CmdID

CmdID / Commands

vet

Scan package manifests, directories, container images, or GitHub repositories to identify vulnerabilities, malicious packages, and enforce security policies using CEL expressions. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Scan the current directory

vet scan --directory .Identify

Scan the package-lock.json manifest file

vet scan --manifests path/to/manifest_fileIdentify

Scan with filter to fail on any critical vulnerability found in the codebase

vet scan --directory path/to/directory --filter 'vulns.critical.exists(p, true)' --filter-failIdentify

Scan any OSS package for malware

vet inspect malware --purl package_urlIdentify

Start the MCP server for AI enabled security in code editors like Cursor

vet server mcpIdentify