Skip to main content

vulkro intel

Threat-intelligence bundles shipped with Vulkro. Each subsystem maintains a small, curated catalogue baked into the binary (known-compromised npm packages, known-bad public Docker images, and similar). The catalogues are deliberately small: false-positive cost dominates the quiet false-negative gap. For breadth, overlay the GitHub Advisory feed and your own vendor advisory feeds.

Sub-commands​

vulkro intel status
Sub-commandDescription
statusPrint the provenance for every shipped intel bundle: name, version, SHA-256 of the canonical bytes, entry count, and last-updated date.

intel status flags​

FlagDescriptionDefault
--format <FORMAT>table (default) or json.table

Exit codes​

  • 0 all bundles loaded.
  • 2 internal error (bundle parse failure).

Example​

vulkro intel status --format json | jq '.[].name'

Command reference​

Generated from vulkro help intel on vulkro 0.26.0. This block is the authoritative flag, usage, and exit-code reference for this command; the prose above is the friendly explanation. Do not edit this block by hand; run npm run docs:cli after a release.

Show the threat-intelligence data shipped with Vulkro.

Threat-intelligence bundles shipped with vulkro.

Each subsystem maintains a small, curated catalogue (offline-first, baked into the binary): known-compromised npm packages, known-bad public Docker images, etc. The catalogue is deliberately small: a false positive costs more than a missed entry. Operators overlay the GitHub Advisory feed and their own vendor advisory feeds for breadth.

Today the only action is `status`, which prints each bundle's provenance (name, version, SHA-256 of the canonical bytes, entry count, last-updated date).

Exit codes: 0  all bundles loaded. 2  internal error (bundle parse failure, etc.).

Usage: vulkro intel [OPTIONS] <COMMAND>

Commands:
  status  Print provenance for every shipped intel bundle
  help    Print this message or the help of the given subcommand(s)

Options:
      --offline
          Hard-disable every outbound network call for this run (sets VULKRO_OFFLINE=1). Blocks the CVE feed, the license heartbeat, the update check, webhooks, and any cloud AI endpoint; a loopback model (http://127.0.0.1, http://localhost) is still allowed. Equivalent to exporting VULKRO_OFFLINE=1, and the flag wins when both are set

  -h, --help
          Print help (see a summary with '-h')

$ vulkro intel status --help
------------------------------------------------------------
Print provenance for every shipped intel bundle

Usage: vulkro intel status [OPTIONS]

Options:
      --format <FORMAT>  Output format: `table` (default) or `json` [default: table]
      --offline          Hard-disable every outbound network call for this run (sets VULKRO_OFFLINE=1). Blocks the CVE feed, the license heartbeat, the update check, webhooks, and any cloud AI endpoint; a loopback model (http://127.0.0.1, http://localhost) is still allowed. Equivalent to exporting VULKRO_OFFLINE=1, and the flag wins when both are set
  -h, --help             Print help
Last updated on