[ { "name": "actionlint", "path": "linting/actionlint", "program": "actionlint", "title": "Actionlint", "docs": "https://github.com/rhysd/actionlint/blob/main/docs/usage.md", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "-version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [], "fields": [ { "key": "configFile", "kind": "string", "flag": "-config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] }, { "key": "format", "kind": "string", "flag": "-format", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "shellcheck", "kind": "string", "flag": "-shellcheck", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "shellcheck", "choices": [] }, { "key": "pyflakes", "kind": "string", "flag": "-pyflakes", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "pyflakes", "choices": [] }, { "key": "color", "kind": "boolean", "flag": "-color", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "color", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Lint workflows, discovering .github/workflows when files is empty.", "program": "", "environment": {}, "example": {} } ] }, { "name": "apko", "path": "containers/apko", "program": "apko", "title": "apko", "docs": "https://github.com/chainguard-dev/apko", "notes": "Use setup-apko or provide apko on PATH. apko builds images from APK packages using a trusted YAML configuration and its configured repositories; it does not execute Dockerfile RUN instructions. Supply a lockfile and build date for repeatability, and collect generated image/SBOM files as pipeline artifacts. publish uses the native container credential store. Actual platform/build privileges depend on apko and its selected image format; setup only installs the CLI.", "environment": { "CI": "true" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "raw", "choices": [], "description": "Literal native command argument tokens." } ], "description": "Run a native command with literal arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the installed tool version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "arch", "kind": "strings", "flag": "--arch", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Image CPU architectures such as x86_64 or aarch64; omit to use the configuration." }, { "key": "lockfile", "kind": "string", "flag": "--lockfile", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "APK dependency lockfile constraining package versions." }, { "key": "cacheDir", "kind": "string", "flag": "--cache-dir", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory for cached APK packages and indexes." }, { "key": "offline", "kind": "boolean", "flag": "--offline", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Use the pre-populated package cache without network access." }, { "key": "sbomPath", "kind": "string", "flag": "--sbom-path", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory receiving generated SBOM files." }, { "key": "buildDate", "kind": "string", "flag": "--build-date", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Reproducible image timestamp in RFC3339 format." }, { "key": "config", "kind": "string", "flag": "", "default": null, "required": true, "style": "file", "scope": "positional", "choices": [], "description": "apko YAML configuration file defining packages, repositories, and image metadata." }, { "key": "tag", "kind": "string", "flag": "", "default": null, "required": true, "style": "value", "scope": "positional", "choices": [], "description": "Image name/tag attached to the built image." }, { "key": "output", "kind": "string", "flag": "", "default": null, "required": true, "style": "value", "scope": "positional", "choices": [], "description": "Destination image tarball or OCI layout directory." } ], "description": "Build an OCI image and SBOM from an APK package configuration.", "program": "", "environment": {}, "example": {} }, { "name": "publish", "args": [ "publish" ], "fields": [ { "key": "arch", "kind": "strings", "flag": "--arch", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Image CPU architectures such as x86_64 or aarch64; omit to use the configuration." }, { "key": "lockfile", "kind": "string", "flag": "--lockfile", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "APK dependency lockfile constraining package versions." }, { "key": "cacheDir", "kind": "string", "flag": "--cache-dir", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory for cached APK packages and indexes." }, { "key": "offline", "kind": "boolean", "flag": "--offline", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Use the pre-populated package cache without network access." }, { "key": "sbomPath", "kind": "string", "flag": "--sbom-path", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory receiving generated SBOM files." }, { "key": "buildDate", "kind": "string", "flag": "--build-date", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Reproducible image timestamp in RFC3339 format." }, { "key": "config", "kind": "string", "flag": "", "default": null, "required": true, "style": "file", "scope": "positional", "choices": [], "description": "apko YAML configuration file defining packages, repositories, and image metadata." }, { "key": "tags", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "positional", "choices": [], "description": "Registry image references to publish." } ], "description": "Build and publish an OCI image using native registry credentials.", "program": "", "environment": {}, "example": {} } ] }, { "name": "argocd", "path": "deployment/argocd", "program": "argocd", "title": "Argo CD", "docs": "https://argo-cd.readthedocs.io/en/stable/user-guide/commands/argocd/", "notes": "Install argocd and configure ARGOCD_SERVER and ARGOCD_AUTH_TOKEN or an existing CLI login. app_sync reconciles the application immediately.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version", "--client" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "app_get", "args": [ "app", "get" ], "fields": [ { "key": "server", "kind": "string", "flag": "--server", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "server", "choices": [] }, { "key": "grpcWeb", "kind": "boolean", "flag": "--grpc-web", "default": null, "required": false, "sample": true, "style": "switch", "scope": "global", "description": "grpcWeb", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [ "json", "yaml", "wide" ] }, { "key": "application", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "application", "choices": [] } ], "description": "app get", "program": "", "environment": {}, "example": {} }, { "name": "app_sync", "args": [ "app", "sync" ], "fields": [ { "key": "server", "kind": "string", "flag": "--server", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "server", "choices": [] }, { "key": "grpcWeb", "kind": "boolean", "flag": "--grpc-web", "default": null, "required": false, "sample": true, "style": "switch", "scope": "global", "description": "grpcWeb", "choices": [] }, { "key": "revision", "kind": "string", "flag": "--revision", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "revision", "choices": [] }, { "key": "prune", "kind": "boolean", "flag": "--prune", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "prune", "choices": [] }, { "key": "application", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "application", "choices": [] } ], "description": "app sync", "program": "", "environment": {}, "example": {} }, { "name": "app_wait", "args": [ "app", "wait", "--health", "--sync" ], "fields": [ { "key": "server", "kind": "string", "flag": "--server", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "server", "choices": [] }, { "key": "grpcWeb", "kind": "boolean", "flag": "--grpc-web", "default": null, "required": false, "sample": true, "style": "switch", "scope": "global", "description": "grpcWeb", "choices": [] }, { "key": "timeout", "kind": "integer", "flag": "--timeout", "default": null, "required": false, "sample": 300, "style": "value", "scope": "option", "description": "timeout", "choices": [] }, { "key": "application", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "application", "choices": [] } ], "description": "app wait", "program": "", "environment": {}, "example": {} } ] }, { "name": "artifactory", "path": "artifacts/artifactory", "program": "jf", "title": "JFrog Artifactory", "docs": "https://docs.jfrog-applications.jfrog.io/jfrog-applications/jfrog-cli", "notes": "Install JFrog CLI or use setup-artifactory. Configure an authenticated server through the native CLI credential store before use. serverId selects that server; credentials are not JSON inputs. Patterns are expanded by JFrog CLI, not a shell. buildName/buildNumber associate uploaded artifacts with build information. This module does not automatically collect environment variables into build metadata.", "environment": { "JFROG_CLI_OFFER_CONFIG": "false", "CI": "true" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "rt", "upload" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "flat", "kind": "boolean", "flag": "--flat", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "flat", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "buildName", "kind": "string", "flag": "--build-name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "buildName", "choices": [] }, { "key": "buildNumber", "kind": "string", "flag": "--build-number", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "buildNumber", "choices": [] }, { "key": "pattern", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/*.zip", "style": "value", "scope": "positional", "description": "pattern", "choices": [] }, { "key": "target", "kind": "string", "flag": "", "default": null, "required": true, "sample": "generic-local/releases/", "style": "value", "scope": "positional", "description": "target", "choices": [] } ], "description": "Upload build artifacts using a configured JFrog server.", "program": "", "environment": {}, "example": {} }, { "name": "download", "args": [ "rt", "download" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "flat", "kind": "boolean", "flag": "--flat", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "flat", "choices": [] }, { "key": "pattern", "kind": "string", "flag": "", "default": null, "required": true, "sample": "generic-local/releases/*.zip", "style": "value", "scope": "positional", "description": "pattern", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": "dist/", "required": false, "sample": "dist/", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "download", "program": "", "environment": {}, "example": {} }, { "name": "search", "args": [ "rt", "search" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "pattern", "kind": "string", "flag": "", "default": null, "required": true, "sample": "generic-local/releases/*", "style": "value", "scope": "positional", "description": "pattern", "choices": [] } ], "description": "search", "program": "", "environment": {}, "example": {} } ] }, { "name": "aws", "path": "cloud/aws", "program": "aws", "title": "AWS", "docs": "https://docs.aws.amazon.com/cli/latest/reference/", "notes": "Uses AWS CLI v2 and its normal credential chain, including profiles, environment variables, and workload/instance roles. The module never accepts access keys in JSON.", "environment": { "AWS_PAGER": "" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "identity", "args": [ "sts", "get-caller-identity" ], "fields": [ { "key": "region", "kind": "string", "flag": "--region", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "region", "choices": [] }, { "key": "profile", "kind": "string", "flag": "--profile", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "profile", "choices": [] }, { "key": "endpointUrl", "kind": "string", "flag": "--endpoint-url", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "endpointUrl", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [ "json", "text", "table", "yaml", "yaml-stream" ] } ], "description": "Inspect the authenticated AWS principal.", "program": "", "environment": {}, "example": {} }, { "name": "s3_cp", "args": [ "s3", "cp" ], "fields": [ { "key": "region", "kind": "string", "flag": "--region", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "region", "choices": [] }, { "key": "profile", "kind": "string", "flag": "--profile", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "profile", "choices": [] }, { "key": "endpointUrl", "kind": "string", "flag": "--endpoint-url", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "endpointUrl", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "exclude", "kind": "strings", "flag": "--exclude", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "exclude", "choices": [] }, { "key": "include", "kind": "strings", "flag": "--include", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "include", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "./artifact.zip", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "s3://example/artifact.zip", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "Copy files to, from, or between S3 locations.", "program": "", "environment": {}, "example": {} }, { "name": "s3_sync", "args": [ "s3", "sync" ], "fields": [ { "key": "region", "kind": "string", "flag": "--region", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "region", "choices": [] }, { "key": "profile", "kind": "string", "flag": "--profile", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "profile", "choices": [] }, { "key": "endpointUrl", "kind": "string", "flag": "--endpoint-url", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "endpointUrl", "choices": [] }, { "key": "delete", "kind": "boolean", "flag": "--delete", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "delete", "choices": [] }, { "key": "dryrun", "kind": "boolean", "flag": "--dryrun", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "dryrun", "choices": [] }, { "key": "exclude", "kind": "strings", "flag": "--exclude", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "exclude", "choices": [] }, { "key": "include", "kind": "strings", "flag": "--include", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "include", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "./dist", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "s3://example/site", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "Synchronize a directory or S3 prefix.", "program": "", "environment": {}, "example": {} }, { "name": "cloudformation_deploy", "args": [ "cloudformation", "deploy" ], "fields": [ { "key": "region", "kind": "string", "flag": "--region", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "region", "choices": [] }, { "key": "profile", "kind": "string", "flag": "--profile", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "profile", "choices": [] }, { "key": "endpointUrl", "kind": "string", "flag": "--endpoint-url", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "endpointUrl", "choices": [] }, { "key": "templateFile", "kind": "string", "flag": "--template-file", "default": null, "required": true, "sample": "template.yaml", "style": "value", "scope": "option", "description": "templateFile", "choices": [] }, { "key": "stackName", "kind": "string", "flag": "--stack-name", "default": null, "required": true, "sample": "example-stack", "style": "value", "scope": "option", "description": "stackName", "choices": [] }, { "key": "capabilities", "kind": "strings", "flag": "--capabilities", "default": null, "required": false, "sample": [ "example=value" ], "style": "space-list", "scope": "option", "description": "capabilities", "choices": [] }, { "key": "parameterOverrides", "kind": "strings", "flag": "--parameter-overrides", "default": null, "required": false, "sample": [ "example=value" ], "style": "space-list", "scope": "option", "description": "parameterOverrides", "choices": [] }, { "key": "noFailOnEmptyChangeset", "kind": "boolean", "flag": "--no-fail-on-empty-changeset", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noFailOnEmptyChangeset", "choices": [] } ], "description": "Deploy a CloudFormation template.", "program": "", "environment": {}, "example": {} } ] }, { "name": "azure", "path": "cloud/azure", "program": "az", "title": "Azure", "docs": "https://learn.microsoft.com/cli/azure/", "notes": "Install Azure CLI and authenticate with az login or workload identity before invoking. Bicep templates also require the Bicep CLI.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "account_show", "args": [ "account", "show" ], "fields": [], "description": "account show", "program": "", "environment": {}, "example": {} }, { "name": "group_deploy", "args": [ "deployment", "group", "create" ], "fields": [ { "key": "resourceGroup", "kind": "string", "flag": "--resource-group", "default": null, "required": true, "sample": "example-rg", "style": "value", "scope": "option", "description": "resourceGroup", "choices": [] }, { "key": "templateFile", "kind": "string", "flag": "--template-file", "default": null, "required": true, "sample": "main.bicep", "style": "value", "scope": "option", "description": "templateFile", "choices": [] }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "name", "choices": [] }, { "key": "parameters", "kind": "strings", "flag": "--parameters", "default": null, "required": false, "sample": [ "example=value" ], "style": "space-list", "scope": "option", "description": "parameters", "choices": [] } ], "description": "Deploy an ARM or Bicep template to a resource group.", "program": "", "environment": {}, "example": {} }, { "name": "webapp_deploy", "args": [ "webapp", "deploy" ], "fields": [ { "key": "resourceGroup", "kind": "string", "flag": "--resource-group", "default": null, "required": true, "sample": "example-rg", "style": "value", "scope": "option", "description": "resourceGroup", "choices": [] }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": true, "sample": "example-app", "style": "value", "scope": "option", "description": "name", "choices": [] }, { "key": "srcPath", "kind": "string", "flag": "--src-path", "default": null, "required": true, "sample": "dist/app.zip", "style": "value", "scope": "option", "description": "srcPath", "choices": [] }, { "key": "type", "kind": "string", "flag": "--type", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "type", "choices": [ "zip", "war", "jar", "ear", "static", "startup", "script", "lib" ] } ], "description": "webapp deploy", "program": "", "environment": {}, "example": {} } ] }, { "name": "bazel", "path": "build/bazel", "program": "bazel", "title": "Bazel", "docs": "https://bazel.build/reference/command-line-reference", "notes": "Install Bazel or use setup-bazel. Java, compilers, and external repositories depend on the workspace. Bazel startup flags are available through run.arguments. run_target executes a built program; command arguments follow --.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "compilationMode", "kind": "string", "flag": "-c", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "compilationMode", "choices": [ "fastbuild", "dbg", "opt" ] }, { "key": "jobs", "kind": "integer", "flag": "--jobs", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "jobs", "choices": [] }, { "key": "define", "kind": "strings", "flag": "--define", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "define", "choices": [] }, { "key": "copt", "kind": "strings", "flag": "--copt", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "copt", "choices": [] }, { "key": "targets", "kind": "strings", "flag": "", "default": [ "//..." ], "required": false, "sample": [ "//..." ], "style": "value", "scope": "positional", "description": "targets", "choices": [] } ], "description": "Build selected Bazel targets.", "program": "", "environment": {}, "example": {} }, { "name": "test", "args": [ "test" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "compilationMode", "kind": "string", "flag": "-c", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "compilationMode", "choices": [ "fastbuild", "dbg", "opt" ] }, { "key": "jobs", "kind": "integer", "flag": "--jobs", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "jobs", "choices": [] }, { "key": "define", "kind": "strings", "flag": "--define", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "define", "choices": [] }, { "key": "copt", "kind": "strings", "flag": "--copt", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "copt", "choices": [] }, { "key": "testOutput", "kind": "string", "flag": "--test-output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "testOutput", "choices": [ "summary", "errors", "all", "streamed" ] }, { "key": "targets", "kind": "strings", "flag": "", "default": [ "//..." ], "required": false, "sample": [ "//..." ], "style": "value", "scope": "positional", "description": "targets", "choices": [] } ], "description": "Build and test selected Bazel targets.", "program": "", "environment": {}, "example": {} }, { "name": "run_target", "args": [ "run" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "compilationMode", "kind": "string", "flag": "-c", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "compilationMode", "choices": [ "fastbuild", "dbg", "opt" ] }, { "key": "jobs", "kind": "integer", "flag": "--jobs", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "jobs", "choices": [] }, { "key": "define", "kind": "strings", "flag": "--define", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "define", "choices": [] }, { "key": "copt", "kind": "strings", "flag": "--copt", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "copt", "choices": [] }, { "key": "target", "kind": "string", "flag": "", "default": null, "required": true, "sample": "//app:main", "style": "value", "scope": "positional", "description": "target", "choices": [] }, { "key": "arguments", "kind": "strings", "flag": "--", "default": null, "required": false, "sample": [ "--help" ], "style": "space-list", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Build and run a target with literal program arguments.", "program": "", "environment": {}, "example": {} }, { "name": "query", "args": [ "query" ], "fields": [ { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "expression", "kind": "string", "flag": "", "default": null, "required": true, "sample": "//...", "style": "value", "scope": "positional", "description": "expression", "choices": [] } ], "description": "query", "program": "", "environment": {}, "example": {} }, { "name": "clean", "args": [ "clean" ], "fields": [ { "key": "expunge", "kind": "boolean", "flag": "--expunge", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "expunge", "choices": [] } ], "description": "clean", "program": "", "environment": {}, "example": {} } ] }, { "name": "betterleaks", "path": "security/betterleaks", "program": "betterleaks", "title": "Betterleaks", "docs": "https://github.com/betterleaks/betterleaks/tree/v1.10.0", "notes": "Install Betterleaks 1.10.x; the named commands target its stable v1 CLI, not the incompatible v2 development CLI. Homebrew's versioned cask uses betterleaks-v1, which can be selected with executable. Named scans force redaction, a nonzero findings exit code, and validation=false, so detected credentials are not checked against provider APIs. Automatic loading of target-local configs is disabled; provide an explicit config when needed. Use run.arguments for other native operations, and protect run reports.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan_dir", "args": [ "dir", "--redact=100", "--exit-code=1", "--no-banner", "--validation=false", "--unsafe-auto-load-config=false" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "reportFormat", "kind": "string", "flag": "--report-format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "reportFormat", "choices": [ "json", "csv", "junit", "sarif" ] }, { "key": "reportPath", "kind": "string", "flag": "--report-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reportPath", "choices": [] }, { "key": "confidence", "kind": "string", "flag": "--confidence", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "confidence", "choices": [ "low", "medium", "high" ] }, { "key": "enableRule", "kind": "strings", "flag": "--enable-rule", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "enableRule", "choices": [] }, { "key": "disableRule", "kind": "strings", "flag": "--disable-rule", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "disableRule", "choices": [] }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "directory", "choices": [] } ], "description": "Scan files using Betterleaks 1.x with redaction and credential validation disabled.", "program": "", "environment": {}, "example": {} }, { "name": "scan_git", "args": [ "git", "--redact=100", "--exit-code=1", "--no-banner", "--validation=false", "--unsafe-auto-load-config=false" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "reportFormat", "kind": "string", "flag": "--report-format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "reportFormat", "choices": [ "json", "csv", "junit", "sarif" ] }, { "key": "reportPath", "kind": "string", "flag": "--report-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reportPath", "choices": [] }, { "key": "confidence", "kind": "string", "flag": "--confidence", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "confidence", "choices": [ "low", "medium", "high" ] }, { "key": "enableRule", "kind": "strings", "flag": "--enable-rule", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "enableRule", "choices": [] }, { "key": "disableRule", "kind": "strings", "flag": "--disable-rule", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "disableRule", "choices": [] }, { "key": "logOpts", "kind": "string", "flag": "--log-opts", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "logOpts", "choices": [] }, { "key": "repository", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "repository", "choices": [] } ], "description": "Scan Git history with Betterleaks 1.x, failing on detected secrets.", "program": "", "environment": {}, "example": {} } ] }, { "name": "biome", "path": "linting/biome", "program": "biome", "title": "Biome", "docs": "https://biomejs.dev/reference/cli/", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "check", "args": [ "check" ], "fields": [ { "key": "configPath", "kind": "string", "flag": "--config-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configPath", "choices": [] }, { "key": "write", "kind": "boolean", "flag": "--write", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "write", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Run formatter, linter, and import checks.