Built-in variables

Every scan starts with a set of built-in variables. They describe the target and its workspace and are available in any step's prompt - no setup required.

The built-ins

Variable	What it holds
repo_full	The target repository, e.g. owner/repo (or its URL).
commit_sha	The commit the scan is pinned to.
repo_scope	Your free-text description of what to focus on.
dependencies	The dependency repos checked out alongside the target.
configuration	The JSON configuration object you set on the scan.
workspace_root	Absolute path to the checked-out repository root.
workspace_layout	The dependency-expanded directory tree of the workspace.
workspace_manifest_json	A JSON manifest of every repo in the workspace and its commit.

Using them

Reference any built-in like any other variable:

Analyze {{repo_full}} at commit {{commit_sha}}.
Focus on: {{repo_scope}}.
Declared dependencies: {{dependencies}}.

Note

Built-in keys are reserved. A step's output format can't reuse one of these names, and neither can an extra key - the builder enforces this so references stay unambiguous.

Beyond the built-ins, downstream steps also see every key emitted by earlier depths, plus your own extra values.