Getting Started: CI/CD Quickstart
Set up continuous drift detection in under 10 minutes. Quick-start templates for GitHub Actions, Azure DevOps, GitLab CI, and generic pipelines.
Comprehensive documentation and guides for the Vibgrate CLI — installation, commands, CI integration, configuration, and more.
Set up continuous drift detection in under 10 minutes. Quick-start templates for GitHub Actions, Azure DevOps, GitLab CI, and generic pipelines.
Install the Vibgrate CLI, run your first scan, and understand your Upgrade Drift Score in under five minutes. This guide covers installation on every major platform and walks through the essential first-scan workflow.
A step-by-step guide to scanning Node.js and TypeScript projects with the Vibgrate CLI — from a single package.json to complex monorepos with multiple workspaces.
Scan .NET solutions and projects for upgrade drift — runtime version lag, NuGet package drift, target framework analysis, and more.
Scan Python projects for dependency drift using requirements.txt, pyproject.toml, and other Python manifests with the Vibgrate CLI.
Scan Java and JVM projects for dependency drift — Maven, Gradle, and Spring Boot projects are all supported by the Vibgrate CLI.
Everything you need to know about the vibgrate init command: creating the .vibgrate directory, generating a default config file, and optionally establishing your first baseline.
The primary CLI command. Scan your project for upgrade drift, generate reports in multiple formats, enforce quality gates, and optionally push results to the dashboard.
Establish a drift baseline snapshot for delta comparison. Baselines are the foundation of drift fitness functions and CI regression gates.
Generate Markdown, text, or JSON reports from existing scan artifacts. Perfect for sharing drift status with stakeholders who do not use the CLI.
Export CycloneDX or SPDX SBOMs from scan artifacts, and compare dependency deltas between two scans for supply-chain governance.
Upload scan results to the Vibgrate Dashboard API for team visibility, portfolio tracking, and historical trend analysis.
Generate HMAC-signed DSN tokens for authenticating scan uploads to the Vibgrate Dashboard. Supports US and EU data residency regions.
Check for and install Vibgrate CLI updates. Supports npm, pnpm, yarn, and bun package managers.
A deep dive into how the Vibgrate Upgrade Drift Score is calculated — the four weighted components, risk levels, and how to interpret your score.
Turn drift scoring into a formal quality gate. Learn how baselines, drift budgets, and worsening thresholds create fitness functions that prevent drift regression in CI.
A transparent guide to Vibgrate's privacy-first architecture — what data is collected, what is never collected, and how to use privacy modes.
Import Vibgrate's core TypeScript types for programmatic use — build custom tools, dashboards, and integrations on top of the scan artifact schema.
Run full drift analysis without any network connectivity using downloaded package manifests. Perfect for secure, restricted, or air-gapped environments.
A comprehensive guide to all extended scanners in the Vibgrate CLI — platform matrix, dependency risk, security posture, architecture layers, code quality, and more.
A guide to all four output formats supported by the Vibgrate CLI — when to use each, what they contain, and how to integrate them into your workflows.
Complete reference for the Vibgrate configuration file — thresholds, scanner toggles, exclude patterns, and all supported config formats.
Set up Vibgrate in GitHub Actions for continuous drift detection, SARIF integration with Code Scanning, and automated dashboard uploads.
Set up Vibgrate in Azure DevOps Pipelines for continuous drift detection, SARIF artifact publishing, and drift budget enforcement.
Set up Vibgrate in GitLab CI/CD for continuous drift detection, SAST report integration, and drift budget enforcement.
Use Vibgrate in any CI system — Jenkins, CircleCI, Bitbucket Pipelines, or custom build scripts. The CLI requires no login, produces standard outputs, and works entirely offline.