Skip to main content
Glama
Sign In
CodeInspectus

CodeInspectus

by Synvoya
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Re-scan and diff against a prior scan

codeinspectus_rescan
Read-onlyIdempotent

Re-run a scan after applying fixes and diff results against a prior or recent scan to verify which findings are resolved, remain, or were newly introduced without modifying your code.

Instructions

Re-run a scan after fixes were applied and diff against a prior scan_id (or the most recent scan of the same path). Reports which findings are resolved, which remain, and which were newly introduced, plus fresh technology and native-pack execution coverage. Repository-trust artifacts are diffed separately with fail-closed resolved, remaining, introduced and not-rechecked states. Use this to verify approved fixes. Never writes to your code or repo.

Input Schema

NameRequiredDescriptionDefault
pathYesAbsolute path to the repository or directory to rescan.
scannersNo
max_findingsNo
prior_scan_idNoscan_id of a previous scan to diff against. Defaults to the most recent scan of this path.
severity_thresholdNo

Output Schema

NameRequiredDescriptionDefault
targetYes
partialYes
scan_idYes
summaryYes
resolvedYes
remainingYes
disclaimerYes
introducedYes
not_recheckedYes
pack_coverageYes
prior_scan_idYes
repository_trustYes
not_rechecked_noteNo
dependency_coverageNo
detected_technologiesYes
repository_trust_changesYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed8 schema fields changedv4.0.0
    • removedOutput schema / properties / dependency_coverage / items / properties / ecosystem / const
      Removed value: -"Pub"
    • removedOutput schema / properties / dependency_coverage / items / properties / engine / const
      Removed value: -"codeinspectus-pub"
    • addedOutput schema / properties / dependency_coverage / items / properties / engine / enum
      Added value: +[
+  "codeinspectus-pub",
+  "osv-scanner"
+]
    • removedOutput schema / properties / dependency_coverage / items / properties / matching / const
      Removed value: -"exact-enumerated-versions"
    • addedOutput schema / properties / dependency_coverage / items / properties / matching / enum
      Added value: +[
+  "exact-enumerated-versions",
+  "osv-scanner-offline"
+]
    • changedOutput schema / properties / resolved / items / properties / engine / enum
      Previous value: -[
-  "opengrep",
-  "gitleaks",
-  "trivy",
-  "codeinspectus-ai",
-  "codeinspectus-pub"
-]New value: +[
+  "opengrep",
+  "gitleaks",
+  "trivy",
+  "osv-scanner",
+  "codeinspectus-ai",
+  "codeinspectus-pub",
+  "synvoya"
+]
    • addedOutput schema / properties / resolved / items / properties / engine_family
      Added value: +{
+  "enum": [
+    "synvoya"
+  ],
+  "type": "string"
+}
    • addedOutput schema / properties / resolved / items / properties / package
      Added value: +{
+  "additionalProperties": false,
+  "properties": {
+    "ecosystem": {
+      "type": "string"
+    },
+    "name": {
+      "type": "string"
+    },
+    "version": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "ecosystem",
+    "name",
+    "version"
+  ],
+  "type": "object"
+}
  2. Changed1 schema field changedv3.3.1
    • addedInput schema / properties / path / minLength
      Added value: +1
  3. Changed3 schema fields changedv3.1.0
    • addedOutput schema / properties / repository_trust
      Added value: +{
+  "additionalProperties": false,
+  "properties": {
+    "artifacts": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "artifact_id": {
+            "pattern": "^artifact-[a-z0-9][a-z0-9._:-]{0,127}$",
+            "type": "string"
+          },
+          "confidence": {
+            "enum": [
+              "high",
+              "medium",
+              "low",
+              "none"
+            ],
+            "type": "string"
+          },
+          "evidence": {
+            "additionalProperties": false,
+            "properties": {
+              "attributes": {
+                "items": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "name": {
+                      "minLength": 1,
+                      "type": "string"
+                    },
+                    "redacted": {
+                      "type": "boolean"
+                    },
+                    "value": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "number"
+                        },
+                        {
+                          "type": "boolean"
+                        }
+                      ]
+                    }
+                  },
+                  "required": [
+                    "name",
+                    "value"
+                  ],
+                  "type": "object"
+                },
+                "maxItems": 128,
+                "type": "array"
+              },
+              "summary": {
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "required": [
+              "summary",
+              "attributes"
+            ],
+            "type": "object"
+          },
+          "fingerprint": {
+            "pattern": "^sha256:[0-9a-f]{64}$",
+            "type": "string"
+          },
+          "kind": {
+            "$ref": "#/properties/repository_trust/properties/coverage/properties/capabilities/items/properties/capability"
+          },
+          "limitations": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "location": {
+            "additionalProperties": false,
+            "properties": {
+              "end_column": {
+                "exclusiveMinimum": 0,
+                "type": "integer"
+              },
+              "end_line": {
+                "exclusiveMinimum": 0,
+                "type": "integer"
+              },
+              "field": {
+                "minLength": 1,
+                "type": "string"
+              },
+              "file": {
+                "minLength": 1,
+                "type": "string"
+              },
+              "start_column": {
+                "exclusiveMinimum": 0,
+                "type": "integer"
+              },
+              "start_line": {
+                "exclusiveMinimum": 0,
+                "type": "integer"
+              }
+            },
+            "required": [
+              "file"
+            ],
+            "type": "object"
+          },
+          "marker_class": {
+            "pattern": "^[a-z][a-z0-9_]{0,127}$",
+            "type": "string"
+          },
+          "remediation": {
+            "additionalProperties": false,
+            "properties": {
+              "eligible": {
+                "type": "boolean"
+              },
+              "protected_record": {
+                "type": "boolean"
+              },
+              "reason": {
+                "minLength": 1,
+                "type": "string"
+              },
+              "requires_approval": {
+                "const": true,
+                "type": "boolean"
+              },
+              "reversible": {
