cli/core: drop --fail-on-find and allow/deny filters; docs updated

Author: cursoragent

README.md

@@ -26,9 +26,7 @@ Key flags:
 - `--patterns PATH`: specify patterns file (default: `patterns.toml`)
 - `--progress`: show progress bar during scanning
 - `--include-glob GLOB` / `--exclude-glob GLOB`
-- `--allow LIB` / `--deny LIB`
 - `--deterministic`: stable output ordering
-- `--fail-on-find`: exit 2 if findings exist
 - `--print-config`: print loaded `patterns.toml`
 - `--dry-run`: list files to be scanned
 

crates/cli/src/main.rs

@@ -39,22 +39,10 @@ struct Args {
     #[arg(long, value_name = "GLOB")]
     exclude_glob: Vec<String>,
 
-    /// Allow only these libraries
-    #[arg(long, value_name = "LIB")]
-    allow: Vec<String>,
-
-    /// Deny these libraries
-    #[arg(long, value_name = "LIB")]
-    deny: Vec<String>,
-
     /// Deterministic output ordering
     #[arg(long, action = ArgAction::SetTrue)]
     deterministic: bool,
 
-    /// Fail with code 2 if findings are present
-    #[arg(long, action = ArgAction::SetTrue)]
-    fail_on_find: bool,
-
     /// Print merged patterns/config and exit
     #[arg(long, action = ArgAction::SetTrue)]
     print_config: bool,
@@ -154,8 +142,6 @@ fn main() -> Result<()> {
     let mut cfg = Config {
         include_globs: args.include_glob.clone(),
         exclude_globs: args.exclude_glob.clone(),
-        allow_libs: args.allow.clone(),
-        deny_libs: args.deny.clone(),
         deterministic: args.deterministic,
         ..Default::default()
     };
@@ -210,9 +196,6 @@ fn main() -> Result<()> {
         fs::write(sarif_path, serde_json::to_vec_pretty(&sarif)?)?;
     }
 
-    if args.fail_on_find && !findings.is_empty() {
-        std::process::exit(2);
-    }
     Ok(())
 }
 

crates/scanner-core/src/lib.rs

@@ -180,10 +180,6 @@ pub struct Config {
     #[serde(default)]
     pub exclude_globs: Vec<String>,
     #[serde(default)]
-    pub allow_libs: Vec<String>,
-    #[serde(default)]
-    pub deny_libs: Vec<String>,
-    #[serde(default)]
     pub deterministic: bool,
     #[serde(skip)]
     pub progress_callback: Option<ProgressCallback>,
@@ -199,8 +195,6 @@ impl std::fmt::Debug for Config {
             .field("max_file_size", &self.max_file_size)
             .field("include_globs", &self.include_globs)
             .field("exclude_globs", &self.exclude_globs)
-            .field("allow_libs", &self.allow_libs)
-            .field("deny_libs", &self.deny_libs)
             .field("deterministic", &self.deterministic)
             .field("progress_callback", &"<callback>")
             .finish()
@@ -213,8 +207,6 @@ impl Clone for Config {
             max_file_size: self.max_file_size,
             include_globs: self.include_globs.clone(),
             exclude_globs: self.exclude_globs.clone(),
-            allow_libs: self.allow_libs.clone(),
-            deny_libs: self.deny_libs.clone(),
             deterministic: self.deterministic,
             progress_callback: self.progress_callback.clone(),
         }
@@ -227,8 +219,6 @@ impl Default for Config {
             max_file_size: default_max_file_size(),
             include_globs: default_include_globs(),
             exclude_globs: Vec::new(),
-            allow_libs: Vec::new(),
-            deny_libs: Vec::new(),
             deterministic: false,
             progress_callback: None,
         }
@@ -920,12 +910,6 @@ impl<'a> Scanner<'a> {
             });
         }
 
-        findings.retain(|f| {
-            self.config.allow_libs.is_empty()
-                || self.config.allow_libs.iter().any(|a| a == &f.library)
-        });
-        findings.retain(|f| !self.config.deny_libs.iter().any(|d| d == &f.library));
-
         Ok(findings)
     }
 }