Skip to content
FendixDocumentationDocs

.fendix.yaml · SEC-001 · SARIF

Current release v3.7.0
ReferenceStablev3.7.0

Other CLI commands

Compact lookup for the remaining stable command families and their options.

Compact lookup for stable command families that do not need a dedicated long-form page.

Other stable commands

CommandPurposeOptions
fendix benchmarkRun the internal accuracy + performance benchmark suite—
fendix benchmark baselineRun the suite and (with --save) store the result as the committed baseline--save, --target
fendix benchmark compareRun the suite and fail if any metric regressed >10% vs the committed baseline—
fendix benchmark runRun the benchmark suite and print scored results--output, --target
fendix completionGenerate the autocompletion script for the specified shell—
fendix completion bashGenerate the autocompletion script for bash--no-descriptions
fendix completion fishGenerate the autocompletion script for fish--no-descriptions
fendix completion powershellGenerate the autocompletion script for powershell--no-descriptions
fendix completion zshGenerate the autocompletion script for zsh--no-descriptions
fendix dbManage the offline CVE-database snapshot (Sprint 09)—
fendix db listPrint metadata about the local offline snapshot--path
fendix db updateIngest an OSV advisory export into a fendix offline snapshot--output, --source
fendix db verifyPrint the SHA-256 of the local snapshot for integrity verification--path
fendix demoSpin up OWASP Juice Shop locally and run a sample scan--image, --open, --output, --port
fendix engineInspect or refresh the Python whitebox engine—
fendix engine infoShow where the Python engine is loaded from—
fendix engine syncPin the Python taint engine location for future invocations--dir
fendix helpHelp about any command—
fendix hookManage the git pre-commit hook that runs a fast diff scan—
fendix hook installInstall the fendix pre-commit hook into the current git repo--fail-on, --force
fendix hook statusReport whether the fendix pre-commit hook is installed—
fendix hook uninstallRemove the fendix-managed pre-commit hook—
fendix ignoreInspect and maintain .fendix-ignore—
fendix ignore listShow every rule in .fendix-ignore with expiry status--file
fendix ignore pruneRemove expired rules and rewrite the file--dry-run, --file
fendix ignore validateParse .fendix-ignore and report schema / date errors--file
fendix jiraSync findings to Jira as Bug issues (idempotent via fendix-id label)--findings, --strict, --timeout
fendix metricsInspect local product metrics (opt-in via FENDIX_METRICS)—
fendix metrics clearDelete the local metrics event log--yes
fendix metrics exportDump all recorded events--json
fendix metrics showPrint a summary of the last 30 scans—
fendix notifyPost Slack / Teams alerts for findings above a severity floor--findings, --timeout
fendix pluginsManage out-of-tree plugins—
fendix plugins installClone a plugin repo into ~/.fendix/plugins/--name
fendix plugins listList every plugin the scanner would discover--allow-repo-local-plugins
fendix versionPrint version information—