Issues

• Enhancement: resolve Gradle version-catalog aliases from libs.versions.toml in vg scan

  enhancement
  vibgrate/cli#606 · Filter by author vibgrate-team opened on Nov 5, 2026
  1

• Enhancement: treat npm-shrinkwrap.json as an SBOM/scan lockfile like package-lock.json

  enhancement
  vibgrate/cli#605 · Filter by author vibgrate-team opened on Nov 5, 2026
  1

• Bug: Cargo workspace = true dependencies stay at * instead of inheriting from [workspace.dependencies]

  bug
  vibgrate/cli#604 · Filter by author vibgrate-team opened on Nov 5, 2026
  1

• Bug: FROM <earlier-stage> in a multi-stage Dockerfile is reported as a Docker Hub image

  bug
  vibgrate/cli#588 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Enhancement: take the latest Swift, Dart and PHP versions from the release catalog instead of hard-coded constants

  enhancement
  vibgrate/cli#586 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Bug: Swift framework detection never matches SnapshotTesting or SwiftLog

  buggood first issue
  vibgrate/cli#585 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Enhancement: keep aliased Helm dependencies of the same chart as separate rows

  enhancement
  vibgrate/cli#582 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Enhancement: scan Dockerfile.*, *.Dockerfile, Containerfile and every Compose file in a directory

  enhancement
  vibgrate/cli#580 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Bug: registry host is dropped from image names, so ghcr.io / quay.io / mcr.microsoft.com images are looked up on Docker Hub

  bug
  vibgrate/cli#578 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Bug: FROM ${BASE_IMAGE} in a Dockerfile becomes a bogus image row instead of using the ARG default

  bug
  vibgrate/cli#577 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Bug: lowercase or indented from lines in a Dockerfile are not read as base images

  buggood first issue
  vibgrate/cli#576 · Filter by author vibgrate-team opened on Nov 4, 2026
  1

• Docs: add Ruby, Go, Dart and PHP rows to the dependency-scope mapping table

  documentationgood first issue
  vibgrate/cli#555 · Filter by author vibgrate-team opened on Nov 2, 2026
  2

  

• Docs: refresh Cargo.lock and uv.lock rows in sbom-dependency-scope.md after the root-crate and editable-package fixes

  documentationgood first issue
  vibgrate/cli#554 · Filter by author vibgrate-team opened on Nov 2, 2026
  2

• Yarn Berry lockfile: skip workspace entries and resolve patch:/alias descriptors

  buggood first issue
  vibgrate/cli#510 · Filter by author vibgrate-team opened on Oct 29, 2026
  2

• Docs: refresh GitHub Actions examples to the current image-tag pin and document summary outputs

  documentationgood first issue
  vibgrate/cli#415 · Filter by author vibgrate-team opened on Oct 9, 2026
  1

• Test: GitHub Action summary outputs keep a measured 0 and leave unmeasured values empty

  enhancementgood first issue
  vibgrate/cli#413 · Filter by author vibgrate-team opened on Oct 8, 2026
  1

• Enhancement: capture Java enums, records, and annotation types as definitions in vg build

  enhancementgood first issue
  vibgrate/cli#372 · Filter by author vibgrate-team opened on Oct 6, 2026
  1

• Docs: add examples for vg show --diagram, vg path --diagram, and vg show flow

  documentationgood first issue
  vibgrate/cli#356 · Filter by author vibgrate-team opened on Oct 5, 2026
  1

• Docs: document .vibgrate/config.yml and migration from JSON / review.toml

  documentationgood first issue
  vibgrate/cli#314 · Filter by author vibgrate-team opened on Oct 2, 2026
  1

• Test: add Helm Chart.yaml / Chart.lock edge-case fixture for vg scan --iac

  enhancementgood first issue
  vibgrate/cli#309 · Filter by author vibgrate-team opened on Oct 1, 2026
  1

• Docs: document vg hcs (Holistic Code Spec) for first-time contributors

  documentation
  vibgrate/cli#285 · Filter by author vibgrate-team opened on Sep 28, 2026
  1

• Bug: actionable error when --package-manifest path is missing or unreadable

  bug
  vibgrate/cli#283 · Filter by author vibgrate-team opened on Sep 28, 2026
  1

• Docs: document vg code --local local-first expectations and approval boundaries

  documentationgood first issue
  vibgrate/cli#280 · Filter by author vibgrate-team opened on Sep 28, 2026
  1

• Bug: empty or whitespace-only ignore patterns must not match the entire tree

  bug
  vibgrate/cli#279 · Filter by author vibgrate-team opened on Sep 25, 2026
  1

• Docs: document vg path / vg impact / vg tree for first-time graph navigation

  documentationgood first issue
  vibgrate/cli#276 · Filter by author vibgrate-team opened on Sep 25, 2026
  1