chore(security): switch mend check to full repo baseline scan

[SteinGabriel]

Summary

Switches the Mend (WhiteSource) security check from diff mode to baseline mode, so PR checks report the full repo vulnerability inventory instead of only new vulnerabilities introduced by the diff.

Changes

.whitesource

• checkRunSettings.displayMode — "diff" → "baseline". Only this setting changed; severity thresholds and SAST config untouched.

Tests

• No automated test surface — this is a scanner config file, not application code.
• Validated the file is still valid JSON after the edit.

How to test

1. Confirm config change

Check .whitesource in this PR — checkRunSettings.displayMode should read "baseline".

2. Verify on a future PR (not this one)

Important: Mend reads .whitesource from the base branch, not the PR branch. This PR's own Mend check will still run in diff mode ("did not find any new vulnerabilities", "Base branch total remaining vulnerabilities: N") because the base branch config hasn't changed yet. The baseline behavior only takes effect once this PR merges — verify it on the next PR opened afterward: the Mend check should report total vulnerabilities across the whole repo instead of a diff-only summary.

Reference: Mend docs — displayMode / Build Settings

[changeset-bot]

⚠️ No Changeset found

Latest commit: cadeae1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[nx-cloud]

View your CI Pipeline Execution ↗ for commit cadeae1

Command	Status	Duration	Result
nx affected -t build lint test docs e2e-ci	✅ Succeeded	<1s	View ↗
nx-cloud record -- nx format:check --verbose	✅ Succeeded	4s	View ↗

💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗

---

☁️ Nx Cloud last updated this comment at 2026-07-14 22:38:26 UTC

[pkg-pr-new]

Open in StackBlitz

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/javascript-sdk@591

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/ping-protect@591

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/token-vault@591

commit: cadeae1

[vatsalparikh]

Tested with Login Framework PR. Changing diff to baseline shows mend security issues in the current PR. Thank you so much, Gabriel!