feat: show Arch column only when multiple architectures are scanned

action.yaml

@@ -407,43 +407,17 @@ runs:
         exit 1
       fi
 
-      # 5. Run multi-arch set-based diff (both are guaranteed present and valid)
+      # 5. Run multi-arch set-based diff and generate consolidated full summary report
       echo "Both head and target scans succeeded. Computing set-based vulnerability delta..."
       if ! node "${{ github.action_path }}/cve-diff.js" \
         "cve-reports/target" \
         "cve-reports/head" \
-        "${{ inputs.target-branch }}" > "${{ inputs.output-delta }}"; then
+        "${{ inputs.target-branch }}" \
+        "${{ inputs.output-summary }}" > "${{ inputs.output-delta }}"; then
         echo "::error::Failed to generate CVE differential report"
         exit 1
       fi
 
-      # 6. Generate full markdown summary report for primary platform
-      primary_sbom=""
-      if [ -f sboms/head/sbom-amd64.spdx.json ]; then
-        primary_sbom="sboms/head/sbom-amd64.spdx.json"
-      elif [ -f sboms/head/sbom-arm64.spdx.json ]; then
-        primary_sbom="sboms/head/sbom-arm64.spdx.json"
-      else
-        for f in sboms/head/sbom-*.spdx.json; do
-          if [ -f "$f" ]; then
-            primary_sbom="$f"
-            break
-          fi
-        done
-      fi
-
-      if [ -n "$primary_sbom" ]; then
-        if ! trivy sbom \
-          --skip-version-check \
-          --format template \
-          --template "@${{ github.action_path }}/markdown.tpl" \
-          --output "${{ inputs.output-summary }}" \
-          "$primary_sbom"; then
-          echo "::error::Trivy summary generation failed for primary SBOM: $primary_sbom"
-          exit 1
-        fi
-      fi
-
   - name: Publish Reports to Step Summary
     shell: bash
     run: |