Diff scan

[attiasas]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

Depends on:

• Add 'Title' attribute to PR information froggit-go#148
• Analyzer-Manager version: 1.18.0

Adding a diff mode to audit indicated by 2 new params:

• diffMode
• resultsToCompare

1. if provided only diffMode the sca will not run and will only generate SBOM information
2. if both provided:
   • for SCA we will get the SBOM, compare using the provided SBOM of the similar target and will only scan the dependencies that exists in the current and not the provided
   • for JAS the return result will already contain the diff (calculated by the analyzer manager)

[github-actions]

---

🐸 JFrog Frogbot