ReferenceStablev3.7.0
Other CLI commands
Compact lookup for the remaining stable command families and their options.
Compact lookup for stable command families that do not need a dedicated long-form page.Other stable commands
| Command | Purpose | Options |
|---|
fendix benchmark | Run the internal accuracy + performance benchmark suite | — |
fendix benchmark baseline | Run the suite and (with --save) store the result as the committed baseline | --save, --target |
fendix benchmark compare | Run the suite and fail if any metric regressed >10% vs the committed baseline | — |
fendix benchmark run | Run the benchmark suite and print scored results | --output, --target |
fendix completion | Generate the autocompletion script for the specified shell | — |
fendix completion bash | Generate the autocompletion script for bash | --no-descriptions |
fendix completion fish | Generate the autocompletion script for fish | --no-descriptions |
fendix completion powershell | Generate the autocompletion script for powershell | --no-descriptions |
fendix completion zsh | Generate the autocompletion script for zsh | --no-descriptions |
fendix db | Manage the offline CVE-database snapshot (Sprint 09) | — |
fendix db list | Print metadata about the local offline snapshot | --path |
fendix db update | Ingest an OSV advisory export into a fendix offline snapshot | --output, --source |
fendix db verify | Print the SHA-256 of the local snapshot for integrity verification | --path |
fendix demo | Spin up OWASP Juice Shop locally and run a sample scan | --image, --open, --output, --port |
fendix engine | Inspect or refresh the Python whitebox engine | — |
fendix engine info | Show where the Python engine is loaded from | — |
fendix engine sync | Pin the Python taint engine location for future invocations | --dir |
fendix help | Help about any command | — |
fendix hook | Manage the git pre-commit hook that runs a fast diff scan | — |
fendix hook install | Install the fendix pre-commit hook into the current git repo | --fail-on, --force |
fendix hook status | Report whether the fendix pre-commit hook is installed | — |
fendix hook uninstall | Remove the fendix-managed pre-commit hook | — |
fendix ignore | Inspect and maintain .fendix-ignore | — |
fendix ignore list | Show every rule in .fendix-ignore with expiry status | --file |
fendix ignore prune | Remove expired rules and rewrite the file | --dry-run, --file |
fendix ignore validate | Parse .fendix-ignore and report schema / date errors | --file |
fendix jira | Sync findings to Jira as Bug issues (idempotent via fendix-id label) | --findings, --strict, --timeout |
fendix metrics | Inspect local product metrics (opt-in via FENDIX_METRICS) | — |
fendix metrics clear | Delete the local metrics event log | --yes |
fendix metrics export | Dump all recorded events | --json |
fendix metrics show | Print a summary of the last 30 scans | — |
fendix notify | Post Slack / Teams alerts for findings above a severity floor | --findings, --timeout |
fendix plugins | Manage out-of-tree plugins | — |
fendix plugins install | Clone a plugin repo into ~/.fendix/plugins/ | --name |
fendix plugins list | List every plugin the scanner would discover | --allow-repo-local-plugins |
fendix version | Print version information | — |