vulkro rules
Lists the built-in rule catalogue and installs signed community rule packs.
vulkro rules catalog --detectors --format json # every rule id
vulkro rules add acme/api-security
vulkro rules installed
| Sub-command | Description |
|---|---|
catalog | The 22 rule categories (ID, OWASP category, CWE, description). --detectors lists every rule id instead. --format table|json. |
list | Packs available in the registry. --refresh fetches the index first. |
installed | Packs installed under ~/.vulkro/rule-packs/. |
add <author/name[@version]> | Download, verify and install a pack (default latest). |
remove <pack> | Remove every installed version. |
verify <pack> | Re-check a pack's signature. |
update | Refresh the registry index. |
export <out-dir> | Write the rule documentation as Markdown, one file per rule. |
Installed packs live at ~/.vulkro/rule-packs/<author>/<name>/<version>/, and their rules/*.yaml files are used by every later scan. Every pack must carry a valid ed25519 signature from a trusted key; unsigned packs are refused. With VULKRO_OFFLINE=1, add, list --refresh and update refuse the network; installed packs keep working.
To write your own rules, see Custom rules.
Exit codes
0 success. 2 error.