Struct ScanConfig 

pub struct ScanConfig {

    pub format: Option<String>,
    pub strict: bool,
    pub scan_type: Option<String>,
    pub recursive: bool,
    pub ci: bool,
    pub verbose: bool,
    pub min_confidence: Option<String>,
    pub skip_comments: bool,
    pub fix_hint: bool,
    pub compact: bool,
    pub no_malware_scan: bool,
    pub watch: bool,
    pub malware_db: Option<String>,
    pub custom_rules: Option<String>,
    pub output: Option<String>,
    pub deep_scan: bool,
    pub fix: bool,
    pub fix_dry_run: bool,
    pub warn_only: bool,
    pub min_severity: Option<String>,
    pub min_rule_severity: Option<String>,
    pub strict_secrets: bool,
    pub remote: Option<String>,
    pub git_ref: Option<String>,
    pub remote_auth: Option<String>,
    pub parallel_clones: Option<usize>,
    pub remote_list: Option<String>,
    pub awesome_claude_code: bool,
    pub badge: bool,
    pub badge_format: Option<String>,
    pub summary: bool,
    pub all_clients: bool,
    pub client: Option<String>,
    pub no_cve_scan: bool,
    pub cve_db: Option<String>,
    pub sbom: bool,
    pub sbom_format: Option<String>,
    pub sbom_npm: bool,
    pub sbom_cargo: bool,
}

Scan configuration (corresponds to CLI options).

Fields

format: Option<String>

Output format: “terminal”, “json”, “sarif”, “html”, “markdown”.

strict: bool

Strict mode: show medium/low severity findings and treat warnings as errors.

scan_type: Option<String>

Scan type: “skill”, “hook”, “mcp”, “command”, “rules”, “docker”, “dependency”, “subagent”, “plugin”.

recursive: bool

Recursive scan.

ci: bool

CI mode: non-interactive output.

verbose: bool

Verbose output.

min_confidence: Option<String>

Minimum confidence level: “tentative”, “firm”, “certain”.

skip_comments: bool

Skip comment lines when scanning.

fix_hint: bool

Show fix hints in terminal output.

compact: bool

Use compact output format (disable friendly advice).

no_malware_scan: bool

Disable malware signature scanning.

watch: bool

Watch mode: continuously monitor files for changes.

malware_db: Option<String>

Path to a custom malware signatures database (JSON).

custom_rules: Option<String>

Path to a custom rules file (YAML format).

output: Option<String>

Output file path (for HTML/JSON/SARIF output).

deep_scan: bool

Enable deep scan with deobfuscation.

fix: bool

Auto-fix issues (where possible).

fix_dry_run: bool

Preview auto-fix changes without applying them.

warn_only: bool

Warn-only mode: treat all findings as warnings (always exit 0).

min_severity: Option<String>

Minimum severity level to include: “critical”, “high”, “medium”, “low”.

min_rule_severity: Option<String>

Minimum rule severity to treat as errors: “error”, “warn”.

strict_secrets: bool

Strict secrets mode: disable dummy key heuristics for test files.

remote: Option<String>

Remote repository URL to scan.

git_ref: Option<String>

Git reference to checkout (branch, tag, commit).

remote_auth: Option<String>

GitHub authentication token (also reads from GITHUB_TOKEN env var).

parallel_clones: Option<usize>

Number of parallel clones for batch scanning.

remote_list: Option<String>

File containing list of repository URLs to scan.

awesome_claude_code: bool

Scan all repositories from awesome-claude-code.

badge: bool

Generate a badge for the scan result.

badge_format: Option<String>

Badge format: “markdown”, “html”, “json”.

summary: bool

Show summary only (useful for batch scanning).

all_clients: bool

Scan all installed AI coding clients (Claude Code, Cursor, etc.).

client: Option<String>

Specific client to scan: “claude-code”, “cursor”, “windsurf”, “cline”, “roo-code”, “claude-desktop”, “amazon-q”.

no_cve_scan: bool

Disable CVE vulnerability scanning.

cve_db: Option<String>

Path to a custom CVE database (JSON).

sbom: bool

Generate SBOM (Software Bill of Materials).

sbom_format: Option<String>

SBOM output format: “cyclonedx”, “spdx”.

sbom_npm: bool

Include npm dependencies in SBOM.

sbom_cargo: bool

Include Cargo dependencies in SBOM.

Trait Implementations

impl Clone for ScanConfig

fn clone(&self) -> ScanConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScanConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ScanConfig

fn default() -> ScanConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ScanConfig

where ScanConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ScanConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.