Overview

The basic step is to include the class:

include vulnerability`

Adding this line of code to your Puppet code base, will start vulnerability scanning on all of your files.

This might not be what you need. Check here for how you can customise this.