Push Scan Results and SBOM to Vibgrate Cloud
Sign in with vg login, push scan results to Vibgrate Cloud with vg scan --push for team visibility, and export a local CycloneDX SBOM as a companion supply-chain artifact.
Vibgrate Cloud gives your team a shared view of scan results and drift trends. Pushing scans there, while keeping a local SBOM, covers both team visibility and supply-chain inventory. This tutorial signs in, pushes a scan, and exports an SBOM.
Prerequisites
- A Vibgrate Cloud workspace
- Node.js installed
Steps
1. Install the CLI
npm i -g @vibgrate/cli
2. Sign in to Vibgrate Cloud
Authenticate from the browser, no token to copy or paste:
vg login
3. Scan and push
Scan the current directory and upload the results in one step:
vg scan --push
The --push flag uploads the scan to Vibgrate Cloud, where your team sees the DriftScore and trend over time.
4. Export the SBOM
Keep a local component inventory alongside the cloud upload:
vg sbom export --format cyclonedx --out sbom.cdx.json
5. Confirm in the dashboard
Open the dashboard at dash.vibgrate.com and confirm the new scan appears for your project with its DriftScore.
Verification
vg scan --push exits 0, the scan appears in Vibgrate Cloud, and sbom.cdx.json exists locally with a populated components list.
Next Steps
Wire vg scan --push and SBOM export into CI so every build updates Vibgrate Cloud and produces an inventory, and add a drift gate to block regressions.