VibeGuard CLI

vg scan

Run security scans on your codebase

💡 Examples

🏁 Flags & Options

# VibeGuard CLI Configuration
version: "1.0"

# Scan Configuration
scan:
  types:
    - sast
    - secrets
    - dependencies
  severity_threshold: "medium"
  timeout: 30
  
# Exclusions
exclude:
  paths:
    - "node_modules/**"
    - "dist/**"
    - "*.test.js"
  files:
    - ".env.example"
    
# Output Settings
output:
  format: "table"
  colors: true
  verbose: false
  
# API Configuration
api:
  endpoint: "https://api.vibeguard.co"
  timeout: 60
  
# CI/CD Integration
ci:
  fail_on: "high"
  upload_results: true

GitHub Actions

name: Security Scan
on: [push, pull_request]

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Run VibeGuard Scan
        run: |
          curl -sSL https://install.vibeguard.co | bash
          vg auth token ${{ secrets.VIBEGUARD_TOKEN }}
          vg scan --output sarif > results.sarif
      - name: Upload SARIF
        uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: results.sarif

GitLab CI/CD

security_scan:
  stage: test
  image: ubuntu:latest
  script:
    - curl -sSL https://install.vibeguard.co | bash
    - vg auth token $VIBEGUARD_TOKEN
    - vg scan --output json > security-report.json
  artifacts:
    reports:
      security:
        - security-report.json
    expire_in: 1 week
  only:
    - branches

Jenkins Pipeline

pipeline {
  agent any
  stages {
    stage('Security Scan') {
      steps {
        sh 'curl -sSL https://install.vibeguard.co | bash'
        withCredentials([string(credentialsId: 'vibeguard-token', variable: 'VG_TOKEN')]) {
          sh 'vg auth token $VG_TOKEN'
          sh 'vg scan --output junit > security.xml'
        }
      }
      post {
        always {
          junit 'security.xml'
        }
      }
    }
  }
}