+                "type": "boolean"
+              }
+            },
+            "required": [
+              "eligible",
+              "requires_approval",
+              "reversible",
+              "protected_record",
+              "reason"
+            ],
+            "type": "object"
+          },
+          "state": {
+            "enum": [
+              "verified",
+              "probable",
+              "informational",
+              "not_verifiable"
+            ],
+            "type": "string"
+          },
+          "validator": {
+            "additionalProperties": false,
+            "properties": {
+              "authoritative": {
+                "type": "boolean"
+              },
+              "egress": {
+                "enum": [
+                  "none",
+                  "optional",
+                  "required"
+                ],
+                "type": "string"
+              },
+              "id": {
+                "minLength": 1,
+                "type": "string"
+              },
+              "independently_verifiable": {
+                "type": "boolean"
+              },
+              "method": {
+                "enum": [
+                  "deterministic",
+                  "declarative",
+                  "statistical"
+                ],
+                "type": "string"
+              },
+              "version": {
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "required": [
+              "id",
+              "method",
+              "authoritative",
+              "independently_verifiable",
+              "egress"
+            ],
+            "type": "object"
+          }
+        },
+        "required": [
+          "artifact_id",
+          "fingerprint",
+          "kind",
+          "state",
+          "marker_class",
+          "location",
+          "evidence",
+          "validator",
+          "confidence",
+          "limitations",
+          "remediation"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "coverage": {
+      "additionalProperties": false,
+      "properties": {
+        "capabilities": {
+          "items": {
+            "additionalProperties": false,
+            "properties": {
+              "capability": {
+                "enum": [
+                  "source_integrity",
+                  "explicit_ai_attribution",
+                  "content_provenance",
+                  "statistical_watermark"
+                ],
+                "type": "string"
+              },
+              "limitations": {
+                "items": {
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "type": "array"
+              },
+              "state": {
+                "$ref": "#/properties/repository_trust/properties/coverage/properties/state"
+              },
+              "validators": {
+                "items": {
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "type": "array"
+              }
+            },
+            "required": [
+              "capability",
+              "state",
+              "validators",
+              "limitations"
+            ],
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "limitations": {
+          "items": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "state": {
+          "enum": [
+            "ran",
+            "partial",
+            "not_run",
+            "not_applicable",
+            "unavailable"
+          ],
+          "type": "string"
+        }
+      },
+      "required": [
+        "state",
+        "capabilities",
+        "limitations"
+      ],
+      "type": "object"
+    },
+    "schema_version": {
+      "const": "1.0.0",
+      "type": "string"
+    },
+    "summary": {
+      "additionalProperties": false,
+      "properties": {
+        "informational": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "not_verifiable": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "probable": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "total": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "verified": {
+          "minimum": 0,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "verified",
+        "probable",
+        "informational",
+        "not_verifiable",
+        "total"
+      ],
+      "type": "object"
+    }
+  },
+  "required": [
+    "schema_version",
+    "coverage",
+    "summary",
+    "artifacts"
+  ],
+  "type": "object"
+}
    • addedOutput schema / properties / repository_trust_changes
      Added value: +{
+  "additionalProperties": false,
+  "properties": {
+    "introduced": {
+      "items": {
+        "$ref": "#/properties/repository_trust/properties/artifacts/items"
+      },
+      "type": "array"
+    },
+    "limitations": {
+      "items": {
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "not_rechecked": {
+      "items": {
+        "$ref": "#/properties/repository_trust/properties/artifacts/items"
+      },
+      "type": "array"
+    },
+    "partial": {
+      "type": "boolean"
+    },
+    "remaining": {
+      "items": {
+        "$ref": "#/properties/repository_trust/properties/artifacts/items"
+      },
+      "type": "array"
+    },
+    "resolved": {
+      "items": {
+        "$ref": "#/properties/repository_trust/properties/artifacts/items"
+      },
+      "type": "array"
+    },
+    "schema_version": {
+      "const": "1.0.0",
+      "type": "string"
+    },
+    "summary": {
+      "additionalProperties": false,
+      "properties": {
+        "introduced": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "not_rechecked": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "remaining": {
+          "minimum": 0,
+          "type": "integer"
+        },
+        "resolved": {
+          "minimum": 0,
+          "type": "integer"
+        }
+      },
+      "required": [
+        "resolved",
+        "remaining",
+        "introduced",
+        "not_rechecked"
+      ],
+      "type": "object"
+    }
+  },
+  "required": [
+    "schema_version",
+    "resolved",
+    "remaining",
+    "introduced",
+    "not_rechecked",
+    "summary",
+    "partial",
+    "limitations"
+  ],
+  "type": "object"
+}
    • changedOutput schema / required
      Previous value: -[
-  "scan_id",
-  "prior_scan_id",
-  "target",
-  "detected_technologies",
-  "pack_coverage",
-  "resolved",
-  "remaining",
-  "introduced",
-  "not_rechecked",
-  "summary",
-  "partial",
-  "disclaimer"
-]New value: +[
+  "scan_id",
+  "prior_scan_id",
+  "target",
+  "detected_technologies",
+  "pack_coverage",
+  "repository_trust",
+  "repository_trust_changes",
+  "resolved",
+  "remaining",
+  "introduced",
+  "not_rechecked",
+  "summary",
+  "partial",
+  "disclaimer"
+]
  4. Changed10 schema fields changedv2.5.0
    • addedOutput schema / properties / dependency_coverage
      Added value: +{
+  "items": {
+    "additionalProperties": false,
+    "properties": {
+      "database_checked_at": {
+        "type": "string"
+      },
+      "database_version": {
