✨ Feature DependencyDiff CLI (Version 0 Part 1)

[aidenwang9867]

What kind of change does this PR introduce?

This PR introduces the v0, p1 of the design Dependency-diff CLI,

including definitions of structures Dependency, Vulnerability and ScorecardResult;

Currently in ScorecardResult, only the Scorecard aggregate score is used.

• PR title follows the guidelines defined in our pull request documentation

What is the current behavior?

The current Scorecard Action only reports the Scorecard results for the repository under analysis. This design will surface Scorecard results for the arriving dependencies in new pull requests.

What is the new behavior (if this is a feature change)?**

Since this PR only includes static definitions of structures, no new behaviors are introduced. However, with Version Zero of the feature, users can use the CLI to surface the scorecard results (aggregate scores) for the dependency diffs (changes) between a user-specified head commit and a base commit in different output format.

• Tests for the changes have been added (for bug fixes/features)
  Part1 does not include functions and APIs. Tests will be added in incoming parts.

Which issue(s) this PR fixes

issue #2008.

Special notes for your reviewer

Does this PR introduce a user-facing change?

No.

(In particular, describe what changes users might need to make in their
application as a result of this pull request.)

NONE

[codecov]

Codecov Report

Merging #2030 (54a00a1) into main (e608741) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #2030   +/-   ##
=======================================
  Coverage   50.56%   50.56%           
=======================================
  Files          87       87           
  Lines        7202     7202           
=======================================
  Hits         3642     3642           
  Misses       3315     3315           
  Partials      245      245           

[github-actions]

Integration tests success for
[d043b13]
(https://github.com/ossf/scorecard/actions/runs/2638190649)

[github-actions]

Integration tests success for
[5f95398]
(https://github.com/ossf/scorecard/actions/runs/2638202330)

[github-actions]

Integration tests success for
[c29a841]
(https://github.com/ossf/scorecard/actions/runs/2638203226)

[github-actions]

Integration tests success for
[572bef5]
(https://github.com/ossf/scorecard/actions/runs/2638204003)

[github-actions]

Integration tests success for
[dc50937]
(https://github.com/ossf/scorecard/actions/runs/2638204448)

[github-actions]

Integration tests success for
[4e90206]
(https://github.com/ossf/scorecard/actions/runs/2638939000)

[github-actions]

Integration tests success for
[1fee520]
(https://github.com/ossf/scorecard/actions/runs/2639258540)

[Spikebady]

Tha.7

[Spikebady]

I have yet to see my videos

[github-actions]

Integration tests success for
[c733ba5]
(https://github.com/ossf/scorecard/actions/runs/2651640543)

[github-actions]

Integration tests success for
[cdd1840]
(https://github.com/ossf/scorecard/actions/runs/2652100574)

[laurentsimon]

Thanks!

[aidenwang9867]

Thanks!

thank u so much!

[github-actions]

Integration tests success for
[2ac26d7]
(https://github.com/ossf/scorecard/actions/runs/2652278106)

[github-actions]

Integration tests success for
[3fd0f77]
(https://github.com/ossf/scorecard/actions/runs/2652527980)

[github-actions]

Integration tests success for
[2b0ffed]
(https://github.com/ossf/scorecard/actions/runs/2652481960)

[github-actions]

Integration tests success for
[54a00a1]
(https://github.com/ossf/scorecard/actions/runs/2652821676)