vulkro glossary
Explain the words Vulkro uses. vulkro glossary prints plain-language
definitions of the terms that show up in a finding, a report or a console
tab: call graph, untrusted data flow (taint), sink, proof tiers, SBOM and
more.
Pass a word to show one entry, or pass nothing to list every term. This is static text: it never scans, never touches the network, and needs no license.
This is a different thing from the Glossary concept page: the concept page is the same reference rendered on the website, and this command prints the same definitions at your terminal so you never have to leave it.
Usage
vulkro glossary [TERM]
# List every term.
vulkro glossary
# Look up one word.
vulkro glossary sink
vulkro glossary "proof tier"
An unknown term is not an error: Vulkro prints the closest matching terms instead.
Arguments
| Argument | Description | Default |
|---|---|---|
TERM | A term to look up, for example call-graph, taint or proof tier. Omit it to list every term. | list all |
Flags
| Flag | Description | Default |
|---|---|---|
--offline | Hard-disable every outbound network call for this run (sets VULKRO_OFFLINE=1). This command already stays local, so the flag is a no-op here and is accepted only for consistency with the other subcommands. | false |
--help, -h | Print help. |
Exit codes
0always. The command prints definitions and returns success. An unknown term still exits0after printing the closest matches.- Vulkro reserves
2for a bad argument or an internal failure, in line with the CLI-wide contract, but a normalglossaryrun does not scan and does not reach it.
Related
- Glossary concept page - the same definitions rendered on the website.
vulkro explain- explain one specific finding, rather than a general term.vulkro scan- produce the findings whose vocabulary this command defines.
Command reference
Generated from vulkro help glossary on vulkro 0.26.0. This block is the
authoritative flag, usage, and exit-code reference for this command; the
prose above is the friendly explanation. Do not edit this block by hand;
run npm run docs:cli after a release.
Explain the words Vulkro uses: call graph, untrusted data flow, sink, proof tiers, SBOM and more.
Prints plain-language definitions. Pass a word to show one entry (`vulkro glossary sink`), or nothing to list them all. Static text: never scans, never touches the network, needs no license.
Exit code: 0 always (an unknown term prints the closest matches).
Usage: vulkro glossary [OPTIONS] [TERM]
Arguments:
[TERM]
A term to look up, e.g. `call-graph`, `taint` or `proof tier`. Omit to list every term
Options:
--offline
Hard-disable every outbound network call for this run (sets VULKRO_OFFLINE=1). Blocks the CVE feed, the license heartbeat, the update check, webhooks, and any cloud AI endpoint; a loopback model (http://127.0.0.1, http://localhost) is still allowed. Equivalent to exporting VULKRO_OFFLINE=1, and the flag wins when both are set
-h, --help
Print help (see a summary with '-h')