+        "type": "string"
+      },
+      "ecosystem": {
+        "const": "Pub",
+        "type": "string"
+      },
+      "engine": {
+        "const": "codeinspectus-pub",
+        "type": "string"
+      },
+      "limitations": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "lockfiles": {
+        "additionalProperties": false,
+        "properties": {
+          "analyzed": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "discovered": {
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "discovered",
+          "analyzed"
+        ],
+        "type": "object"
+      },
+      "matching": {
+        "const": "exact-enumerated-versions",
+        "type": "string"
+      },
+      "note": {
+        "type": "string"
+      },
+      "packages": {
+        "additionalProperties": false,
+        "properties": {
+          "eligible": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "resolved": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "skipped": {
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "resolved",
+          "eligible",
+          "skipped"
+        ],
+        "type": "object"
+      },
+      "state": {
+        "enum": [
+          "ran",
+          "partial",
+          "not_run",
+          "not_applicable",
+          "unavailable"
+        ],
+        "type": "string"
+      }
+    },
+    "required": [
+      "ecosystem",
+      "engine",
+      "state",
+      "lockfiles",
+      "packages",
+      "matching",
+      "limitations"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}
    • addedOutput schema / properties / detected_technologies
      Added value: +{
+  "items": {
+    "additionalProperties": false,
+    "properties": {
+      "confidence": {
+        "enum": [
+          "high",
+          "medium"
+        ],
+        "type": "string"
+      },
+      "evidence": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "id": {
+        "type": "string"
+      },
+      "kind": {
+        "enum": [
+          "language",
+          "framework",
+          "platform"
+        ],
+        "type": "string"
+      }
+    },
+    "required": [
+      "id",
+      "kind",
+      "confidence",
+      "evidence"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}
    • addedOutput schema / properties / pack_coverage
      Added value: +{
+  "items": {
+    "additionalProperties": false,
+    "properties": {
+      "analyzers": {
+        "additionalProperties": false,
+        "properties": {
+          "ran": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "registered": {
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "registered",
+          "ran"
+        ],
+        "type": "object"
+      },
+      "frameworks": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "languages": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "limitations": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "note": {
+        "type": "string"
+      },
+      "pack_id": {
+        "type": "string"
+      },
+      "platforms": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "rules": {
+        "additionalProperties": false,
+        "properties": {
+          "ran": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "registered": {
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "registered",
+          "ran"
+        ],
+        "type": "object"
+      },
+      "scanner_kind": {
+        "default": "ai",
+        "enum": [
+          "ai",
+          "sast"
+        ],
+        "type": "string"
+      },
+      "state": {
+        "enum": [
+          "ran",
+          "partial",
+          "not_run",
+          "not_applicable",
+          "unavailable"
+        ],
+        "type": "string"
+      },
+      "version": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "pack_id",
+      "version",
+      "state",
+      "languages",
+      "frameworks",
+      "platforms",
+      "analyzers",
+      "rules",
+      "limitations"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}
    • changedOutput schema / properties / resolved / items / properties / engine / enum
      Previous value: -[
-  "opengrep",
-  "gitleaks",
-  "trivy",
-  "codeinspectus-ai"
-]New value: +[
+  "opengrep",
+  "gitleaks",
+  "trivy",
+  "codeinspectus-ai",
+  "codeinspectus-pub"
+]
    • addedOutput schema / properties / resolved / items / properties / finding_kind
      Added value: +{
+  "enum": [
+    "vulnerability",
+    "license",
+    "misconfiguration",
+    "secret",
+    "sast",
+    "ai",
+    "other"
+  ],
+  "type": "string"
+}
    • addedOutput schema / properties / resolved / items / properties / owasp_api
      Added value: +{
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}
    • addedOutput schema / properties / resolved / items / properties / producer_components
      Added value: +{
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}
    • addedOutput schema / properties / resolved / items / properties / scope_role
      Added value: +{
+  "enum": [
+    "primary",
+    "supporting_context"
+  ],
+  "type": "string"
+}
    • addedOutput schema / properties / resolved / items / properties / vulnerability_aliases
      Added value: +{
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}
    • changedOutput schema / required
      Previous value: -[
-  "scan_id",
-  "prior_scan_id",
-  "target",
-  "resolved",
-  "remaining",
-  "introduced",
-  "not_rechecked",
-  "summary",
-  "partial",
-  "disclaimer"
-]New value: +[
+  "scan_id",
+  "prior_scan_id",
+  "target",
+  "detected_technologies",
+  "pack_coverage",
+  "resolved",
+  "remaining",
+  "introduced",
+  "not_rechecked",
+  "summary",
+  "partial",
+  "disclaimer"
+]
  5. Changed7 schema fields changedv0.3.0
    • addedInput schema / properties / prior_scan_id / pattern
      Added value: +"^scan-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
    • addedOutput schema / properties / not_rechecked
      Added value: +{
+  "items": {
+    "$ref": "#/properties/resolved/items"
+  },
+  "type": "array"
+}
    • addedOutput schema / properties / not_rechecked_note
      Added value: +{
+  "type": "string"
+}
    • addedOutput schema / properties / partial
      Added value: +{
+  "type": "boolean"
+}
    • addedOutput schema / properties / summary / properties / not_rechecked
      Added value: +{
+  "type": "integer"
+}
    • changedOutput schema / properties / summary / required
      Previous value: -[
-  "resolved",
-  "remaining",
-  "introduced"
-]New value: +[
+  "resolved",
+  "remaining",
+  "introduced",
+  "not_rechecked"
+]
    • changedOutput schema / required
      Previous value: -[
-  "scan_id",
-  "prior_scan_id",
-  "target",
-  "resolved",
-  "remaining",
-  "introduced",
-  "summary",
-  "disclaimer"
-]New value: +[
+  "scan_id",
+  "prior_scan_id",
+  "target",
+  "resolved",
+  "remaining",
+  "introduced",
+  "not_rechecked",
+  "summary",
+  "partial",
+  "disclaimer"
+]
  6. First observedv0.2.1

