Problem
cora scan is LLM-only: it does not run the secrets/security scanners and does not apply ignore.rules or the inline cora-ignore: marker added in #554/#593 (those only apply in cora review). An LLM 502 therefore yields "No issues found" even for an obvious hardcoded password.
Direction
Run the deterministic stage on scanned files, merge with LLM findings, and apply ignore.rules + inline_suppress::apply (reading markers from file contents instead of diff lines).
Problem
cora scanis LLM-only: it does not run the secrets/security scanners and does not applyignore.rulesor the inlinecora-ignore:marker added in #554/#593 (those only apply incora review). An LLM 502 therefore yields "No issues found" even for an obvious hardcoded password.Direction
Run the deterministic stage on scanned files, merge with LLM findings, and apply
ignore.rules+inline_suppress::apply(reading markers from file contents instead of diff lines).