Repository navigation
CM-73887: add Diff scan scope to the Scan view - #172
Open
aaron-butler-cy-int wants to merge 2 commits into
Open
aaron-butler-cy-int wants to merge 2 commits into
aaron-butler-cy-int wants to merge 2 commits into
Conversation
Adds a Project / Diff / File scan scope selector. Diff compares two git revisions, or the uncommitted working directory against one: - two revisions run `commit-history --commit-range from...to` - one side set to "Local directory" runs `pre-commit --include-unstaged --base-ref <ref> --path <path>` - IaC is unsupported by the CLI for both flavors, so it falls back to a full project scan while the other scan types are diffed The revision dropdowns list branches, tags and recent commits via a new GitService, stay current through the vscode.git API (with a .git file watcher fallback), and keep a stored selection that has scrolled out of the list. The Diff scope is hidden and refused below Cycode CLI 3.25.0. Paths and git refs are validated before being passed to the CLI, which is spawned with shell: true. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
aaron-butler-cy-int
requested review from
avishaiamiel and
omer-roth
as code owners
October 19, 2026 20:05
Resolves the conflicts in cli-service.ts with upstream's changes: - The CLI is no longer spawned with `shell: true`, so paths are passed as plain argv elements. The shell-metacharacter validator and the path quoting (utils/shell-arg.ts) are replaced by utils/git-ref-arg.ts, which only rejects refs that would be read as an option or contain control characters. Valid project paths such as "R&D" or "My Project (2)" are no longer refused. - processCliScanResult now takes the scanned paths and drops detections outside of them; the shared runScanAndProcessResults helper passes the scanned paths for path, commit-range and pre-commit scans. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a Project / Diff / File scan scope selector. Diff compares two git revisions, or the uncommitted working directory against one:
commit-history --commit-range from...topre-commit --include-unstaged --base-ref <ref> --path <path>The revision dropdowns list branches, tags and recent commits via a new GitService, stay current through the vscode.git API (with a .git file watcher fallback), and keep a stored selection that has scrolled out of the list. The Diff scope is hidden and refused below Cycode CLI 3.25.0.
Paths and git refs are validated before being passed to the CLI, which is spawned with shell: true.