diffscope 0.5.3

A composable code review engine with smart analysis, confidence scoring, and professional reporting
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use anyhow::Result;
use async_trait::async_trait;
use crate::core::{UnifiedDiff, LLMContextChunk, ContextType};
use crate::plugins::PreAnalyzer;
use std::path::PathBuf;
use std::process::Command;

pub struct SemgrepAnalyzer;

impl SemgrepAnalyzer {
    pub fn new() -> Self {
        Self
    }
}

#[async_trait]
impl PreAnalyzer for SemgrepAnalyzer {
    fn id(&self) -> &str {
        "semgrep"
    }
    
    async fn run(&self, diff: &UnifiedDiff, repo_path: &str) -> Result<Vec<LLMContextChunk>> {
        let file_path = PathBuf::from(repo_path).join(&diff.file_path);
        
        let output = Command::new("semgrep")
            .arg("--config=auto")
            .arg("--json")
            .arg("--quiet")
            .arg(file_path.to_string_lossy().as_ref())
            .output();
        
        match output {
            Ok(output) => {
                let stdout = String::from_utf8_lossy(&output.stdout);
                if !stdout.trim().is_empty() {
                    Ok(vec![LLMContextChunk {
                        file_path: diff.file_path.clone(),
                        content: format!("Semgrep analysis:\n{}", stdout),
                        context_type: ContextType::Documentation,
                        line_range: None,
                    }])
                } else {
                    Ok(Vec::new())
                }
            }
            Err(_) => {
                Ok(Vec::new())
            }
        }
    }
}