Tags: matteo-sung/gh-lockvet

Don't count value-taking flags' values as positionals

gh lockvet -fail-on vuln was falling through to plain diff mode instead
of detecting the current PR: 'vuln' looked like a positional. Mirror
lockvet's takesValue flag table when scanning.

gh-lockvet: GitHub CLI extension for lockvet

gh lockvet vets the current branch's PR (or anything lockvet does) using
your existing gh auth. Downloads the matching lockvet release on first
run, verifying sha256 + Sigstore build provenance before running it.