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [ "lint" ], "fields": [ { "key": "configPath", "kind": "string", "flag": "--config-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configPath", "choices": [] }, { "key": "write", "kind": "boolean", "flag": "--write", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "write", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Lint supported source files.", "program": "", "environment": {}, "example": {} }, { "name": "format", "args": [ "format", "--write" ], "fields": [ { "key": "configPath", "kind": "string", "flag": "--config-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configPath", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Format supported sources in place.", "program": "", "environment": {}, "example": {} }, { "name": "ci", "args": [ "ci" ], "fields": [ { "key": "configPath", "kind": "string", "flag": "--config-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configPath", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Run read-only CI checks.", "program": "", "environment": {}, "example": {} } ] }, { "name": "black", "path": "formatting/black", "program": "black", "title": "Black", "docs": "https://black.readthedocs.io/en/stable/usage_and_configuration/the_basics.html", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "format", "args": [], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "lineLength", "kind": "integer", "flag": "--line-length", "default": null, "required": false, "sample": 88, "style": "value", "scope": "option", "description": "lineLength", "choices": [] }, { "key": "targetVersion", "kind": "strings", "flag": "--target-version", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "targetVersion", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Format Python files in place.", "program": "", "environment": {}, "example": {} }, { "name": "check", "args": [ "--check" ], "fields": [ { "key": "diff", "kind": "boolean", "flag": "--diff", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "diff", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "lineLength", "kind": "integer", "flag": "--line-length", "default": null, "required": false, "sample": 88, "style": "value", "scope": "option", "description": "lineLength", "choices": [] }, { "key": "targetVersion", "kind": "strings", "flag": "--target-version", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "targetVersion", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Check Python formatting without writing files.", "program": "", "environment": {}, "example": {} } ] }, { "name": "buildkit", "path": "containers/buildkit", "program": "buildctl", "title": "BuildKit", "docs": "https://github.com/moby/buildkit#building-a-dockerfile-with-buildctl", "notes": "Requires a reachable buildkitd daemon. Authentication is read from Docker configuration. Use output=[\"type=image,name=example/app:tag,push=true\"] for a registry export.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build", "--frontend=dockerfile.v0" ], "fields": [ { "key": "addr", "kind": "string", "flag": "--addr", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "addr", "choices": [] }, { "key": "context", "kind": "string", "flag": "--local", "default": ".", "required": false, "sample": ".", "style": "prefix:context=", "scope": "option", "description": "context", "choices": [] }, { "key": "dockerfileDir", "kind": "string", "flag": "--local", "default": ".", "required": false, "sample": ".", "style": "prefix:dockerfile=", "scope": "option", "description": "dockerfileDir", "choices": [] }, { "key": "opt", "kind": "strings", "flag": "--opt", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "opt", "choices": [] }, { "key": "output", "kind": "strings", "flag": "--output", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "importCache", "kind": "strings", "flag": "--import-cache", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "importCache", "choices": [] }, { "key": "exportCache", "kind": "strings", "flag": "--export-cache", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "exportCache", "choices": [] }, { "key": "secret", "kind": "strings", "flag": "--secret", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "secret", "choices": [] }, { "key": "ssh", "kind": "strings", "flag": "--ssh", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "ssh", "choices": [] }, { "key": "noCache", "kind": "boolean", "flag": "--no-cache", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noCache", "choices": [] }, { "key": "progress", "kind": "string", "flag": "--progress", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "progress", "choices": [] } ], "description": "Build a Dockerfile with named local context and dockerfile directories.", "program": "", "environment": {}, "example": {} }, { "name": "prune", "args": [ "prune" ], "fields": [ { "key": "addr", "kind": "string", "flag": "--addr", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "addr", "choices": [] }, { "key": "all", "kind": "boolean", "flag": "--all", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "all", "choices": [] }, { "key": "filter", "kind": "strings", "flag": "--filter", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "filter", "choices": [] } ], "description": "Prune the selected BuildKit daemon cache.", "program": "", "environment": {}, "example": {} }, { "name": "du", "args": [ "du" ], "fields": [ { "key": "addr", "kind": "string", "flag": "--addr", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "addr", "choices": [] }, { "key": "verbose", "kind": "boolean", "flag": "--verbose", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "verbose", "choices": [] }, { "key": "filter", "kind": "strings", "flag": "--filter", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "filter", "choices": [] } ], "description": "Inspect BuildKit cache usage.", "program": "", "environment": {}, "example": {} } ] }, { "name": "checkov", "path": "security/checkov", "program": "checkov", "title": "Checkov", "docs": "https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html", "notes": "Install the Checkov Python CLI. scan uses --skip-download to avoid downloading platform policy guidance; it does not opt into soft-fail. Select framework when you need to restrict scope. Rules, integrations, and package checks may require additional tools or network access. Reports can include source fragments; protect the run directory.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan", "args": [ "--compact", "--skip-download" ], "fields": [ { "key": "directory", "kind": "string", "flag": "--directory", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "option", "description": "directory", "choices": [] }, { "key": "framework", "kind": "strings", "flag": "--framework", "default": null, "required": false, "sample": [ "example=value" ], "style": "space-list", "scope": "option", "description": "framework", "choices": [] }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] }, { "key": "check", "kind": "string", "flag": "--check", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "check", "choices": [] }, { "key": "skipCheck", "kind": "string", "flag": "--skip-check", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "skipCheck", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "outputFilePath", "kind": "string", "flag": "--output-file-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "outputFilePath", "choices": [] } ], "description": "Scan infrastructure code, failing when policy checks fail.", "program": "", "environment": {}, "example": {} } ] }, { "name": "cmake", "path": "build/cmake", "program": "cmake", "title": "CMake", "docs": "https://cmake.org/cmake/help/latest/manual/cmake.1.html", "notes": "Install CMake (including CTest) or use setup-cmake. A generator and compiler must be available for configuration. definitions contains nonsecret NAME=VALUE entries. Use CMAKE_C_COMPILER_LAUNCHER=sccache and CMAKE_CXX_COMPILER_LAUNCHER=sccache to enable compiler caching.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "configure", "args": [], "fields": [ { "key": "sourceDir", "kind": "string", "flag": "-S", "default": ".", "required": false, "sample": ".", "style": "separate", "scope": "option", "description": "sourceDir", "choices": [] }, { "key": "buildDir", "kind": "string", "flag": "-B", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "option", "description": "buildDir", "choices": [] }, { "key": "generator", "kind": "string", "flag": "-G", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "generator", "choices": [] }, { "key": "preset", "kind": "string", "flag": "--preset", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "preset", "choices": [] }, { "key": "buildType", "kind": "string", "flag": "", "default": null, "required": false, "sample": "Release", "style": "prefix:-DCMAKE_BUILD_TYPE=", "scope": "positional", "description": "buildType", "choices": [] }, { "key": "definitions", "kind": "strings", "flag": "", "default": null, "required": false, "sample": [ "BUILD_TESTING=ON" ], "style": "prefix:-D", "scope": "positional", "description": "definitions", "choices": [] } ], "description": "Configure a CMake build tree.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [], "fields": [ { "key": "buildDir", "kind": "string", "flag": "--build", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "global", "description": "buildDir", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "parallel", "kind": "integer", "flag": "--parallel", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "parallel", "choices": [] }, { "key": "target", "kind": "strings", "flag": "--target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] }, { "key": "cleanFirst", "kind": "boolean", "flag": "--clean-first", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "cleanFirst", "choices": [] } ], "description": "Build an existing CMake build tree.", "program": "", "environment": {}, "example": {} }, { "name": "install", "args": [], "fields": [ { "key": "buildDir", "kind": "string", "flag": "--install", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "global", "description": "buildDir", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "prefix", "kind": "string", "flag": "--prefix", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "prefix", "choices": [] }, { "key": "component", "kind": "string", "flag": "--component", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "component", "choices": [] } ], "description": "Install build artifacts into the selected prefix.", "program": "", "environment": {}, "example": {} }, { "name": "test", "args": [], "fields": [ { "key": "buildDir", "kind": "string", "flag": "--test-dir", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "global", "description": "buildDir", "choices": [] }, { "key": "config", "kind": "string", "flag": "-C", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "config", "choices": [] }, { "key": "parallel", "kind": "integer", "flag": "--parallel", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "parallel", "choices": [] }, { "key": "outputOnFailure", "kind": "boolean", "flag": "--output-on-failure", "default": true, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "outputOnFailure", "choices": [] } ], "description": "Run CTest tests in a configured build tree.", "program": "ctest", "environment": {}, "example": {} } ] }, { "name": "codacy", "path": "code-quality/codacy", "program": "codacy-coverage-reporter", "title": "Codacy", "docs": "https://coverage.codacy.com/", "notes": "Install the Codacy Coverage Reporter binary as codacy-coverage-reporter (or override executable). Supply CODACY_PROJECT_TOKEN or CODACY_API_TOKEN through the host environment. This module uploads existing coverage reports; it does not run tests or analyze source code. coverageFile supports the reporter's native glob matching. Uploads contact the configured Codacy service.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "help", "args": [ "--help" ], "fields": [], "description": "help", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "report" ], "fields": [ { "key": "coverageFile", "kind": "string", "flag": "--coverage-reports", "default": null, "required": true, "sample": "coverage/lcov.info", "style": "separate", "scope": "option", "description": "coverageFile", "choices": [] }, { "key": "language", "kind": "string", "flag": "--language", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "language", "choices": [] }, { "key": "commitUuid", "kind": "string", "flag": "--commit-uuid", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "commitUuid", "choices": [] }, { "key": "prefix", "kind": "string", "flag": "--prefix", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "prefix", "choices": [] }, { "key": "forceCoverageParser", "kind": "string", "flag": "--force-coverage-parser", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "forceCoverageParser", "choices": [ "opencover", "clover", "lcov", "phpunit", "jacoco", "dotcover", "cobertura", "go" ] } ], "description": "Upload an existing coverage report to Codacy.", "program": "", "environment": {}, "example": {} } ] }, { "name": "codecov", "path": "code-quality/codecov", "program": "codecovcli", "title": "Codecov", "docs": "https://docs.codecov.com/docs/the-codecov-cli", "notes": "Install the official codecov-cli Python package and provide CODECOV_TOKEN through the host environment. Source control metadata must be available in project, or provide the commit explicitly. files are repeated -f arguments, and flags label the upload. disableSearch=true restricts discovery to explicit files. This module does not generate coverage.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "upload-process", "--fail-on-error" ], "fields": [ { "key": "files", "kind": "strings", "flag": "-f", "default": null, "required": true, "sample": [ "example=value" ], "style": "separate", "scope": "option", "description": "files", "choices": [] }, { "key": "flags", "kind": "strings", "flag": "-F", "default": null, "required": false, "sample": [ "example=value" ], "style": "separate", "scope": "option", "description": "flags", "choices": [] }, { "key": "name", "kind": "string", "flag": "-n", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "name", "choices": [] }, { "key": "commit", "kind": "string", "flag": "-C", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "commit", "choices": [] }, { "key": "disableSearch", "kind": "boolean", "flag": "--disable-search", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "disableSearch", "choices": [] } ], "description": "Create a Codecov report and upload existing coverage files, failing on upload errors.", "program": "", "environment": {}, "example": {} } ] }, { "name": "coveralls", "path": "code-quality/coveralls", "program": "coveralls", "title": "Coveralls", "docs": "https://github.com/coverallsapp/coverage-reporter", "notes": "Install the Coveralls universal coverage-reporter binary (not the unrelated language-specific coveralls tools). Set COVERALLS_REPO_TOKEN through the environment. parallel=true requires a later done call with the same buildNumber. dryRun prevents reporting; payloads and logs can contain source and repository metadata.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "report" ], "fields": [ { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "format", "choices": [ "lcov", "simplecov", "cobertura", "jacoco", "gcov", "luacov", "golang", "python" ] }, { "key": "basePath", "kind": "string", "flag": "--base-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "basePath", "choices": [] }, { "key": "jobFlag", "kind": "string", "flag": "--job-flag", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "jobFlag", "choices": [] }, { "key": "buildNumber", "kind": "string", "flag": "--build-number", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "buildNumber", "choices": [] }, { "key": "parallel", "kind": "boolean", "flag": "--parallel", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "parallel", "choices": [] }, { "key": "dryRun", "kind": "boolean", "flag": "--dry-run", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "dryRun", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "coverage/lcov.info" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Upload coverage reports using the universal Coveralls reporter.", "program": "", "environment": {}, "example": {} }, { "name": "done", "args": [ "done" ], "fields": [ { "key": "buildNumber", "kind": "string", "flag": "--build-number", "default": null, "required": true, "sample": "123", "style": "value", "scope": "option", "description": "buildNumber", "choices": [] }, { "key": "carryforward", "kind": "string", "flag": "--carryforward", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "carryforward", "choices": [] }, { "key": "dryRun", "kind": "boolean", "flag": "--dry-run", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "dryRun", "choices": [] } ], "description": "Close a parallel coverage build.", "program": "", "environment": {}, "example": {} } ] }, { "name": "cypress", "path": "testing/cypress", "program": "cypress", "title": "Cypress", "docs": "https://docs.cypress.io/app/references/command-line", "notes": "Install Node.js and Cypress in your test project. Add its node_modules/.bin to PATH or set executable to the absolute path of node_modules/.bin/cypress. The project field selects the local working directory containing cypress.config.*. test runs end-to-end specs by default; component=true selects component testing. Install the Cypress binary and required system libraries before testing; Linux also needs Xvfb even for headless Electron. Upstream Cypress supports selected Linux, macOS, and Windows versions; Windows hosts are rejected here, and BSD browser builds are not provided. Cypress Cloud recording is opt-in with record=true; supply CYPRESS_RECORD_KEY through the host environment. Screenshots, videos, and reporter artifacts follow the project configuration.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "setup", "args": [ "add", "--dev", "--exact" ], "fields": [ { "key": "version", "kind": "string", "flag": "", "default": "latest", "required": false, "sample": "16.2.1", "style": "prefix:cypress@", "scope": "positional", "description": "Framework version or release tag to install with Bun.", "choices": [] } ], "description": "Install the test framework in project using Bun. Browser binaries are installed separately with install.", "program": "bun", "environment": { "CYPRESS_INSTALL_BINARY": "0" }, "example": {} }, { "name": "test", "args": [ "run", "--headless", "--posix-exit-codes" ], "fields": [ { "key": "browser", "kind": "string", "flag": "--browser", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "browser", "choices": [] }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "spec", "kind": "string", "flag": "--spec", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "spec", "choices": [] }, { "key": "reporter", "kind": "string", "flag": "--reporter", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reporter", "choices": [] }, { "key": "reporterOptions", "kind": "string", "flag": "--reporter-options", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reporterOptions", "choices": [] }, { "key": "component", "kind": "boolean", "flag": "--component", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "component", "choices": [] }, { "key": "record", "kind": "boolean", "flag": "--record", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "record", "choices": [] }, { "key": "parallel", "kind": "boolean", "flag": "--parallel", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "parallel", "choices": [] }, { "key": "group", "kind": "string", "flag": "--group", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "group", "choices": [] }, { "key": "ciBuildId", "kind": "string", "flag": "--ci-build-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "ciBuildId", "choices": [] }, { "key": "tag", "kind": "string", "flag": "--tag", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "tag", "choices": [] } ], "description": "Run Cypress specs headlessly, returning a failure if any tests fail.", "program": "", "environment": {}, "example": {} }, { "name": "install", "args": [ "install" ], "fields": [ { "key": "force", "kind": "boolean", "flag": "--force", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "force", "choices": [] } ], "description": "Download the Cypress binary matching the installed npm package.", "program": "", "environment": {}, "example": {} }, { "name": "verify", "args": [ "verify" ], "fields": [], "description": "Verify that the installed Cypress binary can start.", "program": "", "environment": {}, "example": {} }, { "name": "cache_list", "args": [ "cache", "list" ], "fields": [], "description": "List installed Cypress binaries.", "program": "", "environment": {}, "example": {} } ] }, { "name": "digitalocean", "path": "cloud/digitalocean", "program": "doctl", "title": "DigitalOcean", "docs": "https://docs.digitalocean.com/reference/doctl/", "notes": "Install doctl. Authenticate with DIGITALOCEAN_ACCESS_TOKEN or doctl auth init.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "account_get", "args": [ "account", "get" ], "fields": [], "description": "account get", "program": "", "environment": {}, "example": {} }, { "name": "droplets_list", "args": [ "compute", "droplet", "list" ], "fields": [], "description": "droplets list", "program": "", "environment": {}, "example": {} }, { "name": "apps_create", "args": [ "apps", "create" ], "fields": [ { "key": "spec", "kind": "string", "flag": "--spec", "default": null, "required": true, "sample": "app.yaml", "style": "value", "scope": "option", "description": "spec", "choices": [] } ], "description": "apps create", "program": "", "environment": {}, "example": {} }, { "name": "apps_update", "args": [ "apps", "update" ], "fields": [ { "key": "spec", "kind": "string", "flag": "--spec", "default": null, "required": true, "sample": "app.yaml", "style": "value", "scope": "option", "description": "spec", "choices": [] }, { "key": "app", "kind": "string", "flag": "", "default": null, "required": true, "sample": "app-id", "style": "value", "scope": "positional", "description": "app", "choices": [] } ], "description": "apps update", "program": "", "environment": {}, "example": {} }, { "name": "apps_deploy", "args": [ "apps", "create-deployment" ], "fields": [ { "key": "forceRebuild", "kind": "boolean", "flag": "--force-rebuild", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "forceRebuild", "choices": [] }, { "key": "wait", "kind": "boolean", "flag": "--wait", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "wait", "choices": [] }, { "key": "app", "kind": "string", "flag": "", "default": null, "required": true, "sample": "app-id", "style": "value", "scope": "positional", "description": "app", "choices": [] } ], "description": "apps deploy", "program": "", "environment": {}, "example": {} } ] }, { "name": "docker", "path": "containers/docker", "program": "docker", "title": "Docker", "docs": "https://docs.docker.com/reference/cli/docker/", "notes": "A local or remote container service must be available. Authenticate using the CLI credential store before pushes; interactive stdin is not forwarded.