[1.14.0] - 2026-03-13
Added
- Added
vulnerabilitiescommand to retrieve security scan results for a package- Summary View (Default): Displays a high-level count of vulnerabilities broken down by severity (Critical, High, Medium, Low, Unknown).
- Assessment View
--show-assessment(-A): Provides a detailed breakdown where vulnerabilities are:- Grouped by the specific affected upstream package / dependency.
- Sorted by severity (Critical first).
- Richly formatted tables.
- Filtering Capabilities:
- By Severity:
--severityShow only specific levels (e.g., just Critical and High). - By Status:
--fixable | --non-fixableFilter to show only "Fixable" vulnerabilities (where a patch exists) or "Non-Fixable" ones.
- By Severity:
- Supports
--output-format json | pretty_jsonfor programmatic usage