What does vg scan --full do?

Answer

`vg scan --full` runs a comprehensive scan in one command: the normal DriftScore, known-vulnerability detection (the same as `--vulns`), and, when a standards policy is committed, a banned-dependency report. It is the quickest way to get the complete picture without remembering individual flags.