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "tag", "kind": "strings", "flag": "--tag", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "tag", "choices": [] }, { "key": "file", "kind": "string", "flag": "--file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "buildArg", "kind": "strings", "flag": "--build-arg", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "buildArg", "choices": [] }, { "key": "target", "kind": "string", "flag": "--target", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "target", "choices": [] }, { "key": "platform", "kind": "string", "flag": "--platform", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "platform", "choices": [] }, { "key": "noCache", "kind": "boolean", "flag": "--no-cache", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noCache", "choices": [] }, { "key": "pull", "kind": "boolean", "flag": "--pull", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "pull", "choices": [] }, { "key": "context", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "context", "choices": [] } ], "description": "Build an image from a context.", "program": "", "environment": {}, "example": {} }, { "name": "pull", "args": [ "pull" ], "fields": [ { "key": "platform", "kind": "string", "flag": "--platform", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "platform", "choices": [] }, { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "image", "choices": [] } ], "description": "Pull an image.", "program": "", "environment": {}, "example": {} }, { "name": "push", "args": [ "push" ], "fields": [ { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "image", "choices": [] } ], "description": "Push an authenticated image reference.", "program": "", "environment": {}, "example": {} }, { "name": "tag", "args": [ "tag" ], "fields": [ { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "target", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/app:v1", "style": "value", "scope": "positional", "description": "target", "choices": [] } ], "description": "Create an image tag.", "program": "", "environment": {}, "example": {} }, { "name": "container_run", "args": [ "run" ], "fields": [ { "key": "rm", "kind": "boolean", "flag": "--rm", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "rm", "choices": [] }, { "key": "detach", "kind": "boolean", "flag": "--detach", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "detach", "choices": [] }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "name", "choices": [] }, { "key": "publish", "kind": "strings", "flag": "--publish", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "publish", "choices": [] }, { "key": "volume", "kind": "strings", "flag": "--volume", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "volume", "choices": [] }, { "key": "env", "kind": "strings", "flag": "--env", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "env", "choices": [] }, { "key": "network", "kind": "string", "flag": "--network", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "network", "choices": [] }, { "key": "workdir", "kind": "string", "flag": "--workdir", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "workdir", "choices": [] }, { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "image", "choices": [] }, { "key": "command", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "true" ], "style": "value", "scope": "raw", "description": "command", "choices": [] } ], "description": "Run an image with optional command arguments.", "program": "", "environment": {}, "example": {} }, { "name": "compose", "args": [ "compose" ], "fields": [ { "key": "file", "kind": "strings", "flag": "--file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "projectName", "kind": "string", "flag": "--project-name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "projectName", "choices": [] }, { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "config" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Run Compose with its native subcommand arguments.", "program": "", "environment": {}, "example": {} } ] }, { "name": "doppler", "path": "secrets/doppler", "program": "doppler", "title": "Doppler", "docs": "https://docs.doppler.com/docs/cli", "notes": "Install Doppler CLI and authenticate through DOPPLER_TOKEN or existing CLI configuration. dopplerProject selects the remote project; project is the local directory. run_command injects secrets only into its child process, not later FluentCI tasks. names prints names only, and upload suppresses secret values. Child output is still logged: avoid printing injected credentials.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "run_command", "args": [ "run" ], "fields": [ { "key": "dopplerProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "dopplerProject", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "config", "choices": [] }, { "key": "noCache", "kind": "boolean", "flag": "--no-cache", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noCache", "choices": [] }, { "key": "command", "kind": "strings", "flag": "--", "default": null, "required": true, "sample": [ "node", "app.js" ], "style": "space-list", "scope": "raw", "description": "Executable and literal arguments; secrets are injected into this child process.", "choices": [] } ], "description": "Run a child process with secrets injected into its environment.", "program": "", "environment": {}, "example": {} }, { "name": "names", "args": [ "secrets", "--only-names", "--json" ], "fields": [ { "key": "dopplerProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "dopplerProject", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "config", "choices": [] } ], "description": "List secret names without retrieving their values.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "secrets", "upload", "--silent", "--no-interactive" ], "fields": [ { "key": "dopplerProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "dopplerProject", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "config", "choices": [] }, { "key": "file", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secrets.json", "style": "value", "scope": "positional", "description": "file", "choices": [] } ], "description": "Upload a JSON or dotenv file without printing its secret values.", "program": "", "environment": {}, "example": {} } ] }, { "name": "flyctl", "path": "deployment/flyctl", "program": "flyctl", "title": "Fly.io", "docs": "https://fly.io/docs/flyctl/", "notes": "Install flyctl and set FLY_API_TOKEN or authenticate with flyctl auth login. Deploy uses the remote builder.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "deploy", "args": [ "deploy", "--remote-only" ], "fields": [ { "key": "app", "kind": "string", "flag": "--app", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "app", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "image", "kind": "string", "flag": "--image", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "image", "choices": [] }, { "key": "region", "kind": "string", "flag": "--region", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "region", "choices": [] } ], "description": "deploy", "program": "", "environment": {}, "example": {} }, { "name": "status", "args": [ "status" ], "fields": [ { "key": "app", "kind": "string", "flag": "--app", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "app", "choices": [] }, { "key": "json", "kind": "boolean", "flag": "--json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] } ], "description": "status", "program": "", "environment": {}, "example": {} }, { "name": "logs", "args": [ "logs", "--no-tail" ], "fields": [ { "key": "app", "kind": "string", "flag": "--app", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "app", "choices": [] } ], "description": "logs", "program": "", "environment": {}, "example": {} } ] }, { "name": "gcloud", "path": "cloud/gcloud", "program": "gcloud", "title": "Google Cloud", "docs": "https://cloud.google.com/sdk/gcloud/reference", "notes": "Install Google Cloud CLI and authenticate through its native login or workload identity configuration. cloudProject selects the Google Cloud project; project is the local working directory.", "environment": { "CLOUDSDK_CORE_DISABLE_PROMPTS": "1" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "config_list", "args": [ "config", "list" ], "fields": [ { "key": "cloudProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "cloudProject", "choices": [] }, { "key": "account", "kind": "string", "flag": "--account", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "account", "choices": [] } ], "description": "config list", "program": "", "environment": {}, "example": {} }, { "name": "run_deploy", "args": [ "run", "deploy", "--quiet" ], "fields": [ { "key": "cloudProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "cloudProject", "choices": [] }, { "key": "account", "kind": "string", "flag": "--account", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "account", "choices": [] }, { "key": "image", "kind": "string", "flag": "--image", "default": null, "required": true, "sample": "us-docker.pkg.dev/example/app/web:v1", "style": "value", "scope": "option", "description": "image", "choices": [] }, { "key": "region", "kind": "string", "flag": "--region", "default": null, "required": true, "sample": "us-central1", "style": "value", "scope": "option", "description": "region", "choices": [] }, { "key": "service", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example-app", "style": "value", "scope": "positional", "description": "service", "choices": [] } ], "description": "Deploy a container image to Cloud Run.", "program": "", "environment": {}, "example": {} }, { "name": "storage_cp", "args": [ "storage", "cp" ], "fields": [ { "key": "cloudProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "cloudProject", "choices": [] }, { "key": "account", "kind": "string", "flag": "--account", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "account", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/app.zip", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "gs://example/app.zip", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "storage cp", "program": "", "environment": {}, "example": {} }, { "name": "instances_list", "args": [ "compute", "instances", "list" ], "fields": [ { "key": "cloudProject", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "cloudProject", "choices": [] }, { "key": "account", "kind": "string", "flag": "--account", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "account", "choices": [] } ], "description": "instances list", "program": "", "environment": {}, "example": {} } ] }, { "name": "gh-artifact", "path": "artifacts/gh-artifact", "program": "gh", "title": "GitHub artifacts", "docs": "https://github.com/actions/toolkit/tree/main/packages/artifact", "notes": "Use setup-gh-artifact to install gh and the official @actions/artifact client. Job-artifact upload is GitHub Actions-only and needs ACTIONS_RUNTIME_TOKEN/ACTIONS_RESULTS_URL; outside Actions, use release_upload or another artifact backend. GH_TOKEN authenticates gh operations. FLUENTCI_GH_ARTIFACT_CLIENT selects the installed client module. Uploaded job artifacts are immutable; choose unique names per producer. Download by run ID or release tag for downstream stages.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "-e", "const [name,root,retention,...files]=process.argv.slice(1); if(!process.env.ACTIONS_RUNTIME_TOKEN||!process.env.ACTIONS_RESULTS_URL)throw new Error(\"GitHub Actions artifact runtime credentials are required\"); const location=process.env.FLUENTCI_GH_ARTIFACT_CLIENT; const sdk=location?await import(location):await import(\"@actions/artifact\"); const client=new sdk.DefaultArtifactClient(); const result=await client.uploadArtifact(name,files,root,{retentionDays:Number(retention)}); console.log(JSON.stringify(result));", "--" ], "fields": [ { "key": "name", "kind": "string", "flag": "", "default": null, "required": true, "sample": "build-artifact", "style": "value", "scope": "positional", "description": "name", "choices": [] }, { "key": "rootDirectory", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "rootDirectory", "choices": [] }, { "key": "retentionDays", "kind": "integer", "flag": "", "default": 14, "required": false, "sample": 14, "style": "value", "scope": "positional", "description": "retentionDays", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "dist/app.zip" ], "style": "file", "scope": "raw", "description": "files", "choices": [] } ], "description": "Upload job artifacts using GitHub Actions runtime credentials and the official artifact client.", "program": "bun", "environment": {}, "example": {} }, { "name": "download", "args": [ "run", "download" ], "fields": [ { "key": "repo", "kind": "string", "flag": "--repo", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "repo", "choices": [] }, { "key": "dir", "kind": "string", "flag": "--dir", "default": "dist", "required": false, "sample": "dist", "style": "value", "scope": "option", "description": "dir", "choices": [] }, { "key": "name", "kind": "strings", "flag": "--name", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "name", "choices": [] }, { "key": "runId", "kind": "string", "flag": "", "default": null, "required": true, "sample": "123456", "style": "value", "scope": "positional", "description": "runId", "choices": [] } ], "description": "download", "program": "", "environment": {}, "example": {} }, { "name": "release_upload", "args": [ "release", "upload" ], "fields": [ { "key": "repo", "kind": "string", "flag": "--repo", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "repo", "choices": [] }, { "key": "clobber", "kind": "boolean", "flag": "--clobber", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "clobber", "choices": [] }, { "key": "tag", "kind": "string", "flag": "", "default": null, "required": true, "sample": "v1.2.3", "style": "value", "scope": "positional", "description": "tag", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "dist/app.zip" ], "style": "file", "scope": "positional", "description": "files", "choices": [] } ], "description": "release upload", "program": "", "environment": {}, "example": {} }, { "name": "release_download", "args": [ "release", "download" ], "fields": [ { "key": "repo", "kind": "string", "flag": "--repo", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "repo", "choices": [] }, { "key": "dir", "kind": "string", "flag": "--dir", "default": "dist", "required": false, "sample": "dist", "style": "value", "scope": "option", "description": "dir", "choices": [] }, { "key": "pattern", "kind": "strings", "flag": "--pattern", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "pattern", "choices": [] }, { "key": "tag", "kind": "string", "flag": "", "default": null, "required": true, "sample": "v1.2.3", "style": "value", "scope": "positional", "description": "tag", "choices": [] } ], "description": "release download", "program": "", "environment": {}, "example": {} } ] }, { "name": "gitlab-artifacts", "path": "artifacts/gitlab-artifacts", "program": "glab", "title": "GitLab artifacts", "docs": "https://docs.gitlab.com/cli/ci/artifact/", "notes": "Use setup-gitlab-artifacts to install glab and Bun. upload accepts a prebuilt ZIP and the running job ID; CI_JOB_TOKEN is read only at execution time. apiUrl supports self-hosted GitLab. GitLab runner artifact permissions and job lifecycle apply. For standard GitLab pipelines, native artifacts: declarations remain preferable when no explicit upload step is needed. download fetches the named job artifact for a ref; glab uses its native login or GITLAB_TOKEN.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "-e", "const [archive,jobId,baseUrl]=process.argv.slice(1); const token=process.env.CI_JOB_TOKEN; if(!token)throw new Error(\"CI_JOB_TOKEN is required for job artifact upload\"); const form=new FormData();form.append(\"file\",Bun.file(archive),archive.split(\"/\").pop());const response=await fetch(baseUrl.replace(/\\/$/,\"\")+\"/jobs/\"+encodeURIComponent(jobId)+\"/artifacts?artifact_format=zip&artifact_type=archive\",{method:\"POST\",headers:{\"JOB-TOKEN\":token},body:form});if(!response.ok)throw new Error(\"GitLab artifact upload failed: HTTP \"+response.status);console.log(JSON.stringify({jobId,status:response.status,body:await response.text()}));", "--" ], "fields": [ { "key": "archive", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/artifacts.zip", "style": "file", "scope": "positional", "description": "archive", "choices": [] }, { "key": "jobId", "kind": "string", "flag": "", "default": null, "required": true, "sample": "123456", "style": "value", "scope": "positional", "description": "jobId", "choices": [] }, { "key": "apiUrl", "kind": "string", "flag": "", "default": "https://gitlab.com/api/v4", "required": false, "sample": "https://gitlab.com/api/v4", "style": "value", "scope": "positional", "description": "apiUrl", "choices": [] } ], "description": "Upload a prebuilt ZIP to the current job using GitLab job-token authentication.", "program": "bun", "environment": {}, "example": {} }, { "name": "download", "args": [ "ci", "artifact" ], "fields": [ { "key": "repo", "kind": "string", "flag": "--repo", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "repo", "choices": [] }, { "key": "job", "kind": "string", "flag": "--job", "default": null, "required": true, "sample": "build", "style": "value", "scope": "option", "description": "job", "choices": [] }, { "key": "path", "kind": "string", "flag": "--path", "default": "dist", "required": false, "sample": "dist", "style": "value", "scope": "option", "description": "path", "choices": [] }, { "key": "ref", "kind": "string", "flag": "", "default": null, "required": true, "sample": "main", "style": "value", "scope": "positional", "description": "ref", "choices": [] } ], "description": "download", "program": "", "environment": {}, "example": {} }, { "name": "release_upload", "args": [ "release", "upload" ], "fields": [ { "key": "repo", "kind": "string", "flag": "--repo", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "repo", "choices": [] }, { "key": "tag", "kind": "string", "flag": "", "default": null, "required": true, "sample": "v1.2.3", "style": "value", "scope": "positional", "description": "tag", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "dist/app.zip" ], "style": "file", "scope": "positional", "description": "files", "choices": [] } ], "description": "release upload", "program": "", "environment": {}, "example": {} } ] }, { "name": "gitleaks", "path": "security/gitleaks", "program": "gitleaks", "title": "Gitleaks", "docs": "https://github.com/gitleaks/gitleaks", "notes": "Install Gitleaks 8.19 or newer, with the git and dir subcommands. scan_dir and scan_git enforce full redaction and nonzero exits on findings. Scan Git history only when it is available in project. No credential verification or reporting service is invoked by these wrappers. The raw run export can override these defaults.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan_dir", "args": [ "dir", "--redact=100", "--exit-code=1", "--no-banner" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "reportFormat", "kind": "string", "flag": "--report-format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "reportFormat", "choices": [ "json", "csv", "junit", "sarif" ] }, { "key": "reportPath", "kind": "string", "flag": "--report-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reportPath", "choices": [] }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "directory", "choices": [] } ], "description": "Scan directory contents with findings redacted and a failing exit status on leaks.", "program": "", "environment": {}, "example": {} }, { "name": "scan_git", "args": [ "git", "--redact=100", "--exit-code=1", "--no-banner" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "reportFormat", "kind": "string", "flag": "--report-format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "reportFormat", "choices": [ "json", "csv", "junit", "sarif" ] }, { "key": "reportPath", "kind": "string", "flag": "--report-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reportPath", "choices": [] }, { "key": "logOpts", "kind": "string", "flag": "--log-opts", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "logOpts", "choices": [] }, { "key": "repository", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "repository", "choices": [] } ], "description": "Scan Git history, failing on detected leaks.", "program": "", "environment": {}, "example": {} } ] }, { "name": "grype", "path": "security/grype", "program": "grype", "title": "Grype", "docs": "https://oss.anchore.com/docs/reference/grype/cli/", "notes": "Install Grype. scan defaults to failOn=high, unlike the upstream reporting-only default. Source prefixes such as dir:, sbom:, registry:, and docker: select the target type. Vulnerability scans need a compatible local database or permission to download one. Container registry credentials use the native Docker/registry configuration. Reports and file outputs follow native Grype behavior.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan", "args": [], "fields": [ { "key": "failOn", "kind": "string", "flag": "--fail-on", "default": "high", "required": false, "sample": "high", "style": "value", "scope": "option", "description": "failOn", "choices": [ "negligible", "low", "medium", "high", "critical" ] }, { "key": "output", "kind": "string", "flag": "--output", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "file", "kind": "string", "flag": "--file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "onlyFixed", "kind": "boolean", "flag": "--only-fixed", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "onlyFixed", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "sbom:sbom.json", "style": "value", "scope": "positional", "description": "source", "choices": [] } ], "description": "Scan an image, directory, or SBOM and fail on the configured severity threshold.", "program": "", "environment": {}, "example": {} }, { "name": "db_update", "args": [ "db", "update" ], "fields": [], "description": "Download the current vulnerability database.", "program": "", "environment": {}, "example": {} } ] }, { "name": "helm", "path": "deployment/helm", "program": "helm", "title": "Helm", "docs": "https://helm.sh/docs/helm/", "notes": "Install Helm. Cluster operations use KUBECONFIG or the native Kubernetes configuration. lint and template can run locally.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version", "--short" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [ "lint" ], "fields": [ { "key": "strict", "kind": "boolean", "flag": "--strict", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "strict", "choices": [] }, { "key": "values", "kind": "strings", "flag": "--values", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "values", "choices": [] }, { "key": "chart", "kind": "string", "flag": "", "default": null, "required": true, "sample": "./chart", "style": "value", "scope": "positional", "description": "chart", "choices": [] } ], "description": "lint", "program": "", "environment": {}, "example": {} }, { "name": "template", "args": [ "template" ], "fields": [ { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "namespace", "choices": [] }, { "key": "values", "kind": "strings", "flag": "--values", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "values", "choices": [] }, { "key": "set", "kind": "strings", "flag": "--set", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "set", "choices": [] }, { "key": "release", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "release", "choices": [] }, { "key": "chart", "kind": "string", "flag": "", "default": null, "required": true, "sample": "./chart", "style": "value", "scope": "positional", "description": "chart", "choices": [] } ], "description": "template", "program": "", "environment": {}, "example": {} }, { "name": "upgrade", "args": [ "upgrade", "--install" ], "fields": [ { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "namespace", "choices": [] }, { "key": "values", "kind": "strings", "flag": "--values", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "values", "choices": [] }, { "key": "set", "kind": "strings", "flag": "--set", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "set", "choices": [] }, { "key": "createNamespace", "kind": "boolean", "flag": "--create-namespace", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "createNamespace", "choices": [] }, { "key": "wait", "kind": "boolean", "flag": "--wait", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "wait", "choices": [] }, { "key": "timeout", "kind": "string", "flag": "--timeout", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "timeout", "choices": [] }, { "key": "release", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "release", "choices": [] }, { "key": "chart", "kind": "string", "flag": "", "default": null, "required": true, "sample": "./chart", "style": "value", "scope": "positional", "description": "chart", "choices": [] } ], "description": "Install or upgrade a release in the configured cluster.", "program": "", "environment": {}, "example": {} }, { "name": "uninstall", "args": [ "uninstall" ], "fields": [ { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "namespace", "choices": [] }, { "key": "wait", "kind": "boolean", "flag": "--wait", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "wait", "choices": [] }, { "key": "release", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "release", "choices": [] } ], "description": "uninstall", "program": "", "environment": {}, "example": {} } ] }, { "name": "infisical", "path": "secrets/infisical", "program": "infisical", "title": "Infisical", "docs": "https://infisical.com/docs/cli/reference", "notes": "Install a current Infisical CLI supporting secrets-manager run. Authenticate through INFISICAL_TOKEN or the native CLI session. Set secretProject (or INFISICAL_PROJECT_ID), env, and paths to select secrets. run_command injects secrets into its child process only. The command array is passed after -- with no shell. Child output is logged; avoid printing credentials or enabling CLI debug logging. Older CLIs can use run.arguments=[\"run\", \"--\", ...].", "environment": { "INFISICAL_DISABLE_UPDATE_CHECK": "true" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "run_command", "args": [ "secrets-manager", "run" ], "fields": [ { "key": "secretProject", "kind": "string", "flag": "--projectId", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "secretProject", "choices": [] }, { "key": "env", "kind": "string", "flag": "--env", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "env", "choices": [] }, { "key": "paths", "kind": "strings", "flag": "--path", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "paths", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "command", "kind": "strings", "flag": "--", "default": null, "required": true, "sample": [ "node", "app.js" ], "style": "space-list", "scope": "raw", "description": "Executable and literal arguments; secrets are injected into this child process.", "choices": [] } ], "description": "Run a child process with secrets injected into its