vulkro notify

Pro

vulkro notify is part of Pro: Notify (notify), Slack, Teams and webhook delivery. On Free it stops before doing any work, prints what it needs and where to get it, and exits 1. See Pricing.

POST a scan summary to a webhook (Slack, Teams, or a generic JSON receiver). This is opt-in network egress: it is the one place notify touches the network, and only when you invoke it. Included in the 90-day trial and in Pro.

For richer routing (Jira issues, PagerDuty incidents) attached to a scan, see the scan --post-to flag on vulkro scan.

Usage

vulkro notify [PATH] --url <WEBHOOK_URL>

Argument	Description	Default
PATH	Path to the project root.	.

Flags

Flag	Description	Default
--url <URL>	Webhook URL (Slack, Teams, or a generic JSON receiver). Required.
--min-severity <MIN_SEVERITY>	Only notify if this severity or worse is present.	high

Example

vulkro notify . --url "$SLACK_WEBHOOK" --min-severity critical

Payloads carry only severity counts, short signal IDs, workspace-relative paths, line numbers, and truncated messages: no absolute paths and no code snippets.

Related

• vulkro scan --post-to - Slack / Teams / Jira / PagerDuty after a scan.
• CI/CD integration - wiring alerts into pipelines.

Command reference

Generated from vulkro help notify on vulkro 0.26.0. This block is the authoritative flag, usage, and exit-code reference for this command; the prose above is the friendly explanation. Do not edit this block by hand; run npm run docs:cli after a release.

[Pro] Send a scan summary to a webhook (opt-in network call).

[Pro] POST a scan summary to a webhook (opt-in network egress).

Exit code: 0 delivered, or the severity threshold was not met so nothing was sent; 2 on `VULKRO_OFFLINE`, a non-2xx webhook response, a network error, or a scan / IO error. It never returns 1.

Usage: vulkro notify [OPTIONS] --url <URL> [PATH]

Arguments:
  [PATH]
          [default: .]

Options:
      --offline
          Hard-disable every outbound network call for this run (sets VULKRO_OFFLINE=1). Blocks the CVE feed, the license heartbeat, the update check, webhooks, and any cloud AI endpoint; a loopback model (http://127.0.0.1, http://localhost) is still allowed. Equivalent to exporting VULKRO_OFFLINE=1, and the flag wins when both are set

      --url <URL>
          Webhook URL (Slack, Teams, generic JSON receiver)

      --min-severity <MIN_SEVERITY>
          Only notify if this severity or worse is present
          
          [default: high]

  -h, --help
          Print help (see a summary with '-h')