scanFile()

scanFile(filePath, root, options): Promise<{ relPath: string; result: FileScanResult; }>

Scans a single file with optional caching and presentation filtering.

Invariants:

Binary files are skipped and return an empty result.
When caching is enabled, baseline scan always runs with minSeverity: "LOW" and inline ignores enabled.
Presentation filtering is applied after cache retrieval.
Cache writes are fire-and-forget and never block execution. Returns null if file is binary or scan fails.

Fix Semantics:

When shouldApplyFixes is enabled, fixes are applied immediately after scanning and cache is updated.

Parameters

string

string

Promise<{ relPath: string; result: FileScanResult; }>