Merge pull request #9 from imjasonh/remove-analyze-mode

Remove analyze mode - simplify to only use malcontent diff

Author: imjasonh

.github/workflows/format-check.yml

@@ -0,0 +1,27 @@
+name: Format Check
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - "src/**"
+      - "package.json"
+      - "package-lock.json"
+      - ".prettierrc.json"
+
+jobs:
+  format:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check formatting
+        run: npm run format:check

.husky/pre-commit

@@ -0,0 +1 @@
+npx lint-staged

.prettierignore

@@ -0,0 +1,5 @@
+dist/
+node_modules/
+*.md
+LICENSE
+.github/

.prettierrc.json

@@ -0,0 +1,9 @@
+{
+  "semi": true,
+  "singleQuote": true,
+  "tabWidth": 2,
+  "trailingComma": "none",
+  "printWidth": 100,
+  "bracketSpacing": true,
+  "arrowParens": "always"
+}

README.md

@@ -87,7 +87,6 @@ jobs:
 | Input | Description | Default |
 |-------|-------------|---------|
 | `github-token` | GitHub token for API access | `${{ github.token }}` |
-| `mode` | Analysis mode: `diff` or `analyze` | `diff` |
 | `base-path` | Base directory to analyze | `.` |
 | `malcontent-version` | Version of malcontent to use | `latest` |
 | `fail-on-increase` | Fail if risk score increases | `true` |
@@ -128,16 +127,15 @@ jobs:
     exit 1
 ```
 
-## Modes
+## How It Works
 
-### Diff Mode (Default)
-Uses malcontent's native `diff` command to compare base and head versions. This is the most efficient method.
+This action uses malcontent's native `diff` command to compare security behaviors between base and head versions of your code. It:
 
-### Analyze Mode
-Only analyzes the head version without comparison. Useful for:
-- Initial security scans
-- When there's no base version to compare
-- Quick security checks
+1. Detects the base and head commits (from PR or push context)
+2. Extracts changed files to temporary directories
+3. Runs `malcontent diff` to compare behaviors
+4. Reports findings via PR comments or workflow summaries
+5. Can fail the build if risk increases
 
 ## Building
 

action.yml

@@ -32,10 +32,6 @@ inputs:
     description: 'Base path within the repository to run malcontent (defaults to repository root)'
     required: false
     default: '.'
-  mode:
-    description: 'Mode to run malcontent in: "diff" (default) or "analyze"'
-    required: false
-    default: 'diff'
 
 outputs:
   diff-summary: