--diff with a commit or a range to check only what changed.
Three forms
The working tree never affects the result.
--diff reads the commits themselves, not your local edits.
Guides
Scan a pull request
Restrict a scan to the files one commit or one range touched, with —diff.
A full scan reads every file in the codebase. Pass
Each agent’s candidate files narrow to the touched set. An agent with no file scope has none to narrow and searches as usual. Every agent gets the commit’s patch in its prompt, so it has context on the change even when it reads further with its tools.
To run this check on each pull request, see Run agentgg in GitHub Actions.
Full flag list: Scan flags.