environment.", "program": "", "environment": {}, "example": {} } ] }, { "name": "jfrog-cli", "path": "artifacts/jfrog-cli", "program": "jf", "title": "JFrog CLI", "docs": "https://docs.jfrog-applications.jfrog.io/jfrog-applications/jfrog-cli", "notes": "Install JFrog CLI or use setup-jfrog-cli. Configure an authenticated server through the native CLI credential store before use. serverId selects that server; credentials are not JSON inputs. Patterns are expanded by JFrog CLI, not a shell. buildName/buildNumber associate uploaded artifacts with build information. This module does not automatically collect environment variables into build metadata.", "environment": { "JFROG_CLI_OFFER_CONFIG": "false", "CI": "true" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "rt", "upload" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "flat", "kind": "boolean", "flag": "--flat", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "flat", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "buildName", "kind": "string", "flag": "--build-name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "buildName", "choices": [] }, { "key": "buildNumber", "kind": "string", "flag": "--build-number", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "buildNumber", "choices": [] }, { "key": "pattern", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/*.zip", "style": "value", "scope": "positional", "description": "pattern", "choices": [] }, { "key": "target", "kind": "string", "flag": "", "default": null, "required": true, "sample": "generic-local/releases/", "style": "value", "scope": "positional", "description": "target", "choices": [] } ], "description": "Upload build artifacts using a configured JFrog server.", "program": "", "environment": {}, "example": {} }, { "name": "download", "args": [ "rt", "download" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "flat", "kind": "boolean", "flag": "--flat", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "flat", "choices": [] }, { "key": "pattern", "kind": "string", "flag": "", "default": null, "required": true, "sample": "generic-local/releases/*.zip", "style": "value", "scope": "positional", "description": "pattern", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": "dist/", "required": false, "sample": "dist/", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "download", "program": "", "environment": {}, "example": {} }, { "name": "search", "args": [ "rt", "search" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "pattern", "kind": "string", "flag": "", "default": null, "required": true, "sample": "generic-local/releases/*", "style": "value", "scope": "positional", "description": "pattern", "choices": [] } ], "description": "search", "program": "", "environment": {}, "example": {} }, { "name": "build_publish", "args": [ "rt", "build-publish" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "buildName", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "buildName", "choices": [] }, { "key": "buildNumber", "kind": "string", "flag": "", "default": null, "required": true, "sample": "123", "style": "value", "scope": "positional", "description": "buildNumber", "choices": [] } ], "description": "build publish", "program": "", "environment": {}, "example": {} }, { "name": "build_promote", "args": [ "rt", "build-promote" ], "fields": [ { "key": "serverId", "kind": "string", "flag": "--server-id", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "serverId", "choices": [] }, { "key": "copy", "kind": "boolean", "flag": "--copy", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "copy", "choices": [] }, { "key": "status", "kind": "string", "flag": "--status", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "status", "choices": [] }, { "key": "buildName", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example", "style": "value", "scope": "positional", "description": "buildName", "choices": [] }, { "key": "buildNumber", "kind": "string", "flag": "", "default": null, "required": true, "sample": "123", "style": "value", "scope": "positional", "description": "buildNumber", "choices": [] }, { "key": "targetRepository", "kind": "string", "flag": "", "default": null, "required": true, "sample": "releases-local", "style": "value", "scope": "positional", "description": "targetRepository", "choices": [] } ], "description": "build promote", "program": "", "environment": {}, "example": {} } ] }, { "name": "kamal", "path": "deployment/kamal", "program": "kamal", "title": "Kamal", "docs": "https://kamal-deploy.org/docs/commands/", "notes": "Install Kamal 2, Ruby, Docker, and SSH. Configure config/deploy.yml and native Kamal secret sources. setup and deploy modify remote servers.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "deploy", "args": [ "deploy" ], "fields": [ { "key": "destination", "kind": "string", "flag": "--destination", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "destination", "choices": [] }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] } ], "description": "deploy", "program": "", "environment": {}, "example": {} }, { "name": "setup", "args": [ "setup" ], "fields": [ { "key": "destination", "kind": "string", "flag": "--destination", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "destination", "choices": [] }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] } ], "description": "setup", "program": "", "environment": {}, "example": {} }, { "name": "details", "args": [ "details" ], "fields": [ { "key": "destination", "kind": "string", "flag": "--destination", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "destination", "choices": [] }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] } ], "description": "details", "program": "", "environment": {}, "example": {} }, { "name": "rollback", "args": [ "rollback" ], "fields": [ { "key": "destination", "kind": "string", "flag": "--destination", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "destination", "choices": [] }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] }, { "key": "version", "kind": "string", "flag": "", "default": null, "required": true, "sample": "release-sha", "style": "value", "scope": "positional", "description": "version", "choices": [] } ], "description": "rollback", "program": "", "environment": {}, "example": {} } ] }, { "name": "kubectl", "path": "deployment/kubectl", "program": "kubectl", "title": "Kubectl", "docs": "https://kubernetes.io/docs/reference/kubectl/", "notes": "Install kubectl compatible with your cluster. Authentication and cluster selection use KUBECONFIG or native Kubernetes configuration.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version", "--client=true" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "apply", "args": [ "apply" ], "fields": [ { "key": "context", "kind": "string", "flag": "--context", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "context", "choices": [] }, { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "namespace", "choices": [] }, { "key": "kubeconfig", "kind": "string", "flag": "--kubeconfig", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "kubeconfig", "choices": [] }, { "key": "filename", "kind": "strings", "flag": "--filename", "default": null, "required": true, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "filename", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] } ], "description": "apply", "program": "", "environment": {}, "example": {} }, { "name": "get", "args": [ "get" ], "fields": [ { "key": "context", "kind": "string", "flag": "--context", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "context", "choices": [] }, { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "namespace", "choices": [] }, { "key": "kubeconfig", "kind": "string", "flag": "--kubeconfig", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "kubeconfig", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "resource", "kind": "string", "flag": "", "default": null, "required": true, "sample": "pods", "style": "value", "scope": "positional", "description": "resource", "choices": [] }, { "key": "name", "kind": "string", "flag": "", "default": null, "required": false, "sample": "example", "style": "value", "scope": "positional", "description": "name", "choices": [] } ], "description": "get", "program": "", "environment": {}, "example": {} }, { "name": "delete_resources", "args": [ "delete" ], "fields": [ { "key": "context", "kind": "string", "flag": "--context", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "context", "choices": [] }, { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "namespace", "choices": [] }, { "key": "kubeconfig", "kind": "string", "flag": "--kubeconfig", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "kubeconfig", "choices": [] }, { "key": "filename", "kind": "strings", "flag": "--filename", "default": null, "required": true, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "filename", "choices": [] }, { "key": "ignoreNotFound", "kind": "boolean", "flag": "--ignore-not-found", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "ignoreNotFound", "choices": [] } ], "description": "delete", "program": "", "environment": {}, "example": {} }, { "name": "rollout_status", "args": [ "rollout", "status" ], "fields": [ { "key": "context", "kind": "string", "flag": "--context", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "context", "choices": [] }, { "key": "namespace", "kind": "string", "flag": "--namespace", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "namespace", "choices": [] }, { "key": "kubeconfig", "kind": "string", "flag": "--kubeconfig", "default": null, "required": false, "sample": null, "style": "value", "scope": "global", "description": "kubeconfig", "choices": [] }, { "key": "timeout", "kind": "string", "flag": "--timeout", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "timeout", "choices": [] }, { "key": "resource", "kind": "string", "flag": "", "default": null, "required": true, "sample": "deployment/example", "style": "value", "scope": "positional", "description": "resource", "choices": [] } ], "description": "rollout status", "program": "", "environment": {}, "example": {} } ] }, { "name": "meson", "path": "build/meson", "program": "meson", "title": "Meson", "docs": "https://mesonbuild.com/Commands.html", "notes": "Install Meson or use setup-meson. Most builds also require Ninja and a compiler; use setup-ninja for the default backend. Build definitions determine language dependencies and installation behavior.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "configure", "args": [ "setup" ], "fields": [ { "key": "buildtype", "kind": "string", "flag": "--buildtype", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "buildtype", "choices": [ "plain", "debug", "debugoptimized", "release", "minsize", "custom" ] }, { "key": "prefix", "kind": "string", "flag": "--prefix", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "prefix", "choices": [] }, { "key": "backend", "kind": "string", "flag": "--backend", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "backend", "choices": [] }, { "key": "reconfigure", "kind": "boolean", "flag": "--reconfigure", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "reconfigure", "choices": [] }, { "key": "definitions", "kind": "strings", "flag": "", "default": null, "required": false, "sample": [ "warning_level=3" ], "style": "prefix:-D", "scope": "positional", "description": "definitions", "choices": [] }, { "key": "buildDir", "kind": "string", "flag": "", "default": "build", "required": false, "sample": "build", "style": "value", "scope": "positional", "description": "buildDir", "choices": [] }, { "key": "sourceDir", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "sourceDir", "choices": [] } ], "description": "configure", "program": "", "environment": {}, "example": {} }, { "name": "compile", "args": [ "compile" ], "fields": [ { "key": "buildDir", "kind": "string", "flag": "-C", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "option", "description": "buildDir", "choices": [] }, { "key": "jobs", "kind": "integer", "flag": "-j", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "jobs", "choices": [] }, { "key": "verbose", "kind": "boolean", "flag": "--verbose", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "verbose", "choices": [] }, { "key": "targets", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [], "style": "value", "scope": "positional", "description": "targets", "choices": [] } ], "description": "compile", "program": "", "environment": {}, "example": {} }, { "name": "test", "args": [ "test", "--print-errorlogs" ], "fields": [ { "key": "buildDir", "kind": "string", "flag": "-C", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "option", "description": "buildDir", "choices": [] }, { "key": "jobs", "kind": "integer", "flag": "-j", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "jobs", "choices": [] }, { "key": "suite", "kind": "strings", "flag": "--suite", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "suite", "choices": [] }, { "key": "names", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "unit" ], "style": "value", "scope": "positional", "description": "names", "choices": [] } ], "description": "test", "program": "", "environment": {}, "example": {} }, { "name": "install", "args": [ "install" ], "fields": [ { "key": "buildDir", "kind": "string", "flag": "-C", "default": "build", "required": false, "sample": "build", "style": "separate", "scope": "option", "description": "buildDir", "choices": [] }, { "key": "destdir", "kind": "string", "flag": "--destdir", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "destdir", "choices": [] }, { "key": "noRebuild", "kind": "boolean", "flag": "--no-rebuild", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noRebuild", "choices": [] } ], "description": "install", "program": "", "environment": {}, "example": {} } ] }, { "name": "netlify", "path": "deployment/netlify", "program": "netlify", "title": "Netlify", "docs": "https://cli.netlify.com/", "notes": "Install Netlify CLI and set NETLIFY_AUTH_TOKEN and NETLIFY_SITE_ID or use an existing login and linked site. deploy is a draft unless prod=true.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "deploy", "args": [ "deploy", "--json" ], "fields": [ { "key": "dir", "kind": "string", "flag": "--dir", "default": null, "required": true, "sample": "dist", "style": "value", "scope": "option", "description": "dir", "choices": [] }, { "key": "site", "kind": "string", "flag": "--site", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "site", "choices": [] }, { "key": "prod", "kind": "boolean", "flag": "--prod", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "prod", "choices": [] }, { "key": "message", "kind": "string", "flag": "--message", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "message", "choices": [] } ], "description": "deploy", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "context", "kind": "string", "flag": "--context", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "context", "choices": [] } ], "description": "build", "program": "", "environment": {}, "example": {} }, { "name": "status", "args": [ "status", "--json" ], "fields": [], "description": "status", "program": "", "environment": {}, "example": {} }, { "name": "sites_list", "args": [ "sites:list", "--json" ], "fields": [], "description": "sites list", "program": "", "environment": {}, "example": {} } ] }, { "name": "nexus", "path": "artifacts/nexus", "program": "curl", "title": "Nexus Repository", "docs": "https://help.sonatype.com/en/raw-repositories.html", "notes": "Requires curl 7.76+ or setup-nexus. Supply the full repository URL. Authenticate through a private curl config or netrc file; never place tokens or passwords in the URL or JSON. upload targets raw repositories; Maven/NPM/Docker repositories require their native package clients. HTTP status failures propagate to the pipeline.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [ "--fail-with-body", "--location", "--silent", "--show-error", "--retry", "3", "--netrc-optional" ], "fields": [ { "key": "curlConfig", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "curlConfig", "choices": [] }, { "key": "file", "kind": "string", "flag": "--upload-file", "default": null, "required": true, "sample": "dist/app.zip", "style": "file-separate", "scope": "option", "description": "file", "choices": [] }, { "key": "url", "kind": "string", "flag": "", "default": null, "required": true, "sample": "https://nexus.example/repository/releases/app.zip", "style": "value", "scope": "positional", "description": "url", "choices": [] } ], "description": "Upload a file to a Nexus raw-repository URL.", "program": "", "environment": {}, "example": {} }, { "name": "download", "args": [ "--fail-with-body", "--location", "--silent", "--show-error", "--retry", "3", "--netrc-optional" ], "fields": [ { "key": "curlConfig", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "curlConfig", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": true, "sample": "dist/app.zip", "style": "separate", "scope": "option", "description": "output", "choices": [] }, { "key": "url", "kind": "string", "flag": "", "default": null, "required": true, "sample": "https://nexus.example/repository/releases/app.zip", "style": "value", "scope": "positional", "description": "url", "choices": [] } ], "description": "Download a raw artifact, failing on HTTP errors.", "program": "", "environment": {}, "example": {} }, { "name": "head", "args": [ "--fail", "--head", "--location", "--silent", "--show-error", "--netrc-optional" ], "fields": [ { "key": "curlConfig", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "curlConfig", "choices": [] }, { "key": "url", "kind": "string", "flag": "", "default": null, "required": true, "sample": "https://nexus.example/repository/releases/app.zip", "style": "value", "scope": "positional", "description": "url", "choices": [] } ], "description": "head", "program": "", "environment": {}, "example": {} } ] }, { "name": "ninja", "path": "build/ninja", "program": "ninja", "title": "Ninja", "docs": "https://ninja-build.org/manual.html", "notes": "Install Ninja or use setup-ninja. Run in a directory containing build.ninja, or supply directory/file. Ninja executes commands defined by the project build graph.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [], "fields": [ { "key": "directory", "kind": "string", "flag": "-C", "default": ".", "required": false, "sample": ".", "style": "separate", "scope": "option", "description": "directory", "choices": [] }, { "key": "file", "kind": "string", "flag": "-f", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "file", "choices": [] }, { "key": "jobs", "kind": "integer", "flag": "-j", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "jobs", "choices": [] }, { "key": "verbose", "kind": "boolean", "flag": "-v", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "verbose", "choices": [] }, { "key": "dryRun", "kind": "boolean", "flag": "-n", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "dryRun", "choices": [] }, { "key": "targets", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [], "style": "value", "scope": "positional", "description": "targets", "choices": [] } ], "description": "build", "program": "", "environment": {}, "example": {} }, { "name": "clean", "args": [], "fields": [ { "key": "directory", "kind": "string", "flag": "-C", "default": ".", "required": false, "sample": ".", "style": "separate", "scope": "option", "description": "directory", "choices": [] }, { "key": "file", "kind": "string", "flag": "-f", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "file", "choices": [] }, { "key": "jobs", "kind": "integer", "flag": "-j", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "jobs", "choices": [] }, { "key": "tool", "kind": "string", "flag": "-t", "default": "clean", "required": false, "sample": "clean", "style": "separate", "scope": "option", "description": "tool", "choices": [ "clean" ] }, { "key": "targets", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [], "style": "value", "scope": "positional", "description": "targets", "choices": [] } ], "description": "clean", "program": "", "environment": {}, "example": {} }, { "name": "targets", "args": [], "fields": [ { "key": "directory", "kind": "string", "flag": "-C", "default": ".", "required": false, "sample": ".", "style": "separate", "scope": "option", "description": "directory", "choices": [] }, { "key": "file", "kind": "string", "flag": "-f", "default": null, "required": false, "sample": null, "style": "separate", "scope": "option", "description": "file", "choices": [] }, { "key": "jobs", "kind": "integer", "flag": "-j", "default": null, "required": false, "sample": 2, "style": "separate", "scope": "option", "description": "jobs", "choices": [] }, { "key": "tool", "kind": "string", "flag": "-t", "default": "targets", "required": false, "sample": "targets", "style": "separate", "scope": "option", "description": "tool", "choices": [ "targets" ] } ], "description": "targets", "program": "", "environment": {}, "example": {} } ] }, { "name": "nix-package", "path": "package-management/nix", "program": "nix", "title": "Nix packages", "docs": "https://nix.dev/manual/nix/stable/command-ref/new-cli/nix", "notes": "This module operates an existing Nix installation; the nix and determinate-nix modules install Nix itself. Flake commands enable nix-command and flakes explicitly.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "--extra-experimental-features", "nix-command flakes", "build" ], "fields": [ { "key": "outLink", "kind": "string", "flag": "--out-link", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "outLink", "choices": [] }, { "key": "noLink", "kind": "boolean", "flag": "--no-link", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noLink", "choices": [] }, { "key": "printOutPaths", "kind": "boolean", "flag": "--print-out-paths", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "printOutPaths", "choices": [] }, { "key": "noWriteLockFile", "kind": "boolean", "flag": "--no-write-lock-file", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noWriteLockFile", "choices": [] }, { "key": "installables", "kind": "strings", "flag": "", "default": [ ".#default" ], "required": false, "sample": [ ".#default" ], "style": "value", "scope": "positional", "description": "installables", "choices": [] } ], "description": "Build one or more flake installables.", "program": "", "environment": {}, "example": {} }, { "name": "eval", "args": [ "--extra-experimental-features", "nix-command flakes", "eval" ], "fields": [ { "key": "json", "kind": "boolean", "flag": "--json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] }, { "key": "raw", "kind": "boolean", "flag": "--raw", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "raw", "choices": [] }, { "key": "installable", "kind": "string", "flag": "", "default": null, "required": true, "sample": ".#packages.x86_64-linux.default.name", "style": "value", "scope": "positional", "description": "installable", "choices": [] } ], "description": "Evaluate a Nix installable.", "program": "", "environment": {}, "example": {} }, { "name": "flake_check", "args": [ "--extra-experimental-features", "nix-command flakes", "flake", "check" ], "fields": [ { "key": "noBuild", "kind": "boolean", "flag": "--no-build", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noBuild", "choices": [] }, { "key": "keepGoing", "kind": "boolean", "flag": "--keep-going", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "keepGoing", "choices": [] }, { "key": "noWriteLockFile", "kind": "boolean", "flag": "--no-write-lock-file", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noWriteLockFile", "choices": [] }, { "key": "flake", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "flake", "choices": [] } ], "description": "Evaluate and optionally build flake checks.", "program": "", "environment": {}, "example": {} }, { "name": "flake_update", "args": [ "--extra-experimental-features", "nix-command flakes", "flake", "update" ], "fields": [ { "key": "inputs", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "nixpkgs" ], "style": "value", "scope": "positional", "description": "inputs", "choices": [] } ], "description": "Update flake lock inputs in the project directory.", "program": "", "environment": {}, "example": {} }, { "name": "profile_install", "args": [ "--extra-experimental-features", "nix-command flakes", "profile", "install" ], "fields": [ { "key": "profile", "kind": "string", "flag": "--profile", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "profile", "choices": [] }, { "key": "installables", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "nixpkgs#hello" ], "style": "value", "scope": "positional", "description": "installables", "choices": [] } ], "description": "Install packages into a Nix profile.", "program": "", "environment": {}, "example": {} }, { "name": "store_gc", "args": [ "--extra-experimental-features", "nix-command flakes", "store", "gc" ], "fields": [], "description": "Garbage-collect unreferenced Nix store paths.", "program": "", "environment": {}, "example": {} } ] }, { "name": "openbao", "path": "secrets/openbao", "program": "bao", "title": "OpenBao", "docs": "https://openbao.org/docs/commands/", "notes": "Install bao and configure BAO_ADDR and BAO_TOKEN or the native token helper. kv_metadata requires KV v2; mount selects the engine mount. kv_put takes a dataFile path, not plaintext JSON values. KV operations execute immediately under the existing token policy. Secret paths and task output are persisted, so protect the run directory. Use run for agent configurations or other native operations, and avoid commands that print tokens or plaintext secrets.