Home

vexes Wiki

Welcome to the vexes wiki -- the complete reference for the cross-ecosystem dependency security scanner.

Getting Started -- Installation, first scan, understanding output
Commands Reference -- Full documentation for scan, analyze, fix, guard, monitor
Detection Signals -- Every signal vexes can detect, with severity levels and examples
Configuration -- .vexesrc.json, user config, signal overrides, cache tuning
CI/CD Integration -- GitHub Actions, SARIF upload, exit codes, JSON output
Architecture -- 4-layer detection engine, code structure, design decisions
Security Design -- Threat model, hardening measures, trust boundaries
Allowlists -- Known-good packages, how allowlisting works, extending the list
FAQ -- Common questions and troubleshooting