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint and destructiveHint=false, and the sentence 'Never writes to your code or repo' largely restates that. The genuinely additive content is about output behavior: resolved/remaining/introduced classification and the fail-closed 'not-rechecked' state for repository-trust artifacts, which tells the agent how to interpret ambiguous results. Useful, but it omits operational traits (cost, runtime, what happens with no prior scan, whether the full scan re-executes).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and diff semantics, then safety, with no filler sentences. The trust-artifact sentence is jargon-dense ('native-pack execution coverage', 'fail-closed resolved, remaining, introduced and not-rechecked states') and could be tightened, but every sentence carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the description need not enumerate return fields, yet it still spends space on result categories while leaving real gaps. It does not say what happens if no prior scan exists for the path, whether scanners/max_findings constrain the rescan or only the diff, or how the tool reports incomparable scans.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 40%, so the description must carry the remaining parameters, and it does not: 'scanners', 'max_findings' and 'severity_threshold' are never mentioned, and their effect on the diff (e.g. whether a threshold hides resolved findings) is unstated. The only param-related content, the prior_scan_id default of 'most recent scan of the same path', merely repeats the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific compound action — re-run a scan and diff against a prior scan_id — with explicit scope ('after fixes were applied') and what the result contains. The word 'Re-run' plus 'diff against a prior scan' separates it from the sibling codeinspectus_scan (a fresh scan) without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Use this to verify approved fixes' is an explicit when-to-use condition tied to a workflow stage, and 'after fixes were applied' implies the preceding action. No explicit when-not or named alternative is given, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools