CLI quickstart | Cefense docs

The four commands

1
Sign in
Opens your browser and waits for the callback.
```
cf auth login
```
2
Connect a repository
Lists what your provider granted access to, connects what you choose, and follows the first scan.
```
cf repo connect
```
3
Read what it found
Prints the findings grouped by severity, worst first.
```
cf reproduced
```
4
Teach your agent to do all of it
Writes the Cefense skill into every coding agent configured in this repository.
```
cf skill install
```

What you should see

cf repo connect

$cf repo connect acme/apiConnected  acme/apiScanning   acme/api  queued  running  completed        31 findings  4 critical  9 high  14 watch  4 infocf reproduced --repo acme/api

Close one finding

cf reproduced prints a short id against each finding. Every command below takes one of those ids, and each step is its own command on purpose: nothing reaches your repository until you publish. See Reading the output.

One command at a timebash

cf reproduced --severity critical,high
cf reproduced show <finding-id>
cf fix generate <finding-id> --wait
cf proof run <finding-id> --wait
cf fix publish <finding-id>
cf fix merge <finding-id>
cf scan --wait

Next steps

RepositoriesConnecting, listing, linking a directory, disconnecting.Reading findingsFilters, the detail view, and machine readable output.Applying fixesGenerate, read the diff, publish, merge.

Have a correction or need help?

Email the docs team