Back · Page 62 · p. 62

Command reference

The card you keep open. Not a man page — the verbs you will actually type.

Acquisition

Command

securegit acquire <url> <path>
securegit acquire <url> .

Scanning

Command

securegit scan <path>
securegit scan --staged
securegit scan . --fail-on high
securegit scan . --include-git
securegit scan . --format sarif --report-output f.sarif
securegit scan . --format gitlab --report-output gl.json
securegit scan . --write-baseline "<reason>" --expires <RFC3339>
securegit scan . --baseline .securegit/baseline.json

Everyday

Command

securegit commit -m "<msg>"
securegit commit --ai
securegit undo
securegit snapshot create
securegit absorb
securegit stack status
securegit workflow run <name> --dry-run

Secrets, chain, supply

Command

securegit run --with-secret NAME=<handle> -- <cmd>
securegit ui
securegit server search <query>
securegit attest <sha>
securegit sbom emit --with-osv-scan
securegit audit verify
securegit compliance report --format markdown --output compliance.md
securegit hf pull <model-id>

Environment

Command

SECUREGIT_FAIL_ON=high
SECUREGIT_SKIP_PATHS="<glob>:<glob>"
SECUREGIT_FALLBACK_POLICY=unverified-op
SECUREGIT_GIT_BINARY=/path/to/git
SECUREGIT_MCP_WORK_DIR=/path/to/repo
SECUREGIT_CA_BUNDLE=/etc/ssl/corp-bundle.pem