vulkro diff
Show how the API surface changed since a git branch, tag or commit.
vulkro diff origin/main
vulkro diff v1.0.0 . --format json
It prints the change and never fails on it. To fail a build on findings new since a ref, use vulkro gate --base <ref>.
Arguments and flags
| Argument or flag | Description |
|---|---|
[BASE] | Git ref to compare against, for example main, HEAD~1, v1.0.0. Default main. |
[PATH] | Project root. Default .. |
-f, --format <FMT> | table (default), json, gh-pr, junit, csv and the other output formats. |
--ai | Add a plain-language summary of the security change (new unauthenticated routes, removed auth checks, new findings) from your AI model. Advisory only: it never changes the diff or the exit code. See vulkro ai. |
--ai-model <MODEL>, --ai-url <URL> | Override the model or runtime for --ai. |
Exit codes
0 diff printed, 2 bad ref or a scan or IO error. It never returns 1.
See also: vulkro history, Baselines.