vulkro explain
Explain a finding with framework-aware remediation guidance. Pass a
finding ID (from vulkro scan --format json) or an OWASP API category
code and Vulkro prints what the issue is, why it matters, and how to fix
it for your stack.
Usage
vulkro explain <ID_OR_CATEGORY> [PATH]
| Argument | Description | Default |
|---|---|---|
<ID_OR_CATEGORY> | A finding ID (for example JAVA-SQLI-001) or an OWASP category (for example API2). | required |
PATH | Path to the project root. | . |
Examples
# Explain a rule by ID.
vulkro explain JAVA-SQLI-001
# Explain an OWASP API category.
vulkro explain API2
# Find IDs to explain from a JSON scan.
vulkro scan . --format json | jq -r '.findings[].rule_id' | sort -u
Passing the project PATH lets explain tailor the remediation to the
framework it detects there.
Related
vulkro scan- produces the finding IDs.- Rules reference - the per-rule pages
explainmirrors. - OWASP API Top 10 - the category checks.