vulkro baseline

Run a scan and save the current findings to a baseline file, so later scans report only what is new.

vulkro baseline            # writes .vulkro-baseline.json in the repo root
git add .vulkro-baseline.json
vulkro scan . --ratchet    # exits 1 only on findings not in the baseline

The file is a JSON array of findings, the same shape scan --baseline reads.

Flags

Flag	Description
[PATH]	Project root. Default ..
-o, --out <PATH>	Output file. Default .vulkro-baseline.json in the repo root.
--no-cache	Skip the per-file extraction cache.

Exit codes

0 baseline written, 2 scan or IO error. It never returns 1.

See also: Baselines, vulkro gate.