Function buildPolicyDiffDisplay

cmd/validate/vsa.go:1030–1064

buildPolicyDiffDisplay creates a PolicyDiffDisplay from AllSectionsData Returns nil if there is no policy diff

(data AllSectionsData)

// buildPolicyDiffDisplay creates a PolicyDiffDisplay from AllSectionsData
// Returns nil if there is no policy diff
func buildPolicyDiffDisplay(data AllSectionsData) *PolicyDiffDisplay {
	if !data.HasPolicyDiff {
		return nil
	}

	diff := &PolicyDiffDisplay{
		AffectedImages: strings.Join(data.AffectedImages, ", "),
	}

	// Aggregate policy diff counts across all affected images
	totals := aggregatePolicyDiffTotals(data.PolicyDiffCounts)

	// Build added line
	if totals.Added > 0 {
		diff.Added = fmt.Sprintf("[include] %d", totals.Added)
	} else {
		diff.Added = noPolicyDiff
	}

	// Build removed line
	if totals.Removed > 0 {
		diff.Removed = fmt.Sprintf("%d", totals.Removed)
	} else {
		diff.Removed = noPolicyDiff
	}

	// Build changed line
	if totals.Changed > 0 {
		diff.Changed = fmt.Sprintf("%d", totals.Changed)
	} else {
		diff.Changed = noPolicyDiff
	}

	return diff
}

// String formats the Policy Diff section for display
func (p PolicyDiffDisplay) String() string {