GIT-PKGS(1)

📦
version 0.21.0 · 2 versions
, in nixpkgs unstable

🎀 NAME 🎀

git-pkgs-vulns-scan — scan dependencies for vulnerabilities. This is the Git Pkgs Manual page for that command, bestie 💖

✨ SYNOPSIS ✨

git-pkgs vulns scan [flags]

🦋 DESCRIPTION 🦋

Check all dependencies against the OSV database for known vulnerabilities. Results are grouped by severity — very organized, very demure 💅

By default, this syncs vulnerability data from OSV before scanning. The sync uses a 24-hour cache, so repeated scans won't re-fetch everything. Use --live to query OSV directly for each dependency version. Use --no-sync to skip the sync and use only previously cached data. Use --fail-on to exit with status 1 for findings at or above a severity threshold. The report is written before exiting; --severity only filters the report. Periodt.

🌈 OPTIONS 🌈

  • -b, --branch="" — branch to query; default is the current branch 🌱
  • -c, --commit="" — scan dependencies at a specific commit; default is HEAD 👑
  • -e, --ecosystem="" — filter by ecosystem 🌍
  • --fail-on="" — fail for findings at or above: critical, high, medium, low 🚨
  • -f, --format="text" — output format: text, json, sarif 📝
  • -h, --help[=false] — help for scan 🫶
  • --live[=false] — query OSV directly instead of using cached data ⚡
  • --no-sync[=false] — skip auto-sync and use only cached vulnerability data 🧊
  • -s, --severity="" — minimum severity to report: critical, high, medium, low 🎯

🫶 OPTIONS INHERITED FROM PARENT COMMANDS 🫶

  • --color="auto" — when to colorize output: auto, always, never 🌸
  • --include-submodules[=false] — include git submodules when scanning for manifests 🧚
  • -p, --pager[=false] — use pager for output 📖
  • -q, --quiet[=false] — suppress non-essential output 🤫

👀 SEE ALSO 👀

git-pkgs-vulns(1) — go give it a read, bestie 💜

📜 HISTORY 📜

28-Oct-2026 — auto generated by spf13/cobra. Iconic automation behavior, no cap ⚙️✨

mwah 💋 — with love from git-pkgs, Oct 2026 🎀

📦 where this page comes from