cve-differential

9 Commits

Include renames

Author	SHA1	Message	Date
Philipp	599b74ef49	refactor(action): replace bash blocks with zero-dependency Node.js modules Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 1m53s Details Extract ~450 lines of complex bash from action.yaml into modular, unit-tested Node.js scripts in lib/. All logic is covered by 26 native node:test unit tests (node --test, no external dependencies). Modules added: - lib/platforms.js - platform parsing and OCI manifest auto-discovery - lib/distro.js - SPDX PURL distro detection (os_name/os_version) - lib/verifier.js - Trivy arch mapping and SHA256 verification - lib/diagnostics.js - CI terminal diagnostic formatters - lib/install-trivy.js - Trivy install/verify entrypoint (replaces bash step) - lib/extract-sboms.js - SBOM extraction entrypoint (replaces bash step) - lib/scan-sboms.js - SBOM scan + diff entrypoint (replaces bash step) Tests added (all pass, auto-discovered by ode --test): - test/platforms.test.js - test/distro.test.js - test/verifier.test.js - test/diagnostics.test.js - test/orchestration.test.js action.yaml shrinks from 554 to 107 lines. Inputs are bridged to Node scripts via INPUT_* env vars so modules are fully decoupled from the Actions runner and testable in isolation.	2026-09-15 00:34:23 +02:00
Philipp	e394966a96	feat: show Arch column only when multiple architectures are scanned Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 3m5s Details	2026-09-13 22:46:05 +02:00
Philipp	e232a22547	feat: support dynamic multi-architecture discovery and iteration	2026-09-13 22:42:40 +02:00
Philipp	86a00c54dc	feat: add use-inbuild-sbom input defaulting to false Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 35s Details	2026-09-13 20:34:52 +02:00
Philipp	77f3cf68e4	feat: warn when an image has 0 reported CVEs and display warning banner Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 47s Details	2026-09-13 20:02:35 +02:00
Philipp	3b458f8749	feat: add dual-side diagnostic overview and gating to ensure both scans succeed Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 36s Details	2026-09-13 19:58:54 +02:00
Philipp	e4a0cac9ff	refactor: internalize trivy version management and remove input Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 36s Details	2026-09-13 03:41:34 +02:00
Philipp	f246ae5fcd	feat: add write-summary option to publish reports to step summary Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 33s Details	2026-09-13 00:41:19 +02:00
Philipp	bf996103f5	feat: initial commit of cve-differential action	2026-09-13 00:12:26 +02:00