This epic captures the implementation issues for the Incremental Scanning MVC phase as described in this [comment](https://gitlab.com/groups/gitlab-org/-/epics/15545#note_3010917876). ### [**MVC Phase**](https://gitlab.com/groups/gitlab-org/-/work_items/20508)**:** 1. **\[In Lightz\] Serialization of taint signatures to store in cache** - Currently disabled in Lightz due to an exception after a Semgrep bump 2. **\[In Lightz\] Cache invalidation** - We need to pass Lightz a list of changed files/functions so it recomputes only affected taint signatures while still running a full scan 3. **\[In Lightz\] Validation of cached taint signature fetching** - This was implemented but never tested; we need to validate it works as intended 4. **\[In GLAS\] Fetch cached artifacts from CI pipeline** 5. **\[In GLAS\] Configure Lightz to run with cache and pass diff files** to- Calculate diff files and configure Lightz to accept them while running a full scan