Skip to content

feat: LLM review stage for enhanced reachability detection #50

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
joshbouncesecurity wants to merge 4 commits into
base: master
Choose a base branch
from
Draft

feat: LLM review stage for enhanced reachability detection #50

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
4ac1c36
feat: add LLM-based reachability review stage
joshbouncesecurity May 4, 2026
2cde85a
fix: add --llm-reachability flag to Go scan command
joshbouncesecurity May 4, 2026
ded9404
fix: address review findings on LLM reachability stage
joshbouncesecurity May 4, 2026
3d83787
refactor: run LLM reachability after app-context, not before
joshbouncesecurity May 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions apps/openant-cli/cmd/scan.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,7 @@ var (
scanDiffBase string
scanPR int
scanDiffScope string
scanLLMReachability bool
)

func init() {
Expand Down Expand Up @@ -79,6 +80,7 @@ func registerScanFlags(cmd *cobra.Command) {
cmd.Flags().StringVar(&scanDiffBase, "diff-base", "", "Incremental mode: filter pipeline to units overlapping diff vs this ref (e.g. origin/main, HEAD~5)")
cmd.Flags().IntVar(&scanPR, "pr", 0, "Incremental mode against a GitHub PR number (requires gh; mutex with --diff-base)")
cmd.Flags().StringVar(&scanDiffScope, "diff-scope", "changed_functions", "Diff scope: changed_files, changed_functions, callers")
cmd.Flags().BoolVar(&scanLLMReachability, "llm-reachability", false, "Enable the LLM reachability review stage (Opus). Surfaces additional entry points and external-input sites beyond the structural pass. Off by default — enabling this may incur additional LLM cost (one Opus call per ~25 units).")
}

func runScan(cmd *cobra.Command, args []string) {
Expand Down Expand Up @@ -197,6 +199,9 @@ func runScan(cmd *cobra.Command, args []string) {
if manifestPath != "" {
pyArgs = append(pyArgs, "--diff-manifest", manifestPath)
}
if scanLLMReachability {
pyArgs = append(pyArgs, "--llm-reachability")
}

// Pass repository metadata from project context so reports don't show
// [NOT PROVIDED] placeholders.
Expand Down
Loading
Loading