Scan
14 items tagged with "scan"
Tutorials4
Try the Vibgrate CLI with npx (No Install)
Run a one-off Vibgrate drift scan using npx without installing anything, ideal for trying the CLI or running it in disposable environments.
Run the Vibgrate CLI with Docker
Run a Vibgrate drift scan inside Docker by mounting your project, keeping the scan isolated from your host toolchain and reproducible in CI.
Run Your First Vibgrate Scan on the Current Directory
Run your very first Vibgrate drift scan with a bare vg command and learn what the scan looks at and what it produces.
Read and Interpret Vibgrate Scan Output
Make sense of the default Vibgrate scan output: the results table, the findings it lists, and the DriftScore that summarizes them.
FAQs10
How do I run my first scan?
Run vg scan in your project directory. The scan recursively discovers projects (package.json, .csproj, pom.xml, requirements.txt), detects runtime ver...
What does the scan command analyze?
The scan analyzes: runtime versions (Node.js, .NET, Python, Java, Go, Rust, PHP, Ruby, and more), framework versions (React, Next.js, Angular, Vue, Ne...
What flags does the scan command support?
Key flags: --format (text/json/sarif/md), --out (output file), --fail-on (error/warn - exit code 2 if findings exist), --baseline (compare against bas...
How do I scan a specific directory instead of the whole project?
Pass the path as an argument: vg scan packages/api or vg scan /absolute/path/to/project. The scan will discover projects recursively from that path. T...
How do I scan a Node.js or TypeScript project?
Run vg scan in your project directory. Vibgrate detects package.json files, lockfiles (npm, pnpm, yarn), .nvmrc/.node-version, and tsconfig.json. It a...
How do I scan a .NET project?
Run vg scan /path/to/dotnet-solution. Vibgrate discovers .sln and .csproj files, evaluates target framework version (net6.0, net7.0, net8.0), .NET SDK...
How do I scan a Python project?
Run vg scan /path/to/python-project. Vibgrate detects requirements.txt, pyproject.toml, setup.py, and Pipfile. It analyzes Python version from .python...
How do I scan a Java project?
Run vg scan /path/to/java-project. Vibgrate discovers pom.xml (Maven) and build.gradle/build.gradle.kts (Gradle) files. It analyzes Java version, all ...
How do I scan for known vulnerabilities?
Run `vg scan --vulns`. It matches every installed dependency against the public OSV database and reports known vulnerabilities with advisory id and CV...
What does vg scan --full do?
`vg scan --full` runs a comprehensive scan in one command: the normal DriftScore, known-vulnerability detection (the same as `--vulns`), and, when a s...