Back to Documentation

Configuration

Configure DeepSweep for your workflow

Secure Configuration Templates

Starting a project from scratch, or hardening one that grew organically? DeepSweep generates a hardened agent-configuration template for the assistants you use — language-aware, and with MCP wiring included if you want it. You review the diff before anything lands in the repository.

Review Options

Two decisions shape a review: the severity that counts as a failure, and whether MCP configuration checking is included. Both are settings, not flags. A finished review exports as JSON or SARIF, so a report can go straight into code scanning. In CI the equivalent threshold is the Action's fail-below-score input, which keeps a local review and a pipeline review in agreement.

Telemetry

DeepSweep collects anonymous usage data to improve detection patterns: finding counts, rule identifiers, which editor you use and which language a file was. It never collects your source code, your file paths, your project names or your identity. Privacy settings show exactly what is enabled and turn it off in one click. Set DEEPSWEEP_TELEMETRY=off to send none of it. On air-gapped machines, set DEEPSWEEP_OFFLINE=1 and the extension makes no network request of any kind — the review still runs, because it always ran on your machine.