Skip to content
GANTRY

Roast

Will it survive launch?

The roast runs on your machine: it downloads a snapshot of the repo, scans it, and makes a card from canned lines. The card never includes file names, routes, line numbers or secrets, so it's safe to post.

  1. Public repos work as is. For private ones, log in with `gh auth login` first.

  2. 2 · Run
    terminal 
    bunx @usegantry/cli roast https://github.com/<owner>/<repo> --json > roast.json
  3. 3 · Load the result
    Or paste JSON
Example · acme/vulnerable-saas VIBE-CODE SURVIVAL CARD0Won't survive launch33 critical · 32 high · 25 mediumSECURITYNO-GO0Your database has an open-door policy.PRIVACYNO-GO20Personal data is wandering further than it should.LEGALNO-GO0The legal paperwork hasn't caught up with the code.COSTNO-GO0Something in here could run up a surprise bill.acme/vulnerable-saasStatic scan, not a pentest. Run `gantry check` for the fixes.USEGANTRY.APP

The CLI also writes the card as gantry-roast.svg for posting. For the actual fixes, run gantry check.