Write code to do diff on syft and access log jsons
- Write package diff function - called at end of each parsing script
- If no difference between sbom and access log: rescan with tools, one that was just built is discarded
- Try / catch - if nothing to compare against, it changed
- Create tickets for the following ideas:
- Grab last access log from previous run
- Pulling from registry should always work
- Master branch only function?
- Compare feature branch against master? Would probably always have a diff
- Output packages list as pipeline artifacts - output as set - dump to JSON
Edited by Cody Miller