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "status", "args": [ "status", "-format=json" ], "fields": [], "description": "Check server initialization and seal status; sealed servers return a failing exit code.", "program": "", "environment": {}, "example": {} }, { "name": "kv_list", "args": [ "kv", "list", "-format=json" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "List key names without reading secret data.", "program": "", "environment": {}, "example": {} }, { "name": "kv_metadata", "args": [ "kv", "metadata", "get", "-format=json" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Read KV v2 version metadata without reading secret values.", "program": "", "environment": {}, "example": {} }, { "name": "kv_put", "args": [ "kv", "put", "-format=json" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] }, { "key": "dataFile", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secrets.json", "style": "prefix:@", "scope": "positional", "description": "JSON file on the host; its contents are read by the CLI, never by the module.", "choices": [] } ], "description": "Write secret data from a JSON file, reporting metadata only.", "program": "", "environment": {}, "example": {} }, { "name": "kv_delete", "args": [ "kv", "delete" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Delete the latest version of a KV secret.", "program": "", "environment": {}, "example": {} } ] }, { "name": "opentofu", "path": "infrastructure/opentofu", "program": "tofu", "title": "OpenTofu", "docs": "https://opentofu.org/docs/cli/commands/", "notes": "Plan uses ordinary exit codes. The raw run export treats every nonzero status as a failure, including detailed-exitcode=2.", "environment": { "TF_IN_AUTOMATION": "1" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "init", "args": [ "init", "-input=false", "-no-color" ], "fields": [ { "key": "backend", "kind": "boolean", "flag": "-backend", "default": null, "required": false, "sample": false, "style": "value", "scope": "option", "description": "backend", "choices": [] }, { "key": "backendConfig", "kind": "strings", "flag": "-backend-config", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "backendConfig", "choices": [] }, { "key": "upgrade", "kind": "boolean", "flag": "-upgrade", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "upgrade", "choices": [] }, { "key": "reconfigure", "kind": "boolean", "flag": "-reconfigure", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "reconfigure", "choices": [] } ], "description": "Initialize providers and the configured backend noninteractively.", "program": "", "environment": {}, "example": {} }, { "name": "validate", "args": [ "validate", "-no-color" ], "fields": [ { "key": "json", "kind": "boolean", "flag": "-json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] } ], "description": "Validate the initialized configuration.", "program": "", "environment": {}, "example": {} }, { "name": "fmt", "args": [ "fmt" ], "fields": [ { "key": "check", "kind": "boolean", "flag": "-check", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "check", "choices": [] }, { "key": "diff", "kind": "boolean", "flag": "-diff", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "diff", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "-recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] } ], "description": "Format configuration, or check when check=true.", "program": "", "environment": {}, "example": {} }, { "name": "plan", "args": [ "plan", "-input=false", "-no-color" ], "fields": [ { "key": "out", "kind": "string", "flag": "-out", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "out", "choices": [] }, { "key": "refresh", "kind": "boolean", "flag": "-refresh", "default": null, "required": false, "sample": false, "style": "value", "scope": "option", "description": "refresh", "choices": [] }, { "key": "lock", "kind": "boolean", "flag": "-lock", "default": null, "required": false, "sample": false, "style": "value", "scope": "option", "description": "lock", "choices": [] }, { "key": "var", "kind": "strings", "flag": "-var", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "var", "choices": [] }, { "key": "varFile", "kind": "strings", "flag": "-var-file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "varFile", "choices": [] }, { "key": "target", "kind": "strings", "flag": "-target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Create an infrastructure plan without applying it.", "program": "", "environment": {}, "example": {} }, { "name": "apply", "args": [ "apply", "-input=false", "-no-color" ], "fields": [ { "key": "autoApprove", "kind": "boolean", "flag": "-auto-approve", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "autoApprove", "choices": [] }, { "key": "var", "kind": "strings", "flag": "-var", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "var", "choices": [] }, { "key": "varFile", "kind": "strings", "flag": "-var-file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "varFile", "choices": [] }, { "key": "target", "kind": "strings", "flag": "-target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] }, { "key": "planFile", "kind": "string", "flag": "", "default": null, "required": false, "sample": "saved.tfplan", "style": "value", "scope": "positional", "description": "planFile", "choices": [] } ], "description": "Apply changes; use a saved plan or autoApprove=true.", "program": "", "environment": {}, "example": {} }, { "name": "destroy", "args": [ "destroy", "-input=false", "-no-color" ], "fields": [ { "key": "autoApprove", "kind": "boolean", "flag": "-auto-approve", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "autoApprove", "choices": [] }, { "key": "var", "kind": "strings", "flag": "-var", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "var", "choices": [] }, { "key": "varFile", "kind": "strings", "flag": "-var-file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "varFile", "choices": [] }, { "key": "target", "kind": "strings", "flag": "-target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Destroy managed infrastructure; autoApprove=true is required for unattended runs.", "program": "", "environment": {}, "example": {} }, { "name": "output", "args": [ "output", "-no-color" ], "fields": [ { "key": "json", "kind": "boolean", "flag": "-json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] }, { "key": "raw", "kind": "boolean", "flag": "-raw", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "raw", "choices": [] }, { "key": "name", "kind": "string", "flag": "", "default": null, "required": false, "sample": "endpoint", "style": "value", "scope": "positional", "description": "name", "choices": [] } ], "description": "Read state output values.", "program": "", "environment": {}, "example": {} } ] }, { "name": "oras", "path": "artifacts/oras", "program": "oras", "title": "ORAS", "docs": "https://oras.land/docs/commands/", "notes": "Install ORAS or use setup-oras. Authenticate with the native registry credential store before invocation. files use ORAS path:mediaType notation. References may use immutable digests for reproducible downstream downloads. OCI registries must support the selected artifact/referrer features.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "push", "args": [ "push" ], "fields": [ { "key": "artifactType", "kind": "string", "flag": "--artifact-type", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "artifactType", "choices": [] }, { "key": "annotation", "kind": "strings", "flag": "--annotation", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "annotation", "choices": [] }, { "key": "reference", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/project/artifact:v1", "style": "value", "scope": "positional", "description": "reference", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "dist/app.zip:application/zip" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Publish typed artifacts to an OCI registry.", "program": "", "environment": {}, "example": {} }, { "name": "pull", "args": [ "pull" ], "fields": [ { "key": "output", "kind": "string", "flag": "--output", "default": "dist", "required": false, "sample": "dist", "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "reference", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/project/artifact:v1", "style": "value", "scope": "positional", "description": "reference", "choices": [] } ], "description": "pull", "program": "", "environment": {}, "example": {} }, { "name": "copy", "args": [ "copy" ], "fields": [ { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/source:v1", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/releases:v1", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "copy", "program": "", "environment": {}, "example": {} }, { "name": "discover", "args": [ "discover" ], "fields": [ { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "reference", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/project/artifact:v1", "style": "value", "scope": "positional", "description": "reference", "choices": [] } ], "description": "discover", "program": "", "environment": {}, "example": {} } ] }, { "name": "playwright", "path": "testing/playwright", "program": "playwright", "title": "Playwright", "docs": "https://playwright.dev/docs/test-cli", "notes": "Install Node.js and @playwright/test in your test project. Add its node_modules/.bin to the host PATH or set executable to the absolute path of node_modules/.bin/playwright. testProject selects a Playwright test project; project selects the local working directory. Use install to download matching browsers and install_deps for system dependencies. Official browser support is limited to supported Linux, macOS, and Windows versions; the module rejects Windows hosts and does not provide BSD browser builds. Tests default to headless execution. Test reports, traces, and screenshots go to Playwright-configured paths under project, separate from the execution report in runDir.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "setup", "args": [ "add", "--dev", "--exact" ], "fields": [ { "key": "version", "kind": "string", "flag": "", "default": "latest", "required": false, "sample": "1.65.0", "style": "prefix:@playwright/test@", "scope": "positional", "description": "Framework version or release tag to install with Bun.", "choices": [] } ], "description": "Install the test framework in project using Bun. Browser binaries are installed separately with install.", "program": "bun", "environment": {}, "example": {} }, { "name": "test", "args": [ "test" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "testProject", "kind": "strings", "flag": "--project", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "testProject", "choices": [] }, { "key": "grep", "kind": "string", "flag": "--grep", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "grep", "choices": [] }, { "key": "grepInvert", "kind": "string", "flag": "--grep-invert", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "grepInvert", "choices": [] }, { "key": "workers", "kind": "integer", "flag": "--workers", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "workers", "choices": [] }, { "key": "reporter", "kind": "string", "flag": "--reporter", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "reporter", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "retries", "kind": "integer", "flag": "--retries", "default": null, "required": false, "sample": 2, "style": "nonnegative", "scope": "option", "description": "retries", "choices": [] }, { "key": "shard", "kind": "string", "flag": "--shard", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "shard", "choices": [] }, { "key": "forbidOnly", "kind": "boolean", "flag": "--forbid-only", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "forbidOnly", "choices": [] }, { "key": "failOnFlakyTests", "kind": "boolean", "flag": "--fail-on-flaky-tests", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "failOnFlakyTests", "choices": [] }, { "key": "updateSnapshots", "kind": "boolean", "flag": "--update-snapshots", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "updateSnapshots", "choices": [] }, { "key": "tests", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "tests/example.spec.ts" ], "style": "value", "scope": "positional", "description": "tests", "choices": [] } ], "description": "Run Playwright Test headlessly, optionally filtering projects and tests.", "program": "", "environment": {}, "example": {} }, { "name": "list", "args": [ "test", "--list" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "testProject", "kind": "strings", "flag": "--project", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "testProject", "choices": [] }, { "key": "grep", "kind": "string", "flag": "--grep", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "grep", "choices": [] }, { "key": "grepInvert", "kind": "string", "flag": "--grep-invert", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "grepInvert", "choices": [] }, { "key": "workers", "kind": "integer", "flag": "--workers", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "workers", "choices": [] }, { "key": "tests", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "tests/example.spec.ts" ], "style": "value", "scope": "positional", "description": "tests", "choices": [] } ], "description": "List matching tests without launching browsers.", "program": "", "environment": {}, "example": {} }, { "name": "install", "args": [ "install" ], "fields": [ { "key": "withDeps", "kind": "boolean", "flag": "--with-deps", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "withDeps", "choices": [] }, { "key": "onlyShell", "kind": "boolean", "flag": "--only-shell", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "onlyShell", "choices": [] }, { "key": "browsers", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "chromium" ], "style": "value", "scope": "positional", "description": "browsers", "choices": [] } ], "description": "Install browser binaries matching the installed Playwright package.", "program": "", "environment": {}, "example": {} }, { "name": "install_deps", "args": [ "install-deps" ], "fields": [ { "key": "browsers", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "chromium" ], "style": "value", "scope": "positional", "description": "browsers", "choices": [] } ], "description": "Install operating-system browser dependencies; may require elevated privileges.", "program": "", "environment": {}, "example": {} } ] }, { "name": "plumber", "path": "security/plumber", "program": "plumber", "title": "Plumber", "docs": "https://getplumber.io/docs/cli/reference", "notes": "Install Plumber or use setup-plumber. analyze needs GH_TOKEN/GITHUB_TOKEN or GITLAB_TOKEN with the documented read scopes. The upstream default gate is 100 points; minScore selects a letter gate, while minPoints selects a numeric gate. Provider, authentication, incomplete collection, and failed gates remain failures. Reports are written only when requested. Public score publication, comments, and badge mutations are not enabled by these wrappers.", "environment": { "PLUMBER_NO_UPDATE_CHECK": "1" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "analyze", "args": [ "analyze", "--fail-warnings" ], "fields": [ { "key": "provider", "kind": "string", "flag": "--provider", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "provider", "choices": [ "github", "gitlab" ] }, { "key": "repository", "kind": "string", "flag": "--project", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "repository", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "minScore", "kind": "string", "flag": "--min-score", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "minScore", "choices": [ "A", "B", "C", "D", "E" ] }, { "key": "minPoints", "kind": "integer", "flag": "--min-points", "default": null, "required": false, "sample": 90, "style": "nonnegative", "scope": "option", "description": "minPoints", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "sarif", "kind": "string", "flag": "--sarif", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "sarif", "choices": [] }, { "key": "glsast", "kind": "string", "flag": "--glsast", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "glsast", "choices": [] }, { "key": "pbom", "kind": "string", "flag": "--pbom", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "pbom", "choices": [] }, { "key": "branch", "kind": "string", "flag": "--branch", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "branch", "choices": [] }, { "key": "target", "kind": "string", "flag": "", "default": null, "required": false, "sample": "github.com/example/project", "style": "value", "scope": "positional", "description": "target", "choices": [] } ], "description": "Audit GitHub Actions/GitLab CI with a score gate and failing provider/collection errors.", "program": "", "environment": {}, "example": {} }, { "name": "validate_config", "args": [ "config", "validate" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] } ], "description": "Validate Plumber policy configuration without running a repository audit.", "program": "", "environment": {}, "example": {} } ] }, { "name": "podman", "path": "containers/podman", "program": "podman", "title": "Podman", "docs": "https://docs.podman.io/en/latest/Commands.html", "notes": "A local or remote container service must be available. Authenticate using the CLI credential store before pushes; interactive stdin is not forwarded.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "tag", "kind": "strings", "flag": "--tag", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "tag", "choices": [] }, { "key": "file", "kind": "string", "flag": "--file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "buildArg", "kind": "strings", "flag": "--build-arg", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "buildArg", "choices": [] }, { "key": "target", "kind": "string", "flag": "--target", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "target", "choices": [] }, { "key": "platform", "kind": "string", "flag": "--platform", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "platform", "choices": [] }, { "key": "noCache", "kind": "boolean", "flag": "--no-cache", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noCache", "choices": [] }, { "key": "pull", "kind": "boolean", "flag": "--pull", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "pull", "choices": [] }, { "key": "context", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "context", "choices": [] } ], "description": "Build an image from a context.", "program": "", "environment": {}, "example": {} }, { "name": "pull", "args": [ "pull" ], "fields": [ { "key": "platform", "kind": "string", "flag": "--platform", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "platform", "choices": [] }, { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "image", "choices": [] } ], "description": "Pull an image.", "program": "", "environment": {}, "example": {} }, { "name": "push", "args": [ "push" ], "fields": [ { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "image", "choices": [] } ], "description": "Push an authenticated image reference.", "program": "", "environment": {}, "example": {} }, { "name": "tag", "args": [ "tag" ], "fields": [ { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "target", "kind": "string", "flag": "", "default": null, "required": true, "sample": "registry.example/app:v1", "style": "value", "scope": "positional", "description": "target", "choices": [] } ], "description": "Create an image tag.", "program": "", "environment": {}, "example": {} }, { "name": "container_run", "args": [ "run" ], "fields": [ { "key": "rm", "kind": "boolean", "flag": "--rm", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "rm", "choices": [] }, { "key": "detach", "kind": "boolean", "flag": "--detach", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "detach", "choices": [] }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "name", "choices": [] }, { "key": "publish", "kind": "strings", "flag": "--publish", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "publish", "choices": [] }, { "key": "volume", "kind": "strings", "flag": "--volume", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "volume", "choices": [] }, { "key": "env", "kind": "strings", "flag": "--env", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "env", "choices": [] }, { "key": "network", "kind": "string", "flag": "--network", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "network", "choices": [] }, { "key": "workdir", "kind": "string", "flag": "--workdir", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "workdir", "choices": [] }, { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:latest", "style": "value", "scope": "positional", "description": "image", "choices": [] }, { "key": "command", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "true" ], "style": "value", "scope": "raw", "description": "command", "choices": [] } ], "description": "Run an image with optional command arguments.", "program": "", "environment": {}, "example": {} }, { "name": "compose", "args": [ "compose" ], "fields": [ { "key": "file", "kind": "strings", "flag": "--file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "projectName", "kind": "string", "flag": "--project-name", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "projectName", "choices": [] }, { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "config" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Run Compose with its native subcommand arguments.", "program": "", "environment": {}, "example": {} } ] }, { "name": "prettier", "path": "formatting/prettier", "program": "prettier", "title": "Prettier", "docs": "https://prettier.io/docs/cli", "notes": "Prettier expands its own quoted glob patterns; the module never invokes a shell.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "format", "args": [ "--write" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "ignorePath", "kind": "string", "flag": "--ignore-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "ignorePath", "choices": [] }, { "key": "parser", "kind": "string", "flag": "--parser", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "parser", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Format supported files in place.", "program": "", "environment": {}, "example": {} }, { "name": "check", "args": [ "--check" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "ignorePath", "kind": "string", "flag": "--ignore-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "ignorePath", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Check formatting without writing files.", "program": "", "environment": {}, "example": {} } ] }, { "name": "protolint", "path": "linting/protolint", "program": "protolint", "title": "Protolint", "docs": "https://github.com/yoheimuta/protolint", "notes": "Use setup-protolint or supply protolint on PATH. lint is read-only: both findings (exit 1) and parser/runtime errors (exit 2) fail the module call. fix explicitly modifies files. The selected reporter writes to native logs; stdoutPath/stderrPath identify those files for CI collection. No protoc compiler is required.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "raw", "choices": [], "description": "Literal native command argument tokens." } ], "description": "Run a native command with literal arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the installed tool version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [ "lint" ], "fields": [ { "key": "configPath", "kind": "string", "flag": "-config_path", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Explicit protolint YAML configuration file." }, { "key": "configDirPath", "kind": "string", "flag": "-config_dir_path", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory to search for protolint configuration." }, { "key": "reporter", "kind": "string", "flag": "-reporter", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Diagnostic reporter: plain, json, junit, sarif, sonar, unix, or tsc." }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Protocol Buffer files or directories to lint." } ], "description": "Lint Protocol Buffer style and fail on findings or parser errors.", "program": "", "environment": {}, "example": {} }, { "name": "fix", "args": [ "lint", "-fix" ], "fields": [ { "key": "configPath", "kind": "string", "flag": "-config_path", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Explicit protolint YAML configuration file." }, { "key": "configDirPath", "kind": "string", "flag": "-config_dir_path", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory to search for protolint configuration." }, { "key": "reporter", "kind": "string", "flag": "-reporter", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Diagnostic reporter: plain, json, junit, sarif, sonar, unix, or tsc." }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Protocol Buffer files or directories to lint." } ], "description": "Apply supported Protocol Buffer style fixes to the selected files.", "program": "", "environment": {}, "example": {} } ] }, { "name": "pulumi", "path": "infrastructure/pulumi", "program": "pulumi", "title": "Pulumi", "docs": "https://www.pulumi.com/docs/iac/cli/commands/", "notes": "up and destroy include --yes and execute immediately when invoked. Authenticate through PULUMI_ACCESS_TOKEN or a configured local backend.