GIT-PKGS(1)
β¨ NAME β¨
git-pkgs-vulns-blame β bestie, this is the one that shows you who introduced the vulnerabilities you're currently living with π
This page lives in the Git Pkgs Manual, so yeah β it's a git-pkgs thing, officially π
πΈ SYNOPSIS πΈ
git-pkgs vulns blame [flags]
π¦ DESCRIPTION π¦
Okay so picture this: your project has vulnerable packages in it right now, and you wanna know who put them there. That's literally the whole gig π«Ά
git-pkgs vulns blame attributes your current vulnerabilities to the commits that introduced the vulnerable packages. It shows you which developers added packages that are currently vulnerable. Detective mode: activated πβ¨
No cap, it's giving "group project accountability" energy and honestly? Obsessed.
π OPTIONS π
--all-time[=false]β include historical vulnerabilities that have been fixed. Default isfalse, so out of the box you're only looking at stuff that's still a problem π-b,--branch=""β the branch to query. Default is the first tracked branch π-e,--ecosystem=""β filter by ecosystem, so you can zoom in on just the one you care about π§-f,--format="text"β output format. Your choices aretextandjson, and yeah the default istextπ-h,--help[=false]β help forblame. It's defaulting tofalsebecause you don't need help, you're doing amazing β¨-s,--severity=""β minimum severity. Pick fromcritical,high,medium,lowβ like a little threat-level ladder ππ₯
π OPTIONS INHERITED FROM PARENT COMMANDS π
These come from the parent command, so they're not even blame's fault β but they're still yours to use π«Ά
--color="auto"β when to colorize output:auto,always,never. Defaults toautoπ¨--include-submodules[=false]β include git submodules when scanning for manifests. Defaultfalse. Yes, submodules. We know. π-p,--pager[=false]β use pager for output. Defaultfalseπ-q,--quiet[=false]β suppress non-essential output. Defaultfalse, so chatty by default π£οΈ
π₯ SEE ALSO π₯
git-pkgs-vulns(1)β the parent, the icon, the main character π
β HISTORY β
28-Oct-2026 β auto generated by spf13/cobra. Not by a human, not by a bestie, by a generator π€β¨
iykyk: every flag up there is real and copied exactly, so go forth and blame responsibly π
that's the whole page, bestie β git-pkgs, Oct 2026, slay π
π¦ where this page comes from
- nixpkgs unstable: git-pkgs 0.21.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms