Improve monorepo scan diagnostics and guidance

[lelia]

Summary

• Clarify monorepo scan scoping, workspace flags, CI path filters, and timeout behavior.
• Route full-scan and streamed-diff API failures through the configured infrastructure exit code.
• Add concise scan configuration, manifest-count, baseline, and fallback diagnostics.
• Add a changed-workspace GitHub 操作 matrix example.

Validation

• uv run pytest -q tests/unit tests/core — 488 passed, 2 skipped
• actionlint on the documented workflow
• git diff --check
• Ruff lint checks

Public Changelog

Improved monorepo scan diagnostics and guidance, with consistent API-error exit-code handling.

Refs: CE-436

[github-actions]

🚀 CLI preview published: socketsecurity==2.7.0.dev3321567765801

pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple socketsecurity==2.7.0.dev3321567765801

TestPyPI's package index can take several minutes to expose a newly uploaded version.

[github-actions]

🐳 Docker preview published: socketdev/cli:pr-325

This mutable tag is only created when a Docker preview is explicitly requested.

[lelia]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 3d8cdb3. Configure here.}