Skip to main content
Vibgrate Graph: over 40% fewer tokens, same results
Back to Tags

Code Scanning

3 items tagged with "code-scanning"

Filter by type:

Tutorials2

Tutorial

Upload Vibgrate SARIF to GitHub Code Scanning

Produce SARIF output with vg scan --format sarif and upload it to GitHub code scanning so drift findings appear in the Security tab and on PRs.

Tutorial

Produce a SARIF Report for Security Tooling

Generate a SARIF report with vg scan --format sarif so drift findings flow into GitHub code scanning and other SARIF-aware security tools.

FAQs1

FAQ

How do I upload SARIF results to GitHub Code Scanning?

Run scan with SARIF output: npx @vibgrate/cli scan --format sarif --out vibgrate.sarif --fail-on error. Then use github/codeql-action/upload-sarif@v3 ...