scan_changed_files
Scan only files changed since a git ref, detecting new security issues on added lines. Perfect for PR checks and pre-push hooks.
Instructions
Scan only files that have changed since a given git ref (branch, commit, or HEAD~N). Ideal for PR checks, pre-push hooks, and incremental CI. Diff-aware by default: returns only findings on newly-added lines (set diff_aware:false for whole changed files).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| base | No | Git ref to diff against (e.g. 'main', 'HEAD~3', commit SHA) | HEAD~1 |
| path | No | Repository root path | . |
| format | No | Output format | markdown |
| diff_aware | No | Report only newly-introduced findings on added lines (true, default) vs. all findings in changed files (false) |