vulkro explain

Explain one finding: what it means, why it matters, and how to fix it in your framework.

vulkro explain <FINDING_ID> .     # a finding ID from vulkro scan --format json
vulkro explain API2               # an OWASP API category
vulkro explain go-taint-sql-001   # a rule ID: category, family, default severity

Pass the project PATH so the fix guidance matches the framework found there. A rule ID prints its catalogue entry without scanning.

Flags

Flag	Description
[ID_OR_CATEGORY]	Finding ID, OWASP category or rule ID.
[PATH]	Project root. Default ..
--risk-model	Print the risk-score formula that scan --top and vulkro summary use to rank findings, then exit. No scan runs.
--ai	Add a plain-language explanation from your AI model for this code. Advisory only: the explanation above it stays the source of truth. See vulkro ai.

Exit codes

0 explanation printed, 1 no active licence (license_required), 2 bad argument (no ID and no --risk-model) or a scan or IO error.

See also: vulkro scan, OWASP API Top 10.