AWS Security Agent — Diff Scan Scan only the code that changed since a git ref. Faster than a full scan — focuses findings on the diff. No prior full scan needed. Local state Read for and . If missing, run the workflow inline first. Track scans in . Resolving the values you need | Placeholder | How to resolve | |-------------|----------------| | (agent space) | | | | (default ) | | | | | | | | | | | | | --- Workflow 1. Pre-scan checks. Same as full scan — read config, verify agent space, resolve values, generate workspace ID. 2. Ask what to scan against: - Uncommitted changes → (default) - Br…