Verifi CLI

Verifi is the fix layer for your software supply chain. Every scanner hands you a list of vulnerable dependencies; Verifi looks at how your project actually uses each one and tells you the version to move to, what it clears, and what it has not checked yet, so you get a short, honest list of fixes instead of a backlog you are afraid to touch.

Start here

• Getting started: install, download the database, run your first scan.
• Fixing vulnerabilities: from a finding to a fix.

Concepts

• Confidence: what "checked" actually means, and what does not.
• Usage signal: why an unused vulnerable dependency is the easiest fix.

Command reference

• inspect: resolve the dependency tree, export an SBOM.
• update: download the advisory database.
• status: show what is vulnerable and the fix.
• fix: apply the recommended fix, or preview it.
• version: print the version.