diffscope 0.5.2

A composable code review engine with smart analysis, confidence scoring, and professional reporting
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

# DiffScope Configuration Example
# Rename this file to .diffscope.yml to use

# Model configuration
model: gpt-4o
temperature: 0.2
max_tokens: 4000

# API configuration (optional - can use environment variables)
# api_key: your-api-key-here
# base_url: https://api.openai.com/v1

# Global exclude patterns
exclude_patterns:
  - "**/*.generated.*"
  - "**/node_modules/**"
  - "**/target/**"
  - "**/.git/**"
  - "**/dist/**"
  - "**/build/**"

# Path-specific configurations
paths:
  # API endpoints need extra security focus
  "src/api/**":
    focus:
      - security
      - validation
      - authentication
    severity_overrides:
      security: error  # Elevate all security issues to errors
    system_prompt: |
      Pay special attention to:
      - SQL injection vulnerabilities
      - Authentication bypass risks
      - Input validation gaps
      - Rate limiting implementation

  # Test files have different requirements
  "tests/**":
    focus:
      - coverage
      - assertions
      - test_quality
    severity_overrides:
      style: suggestion  # Downgrade style issues in tests
    ignore_patterns:
      - "*.snapshot"
      - "*.fixture"

  # Frontend components
  "src/components/**":
    focus:
      - accessibility
      - performance
      - react_best_practices
    extra_context:
      - "src/styles/theme.ts"  # Always include theme context

  # Database migrations are critical
  "migrations/**":
    focus:
      - data_integrity
      - rollback_safety
      - performance
    severity_overrides:
      bug: error  # All bugs in migrations are critical
    system_prompt: |
      Database migrations are critical. Check for:
      - Data loss risks
      - Rollback capability
      - Index performance impact
      - Lock duration concerns

  # Documentation files
  "docs/**":
    focus:
      - clarity
      - completeness
      - examples
    severity_overrides:
      bug: info  # Bugs in docs are less critical

# Plugin configuration
plugins:
  eslint: true
  semgrep: true
  duplicate_filter: true