Skip to main content

vulkro ci

Pro

vulkro ci is part of Pro, alongside the pull-request output and the diff-scoped release gate. On Free it stops before doing any work, prints what it needs and where to get it, and exits 1. See Pricing.

Produce a CI-friendly Markdown report: endpoints, findings, and a surface diff if you pass a base ref. Designed to be attached to a pipeline job or posted as a PR comment.

For the exit-code gate itself, use vulkro gate or vulkro scan with --fail-on; vulkro ci is a reporting command.

Usage​

vulkro ci [PATH] -o report.md
ArgumentDescriptionDefault
PATHPath to the project root..

Flags​

FlagDescription
--base <BASE>Optional base ref to include a surface diff.
--output, -o <OUTPUT>Write to a file instead of stdout.

Examples​

# Markdown report to a file.
vulkro ci . -o vulkro-ci.md

# Include a surface diff vs main.
vulkro ci . --base origin/main -o vulkro-ci.md

Command reference​

Generated from vulkro help ci on vulkro 0.26.0. This block is the authoritative flag, usage, and exit-code reference for this command; the prose above is the friendly explanation. Do not edit this block by hand; run npm run docs:cli after a release.

Print a CI-friendly Markdown report of endpoints, findings and changes.

Produce a CI-friendly markdown report (endpoints + findings + diff if base ref given).

Exit codes: `0` report written and no critical / high findings; `1` report written and at least one critical or high finding is present (the CI-gate signal); `2` bad base ref or a scan / IO error.

Usage: vulkro ci [OPTIONS] [PATH]

Arguments:
  [PATH]
          Path to the project root (default: current directory)
          
          [default: .]

Options:
      --base <BASE>
          Optional base ref to include a surface diff

      --offline
          Hard-disable every outbound network call for this run (sets VULKRO_OFFLINE=1). Blocks the CVE feed, the license heartbeat, the update check, webhooks, and any cloud AI endpoint; a loopback model (http://127.0.0.1, http://localhost) is still allowed. Equivalent to exporting VULKRO_OFFLINE=1, and the flag wins when both are set

  -o, --output <OUTPUT>
          Write to file instead of stdout

  -h, --help
          Print help (see a summary with '-h')
Last updated on