Interactive UI: scan-center
Browse scan results interactively in your terminal.
- Connection — Select your organization/connection
- Repository — Pick a repository
- Scan — Select a scan (latest or historical)
- Result type — Choose a finding category:
- Security Issues (SAST), Anti-Patterns, Docstring Issues, Complex Functions
- SCA, SBOM, Secrets, IaC, Dead Code
- Dismissed Alerts, Dismissed Secrets
Agent / Script Interface: scans
The scans subcommands expose the same data as structured output, designed for use in CI pipelines, AI agents, and scripts.
scans orgs
List authenticated organizations.scans repos
List repositories for an organization.| Option | Description |
|---|---|
--org <org> | Organization name (auto-picked when only one is authenticated) |
scans history
Show scan history for a repository.| Option | Description |
|---|---|
--repo <repo> | (required) Repository in owner/repo format |
--branch <name> | Filter by branch name |
--since <iso> | Show scans since ISO date (e.g. 2024-01-01) |
--limit <n> | Max results (default: 20) |
scans get
Show scan metadata and a severity/category summary. Does not include individual findings.| Option | Description |
|---|---|
--repo <repo> | (required) Repository in owner/repo format |
--scan <sha> | Specific commit SHA to use |
--branch <name> | Resolve latest scan on this branch |
--types <list> | Comma-separated scan types (default: all) |
--quiet | Suppress progress output |
sast, anti_patterns, docstring, complex_functions, sca, sbom, secrets, iac, dead_code, all
Examples:
scans results
Fetch full scan findings for a repository.| Option | Description |
|---|---|
--repo <repo> | (required) Repository in owner/repo format |
--scan <sha> | Specific commit SHA to use |
--branch <name> | Resolve latest scan on this branch |
--types <list> | Comma-separated types: sast, sca, secrets, iac, dead_code, sbom, anti_patterns, docstring, complex_functions, all (default: all) |
--severity <list> | Filter by severity (e.g. critical,high) |
--path <glob> | Filter by file path glob |
--check <regex> | Filter by check ID or name (regex) |
--include-dismissed | Include dismissed findings (excluded by default) |
--format <fmt> | Output format: json, sarif, csv, md, table (default: json) |
--output <path> | Write output to file instead of stdout |
--fields <list> | Project findings to a subset of fields (comma-separated) |
--limit <n> | Max findings per page (default: 100) |
--offset <n> | Pagination offset (default: 0) |
--fail-fast | Exit 3 on first category fetch failure |
--no-color | Disable ANSI color (auto-disabled when not a TTY) |
--quiet | Suppress progress output on stderr |
| Code | Meaning |
|---|---|
0 | Success |
1 | General error |
3 | Category fetch failure (with --fail-fast) |
scans dismissed
List dismissed alerts for a repository.| Option | Description |
|---|---|
--repo <repo> | (required) Repository in owner/repo format |
--analysis-type <type> | Analysis type: security or secrets (default: security) |