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "preview", "args": [ "preview", "--non-interactive" ], "fields": [ { "key": "stack", "kind": "string", "flag": "--stack", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "stack", "choices": [] }, { "key": "diff", "kind": "boolean", "flag": "--diff", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "diff", "choices": [] }, { "key": "refresh", "kind": "boolean", "flag": "--refresh", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "refresh", "choices": [] }, { "key": "target", "kind": "strings", "flag": "--target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Preview a stack update.", "program": "", "environment": {}, "example": {} }, { "name": "up", "args": [ "up", "--non-interactive", "--yes" ], "fields": [ { "key": "stack", "kind": "string", "flag": "--stack", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "stack", "choices": [] }, { "key": "diff", "kind": "boolean", "flag": "--diff", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "diff", "choices": [] }, { "key": "refresh", "kind": "boolean", "flag": "--refresh", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "refresh", "choices": [] }, { "key": "target", "kind": "strings", "flag": "--target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Apply a stack update without prompting.", "program": "", "environment": {}, "example": {} }, { "name": "destroy", "args": [ "destroy", "--non-interactive", "--yes" ], "fields": [ { "key": "stack", "kind": "string", "flag": "--stack", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "stack", "choices": [] }, { "key": "target", "kind": "strings", "flag": "--target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Destroy a stack without prompting.", "program": "", "environment": {}, "example": {} }, { "name": "stack_select", "args": [ "stack", "select", "--non-interactive" ], "fields": [ { "key": "name", "kind": "string", "flag": "", "default": null, "required": true, "sample": "org/project/dev", "style": "value", "scope": "positional", "description": "name", "choices": [] } ], "description": "Select an existing stack.", "program": "", "environment": {}, "example": {} }, { "name": "stack_output", "args": [ "stack", "output" ], "fields": [ { "key": "stack", "kind": "string", "flag": "--stack", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "stack", "choices": [] }, { "key": "json", "kind": "boolean", "flag": "--json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] }, { "key": "name", "kind": "string", "flag": "", "default": null, "required": false, "sample": "endpoint", "style": "value", "scope": "positional", "description": "name", "choices": [] } ], "description": "Read stack outputs without revealing secret values.", "program": "", "environment": {}, "example": {} }, { "name": "login", "args": [ "login", "--non-interactive" ], "fields": [ { "key": "backend", "kind": "string", "flag": "", "default": null, "required": false, "sample": "file:///tmp/pulumi", "style": "value", "scope": "positional", "description": "backend", "choices": [] } ], "description": "Select a backend; cloud credentials are read from the host environment.", "program": "", "environment": {}, "example": {} } ] }, { "name": "railpack", "path": "containers/railpack", "program": "railpack", "title": "Railpack", "docs": "https://railpack.com/reference/cli", "notes": "Use setup-railpack or provide railpack on PATH. prepare is the CI-oriented planning command; it creates plan/info JSON files and propagates planning errors. build requires a reachable BuildKit daemon (BUILDKIT_HOST) and uses native Docker registry credentials. Use envNames to forward selected host environment variables by name; values remain outside the generated command arguments. Build commands in configuration are trusted project code.", "environment": { "CI": "true" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "raw", "choices": [], "description": "Literal native command argument tokens." } ], "description": "Run a native command with literal arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the installed tool version.", "program": "", "environment": {}, "example": {} }, { "name": "prepare", "args": [ "prepare" ], "fields": [ { "key": "envNames", "kind": "strings", "flag": "--env", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Names of host environment variables to forward to Railpack, without embedding their values." }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Railpack project configuration file." }, { "key": "buildCmd", "kind": "string", "flag": "--build-cmd", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Override the project build command; executed by Railpack inside the build." }, { "key": "startCmd", "kind": "string", "flag": "--start-cmd", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Container start command to include in the image." }, { "key": "previous", "kind": "strings", "flag": "--previous", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Previously selected package versions as NAME@VERSION entries." }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Project source directory to analyze or build." }, { "key": "planOut", "kind": "string", "flag": "--plan-out", "default": "railpack-plan.json", "required": false, "style": "value", "scope": "option", "choices": [], "description": "Destination for the generated JSON build plan." }, { "key": "infoOut", "kind": "string", "flag": "--info-out", "default": "railpack-info.json", "required": false, "style": "value", "scope": "option", "choices": [], "description": "Destination for structured project/build metadata." } ], "description": "Generate a build plan and metadata, failing when the project cannot be prepared.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "envNames", "kind": "strings", "flag": "--env", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Names of host environment variables to forward to Railpack, without embedding their values." }, { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Railpack project configuration file." }, { "key": "buildCmd", "kind": "string", "flag": "--build-cmd", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Override the project build command; executed by Railpack inside the build." }, { "key": "startCmd", "kind": "string", "flag": "--start-cmd", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Container start command to include in the image." }, { "key": "previous", "kind": "strings", "flag": "--previous", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Previously selected package versions as NAME@VERSION entries." }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Project source directory to analyze or build." }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": true, "style": "value", "scope": "option", "choices": [], "description": "Container image name/tag to produce." }, { "key": "platform", "kind": "string", "flag": "--platform", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Target image platform, for example linux/amd64." }, { "key": "progress", "kind": "string", "flag": "--progress", "default": "plain", "required": false, "style": "value", "scope": "option", "choices": [], "description": "BuildKit progress mode: auto, plain, or tty." }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Export the final filesystem to a local directory." }, { "key": "cacheFrom", "kind": "strings", "flag": "--cache-from", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "BuildKit cache import specifications." }, { "key": "cacheTo", "kind": "strings", "flag": "--cache-to", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "BuildKit cache export specifications." }, { "key": "noCache", "kind": "boolean", "flag": "--no-cache", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Build without reading cached layers." } ], "description": "Build a project into an image through a configured BuildKit daemon.", "program": "", "environment": {}, "example": {} }, { "name": "info", "args": [ "info" ], "fields": [ { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "style": "value", "scope": "option", "choices": [], "description": "Project information output format: json or pretty." }, { "key": "out", "kind": "string", "flag": "--out", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Optional JSON information output file." }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Project source directory." } ], "description": "Inspect detected runtimes, dependencies, and build requirements.", "program": "", "environment": {}, "example": {} }, { "name": "schema", "args": [ "schema" ], "fields": [], "description": "Print the Railpack configuration JSON schema.", "program": "", "environment": {}, "example": {} } ] }, { "name": "railway", "path": "deployment/railway", "program": "railway", "title": "Railway", "docs": "https://docs.railway.com/cli", "notes": "Install Railway CLI. Use RAILWAY_TOKEN (project token) or RAILWAY_API_TOKEN (account token), and link a project before deployment. up waits for build completion in CI mode.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "up", "args": [ "up", "--ci" ], "fields": [ { "key": "service", "kind": "string", "flag": "--service", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "service", "choices": [] }, { "key": "environment", "kind": "string", "flag": "--environment", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "environment", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "up", "program": "", "environment": {}, "example": {} }, { "name": "status", "args": [ "status", "--json" ], "fields": [], "description": "status", "program": "", "environment": {}, "example": {} }, { "name": "redeploy", "args": [ "redeploy", "--yes" ], "fields": [ { "key": "service", "kind": "string", "flag": "--service", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "service", "choices": [] } ], "description": "redeploy", "program": "", "environment": {}, "example": {} } ] }, { "name": "rclone", "path": "artifacts/rclone", "program": "rclone", "title": "rclone", "docs": "https://rclone.org/commands/", "notes": "Install rclone or use setup-rclone. Configure remotes using native rclone config or its backend environment variables. RCLONE_CONFIG may point to a private config file. copy/copyto do not delete unrelated destination files. immutable prevents replacing existing differing files; check detects transfer/content mismatches.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "copy", "args": [ "copy" ], "fields": [ { "key": "checksum", "kind": "boolean", "flag": "--checksum", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "checksum", "choices": [] }, { "key": "immutable", "kind": "boolean", "flag": "--immutable", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "immutable", "choices": [] }, { "key": "transfers", "kind": "integer", "flag": "--transfers", "default": null, "required": false, "sample": 4, "style": "value", "scope": "option", "description": "transfers", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "remote:artifacts/build-123/", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "copy", "program": "", "environment": {}, "example": {} }, { "name": "copyto", "args": [ "copyto" ], "fields": [ { "key": "checksum", "kind": "boolean", "flag": "--checksum", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "checksum", "choices": [] }, { "key": "immutable", "kind": "boolean", "flag": "--immutable", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "immutable", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/app.zip", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "remote:artifacts/app.zip", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "copyto", "program": "", "environment": {}, "example": {} }, { "name": "check", "args": [ "check" ], "fields": [ { "key": "oneWay", "kind": "boolean", "flag": "--one-way", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "oneWay", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dist/", "style": "value", "scope": "positional", "description": "source", "choices": [] }, { "key": "destination", "kind": "string", "flag": "", "default": null, "required": true, "sample": "remote:artifacts/build-123/", "style": "value", "scope": "positional", "description": "destination", "choices": [] } ], "description": "Verify transferred artifact content against the source.", "program": "", "environment": {}, "example": {} }, { "name": "lsjson", "args": [ "lsjson" ], "fields": [ { "key": "recursive", "kind": "boolean", "flag": "--recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "remote:artifacts/build-123/", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "lsjson", "program": "", "environment": {}, "example": {} } ] }, { "name": "render", "path": "deployment/render", "program": "render", "title": "Render", "docs": "https://render.com/docs/cli-reference", "notes": "Install Render CLI and set RENDER_API_KEY or use render login with an active workspace. deploy starts a deployment immediately.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "services", "args": [ "services", "--output=json", "--confirm" ], "fields": [], "description": "services", "program": "", "environment": {}, "example": {} }, { "name": "deploy", "args": [ "deploys", "create", "--output=json", "--confirm" ], "fields": [ { "key": "wait", "kind": "boolean", "flag": "--wait", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "wait", "choices": [] }, { "key": "commit", "kind": "string", "flag": "--commit", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "commit", "choices": [] }, { "key": "service", "kind": "string", "flag": "", "default": null, "required": true, "sample": "srv-example", "style": "value", "scope": "positional", "description": "service", "choices": [] } ], "description": "deploy", "program": "", "environment": {}, "example": {} }, { "name": "deploys_list", "args": [ "deploys", "list", "--output=json", "--confirm" ], "fields": [ { "key": "service", "kind": "string", "flag": "", "default": null, "required": true, "sample": "srv-example", "style": "value", "scope": "positional", "description": "service", "choices": [] } ], "description": "deploys list", "program": "", "environment": {}, "example": {} } ] }, { "name": "ruff", "path": "linting/ruff", "program": "ruff", "title": "Ruff", "docs": "https://docs.astral.sh/ruff/configuration/", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "check", "args": [ "check" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "select", "kind": "string", "flag": "--select", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "select", "choices": [] }, { "key": "ignore", "kind": "string", "flag": "--ignore", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "ignore", "choices": [] }, { "key": "outputFormat", "kind": "string", "flag": "--output-format", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "outputFormat", "choices": [] }, { "key": "fix", "kind": "boolean", "flag": "--fix", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "fix", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Lint Python sources; fixes require fix=true.", "program": "", "environment": {}, "example": {} }, { "name": "format", "args": [ "format" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "lineLength", "kind": "integer", "flag": "--line-length", "default": null, "required": false, "sample": 88, "style": "value", "scope": "option", "description": "lineLength", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Format Python sources.", "program": "", "environment": {}, "example": {} }, { "name": "format_check", "args": [ "format", "--check" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Check Python formatting without writing files.", "program": "", "environment": {}, "example": {} } ] }, { "name": "rustfmt", "path": "formatting/rustfmt", "program": "rustfmt", "title": "Rustfmt", "docs": "https://rust-lang.github.io/rustfmt/", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "format", "args": [], "fields": [ { "key": "edition", "kind": "string", "flag": "--edition", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "edition", "choices": [ "2015", "2018", "2021", "2024" ] }, { "key": "configPath", "kind": "string", "flag": "--config-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configPath", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Format explicit Rust source files.", "program": "", "environment": {}, "example": {} }, { "name": "check", "args": [ "--check" ], "fields": [ { "key": "edition", "kind": "string", "flag": "--edition", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "edition", "choices": [ "2015", "2018", "2021", "2024" ] }, { "key": "configPath", "kind": "string", "flag": "--config-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configPath", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Check explicit Rust source files.", "program": "", "environment": {}, "example": {} }, { "name": "cargo_fmt", "args": [ "fmt" ], "fields": [ { "key": "all", "kind": "boolean", "flag": "--all", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "all", "choices": [] }, { "key": "check", "kind": "boolean", "flag": "--check", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "check", "choices": [] }, { "key": "manifestPath", "kind": "string", "flag": "--manifest-path", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "manifestPath", "choices": [] } ], "description": "Format a Cargo package or workspace.", "program": "cargo", "environment": {}, "example": {} } ] }, { "name": "sccache", "path": "caching/sccache", "program": "sccache", "title": "sccache", "docs": "https://github.com/mozilla/sccache", "notes": "Install sccache or use setup-sccache. Configure SCCACHE_DIR and remote storage credentials through the host environment. setup-sccache publishes RUSTC_WRAPPER for Rust builds. CMake can use sccache as CMAKE_C_COMPILER_LAUNCHER/CMAKE_CXX_COMPILER_LAUNCHER. start_server and stop_server manage the host cache daemon; compile requires its compiler on PATH.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "start_server", "args": [ "--start-server" ], "fields": [], "description": "start server", "program": "", "environment": {}, "example": {} }, { "name": "stop_server", "args": [ "--stop-server" ], "fields": [], "description": "stop server", "program": "", "environment": {}, "example": {} }, { "name": "stats", "args": [ "--show-stats" ], "fields": [ { "key": "statsFormat", "kind": "string", "flag": "--stats-format", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "statsFormat", "choices": [ "text", "json" ] } ], "description": "stats", "program": "", "environment": {}, "example": {} }, { "name": "zero_stats", "args": [ "--zero-stats" ], "fields": [], "description": "zero stats", "program": "", "environment": {}, "example": {} }, { "name": "compile", "args": [], "fields": [ { "key": "compiler", "kind": "string", "flag": "", "default": null, "required": true, "sample": "cc", "style": "value", "scope": "positional", "description": "compiler", "choices": [] }, { "key": "arguments", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "-c", "source.c", "-o", "source.o" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Compile through sccache using a native compiler and literal arguments.", "program": "", "environment": {}, "example": {} } ] }, { "name": "scorecard", "path": "security/scorecard", "program": "scorecard", "title": "OpenSSF Scorecard", "docs": "https://github.com/ossf/scorecard", "notes": "Install the OpenSSF Scorecard CLI. Remote repository checks contact GitHub and other project services; use GITHUB_AUTH_TOKEN when required by the upstream CLI. Local mode supports a limited check set. Scorecard exits successfully when it produces scores; low scores do not automatically fail CI. Apply a score policy separately or use the generic run export for supported policy integrations.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan", "args": [], "fields": [ { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [ "json", "sarif", "default" ] }, { "key": "checks", "kind": "string", "flag": "--checks", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "checks", "choices": [] }, { "key": "showDetails", "kind": "boolean", "flag": "--show-details", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "showDetails", "choices": [] }, { "key": "repo", "kind": "string", "flag": "--repo", "default": null, "required": true, "sample": "github.com/ossf/scorecard", "style": "value", "scope": "option", "description": "repo", "choices": [] } ], "description": "Evaluate an upstream repository against OpenSSF Scorecard checks.", "program": "", "environment": {}, "example": {} }, { "name": "scan_local", "args": [], "fields": [ { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [ "json", "sarif", "default" ] }, { "key": "checks", "kind": "string", "flag": "--checks", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "checks", "choices": [] }, { "key": "showDetails", "kind": "boolean", "flag": "--show-details", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "showDetails", "choices": [] }, { "key": "local", "kind": "string", "flag": "--local", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "option", "description": "local", "choices": [] } ], "description": "Run supported checks against a local repository.", "program": "", "environment": {}, "example": {} }, { "name": "gate", "description": "Fail CI when any reported check is unscored or below the requested minimum.", "program": "bun", "environment": {}, "args": [ "-e", "const [report,minimumText]=process.argv.slice(1);const minimum=Number(minimumText);if(!Number.isInteger(minimum)||minimum<1||minimum>10)throw Error(\"minimum must be between 1 and 10\");const data=await Bun.file(report).json();if(!Array.isArray(data.checks)||!data.checks.length)throw Error(\"Scorecard report has no checks\");const failed=data.checks.filter(c=>!Number.isFinite(c.score)||c.score({name:c.name,score:c.score}))}));if(failed.length)process.exitCode=1;", "--" ], "fields": [ { "key": "report", "kind": "string", "flag": "", "default": null, "required": true, "style": "file", "scope": "positional", "choices": [], "description": "Scorecard JSON report path." }, { "key": "minimum", "kind": "integer", "flag": "", "default": 7, "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Minimum score for every reported check (1\u201310)." } ] } ] }, { "name": "semgrep", "path": "security/semgrep", "program": "semgrep", "title": "Semgrep", "docs": "https://semgrep.dev/docs/cli-reference", "notes": "Install the Semgrep CLI. scan requires config entries: use local rule files for offline scans or registry identifiers for remote rules. It adds --error so findings fail the invocation and disables metrics. ci uses SEMGREP_APP_TOKEN and the configured platform policy; blocking rules determine failure. Do not enable both json and sarif. Reports can contain source snippets and findings.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan", "args": [ "scan", "--error", "--metrics=off" ], "fields": [ { "key": "config", "kind": "strings", "flag": "--config", "default": null, "required": true, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "json", "kind": "boolean", "flag": "--json", "default": true, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] }, { "key": "sarif", "kind": "boolean", "flag": "--sarif", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "sarif", "choices": [] }, { "key": "exclude", "kind": "strings", "flag": "--exclude", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "exclude", "choices": [] }, { "key": "jobs", "kind": "integer", "flag": "--jobs", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "jobs", "choices": [] }, { "key": "paths", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "src" ], "style": "value", "scope": "positional", "description": "paths", "choices": [] } ], "description": "Scan with explicit rule configurations and fail when findings are present.", "program": "", "environment": {}, "example": {} }, { "name": "ci", "args": [ "ci", "--metrics=off" ], "fields": [ { "key": "json", "kind": "boolean", "flag": "--json", "default": true, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] } ], "description": "Run Semgrep platform CI using the configured project policy.", "program": "", "environment": {}, "example": {} } ] }, { "name": "shellcheck", "path": "linting/shellcheck", "program": "shellcheck", "title": "ShellCheck", "docs": "https://www.shellcheck.net/wiki/", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [], "fields": [ { "key": "shell", "kind": "string", "flag": "--shell", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "shell", "choices": [ "sh", "bash", "dash", "ksh" ] }, { "key": "severity", "kind": "string", "flag": "--severity", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "severity", "choices": [ "error", "warning", "info", "style" ] }, { "key": "exclude", "kind": "string", "flag": "--exclude", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "exclude", "choices": [] }, { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "externalSources", "kind": "boolean", "flag": "--external-sources", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "externalSources", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Check explicit shell scripts.", "program": "", "environment": {}, "example": {} } ] }, { "name": "snyk", "path": "security/snyk", "program": "snyk", "title": "Snyk", "docs": "https://docs.snyk.io/snyk-cli/cli-commands-and-options-summary", "notes": "Install the Snyk CLI or use setup with an existing Bun installation. Add project/node_modules/.bin to PATH or override executable for later commands. setup uses Bun as its executable. Authenticate using SNYK_TOKEN or a native login; account/organization entitlements determine available products. Snyk scans contact its service; Code analysis can transmit source, and monitor publishes project metadata. Native finding and operational error statuses are preserved.