Struct ScannerConfig 

pub struct ScannerConfig {

    pub mode: AnalysisMode,
    pub min_severity: Severity,
    pub max_file_size_mb: Option<u64>,
    pub excluded_extensions: Vec<String>,
    pub excluded_directories: Vec<String>,
    pub excluded_files: Vec<String>,
    pub read_global_ignore: bool,
    pub read_vcsignore: bool,
    pub require_git_to_read_vcsignore: bool,
    pub one_file_system: bool,
    pub follow_symlinks: bool,
    pub scan_hidden_files: bool,
    pub include_nonprod: bool,
    pub enable_state_analysis: bool,
    pub enable_auth_analysis: bool,
    pub enable_panic_recovery: bool,
    pub enable_auth_as_taint: bool,
}

Fields

mode: AnalysisMode

The analysis mode to use.

min_severity: Severity

The minimum severity level to output

max_file_size_mb: Option<u64>

The maximum file size to scan, in megabytes.

excluded_extensions: Vec<String>

File extensions to exclude from scanning.

excluded_directories: Vec<String>

Directories to exclude from scanning.

excluded_files: Vec<String>

Excluded files

read_global_ignore: bool

RESERVED: not yet wired to walker. Whether to respect the global ignore file.

read_vcsignore: bool

Whether to respect VCS ignore files (.gitignore, ..) or not.

require_git_to_read_vcsignore: bool

Whether to require a .git directory to respect gitignore files.

one_file_system: bool

Whether to limit the search to starting file system or not.

follow_symlinks: bool

Whether to follow symlinks or not.

scan_hidden_files: bool

Whether to scan hidden files or not.

include_nonprod: bool

Whether to include findings from non-production paths (tests, vendor, benchmarks, etc.) at their original severity. When false (default), findings in these paths are downgraded by one severity tier.

enable_state_analysis: bool

Enable the state-model dataflow engine for resource lifecycle and auth-state analysis. Default: true.

enable_auth_analysis: bool

Enable auth-state analysis within the state engine. When false, only resource lifecycle findings (leak, use-after-close, double-close) are produced. Default: true.

enable_panic_recovery: bool

When true, per-file panics during analysis are caught and logged as warnings; the scan continues with the remaining files. Default false: a panic aborts the scan, preserving existing behaviour for users who want to catch engine bugs loudly.

enable_auth_as_taint: bool

Fold auth_analysis into the SSA/taint engine using the Cap::UNAUTHORIZED_ID cap. When true, request-bound handler parameters seed UNAUTHORIZED_ID into the taint state and a complementary set of sink / sanitizer rules participates in the flow. Default false while the standalone auth_analysis subsystem still carries the stable detection; flipping to true enables the taint-based path alongside it.

Trait Implementations

impl Clone for ScannerConfig

fn clone(&self) -> ScannerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScannerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ScannerConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ScannerConfig

where ScannerConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ScannerConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.