%20rotate(90)%20scale(330)'%3e%3cstop%20stop-color='%23FFD78A'%20stop-opacity='0.65'/%3e%3cstop%20offset='0.45'%20stop-color='%23FF8E1F'%20stop-opacity='0.46'/%3e%3cstop%20offset='1'%20stop-color='%23FF2C00'%20stop-opacity='0'/%3e%3c/radialGradient%3e%3clinearGradient%20id='flameCore'%20x1='512'%20y1='212'%20x2='512'%20y2='822'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%23FFECA8'/%3e%3cstop%20offset='0.25'%20stop-color='%23FFD44D'/%3e%3cstop%20offset='0.6'%20stop-color='%23FF8F1F'/%3e%3cstop%20offset='1'%20stop-color='%23A20E00'/%3e%3c/linearGradient%3e%3clinearGradient%20id='flameWing'%20x1='315'%20y1='308'%20x2='709'%20y2='696'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%23FFF1B5'/%3e%3cstop%20offset='0.3'%20stop-color='%23FFB23D'/%3e%3cstop%20offset='0.78'%20stop-color='%23FF540B'/%3e%3cstop%20offset='1'%20stop-color='%238F0A00'/%3e%3c/linearGradient%3e%3clinearGradient%20id='shadow'%20x1='512'%20y1='332'%20x2='512'%20y2='836'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%23541000'%20stop-opacity='0'/%3e%3cstop%20offset='1'%20stop-color='%232A0300'/%3e%3c/linearGradient%3e%3cfilter%20id='softGlow'%20x='0'%20y='0'%20width='1024'%20height='1024'%20filterUnits='userSpaceOnUse'%20color-interpolation-filters='sRGB'%3e%3cfeGaussianBlur%20stdDeviation='28'%20result='blur'/%3e%3cfeBlend%20in='SourceGraphic'%20in2='blur'%20mode='screen'/%3e%3c/filter%3e%3c/defs%3e%3crect%20width='1024'%20height='1024'%20fill='url(%23bgGlow)'/%3e%3cg%20filter='url(%23softGlow)'%3e%3cpath%20d='M512%20262L390%20325L512%20806L634%20325L512%20262Z'%20fill='url(%23flameCore)'/%3e%3cpath%20d='M512%20315L266%20198L361%20353L512%20455L512%20315Z'%20fill='url(%23flameWing)'/%3e%3cpath%20d='M512%20315L758%20198L663%20353L512%20455L512%20315Z'%20fill='url(%23flameWing)'/%3e%3cpath%20d='M512%20386L216%20298L315%20427L512%20576L512%20386Z'%20fill='url(%23flameWing)'/%3e%3cpath%20d='M512%20386L808%20298L709%20427L512%20576L512%20386Z'%20fill='url(%23flameWing)'/%3e%3cpath%20d='M512%20460L266%20376L512%20806L512%20460Z'%20fill='url(%23flameCore)'/%3e%3cpath%20d='M512%20460L758%20376L512%20806L512%20460Z'%20fill='url(%23flameCore)'/%3e%3cpath%20d='M512%20262L452%20334L512%20455L572%20334L512%20262Z'%20fill='%23FFF2BA'/%3e%3cpath%20d='M512%20322L470%20385L512%20796L554%20385L512%20322Z'%20fill='url(%23shadow)'/%3e%3cpath%20d='M512%20220L414%20274L512%20300L610%20274L512%20220Z'%20fill='%23FFE7A1'/%3e%3cpath%20d='M414%20274L325%20210L390%20326L512%20387L414%20274Z'%20fill='%23FF6B13'/%3e%3cpath%20d='M610%20274L699%20210L634%20326L512%20387L610%20274Z'%20fill='%23FF6B13'/%3e%3c/g%3e%3c/svg%3e){kind=small}
!vulqn Commands
VULQN listens for !vulqn commands posted as comments on your pull requests. Commands work on both Bitbucket and GitHub.
To use a command, post a PR comment containing !vulqn <command>. VULQN will acknowledge the command with a 🖖 reply and take action.
Commands
review
Trigger an incremental review of the latest changes.
!vulqn reviewManually triggers a review — useful after pushing a fix or if the automatic review didn’t fire. Reviews only the changes since the last review (incremental diff).
Can be posted as a top-level PR comment or as a reply.
full review
Trigger a full review of the entire PR diff from scratch.
!vulqn full reviewForces VULQN to review the complete diff, ignoring prior findings and incremental diff logic. Note: the full command is two words — !vulqn full alone is not a valid command and will be ignored.
Can be posted as a top-level PR comment or as a reply.
pause
Pause automatic reviews on this PR.
!vulqn pauseVULQN will stop posting new reviews when commits are pushed. Use !vulqn resume to re-enable.
Can be posted as a top-level PR comment or as a reply.
resume
Resume automatic reviews on a paused PR.
!vulqn resumeCan be posted as a top-level PR comment or as a reply.
resolve
Mark findings as resolved.
!vulqn resolveTwo variants depending on where you post it:
- Reply to a VULQN inline comment — marks that specific finding as resolved and resolves the comment thread.
- Top-level PR comment — marks all open findings on the PR as resolved at once. Acknowledged findings are not affected.
ack
Acknowledge a specific finding (reply only).
!vulqn ackMust be posted as a reply to a VULQN inline comment. Marks that finding as acknowledged — VULQN won’t re-surface it on future re-reviews, and the comment thread is resolved. The finding remains visible in the review history.
Top-level !vulqn ack (not a reply) is a no-op and will receive an error message.
ignore
Disable automatic reviews for this PR.
!vulqn ignoreSets auto_review_disabled = true on this PR — VULQN will no longer automatically review new pushes to it. This applies to the whole PR, not a specific finding. Re-enable auto-reviews via the dashboard.
Can be posted as a top-level PR comment or as a reply.
learn
Save a team learning to apply to future reviews.
!vulqn learn <text>The text after learn is required — !vulqn learn with no text is ignored. The text is embedded and stored in the repository’s learnings database. VULQN will inject relevant learnings into the AI prompt on future reviews.
Two variants:
- Reply to a VULQN inline comment — saves the learning and also acknowledges the parent finding (marks it as acknowledged and resolves the thread).
- Top-level PR comment — saves the learning only.
Notes
- Commands are case-insensitive —
!VULQN REVIEWand!vulqn reviewboth work. ackmust be posted as a reply to a VULQN inline comment — it acts on that specific finding only.resolveworks both as a reply (single finding) and top-level (all open findings).learnrequires a text payload:!vulqn learn <text>. Bare!vulqn learnis silently ignored.!vulqn full reviewis a two-word command.!vulqn fullalone is invalid and silently ignored.- VULQN always posts a 🖖 acknowledgement reply. If no ack appears, check your webhook connection in Settings → Integrations.