From b3a2f082e1d15222da697c62f80ebd5f5dc9c49f Mon Sep 17 00:00:00 2001
From: Philipp Horstenkamp <philipp@horstenkamp.de>
Date: Sun, 13 Sep 2026 00:42:46 +0200
Subject: [PATCH 1/2] fix(template): remove misconfigurations and secrets
 sections from markdown.tpl

---
 markdown.tpl | 36 ++----------------------------------
 1 file changed, 2 insertions(+), 34 deletions(-)

diff --git a/markdown.tpl b/markdown.tpl
index 45bab8e..f229108 100644
--- a/markdown.tpl
+++ b/markdown.tpl
@@ -14,10 +14,7 @@
   {{- end }}
 {{- end }}
 
-{{- $hasFindings := false }}
-
 {{- if .Vulnerabilities }}
-{{- $hasFindings = true }}
 #### Target: `{{ $targetName }}` (Vulnerabilities)
 
 | Severity | CVE | Package | Installed | Fixed In | Title |
@@ -30,38 +27,9 @@
 {{- end }}
 {{- end }}
 {{- end }}
-{{- end }}
-
-{{- if .Misconfigurations }}
-{{- $hasFindings = true }}
-#### Target: `{{ $targetName }}` (Misconfigurations)
-
-| Severity | Rule ID | Title | Message | Resolution |
-| :--- | :--- | :--- | :--- | :--- |
-{{- $misconfs := .Misconfigurations }}
-{{- range $sev := list "CRITICAL" "HIGH" "MEDIUM" "LOW" "UNKNOWN" }}
-{{- range $m := $misconfs }}
-{{- if eq $m.Severity $sev }}
-| {{ if eq $m.Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq $m.Severity "HIGH" }}🟠 HIGH{{ else if eq $m.Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq $m.Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ $m.Severity }}{{ end }} | [{{ $m.ID }}]({{ $m.PrimaryURL }}) | {{ $m.Title }} | {{ $m.Message }} | {{ default "-" $m.Resolution }} |
-{{- end }}
-{{- end }}
-{{- end }}
-{{- end }}
-
-{{- if .Secrets }}
-{{- $hasFindings = true }}
-#### Target: `{{ $targetName }}` (Secrets)
-
-| Severity | Rule ID | Title | Lines |
-| :--- | :--- | :--- | :--- |
-{{- range .Secrets }}
-| {{ if eq .Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq .Severity "HIGH" }}🟠 HIGH{{ else if eq .Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq .Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ .Severity }}{{ end }} | {{ .RuleID }} | {{ .Title }} | L{{ .StartLine }}-L{{ .EndLine }} |
-{{- end }}
-{{- end }}
-
-{{- if not $hasFindings }}
+{{- else }}
 #### Target: `{{ $targetName }}`
-✅ No security issues found.
+✅ No vulnerabilities found.
 {{- end }}
 
 {{- end }}

From e9ec17323b7e11f61e7122350693cf20f2ceee69 Mon Sep 17 00:00:00 2001
From: Philipp Horstenkamp <philipp@horstenkamp.de>
Date: Sun, 13 Sep 2026 01:07:07 +0200
Subject: [PATCH 2/2] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 4715a52..01f2cba 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# CVE Differential (`cve-differential`)
+# CVE Differential
 
 A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image.