README.md

@@ -1,4 +1,4 @@
-# CVE Differential (`cve-differential`)
+# CVE Differential
 
 A self-contained Gitea and GitHub Actions composite action that extracts multi-platform SBOM attestations from container images, runs vulnerability scans with [Trivy](https://github.com/aquasecurity/trivy), and produces a set-based CVE delta report between a head image and a target baseline image.
 

markdown.tpl

@@ -14,10 +14,7 @@
   {{- end }}
 {{- end }}
 
-{{- $hasFindings := false }}
-
 {{- if .Vulnerabilities }}
-{{- $hasFindings = true }}
 #### Target: `{{ $targetName }}` (Vulnerabilities)
 
 | Severity | CVE | Package | Installed | Fixed In | Title |
@@ -30,38 +27,9 @@
 {{- end }}
 {{- end }}
 {{- end }}
-{{- end }}
+{{- else }}
-
-{{- if .Misconfigurations }}
-{{- $hasFindings = true }}
-#### Target: `{{ $targetName }}` (Misconfigurations)
-
-| Severity | Rule ID | Title | Message | Resolution |
-| :--- | :--- | :--- | :--- | :--- |
-{{- $misconfs := .Misconfigurations }}
-{{- range $sev := list "CRITICAL" "HIGH" "MEDIUM" "LOW" "UNKNOWN" }}
-{{- range $m := $misconfs }}
-{{- if eq $m.Severity $sev }}
-| {{ if eq $m.Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq $m.Severity "HIGH" }}🟠 HIGH{{ else if eq $m.Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq $m.Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ $m.Severity }}{{ end }} | [{{ $m.ID }}]({{ $m.PrimaryURL }}) | {{ $m.Title }} | {{ $m.Message }} | {{ default "-" $m.Resolution }} |
-{{- end }}
-{{- end }}
-{{- end }}
-{{- end }}
-
-{{- if .Secrets }}
-{{- $hasFindings = true }}
-#### Target: `{{ $targetName }}` (Secrets)
-
-| Severity | Rule ID | Title | Lines |
-| :--- | :--- | :--- | :--- |
-{{- range .Secrets }}
-| {{ if eq .Severity "CRITICAL" }}🔴 CRITICAL{{ else if eq .Severity "HIGH" }}🟠 HIGH{{ else if eq .Severity "MEDIUM" }}🟡 MEDIUM{{ else if eq .Severity "LOW" }}🔵 LOW{{ else }}⚪ {{ .Severity }}{{ end }} | {{ .RuleID }} | {{ .Title }} | L{{ .StartLine }}-L{{ .EndLine }} |
-{{- end }}
-{{- end }}
-
-{{- if not $hasFindings }}
 #### Target: `{{ $targetName }}`
-✅ No security issues found.
+✅ No vulnerabilities found.
 {{- end }}
 
 {{- end }}