Commands Reference
calvigil provides scan commands, supply-chain analysis, Enterprise upload, and configuration management.
Overview
| Command | Purpose |
|---|---|
scan | Dependency scanning + optional AI code analysis |
scan-image | Container image vulnerability scanning |
scan-binary | Binary/SCA scanning (Go, JAR, Python wheel) |
scan-iac | Infrastructure-as-Code misconfiguration scanning |
scan-license | License compliance analysis |
supply-chain | Compare JSON reports for dependency trust drift and supply-chain guard signals |
push | Upload an existing JSON report to Calvigil Enterprise |
config set | Persist a configuration key |
config get | View a configuration key (secrets masked) |
version | Print version and Go runtime info |
Global Flags
These flags are available on all scan commands:
| Flag | Description |
|---|---|
--verbose, -v | Show detailed progress and debug output |
--format | Output format: table, json, sarif, cyclonedx, spdx, openvex, html, pdf |
--output, -o | Write output to a file (default: stdout) |
--severity | Filter by minimum severity: low, medium, high, critical |
--no-cache | Disable vulnerability cache |
--cache-ttl | Cache time-to-live (default: 24h) |