Repository navigation

Issues

New issue

Public roadmap: make vibgrate/cli easy to discover, try, and contribute to
#144 · vibgrate-team opened on Sep 16, 2026
15

Test: explicit false values for boolean flags (--vulns=false, --no-vulns) never enable the feature
vibgrate/cli#395 · opened on Oct 7, 2026
Enhancement: vg build discovers files in a single tree walk regardless of enabled languages
vibgrate/cli#394 · opened on Oct 7, 2026
Test: SARIF result level follows advisory severity in vg scan --format sarif, and is documented
vibgrate/cli#393 · opened on Oct 7, 2026
Test: vg fix never reports an advisory as resolved when the upgrade is blocked
vibgrate/cli#392 · opened on Oct 7, 2026
Bug: input SBOM components with no PURL and no CPE are handled deliberately (no crash, no silent drop)
vibgrate/cli#391 · opened on Oct 7, 2026
Test: post-scan drift-driver hint and vg init --ci github nudge never appear in non-interactive output
vibgrate/cli#390 · opened on Oct 7, 2026
Test: vg scan / vg build on a path never read lockfiles, node_modules, or config from the cwd
vibgrate/cli#377 · opened on Oct 6, 2026
Test: vg scan exit code, summary, and JUnit failures agree across every gate outcome
vibgrate/cli#375 · opened on Oct 6, 2026
Enhancement: keep Java call and DI edges when types are generic (new Foo<Bar>(), Repository<User>)
vibgrate/cli#373 · opened on Oct 6, 2026
Enhancement: capture Java enums, records, and annotation types as definitions in vg build
vibgrate/cli#372 · opened on Oct 6, 2026
Test: vg serve --review write operations are opt-in, correctly annotated, and confined
vibgrate/cli#360 · opened on Oct 5, 2026
Bug: root package.json without name or version must not break vg build / scan / sbom
vibgrate/cli#359 · opened on Oct 5, 2026
Test: snapshot tests for fix-available hints in vg scan / vg report text output
vibgrate/cli#358 · opened on Oct 5, 2026
Enhancement: write .vibgrate/ artifacts atomically so interrupted runs never leave truncated files
vibgrate/cli#357 · opened on Oct 5, 2026
Docs: add examples for vg show --diagram, vg path --diagram, and vg show flow
vibgrate/cli#356 · opened on Oct 5, 2026
Docs: document Vibgrate-Session trailers, vg review trailer push, and vg why --cloud provenance
vibgrate/cli#355 · opened on Oct 5, 2026
Docs: document vg review doc modes (--also, --session, --push, --comments) and the local vs cloud split
vibgrate/cli#354 · opened on Oct 5, 2026
Enhancement: warn when driftBudget disagrees across YAML and JSON config files
vibgrate/cli#321 · opened on Oct 2, 2026
Test: add Dart pubspec.lock edge-case fixture for vg build
vibgrate/cli#320 · opened on Oct 2, 2026
Bug: actionable error when an archive exceeds size or entry limits during walk
vibgrate/cli#319 · opened on Oct 2, 2026
1
Docs: document how CDN or non-registry lockfile resolutions appear in vg scan
vibgrate/cli#318 · opened on Oct 2, 2026
Enhancement: stable multi-digest ordering per component in vg sbom JSON
vibgrate/cli#317 · opened on Oct 2, 2026
Bug: actionable error when .vibgrate/config.yml is malformed or fails schema
vibgrate/cli#316 · opened on Oct 2, 2026
Docs: document vg review --base policy loading from the base branch
vibgrate/cli#315 · opened on Oct 2, 2026
Docs: document .vibgrate/config.yml and migration from JSON / review.toml
vibgrate/cli#314 · opened on Oct 2, 2026