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "setup", "args": [ "add", "--dev", "--exact" ], "fields": [ { "key": "version", "kind": "string", "flag": "", "default": "latest", "required": false, "sample": "1.1300.0", "style": "prefix:snyk@", "scope": "positional", "description": "version", "choices": [] } ], "description": "Install a selected Snyk CLI release in project using Bun.", "program": "bun", "environment": {}, "example": {} }, { "name": "test", "args": [ "test", "--json" ], "fields": [ { "key": "org", "kind": "string", "flag": "--org", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "org", "choices": [] }, { "key": "severityThreshold", "kind": "string", "flag": "--severity-threshold", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "severityThreshold", "choices": [ "low", "medium", "high", "critical" ] }, { "key": "file", "kind": "string", "flag": "--file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "allProjects", "kind": "boolean", "flag": "--all-projects", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "allProjects", "choices": [] }, { "key": "exclude", "kind": "string", "flag": "--exclude", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "exclude", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Test application dependencies and fail on vulnerabilities selected by policy.", "program": "", "environment": {}, "example": {} }, { "name": "code_test", "args": [ "code", "test", "--json" ], "fields": [ { "key": "org", "kind": "string", "flag": "--org", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "org", "choices": [] }, { "key": "severityThreshold", "kind": "string", "flag": "--severity-threshold", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "severityThreshold", "choices": [ "low", "medium", "high", "critical" ] }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Run Snyk Code analysis using the configured Snyk service.", "program": "", "environment": {}, "example": {} }, { "name": "iac_test", "args": [ "iac", "test", "--json" ], "fields": [ { "key": "org", "kind": "string", "flag": "--org", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "org", "choices": [] }, { "key": "severityThreshold", "kind": "string", "flag": "--severity-threshold", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "severityThreshold", "choices": [ "low", "medium", "high", "critical" ] }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Scan infrastructure-as-code configuration.", "program": "", "environment": {}, "example": {} }, { "name": "container_test", "args": [ "container", "test", "--json" ], "fields": [ { "key": "org", "kind": "string", "flag": "--org", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "org", "choices": [] }, { "key": "severityThreshold", "kind": "string", "flag": "--severity-threshold", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "severityThreshold", "choices": [ "low", "medium", "high", "critical" ] }, { "key": "file", "kind": "string", "flag": "--file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:v1", "style": "value", "scope": "positional", "description": "image", "choices": [] } ], "description": "Test a container image for vulnerabilities.", "program": "", "environment": {}, "example": {} }, { "name": "monitor", "args": [ "monitor", "--json" ], "fields": [ { "key": "org", "kind": "string", "flag": "--org", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "org", "choices": [] }, { "key": "file", "kind": "string", "flag": "--file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "file", "choices": [] }, { "key": "allProjects", "kind": "boolean", "flag": "--all-projects", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "allProjects", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Publish a dependency snapshot for ongoing monitoring.", "program": "", "environment": {}, "example": {} } ] }, { "name": "sonarqube", "path": "code-quality/sonarqube", "program": "sonar-scanner", "title": "SonarQube", "docs": "https://docs.sonarsource.com/sonarqube-server/analyzing-source-code/scanners/sonarscanner", "notes": "Install SonarScanner CLI and the Java runtime required by that release, or use its bundled runtime. Supply SONAR_TOKEN and optionally SONAR_HOST_URL through the environment. Configure sonar-project.properties or typed fields. properties contains nonsecret property=value entries; values become literal -Dproperty=value arguments. qualityGateWait=true waits for the server quality gate and fails when it fails. Analysis sends project information to the configured SonarQube service.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan", "args": [], "fields": [ { "key": "projectKey", "kind": "string", "flag": "", "default": null, "required": false, "sample": "example", "style": "prefix:-Dsonar.projectKey=", "scope": "positional", "description": "projectKey", "choices": [] }, { "key": "sources", "kind": "string", "flag": "", "default": null, "required": false, "sample": "src", "style": "prefix:-Dsonar.sources=", "scope": "positional", "description": "sources", "choices": [] }, { "key": "hostUrl", "kind": "string", "flag": "", "default": null, "required": false, "sample": "https://sonarqube.example", "style": "prefix:-Dsonar.host.url=", "scope": "positional", "description": "hostUrl", "choices": [] }, { "key": "organization", "kind": "string", "flag": "", "default": null, "required": false, "sample": "example", "style": "prefix:-Dsonar.organization=", "scope": "positional", "description": "organization", "choices": [] }, { "key": "qualityGateWait", "kind": "boolean", "flag": "", "default": null, "required": false, "sample": true, "style": "prefix:-Dsonar.qualitygate.wait=", "scope": "positional", "description": "qualityGateWait", "choices": [] }, { "key": "properties", "kind": "strings", "flag": "", "default": null, "required": false, "sample": [ "sonar.sourceEncoding=UTF-8" ], "style": "prefix:-D", "scope": "positional", "description": "properties", "choices": [] } ], "description": "Analyze the configured project and submit results to SonarQube.", "program": "", "environment": {}, "example": {} } ] }, { "name": "sqlfluff", "path": "linting/sqlfluff", "program": "sqlfluff", "title": "SQLFluff", "docs": "https://docs.sqlfluff.com/en/stable/reference/cli/", "notes": "Use setup-sqlfluff or supply sqlfluff on PATH. lint is read-only and preserves the native failing exit status; fix writes project files explicitly. Select the project dialect in configuration or arguments. dbt and other optional templater dependencies must be installed in the same Python environment; the default installer provides core SQLFluff. Reports can be retained through writeOutput and artifacts.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "raw", "choices": [], "description": "Literal native command argument tokens." } ], "description": "Run a native command with literal arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the installed tool version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [ "lint" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQLFluff configuration file; repository configuration remains available when omitted." }, { "key": "dialect", "kind": "string", "flag": "--dialect", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQL dialect, such as postgres, ansi, bigquery, or snowflake." }, { "key": "templater", "kind": "string", "flag": "--templater", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Template engine; requires its Python dependencies in the SQLFluff environment." }, { "key": "rules", "kind": "string", "flag": "--rules", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Comma-separated rule codes to enable." }, { "key": "excludeRules", "kind": "string", "flag": "--exclude-rules", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Comma-separated rule codes to exclude." }, { "key": "processes", "kind": "integer", "flag": "--processes", "default": null, "required": false, "style": "signed", "scope": "option", "choices": [], "description": "Worker count; zero uses all CPUs and negative values reserve CPUs." }, { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Report format, for example human, json, github-annotation, or sarif." }, { "key": "writeOutput", "kind": "string", "flag": "--write-output", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Report output file to retain as an artifact." }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "style": "value", "scope": "positional", "choices": [], "description": "SQL files or directories to process." } ], "description": "Lint SQL and fail the pipeline on violations or parsing errors.", "program": "", "environment": {}, "example": {} }, { "name": "fix", "args": [ "fix" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQLFluff configuration file; repository configuration remains available when omitted." }, { "key": "dialect", "kind": "string", "flag": "--dialect", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQL dialect, such as postgres, ansi, bigquery, or snowflake." }, { "key": "templater", "kind": "string", "flag": "--templater", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Template engine; requires its Python dependencies in the SQLFluff environment." }, { "key": "rules", "kind": "string", "flag": "--rules", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Comma-separated rule codes to enable." }, { "key": "excludeRules", "kind": "string", "flag": "--exclude-rules", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Comma-separated rule codes to exclude." }, { "key": "processes", "kind": "integer", "flag": "--processes", "default": null, "required": false, "style": "signed", "scope": "option", "choices": [], "description": "Worker count; zero uses all CPUs and negative values reserve CPUs." }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "style": "value", "scope": "positional", "choices": [], "description": "SQL files or directories to process." } ], "description": "Apply fixable SQL rules to the selected project files.", "program": "", "environment": {}, "example": {} }, { "name": "parse", "args": [ "parse" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQLFluff configuration file; repository configuration remains available when omitted." }, { "key": "dialect", "kind": "string", "flag": "--dialect", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQL dialect, such as postgres, ansi, bigquery, or snowflake." }, { "key": "templater", "kind": "string", "flag": "--templater", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Template engine; requires its Python dependencies in the SQLFluff environment." }, { "key": "rules", "kind": "string", "flag": "--rules", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Comma-separated rule codes to enable." }, { "key": "excludeRules", "kind": "string", "flag": "--exclude-rules", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Comma-separated rule codes to exclude." }, { "key": "processes", "kind": "integer", "flag": "--processes", "default": null, "required": false, "style": "signed", "scope": "option", "choices": [], "description": "Worker count; zero uses all CPUs and negative values reserve CPUs." }, { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Parse output format, such as yaml or json." }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "style": "value", "scope": "positional", "choices": [], "description": "SQL file or directory to parse." } ], "description": "Parse SQL to detect syntax and templating errors.", "program": "", "environment": {}, "example": {} } ] }, { "name": "sqruff", "path": "linting/sqruff", "program": "sqruff", "title": "Sqruff", "docs": "https://github.com/quarylabs/sqruff", "notes": "Use setup-sqruff or supply sqruff on PATH. lint preserves native failures and does not change SQL files; fix explicitly writes changes. Select a dialect in arguments or .sqruff configuration. JSON/SARIF diagnostics are available in execution logs; GitLab Code Quality output can be written with writeOutput. Configuration and templater libraries are trusted project inputs.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "raw", "choices": [], "description": "Literal native command argument tokens." } ], "description": "Run a native command with literal arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the installed tool version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [ "lint" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Additional Sqruff configuration file overriding discovered configuration." }, { "key": "dialect", "kind": "string", "flag": "--dialect", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQL dialect override, for example postgres, ansi, or bigquery." }, { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Report format: human, github-annotation-native, gitlab, json, sarif, or none." }, { "key": "ignoreLocalConfig", "kind": "boolean", "flag": "--ignore-local-config", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Ignore discovered global and project configuration; explicit config is still loaded." }, { "key": "parsingErrors", "kind": "boolean", "flag": "--parsing-errors", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Include SQL parsing errors in diagnostics." }, { "key": "disableNoqa", "kind": "boolean", "flag": "--disable-noqa", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Ignore inline noqa suppression comments." }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "style": "value", "scope": "positional", "choices": [], "description": "SQL files or directories to check or fix." }, { "key": "writeOutput", "kind": "string", "flag": "--write-output", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Destination for a GitLab Code Quality report when using the gitlab format." }, { "key": "annotationLevel", "kind": "string", "flag": "--annotation-level", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Severity for GitLab findings: notice, warning, failure, or error." } ], "description": "Lint SQL without modifying files and fail the pipeline on violations.", "program": "", "environment": {}, "example": {} }, { "name": "fix", "args": [ "fix" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Additional Sqruff configuration file overriding discovered configuration." }, { "key": "dialect", "kind": "string", "flag": "--dialect", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "SQL dialect override, for example postgres, ansi, or bigquery." }, { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Report format: human, github-annotation-native, gitlab, json, sarif, or none." }, { "key": "ignoreLocalConfig", "kind": "boolean", "flag": "--ignore-local-config", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Ignore discovered global and project configuration; explicit config is still loaded." }, { "key": "parsingErrors", "kind": "boolean", "flag": "--parsing-errors", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Include SQL parsing errors in diagnostics." }, { "key": "disableNoqa", "kind": "boolean", "flag": "--disable-noqa", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Ignore inline noqa suppression comments." }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "style": "value", "scope": "positional", "choices": [], "description": "SQL files or directories to check or fix." } ], "description": "Apply SQL formatting and fixable lint rules to the selected project files.", "program": "", "environment": {}, "example": {} } ] }, { "name": "syft", "path": "security/syft", "program": "syft", "title": "Syft", "docs": "https://oss.anchore.com/docs/reference/syft/cli/", "notes": "Install Syft. Directory sources can use dir:.; image sources may require a container daemon or registry access. output accepts repeated format or format=path values, such as cyclonedx-json=sbom.json. SBOM generation inventories packages; it does not apply a vulnerability policy. Use Grype or Trivy to check the resulting SBOM.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "scan", "args": [ "scan" ], "fields": [ { "key": "output", "kind": "strings", "flag": "--output", "default": [ "syft-json" ], "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "config", "choices": [] }, { "key": "exclude", "kind": "strings", "flag": "--exclude", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "exclude", "choices": [] }, { "key": "source", "kind": "string", "flag": "", "default": null, "required": true, "sample": "dir:.", "style": "value", "scope": "positional", "description": "source", "choices": [] } ], "description": "Generate an SBOM for a directory, image, or archive.", "program": "", "environment": {}, "example": {} }, { "name": "convert", "args": [ "convert" ], "fields": [ { "key": "output", "kind": "strings", "flag": "--output", "default": [ "cyclonedx-json" ], "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "file", "kind": "string", "flag": "", "default": null, "required": true, "sample": "sbom.json", "style": "value", "scope": "positional", "description": "file", "choices": [] } ], "description": "Convert an existing SBOM to a supported output format.", "program": "", "environment": {}, "example": {} } ] }, { "name": "tangled-artifacts", "path": "artifacts/tangled-artifacts", "program": "tangled-release-asset-uploader", "title": "Tangled release artifacts", "docs": "https://tangled.org/joshghiloni.me/tangled-release-asset-uploader", "notes": "Install tangled-release-asset-uploader or use setup-tangled-artifacts. This purpose-built uploader is separate from aly.codes/tg. The annotated tag must already be pushed to the repository. username must own that repository; provide its app password through TNGL_UPLOADER_APP_PASSWORD. Passwords are never module inputs or task arguments. Files are checked locally before upload. The uploader prints each created AT URI in task stdout; the execution report preserves it for downstream steps.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "upload", "args": [], "fields": [ { "key": "username", "kind": "string", "flag": "--username", "default": null, "required": true, "sample": "publisher.example", "style": "value", "scope": "option", "description": "username", "choices": [] }, { "key": "tag", "kind": "string", "flag": "--repo-tag", "default": null, "required": true, "sample": "v1.2.3", "style": "value", "scope": "option", "description": "tag", "choices": [] }, { "key": "repository", "kind": "string", "flag": "--target-repo", "default": null, "required": true, "sample": "https://tangled.org/publisher.example/project", "style": "value", "scope": "option", "description": "repository", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "dist/app.zip" ], "style": "file", "scope": "positional", "description": "files", "choices": [] } ], "description": "Upload files as assets attached to an existing annotated Tangled tag.", "program": "", "environment": {}, "example": {} } ] }, { "name": "terraform", "path": "infrastructure/terraform", "program": "terraform", "title": "Terraform", "docs": "https://developer.hashicorp.com/terraform/cli/commands", "notes": "Plan uses ordinary exit codes. The raw run export treats every nonzero status as a failure, including detailed-exitcode=2.", "environment": { "TF_IN_AUTOMATION": "1" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "init", "args": [ "init", "-input=false", "-no-color" ], "fields": [ { "key": "backend", "kind": "boolean", "flag": "-backend", "default": null, "required": false, "sample": false, "style": "value", "scope": "option", "description": "backend", "choices": [] }, { "key": "backendConfig", "kind": "strings", "flag": "-backend-config", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "backendConfig", "choices": [] }, { "key": "upgrade", "kind": "boolean", "flag": "-upgrade", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "upgrade", "choices": [] }, { "key": "reconfigure", "kind": "boolean", "flag": "-reconfigure", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "reconfigure", "choices": [] } ], "description": "Initialize providers and the configured backend noninteractively.", "program": "", "environment": {}, "example": {} }, { "name": "validate", "args": [ "validate", "-no-color" ], "fields": [ { "key": "json", "kind": "boolean", "flag": "-json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] } ], "description": "Validate the initialized configuration.", "program": "", "environment": {}, "example": {} }, { "name": "fmt", "args": [ "fmt" ], "fields": [ { "key": "check", "kind": "boolean", "flag": "-check", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "check", "choices": [] }, { "key": "diff", "kind": "boolean", "flag": "-diff", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "diff", "choices": [] }, { "key": "recursive", "kind": "boolean", "flag": "-recursive", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "recursive", "choices": [] } ], "description": "Format configuration, or check when check=true.", "program": "", "environment": {}, "example": {} }, { "name": "plan", "args": [ "plan", "-input=false", "-no-color" ], "fields": [ { "key": "out", "kind": "string", "flag": "-out", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "out", "choices": [] }, { "key": "refresh", "kind": "boolean", "flag": "-refresh", "default": null, "required": false, "sample": false, "style": "value", "scope": "option", "description": "refresh", "choices": [] }, { "key": "lock", "kind": "boolean", "flag": "-lock", "default": null, "required": false, "sample": false, "style": "value", "scope": "option", "description": "lock", "choices": [] }, { "key": "var", "kind": "strings", "flag": "-var", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "var", "choices": [] }, { "key": "varFile", "kind": "strings", "flag": "-var-file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "varFile", "choices": [] }, { "key": "target", "kind": "strings", "flag": "-target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Create an infrastructure plan without applying it.", "program": "", "environment": {}, "example": {} }, { "name": "apply", "args": [ "apply", "-input=false", "-no-color" ], "fields": [ { "key": "autoApprove", "kind": "boolean", "flag": "-auto-approve", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "autoApprove", "choices": [] }, { "key": "var", "kind": "strings", "flag": "-var", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "var", "choices": [] }, { "key": "varFile", "kind": "strings", "flag": "-var-file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "varFile", "choices": [] }, { "key": "target", "kind": "strings", "flag": "-target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] }, { "key": "planFile", "kind": "string", "flag": "", "default": null, "required": false, "sample": "saved.tfplan", "style": "value", "scope": "positional", "description": "planFile", "choices": [] } ], "description": "Apply changes; use a saved plan or autoApprove=true.", "program": "", "environment": {}, "example": {} }, { "name": "destroy", "args": [ "destroy", "-input=false", "-no-color" ], "fields": [ { "key": "autoApprove", "kind": "boolean", "flag": "-auto-approve", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "autoApprove", "choices": [] }, { "key": "var", "kind": "strings", "flag": "-var", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "var", "choices": [] }, { "key": "varFile", "kind": "strings", "flag": "-var-file", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "varFile", "choices": [] }, { "key": "target", "kind": "strings", "flag": "-target", "default": null, "required": false, "sample": [ "example=value" ], "style": "value", "scope": "option", "description": "target", "choices": [] } ], "description": "Destroy managed infrastructure; autoApprove=true is required for unattended runs.", "program": "", "environment": {}, "example": {} }, { "name": "output", "args": [ "output", "-no-color" ], "fields": [ { "key": "json", "kind": "boolean", "flag": "-json", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "json", "choices": [] }, { "key": "raw", "kind": "boolean", "flag": "-raw", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "raw", "choices": [] }, { "key": "name", "kind": "string", "flag": "", "default": null, "required": false, "sample": "endpoint", "style": "value", "scope": "positional", "description": "name", "choices": [] } ], "description": "Read state output values.", "program": "", "environment": {}, "example": {} } ] }, { "name": "terragrunt", "path": "infrastructure/terragrunt", "program": "terragrunt", "title": "Terragrunt", "docs": "https://docs.terragrunt.com/reference/cli/commands/run/", "notes": "Requires Terragrunt with the redesigned run command and an installed OpenTofu or Terraform engine. Commands target one unit; use run.arguments for --all and other advanced operations.", "environment": { "TF_IN_AUTOMATION": "1" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "hcl_fmt", "args": [ "hcl", "fmt" ], "fields": [], "description": "hcl fmt", "program": "", "environment": {}, "example": {} }, { "name": "init", "args": [ "run", "--non-interactive", "--", "init", "-input=false", "-no-color" ], "fields": [], "description": "Run init in the current Terragrunt unit.", "program": "", "environment": {}, "example": {} }, { "name": "plan", "args": [ "run", "--non-interactive", "--", "plan", "-input=false", "-no-color" ], "fields": [], "description": "Run plan in the current Terragrunt unit.", "program": "", "environment": {}, "example": {} }, { "name": "apply", "args": [ "run", "--non-interactive", "--", "apply", "-input=false", "-no-color" ], "fields": [ { "key": "autoApprove", "kind": "boolean", "flag": "-auto-approve", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "autoApprove", "choices": [] } ], "description": "Run apply in the current Terragrunt unit.", "program": "", "environment": {}, "example": {} }, { "name": "destroy", "args": [ "run", "--non-interactive", "--", "destroy", "-input=false", "-no-color" ], "fields": [ { "key": "autoApprove", "kind": "boolean", "flag": "-auto-approve", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "autoApprove", "choices": [] } ], "description": "Run destroy in the current Terragrunt unit.", "program": "", "environment": {}, "example": {} }, { "name": "validate", "args": [ "run", "--non-interactive", "--", "validate", "-no-color" ], "fields": [], "description": "validate", "program": "", "environment": {}, "example": {} } ] }, { "name": "trivy", "path": "security/trivy", "program": "trivy", "title": "Trivy", "docs": "https://trivy.dev/latest/docs/references/configuration/cli/", "notes": "Install Trivy. Named scans enforce --exit-code=1 and default to HIGH,CRITICAL severity. Native database/check downloads occur unless disabled with the corresponding flags; offlineScan alone does not supply a vulnerability database. Image scans use native registry credentials. Choose scanners explicitly to control filesystem/image coverage. Findings, including secret scan output, may contain sensitive data.