v5.10.0

What's Changed

• [DIT-13659]: CLI: refuse a scan from a dirty tree or a non-default branch in #159
  • ditto scan now requires a clean checkout of your repository's default branch. Scanning from a tree with uncommitted changes, from a non-default branch, or from a detached HEAD stops with a message explaining what to change, before anything is uploaded.
  • Scan records the commit and branch it read, and the code links Ditto builds point at them. A scan from anywhere else describes lines your default branch never had, so a later scan reports those links as changed or removed when nothing changed.
  • The default branch comes from origin/HEAD, falling back to a local main or master. Since that reference is set when you clone and doesn't update on its own, a mismatch is confirmed against your remote first — a branch renamed after you cloned won't block you.
  • Scanning outside a Git repository is unaffected.

Full Changelog: v5.9.1...v5.10.0