b8e ci

Scan + report + exit non-zero on gating findings (CI gate)

Arguments

Argument	Kind	Default	Description
dir	optional	.	directory to scan (defaults to the current directory)

Options

Option	Takes	Default	Description
--base <ref>	value		diff against this git ref; gate only files changed since it
--baseline <path>	value		path to a committed baseline of accepted findings
--enforce <level>	value	block	enforcement level that fails the build
--fail-on <severity>	value		minimum finding severity that fails the run
--max-violations <n>	value		fail when the non-baselined finding count exceeds this
-f, --format <format>	value	pretty	output format
--no-upload	negation		do not send findings to the dashboard for this run
--summary	boolean		emit a rollup digest to $GITHUB_STEP_SUMMARY + a sticky PR comment

b8e ci --help

Identical to what the terminal prints — both are rendered from the same commander definition.

Usage: b8e ci [options] [command] [dir]

Scan + report + exit non-zero on gating findings (CI gate)

Arguments:
  dir                    directory to scan (defaults to the current directory)
                         (default: ".")

Options:
  --base <ref>           diff against this git ref; gate only files changed
                         since it
  --baseline <path>      path to a committed baseline of accepted findings
  --enforce <level>      enforcement level that fails the build (choices:
                         "block", "warn", default: "block")
  --fail-on <severity>   minimum finding severity that fails the run
  --max-violations <n>   fail when the non-baselined finding count exceeds this
  -f, --format <format>  output format (choices: "pretty", "json", "sarif",
                         "github", default: "pretty")
  --no-upload            do not send findings to the dashboard for this run
  --summary              emit a rollup digest to $GITHUB_STEP_SUMMARY + a sticky
                         PR comment
  -h, --help             display help for command

Commands:
  close                  retire a closed PR's ephemeral findings (no scan)

EXAMPLES
  # Gate a build on new findings
  $ b8e ci --enforce block

  # Gate only what the pull request changed
  $ b8e ci --base origin/main

  # Gate without sending findings (still needs a credential)
  $ b8e ci --no-upload

INHERITED FLAGS
  --org <id|slug|name>   organization context [$BINCLUSIVE_ORG_ID]
  -y, --yes              skip all prompts and accept defaults
  --non-interactive      never prompt; fail instead of asking
  --progress <mode>      how progress is reported
  -q, --quiet            suppress progress output (same as --progress quiet)
  --no-color             disable color
  -v, --verbose          verbose diagnostics
  -V, --version          print the CLI version
  -h, --help             show help for command