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "filesystem", "args": [ "fs", "--exit-code=1" ], "fields": [ { "key": "severity", "kind": "string", "flag": "--severity", "default": "HIGH,CRITICAL", "required": false, "sample": "HIGH,CRITICAL", "style": "value", "scope": "option", "description": "severity", "choices": [] }, { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "scanners", "kind": "string", "flag": "--scanners", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "scanners", "choices": [] }, { "key": "ignoreUnfixed", "kind": "boolean", "flag": "--ignore-unfixed", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "ignoreUnfixed", "choices": [] }, { "key": "skipDbUpdate", "kind": "boolean", "flag": "--skip-db-update", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "skipDbUpdate", "choices": [] }, { "key": "offlineScan", "kind": "boolean", "flag": "--offline-scan", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "offlineScan", "choices": [] }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "directory", "choices": [] } ], "description": "Scan a filesystem and fail when selected findings are present.", "program": "", "environment": {}, "example": {} }, { "name": "image", "args": [ "image", "--exit-code=1" ], "fields": [ { "key": "severity", "kind": "string", "flag": "--severity", "default": "HIGH,CRITICAL", "required": false, "sample": "HIGH,CRITICAL", "style": "value", "scope": "option", "description": "severity", "choices": [] }, { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "scanners", "kind": "string", "flag": "--scanners", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "scanners", "choices": [] }, { "key": "ignoreUnfixed", "kind": "boolean", "flag": "--ignore-unfixed", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "ignoreUnfixed", "choices": [] }, { "key": "skipDbUpdate", "kind": "boolean", "flag": "--skip-db-update", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "skipDbUpdate", "choices": [] }, { "key": "offlineScan", "kind": "boolean", "flag": "--offline-scan", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "offlineScan", "choices": [] }, { "key": "image", "kind": "string", "flag": "", "default": null, "required": true, "sample": "example/app:v1", "style": "value", "scope": "positional", "description": "image", "choices": [] } ], "description": "Scan a container image and fail at the selected severity.", "program": "", "environment": {}, "example": {} }, { "name": "config", "args": [ "config", "--exit-code=1" ], "fields": [ { "key": "severity", "kind": "string", "flag": "--severity", "default": "HIGH,CRITICAL", "required": false, "sample": "HIGH,CRITICAL", "style": "value", "scope": "option", "description": "severity", "choices": [] }, { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "skipCheckUpdate", "kind": "boolean", "flag": "--skip-check-update", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "skipCheckUpdate", "choices": [] }, { "key": "directory", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "directory", "choices": [] } ], "description": "Scan infrastructure configuration for misconfigurations.", "program": "", "environment": {}, "example": {} }, { "name": "sbom", "args": [ "sbom", "--exit-code=1" ], "fields": [ { "key": "severity", "kind": "string", "flag": "--severity", "default": "HIGH,CRITICAL", "required": false, "sample": "HIGH,CRITICAL", "style": "value", "scope": "option", "description": "severity", "choices": [] }, { "key": "format", "kind": "string", "flag": "--format", "default": "json", "required": false, "sample": "json", "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "output", "kind": "string", "flag": "--output", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "output", "choices": [] }, { "key": "skipDbUpdate", "kind": "boolean", "flag": "--skip-db-update", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "skipDbUpdate", "choices": [] }, { "key": "file", "kind": "string", "flag": "", "default": null, "required": true, "sample": "sbom.json", "style": "value", "scope": "positional", "description": "file", "choices": [] } ], "description": "Scan an existing SBOM for vulnerabilities.", "program": "", "environment": {}, "example": {} } ] }, { "name": "trufflehog", "path": "security/trufflehog", "program": "trufflehog", "title": "TruffleHog", "docs": "https://github.com/trufflesecurity/trufflehog", "notes": "Install a current TruffleHog 3 CLI supporting --fail-on-scan-errors. Named scans disable updates and credential verification, and fail on results or scan errors. Remote Git repositories still require network access and authentication. TruffleHog JSON output may contain raw detected values; protect task logs and reports. The generic run export permits other native modes, including verification if explicitly requested in arguments.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "filesystem", "args": [ "filesystem", "--no-verification", "--no-update", "--fail", "--fail-on-scan-errors", "--json" ], "fields": [ { "key": "includeDetectors", "kind": "string", "flag": "--include-detectors", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "includeDetectors", "choices": [] }, { "key": "excludeDetectors", "kind": "string", "flag": "--exclude-detectors", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "excludeDetectors", "choices": [] }, { "key": "concurrency", "kind": "integer", "flag": "--concurrency", "default": null, "required": false, "sample": 2, "style": "value", "scope": "option", "description": "concurrency", "choices": [] }, { "key": "paths", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "." ], "style": "value", "scope": "positional", "description": "paths", "choices": [] } ], "description": "Scan local files for secrets without verifying credentials against remote services.", "program": "", "environment": {}, "example": {} }, { "name": "git", "args": [ "git", "--no-verification", "--no-update", "--fail", "--fail-on-scan-errors", "--json" ], "fields": [ { "key": "sinceCommit", "kind": "string", "flag": "--since-commit", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "sinceCommit", "choices": [] }, { "key": "branch", "kind": "string", "flag": "--branch", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "branch", "choices": [] }, { "key": "maxDepth", "kind": "integer", "flag": "--max-depth", "default": null, "required": false, "sample": 100, "style": "value", "scope": "option", "description": "maxDepth", "choices": [] }, { "key": "repository", "kind": "string", "flag": "", "default": null, "required": true, "sample": "file://.", "style": "value", "scope": "positional", "description": "repository", "choices": [] } ], "description": "Scan a Git repository without credential verification.", "program": "", "environment": {}, "example": {} } ] }, { "name": "ubicloud", "path": "cloud/ubicloud", "program": "ubi", "title": "Ubicloud", "docs": "https://github.com/ubicloud/cli", "notes": "Ubicloud is a thin client: commands and help are defined by its API server. Set UBI_TOKEN; optionally set UBI_URL. All ubi invocations, including help, contact that server. Use run.arguments for the command advertised by your server; unsupported endpoints are not guessed.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "help", "args": [], "fields": [], "description": "Request the server-provided CLI help using ubi with no arguments.", "program": "", "environment": {}, "example": {} } ] }, { "name": "uv", "path": "package-management/uv", "program": "uv", "title": "uv", "docs": "https://docs.astral.sh/uv/reference/cli/", "notes": "Install uv before invocation. Python interpreters may be downloaded by uv when needed. sync and run_command can create or update .venv; locked and frozen control lockfile handling. publish reads UV_PUBLISH_TOKEN or UV_PUBLISH_USERNAME/UV_PUBLISH_PASSWORD, or native index authentication. Use a configured index for private registries; keep credentials out of JSON.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "sync", "args": [ "sync" ], "fields": [ { "key": "locked", "kind": "boolean", "flag": "--locked", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "locked", "choices": [] }, { "key": "frozen", "kind": "boolean", "flag": "--frozen", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "frozen", "choices": [] }, { "key": "noDev", "kind": "boolean", "flag": "--no-dev", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noDev", "choices": [] }, { "key": "group", "kind": "string", "flag": "--group", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "group", "choices": [] }, { "key": "python", "kind": "string", "flag": "--python", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "python", "choices": [] } ], "description": "Create or synchronize a project environment from pyproject.toml and uv.lock.", "program": "", "environment": {}, "example": {} }, { "name": "lock", "args": [ "lock" ], "fields": [ { "key": "check", "kind": "boolean", "flag": "--check", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "check", "choices": [] }, { "key": "upgrade", "kind": "boolean", "flag": "--upgrade", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "upgrade", "choices": [] }, { "key": "python", "kind": "string", "flag": "--python", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "python", "choices": [] } ], "description": "Resolve project dependencies or check the existing lockfile.", "program": "", "environment": {}, "example": {} }, { "name": "run_command", "args": [ "run" ], "fields": [ { "key": "locked", "kind": "boolean", "flag": "--locked", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "locked", "choices": [] }, { "key": "frozen", "kind": "boolean", "flag": "--frozen", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "frozen", "choices": [] }, { "key": "noSync", "kind": "boolean", "flag": "--no-sync", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "noSync", "choices": [] }, { "key": "python", "kind": "string", "flag": "--python", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "python", "choices": [] }, { "key": "command", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "python", "-V" ], "style": "value", "scope": "raw", "description": "command", "choices": [] } ], "description": "Run a command in the project environment.", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "outDir", "kind": "string", "flag": "--out-dir", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "outDir", "choices": [] }, { "key": "wheel", "kind": "boolean", "flag": "--wheel", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "wheel", "choices": [] }, { "key": "sdist", "kind": "boolean", "flag": "--sdist", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "sdist", "choices": [] }, { "key": "python", "kind": "string", "flag": "--python", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "python", "choices": [] } ], "description": "Build Python source and wheel distributions.", "program": "", "environment": {}, "example": {} }, { "name": "publish", "args": [ "publish" ], "fields": [ { "key": "publishUrl", "kind": "string", "flag": "--publish-url", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "publishUrl", "choices": [] }, { "key": "index", "kind": "string", "flag": "--index", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "index", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [], "required": false, "sample": [ "dist/example-1.0.0-py3-none-any.whl" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Publish distributions to a configured Python package index.", "program": "", "environment": {}, "example": {} }, { "name": "venv", "args": [ "venv" ], "fields": [ { "key": "python", "kind": "string", "flag": "--python", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "python", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": ".venv", "required": false, "sample": ".venv", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Create a Python virtual environment.", "program": "", "environment": {}, "example": {} }, { "name": "add", "args": [ "add" ], "fields": [ { "key": "dev", "kind": "boolean", "flag": "--dev", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "dev", "choices": [] }, { "key": "group", "kind": "string", "flag": "--group", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "group", "choices": [] }, { "key": "packages", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "httpx==0.28.1" ], "style": "value", "scope": "positional", "description": "packages", "choices": [] } ], "description": "Add project dependencies and update the lockfile.", "program": "", "environment": {}, "example": {} }, { "name": "pip_install", "args": [ "pip", "install" ], "fields": [ { "key": "python", "kind": "string", "flag": "--python", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "python", "choices": [] }, { "key": "system", "kind": "boolean", "flag": "--system", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "system", "choices": [] }, { "key": "packages", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "httpx==0.28.1" ], "style": "value", "scope": "positional", "description": "packages", "choices": [] } ], "description": "Install packages into a selected virtual environment or interpreter.", "program": "", "environment": {}, "example": {} } ] }, { "name": "vault", "path": "secrets/vault", "program": "vault", "title": "Vault", "docs": "https://developer.hashicorp.com/vault/docs/commands", "notes": "Install vault and configure VAULT_ADDR and VAULT_TOKEN or the native token helper. kv_metadata requires KV v2; mount selects the engine mount. kv_put takes a dataFile path, not plaintext JSON values. KV operations execute immediately under the existing token policy. Secret paths and task output are persisted, so protect the run directory. Use run for agent configurations or other native operations, and avoid commands that print tokens or plaintext secrets.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "status", "args": [ "status", "-format=json" ], "fields": [], "description": "Check server initialization and seal status; sealed servers return a failing exit code.", "program": "", "environment": {}, "example": {} }, { "name": "kv_list", "args": [ "kv", "list", "-format=json" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "List key names without reading secret data.", "program": "", "environment": {}, "example": {} }, { "name": "kv_metadata", "args": [ "kv", "metadata", "get", "-format=json" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Read KV v2 version metadata without reading secret values.", "program": "", "environment": {}, "example": {} }, { "name": "kv_put", "args": [ "kv", "put", "-format=json" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] }, { "key": "dataFile", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secrets.json", "style": "prefix:@", "scope": "positional", "description": "JSON file on the host; its contents are read by the CLI, never by the module.", "choices": [] } ], "description": "Write secret data from a JSON file, reporting metadata only.", "program": "", "environment": {}, "example": {} }, { "name": "kv_delete", "args": [ "kv", "delete" ], "fields": [ { "key": "mount", "kind": "string", "flag": "-mount", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "mount", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": null, "required": true, "sample": "secret/example", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "Delete the latest version of a KV secret.", "program": "", "environment": {}, "example": {} } ] }, { "name": "vercel", "path": "deployment/vercel", "program": "vercel", "title": "Vercel", "docs": "https://vercel.com/docs/cli", "notes": "Install Vercel CLI and authenticate with vercel login before invoking. VERCEL_TOKEN alone is not forwarded as --token. For CI, provide an executable wrapper that reads the token from its environment and invokes vercel with --token; use executable to select it. VERCEL_ORG_ID and VERCEL_PROJECT_ID can select a project.", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "deploy", "args": [ "deploy", "--yes" ], "fields": [ { "key": "prod", "kind": "boolean", "flag": "--prod", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "prod", "choices": [] }, { "key": "prebuilt", "kind": "boolean", "flag": "--prebuilt", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "prebuilt", "choices": [] }, { "key": "path", "kind": "string", "flag": "", "default": ".", "required": false, "sample": ".", "style": "value", "scope": "positional", "description": "path", "choices": [] } ], "description": "deploy", "program": "", "environment": {}, "example": {} }, { "name": "build", "args": [ "build" ], "fields": [ { "key": "prod", "kind": "boolean", "flag": "--prod", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "prod", "choices": [] } ], "description": "build", "program": "", "environment": {}, "example": {} }, { "name": "pull", "args": [ "pull", "--yes" ], "fields": [ { "key": "environment", "kind": "string", "flag": "--environment", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "environment", "choices": [ "production", "preview", "development" ] } ], "description": "pull", "program": "", "environment": {}, "example": {} } ] }, { "name": "wrangler", "path": "deployment/wrangler", "program": "wrangler", "title": "Cloudflare Wrangler", "docs": "https://developers.cloudflare.com/workers/wrangler/commands/", "notes": "Install setup-wrangler or provide Wrangler on PATH. Supply CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID through the CI environment. dry_run bundles locally; deploy and pages_deploy publish immediately. versions_upload creates a version without switching traffic. Pages deployment requires an existing Pages project. Use Wrangler 3.73+ for the stable Workers versions commands.", "environment": { "CI": "true", "WRANGLER_SEND_METRICS": "false" }, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "style": "value", "scope": "raw", "choices": [], "description": "Literal Wrangler argument tokens." } ], "description": "Run a Wrangler operation with literal arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Report the installed Wrangler version.", "program": "", "environment": {}, "example": {} }, { "name": "deploy", "args": [ "deploy" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Path to the Wrangler configuration file." }, { "key": "env", "kind": "string", "flag": "--env", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Named Wrangler environment to deploy." }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Cloudflare Worker name overriding project configuration." }, { "key": "outdir", "kind": "string", "flag": "--outdir", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory for generated Worker bundle files." }, { "key": "minify", "kind": "boolean", "flag": "--minify", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Minify the generated Worker bundle." }, { "key": "script", "kind": "string", "flag": "", "default": null, "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Optional Worker entrypoint; omitted values use project configuration." } ], "description": "Deploy a Worker using existing Cloudflare credentials.", "program": "", "environment": {}, "example": {} }, { "name": "dry_run", "args": [ "deploy", "--dry-run" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Path to the Wrangler configuration file." }, { "key": "env", "kind": "string", "flag": "--env", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Named Wrangler environment to deploy." }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Cloudflare Worker name overriding project configuration." }, { "key": "outdir", "kind": "string", "flag": "--outdir", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory for generated Worker bundle files." }, { "key": "minify", "kind": "boolean", "flag": "--minify", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Minify the generated Worker bundle." }, { "key": "script", "kind": "string", "flag": "", "default": null, "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Optional Worker entrypoint; omitted values use project configuration." } ], "description": "Bundle a Worker locally without deploying it.", "program": "", "environment": {}, "example": {} }, { "name": "versions_upload", "args": [ "versions", "upload" ], "fields": [ { "key": "config", "kind": "string", "flag": "--config", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Path to the Wrangler configuration file." }, { "key": "env", "kind": "string", "flag": "--env", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Named Wrangler environment to deploy." }, { "key": "name", "kind": "string", "flag": "--name", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Cloudflare Worker name overriding project configuration." }, { "key": "outdir", "kind": "string", "flag": "--outdir", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Directory for generated Worker bundle files." }, { "key": "minify", "kind": "boolean", "flag": "--minify", "default": null, "required": false, "style": "switch", "scope": "option", "choices": [], "description": "Minify the generated Worker bundle." }, { "key": "script", "kind": "string", "flag": "", "default": null, "required": false, "style": "value", "scope": "positional", "choices": [], "description": "Optional Worker entrypoint; omitted values use project configuration." } ], "description": "Upload a Worker version without deploying it to traffic.", "program": "", "environment": {}, "example": {} }, { "name": "pages_deploy", "args": [ "pages", "deploy" ], "fields": [ { "key": "projectName", "kind": "string", "flag": "--project-name", "default": null, "required": true, "style": "value", "scope": "option", "choices": [], "description": "Existing Cloudflare Pages project name." }, { "key": "branch", "kind": "string", "flag": "--branch", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Git branch name identifying the production or preview deployment." }, { "key": "commitHash", "kind": "string", "flag": "--commit-hash", "default": null, "required": false, "style": "value", "scope": "option", "choices": [], "description": "Git commit SHA attached to the deployment." }, { "key": "directory", "kind": "string", "flag": "", "default": null, "required": true, "style": "value", "scope": "positional", "choices": [], "description": "Directory containing the built static site to upload." } ], "description": "Deploy a built site to an existing Cloudflare Pages project.", "program": "", "environment": {}, "example": {} }, { "name": "pages_projects", "args": [ "pages", "project", "list", "--json" ], "fields": [], "description": "List Cloudflare Pages projects available to the authenticated account.", "program": "", "environment": {}, "example": {} } ] }, { "name": "yamllint", "path": "linting/yamllint", "program": "yamllint", "title": "Yamllint", "docs": "https://yamllint.readthedocs.io/en/stable/quickstart.html", "notes": "", "environment": {}, "commands": [ { "name": "run", "args": [], "fields": [ { "key": "arguments", "kind": "strings", "flag": "", "default": null, "required": true, "sample": [ "--help" ], "style": "value", "scope": "raw", "description": "arguments", "choices": [] } ], "description": "Execute arbitrary literal CLI arguments.", "program": "", "environment": {}, "example": {} }, { "name": "version", "args": [ "--version" ], "fields": [], "description": "Print the CLI version.", "program": "", "environment": {}, "example": {} }, { "name": "lint", "args": [], "fields": [ { "key": "configFile", "kind": "string", "flag": "--config-file", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configFile", "choices": [] }, { "key": "configData", "kind": "string", "flag": "--config-data", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "configData", "choices": [] }, { "key": "format", "kind": "string", "flag": "--format", "default": null, "required": false, "sample": null, "style": "value", "scope": "option", "description": "format", "choices": [] }, { "key": "strict", "kind": "boolean", "flag": "--strict", "default": null, "required": false, "sample": true, "style": "switch", "scope": "option", "description": "strict", "choices": [] }, { "key": "files", "kind": "strings", "flag": "", "default": [ "." ], "required": false, "sample": [ "example.txt" ], "style": "value", "scope": "positional", "description": "files", "choices": [] } ], "description": "Lint YAML files and directories.", "program": "", "environment": {}, "example": {} } ] } ]