Repository navigation

Issues

New issue

Public roadmap: make vibgrate/cli easy to discover, try, and contribute to
#144 · vibgrate-team opened on Sep 16, 2026
17

Docs: link docs/sbom-dependency-scope.md from DOCS.md SBOM export section
vibgrate/cli#422 · opened on Oct 9, 2026
Test: vg report --format html shows unmeasured DriftScore as n/a and skipped packs as Not scanned
vibgrate/cli#421 · opened on Oct 9, 2026
Enhancement: add vg scan --fail-on-epss threshold gate for CI
vibgrate/cli#420 · opened on Oct 9, 2026
Enhancement: emit CycloneDX component scope and SPDX DEV_/OPTIONAL_DEPENDENCY_OF from manifest sections
vibgrate/cli#418 · opened on Oct 9, 2026
Test: gradle.lockfile comment and empty= lines never become packages
vibgrate/cli#416 · opened on Oct 9, 2026
Docs: refresh GitHub Actions examples to the current image-tag pin and document summary outputs
vibgrate/cli#415 · opened on Oct 9, 2026
Test: vg build records GitHub Actions uses: pins reused through YAML anchors and aliases
vibgrate/cli#414 · opened on Oct 8, 2026
Test: GitHub Action summary outputs keep a measured 0 and leave unmeasured values empty
vibgrate/cli#413 · opened on Oct 8, 2026
Docs: list drift-budget maxRiskScore / maxRiskWorseningPercent cases in the JUnit gates suite, with a test
vibgrate/cli#412 · opened on Oct 8, 2026
1
Enhancement: vg build discovers files in a single tree walk regardless of enabled languages
vibgrate/cli#394 · opened on Oct 7, 2026
Test: vg fix never reports an advisory as resolved when the upgrade is blocked
vibgrate/cli#392 · opened on Oct 7, 2026
Test: post-scan drift-driver hint and vg init --ci github nudge never appear in non-interactive output
vibgrate/cli#390 · opened on Oct 7, 2026
Test: vg scan / vg build on a path never read lockfiles, node_modules, or config from the cwd
vibgrate/cli#377 · opened on Oct 6, 2026
Test: vg scan exit code, summary, and JUnit failures agree across every gate outcome
vibgrate/cli#375 · opened on Oct 6, 2026
Enhancement: keep Java call and DI edges when types are generic (new Foo<Bar>(), Repository<User>)
vibgrate/cli#373 · opened on Oct 6, 2026
Enhancement: capture Java enums, records, and annotation types as definitions in vg build
vibgrate/cli#372 · opened on Oct 6, 2026
Test: vg serve --review write operations are opt-in, correctly annotated, and confined
vibgrate/cli#360 · opened on Oct 5, 2026
Test: snapshot tests for fix-available hints in vg scan / vg report text output
vibgrate/cli#358 · opened on Oct 5, 2026
Docs: add examples for vg show --diagram, vg path --diagram, and vg show flow
vibgrate/cli#356 · opened on Oct 5, 2026
Docs: document Vibgrate-Session trailers, vg review trailer push, and vg why --cloud provenance
vibgrate/cli#355 · opened on Oct 5, 2026
Docs: document vg review doc modes (--also, --session, --push, --comments) and the local vs cloud split
vibgrate/cli#354 · opened on Oct 5, 2026
Enhancement: warn when driftBudget disagrees across YAML and JSON config files
vibgrate/cli#321 · opened on Oct 2, 2026
Test: add Dart pubspec.lock edge-case fixture for vg build
vibgrate/cli#320 · opened on Oct 2, 2026
Docs: document how CDN or non-registry lockfile resolutions appear in vg scan
vibgrate/cli#318 · opened on Oct 2, 2026
Docs: document vg review --base policy loading from the base branch
vibgrate/cli#315 · opened on Oct 2, 2026