Struct SecurityScanner 

pub struct SecurityScanner { /* private fields */ }

Security scanner for analyzing code changes.

Implementations

impl SecurityScanner

pub fn new() -> Self

Creates a new security scanner using the global pattern engine.

pub fn with_config(config: SecurityConfig) -> Self

Creates a new security scanner with custom configuration.

Arguments

• config - Security configuration for ignore rules

Returns

A new scanner instance with the provided configuration.

pub fn scan_diff(&self, diff: &str) -> Vec<Finding>

Scans a PR diff for security vulnerabilities.

Prompt-injection patterns (ids prefixed with prompt-injection) are included in the results alongside code security findings. Callers that only want injection findings can filter by finding.pattern_id.starts_with("prompt-injection").

Arguments

• diff - The unified diff text from a pull request

Returns

A vector of security findings from added/modified lines.

pub fn scan_file(&self, content: &str, file_path: &str) -> Vec<Finding>

Scans file content directly (not a diff).

Skips scanning entirely if the file path is in an ignored directory. Otherwise, filters out findings based on configured ignore rules.

Arguments

• content - The file content to scan
• file_path - Path to the file

Returns

A vector of security findings, excluding ignored patterns and paths.

Trait Implementations

impl Debug for SecurityScanner

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityScanner

fn default() -> Self

Returns the “default value” for a type.