Configuration
Configure VertaaUX CLI defaults with .vertaaux.yml
Configuration
Configure CLI defaults using a .vertaaux.yml configuration file. This eliminates repetitive command-line flags and ensures consistent settings across your team.
Configuration File
The CLI looks for .vertaaux.yml in the current directory and parent directories. The first file found is used.
File Locations
Search order (first match wins):
--configflag (explicit path)./.vertaaux.yml(current directory)./.vertaaux/config.yml(hidden directory)~/.vertaaux.yml(home directory)~/.vertaaux/config.yml(home config directory)
Configuration Precedence
Settings are applied in this order (later overrides earlier):
- Built-in defaults - Sensible starting point
- Configuration file - Team-shared settings
- Environment variables - Deployment-specific overrides
- Command-line flags - One-off overrides
Complete Schema
# .vertaaux.yml
# JSON Schema for editor autocompletion (optional)
$schema: https://vertaaux.ai/schemas/config.json
# Authentication
# Prefer environment variable: VERTAA_API_KEY
apiKey: vx_live_...
# Default URL for audits (optional)
defaultUrl: https://example.com
# Default audit mode: basic | standard | deep
mode: basic
# Minimum score threshold (0-100)
# Exit code 3 if score is below this
threshold: 0
# Fail on severity: error | warning | info | none
failOn: none
# Output configuration
output:
# Format: auto | json | sarif | junit | html | human
format: auto
# Group results by: severity | category | route
groupBy: severity
# Baseline configuration
baseline:
# Path to baseline file
path: .vertaaux/baseline.json
# Automatically update baseline on successful audit
autoUpdate: false
# CI/CD configuration
ci:
# CI template: github | gitlab | circleci | azure | jenkins | none
template: none
# Post comments to PRs
postComments: false
# JSON logs for machine parsing
jsonLogs: false
# Timing
timeout: 60000 # Per-page timeout in milliseconds
interval: 5000 # Polling interval in milliseconds
# Concurrent audits
concurrency: 3Field Reference
Authentication
| Parameter | Type | Required | Description |
|---|---|---|---|
| apiKey | string | optional | VertaaUX API key. Prefer using VERTAA_API_KEY environment variable instead for security. |
Security Warning
Never commit API keys to version control. Use environment variables or your CI provider's secrets management.
Defaults
| Parameter | Type | Required | Description |
|---|---|---|---|
| defaultUrl | string | optional | Default URL for audits. Used when -u flag is omitted. |
| mode | string | optional | Default audit mode: basic (fast), standard (balanced), deep (thorough).Default: basic |
| threshold | number | optional | Minimum acceptable score. CLI exits with code 3 if score is below this value.Default: 0 |
| failOn | string | optional | Fail (exit 1) when issues of this severity found: error, warning, info, none.Default: none |
Output
| Parameter | Type | Required | Description |
|---|---|---|---|
| output.format | string | optional | Output format. 'auto' uses human for TTY, json otherwise.Default: auto |
| output.groupBy | string | optional | How to group results: severity, category, or route.Default: severity |
Baseline
| Parameter | Type | Required | Description |
|---|---|---|---|
| baseline.path | string | optional | Path to baseline file for comparison.Default: .vertaaux/baseline.json |
| baseline.autoUpdate | boolean | optional | Automatically update baseline after successful audits.Default: false |
CI/CD
| Parameter | Type | Required | Description |
|---|---|---|---|
| ci.template | string | optional | CI provider for optimized behavior: github, gitlab, circleci, azure, jenkins.Default: none |
| ci.postComments | boolean | optional | Post audit results as PR comments.Default: false |
| ci.jsonLogs | boolean | optional | Output structured JSON logs for CI parsing.Default: false |
Performance
| Parameter | Type | Required | Description |
|---|---|---|---|
| timeout | number | optional | Per-page timeout in milliseconds.Default: 60000 |
| interval | number | optional | Polling interval for async operations.Default: 5000 |
| concurrency | number | optional | Maximum concurrent page audits.Default: 3 |
Environment Variables
Override any configuration with environment variables:
| Variable | Config Equivalent | Description |
|---|---|---|
VERTAA_API_KEY | apiKey | API authentication key |
VERTAA_DEFAULT_URL | defaultUrl | Default URL to audit |
VERTAA_MODE | mode | Default audit mode |
VERTAA_THRESHOLD | threshold | Minimum score threshold |
VERTAA_FAIL_ON | failOn | Failure severity |
VERTAA_FORMAT | output.format | Output format |
VERTAA_TIMEOUT | timeout | Page timeout |
VERTAA_CONCURRENCY | concurrency | Concurrent audits |
Example Configurations
Local Development
# .vertaaux.yml
defaultUrl: http://localhost:3000
mode: basic
output:
format: human
groupBy: severityCI/CD Pipeline
# .vertaaux.yml
mode: standard
threshold: 80
failOn: error
output:
format: json
groupBy: category
ci:
template: github
jsonLogs: true
baseline:
path: .vertaaux/baseline.jsonStrict Production
# .vertaaux.yml
mode: deep
threshold: 90
failOn: warning
concurrency: 1
baseline:
autoUpdate: falseTeam Configuration
# .vertaaux.yml
# Committed to repo - shared by team
mode: standard
threshold: 75
failOn: error
output:
groupBy: category
baseline:
path: baselines/main.json
# API key NOT included - use VERTAA_API_KEY env varPer-Project Configuration
Different projects can have different configurations:
monorepo/
├── .vertaaux.yml # Root config (shared defaults)
├── apps/
│ ├── web/
│ │ └── .vertaaux.yml # Web app config (overrides root)
│ └── admin/
│ └── .vertaaux.yml # Admin app config (overrides root)
└── packages/Run from the project directory to use its config:
cd apps/web && vertaa auditOr specify config explicitly:
Validation
Validate your configuration file:
This checks:
- YAML syntax
- Schema compliance
- Valid enum values
- Type correctness
Editor Support
Add JSON Schema for autocompletion in your editor:
# .vertaaux.yml
$schema: https://vertaaux.ai/schemas/config.json
# Your configuration below...
mode: standardVS Code: Automatically provides completions and validation.
JetBrains IDEs: Configure in Settings > Languages > JSON Schema Mappings.
Debugging Configuration
See effective configuration (all sources merged):
Effective configuration: apiKey: vx_live_...**** mode: standard threshold: 80 failOn: error output: format: json groupBy: category Sources: - /Users/you/project/.vertaaux.yml - Environment: VERTAA_API_KEY
Related
Policy Configuration
Configure quality gates with vertaa.policy.yml
Installation
Authentication setup
CI/CD Integration
Use configuration in pipelines
Was this page helpful?