEDIUM, HIGH, CRITICAL). Defaults to MEDIUM to reduce noise from multiple scanners. | MEDIUM |
| min_confidence | No | Minimum confidence to report (LOW, MEDIUM, HIGH). | LOW |
| git_diff_only | No | If true, only reports findings in files modified in git diff. | |
| limit | No | Maximum number of findings to return (for pagination). | |
| offset | No | Pagination offset. | |
| output_format | No | 'markdown' (human-readable, default) or 'json' (machine-readable list of findings for agents / CI). | markdown |
| use_cache | No | If true, reuse the last cached scan_all when the target's files are unchanged (incremental scan). Ignored with git_diff_only. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |