Public search query: agent's scan diff flagged config changes as new vulnerabilities