Skip to content

b8e ci

Scan + report + exit non-zero on gating findings (CI gate)

ArgumentKindDefaultDescription
diroptional.directory to scan (defaults to the current directory)
OptionTakesDefaultDescription
--base <ref>valuediff against this git ref; gate only files changed since it
--baseline <path>valuepath to a committed baseline of accepted findings
--fail-on <level>valueblockenforcement level that fails the build: block | warn
--max-violations <n>valuefail when the non-baselined finding count exceeds this
--format <format>valueprettyoutput format: pretty | json | sarif | github
--summarybooleanemit a rollup digest to $GITHUB_STEP_SUMMARY + a sticky PR comment

Identical to what the terminal prints — both are rendered from the same commander definition.

Usage: b8e ci [options] [command] [dir]
Scan + report + exit non-zero on gating findings (CI gate)
Arguments:
dir directory to scan (defaults to the current directory)
(default: ".")
Options:
--base <ref> diff against this git ref; gate only files changed since
it
--baseline <path> path to a committed baseline of accepted findings
--fail-on <level> enforcement level that fails the build: block | warn
(default: "block")
--max-violations <n> fail when the non-baselined finding count exceeds this
--format <format> output format: pretty | json | sarif | github (default:
"pretty")
--summary emit a rollup digest to $GITHUB_STEP_SUMMARY + a sticky
PR comment
-h, --help display help for command
Commands:
close Reconcile a closed PR — retire its ephemeral findings
(no scan)