vmfunc 6ec0b60e5a feat: diff mode with json snapshot store ...

re-scans become a monitor: -diff snapshots each target's normalized
findings to a per-target json file and, on the next run, surfaces only
the delta (+ new / - gone) against the last snapshot, then overwrites it
so each run diffs against the previous one. behavior is unchanged when
-diff is off.

new internal/store keys the set-difference off finding.Key (already
stable across runs) and uses only encoding/json + os - no new deps.
snapshot files are sanitized per target (no traversal), written 0600
under 0750 dirs. -store picks the location: explicit dir, else the log
dir, else <user-config>/sif/state. a missing snapshot is a clean
baseline, a corrupt one self-heals on the next save.

2026-06-10 16:39:04 -07:00

..

config_test.go

feat: diff mode with json snapshot store

2026-06-10 16:39:04 -07:00

config.go

feat: diff mode with json snapshot store

2026-06-10 16:39:04 -07:00