How do I set up Vibgrate in GitLab CI?

Answer

Use node:22 image and run npx @vibgrate/cli scan . --format sarif --out vibgrate.sarif --fail-on error. Add artifacts.reports.sast: vibgrate.sarif for SAST integration. Findings appear in Security Dashboard and merge requests. Store VIBGRATE_DSN in CI/CD variables for dashboard push.