[[command]]
name = "snyk"
description = "Security platform CLI that scans dependencies, code, containers, and infrastructure-as-code for known vulnerabilities. The test subcommands analyze manifests/lockfiles and report findings without modifying the project. snyk test sends dependency graphs to Snyk's API for vulnerability matching, so it requires network access and transmits project metadata. Very actively maintained with weekly releases."
url = "https://docs.snyk.io/snyk-cli"
bare_flags = ["--help", "--version", "-h"]

[[command.sub]]
name = "test"
level = "SafeRead"
tolerate_unknown_short = true
standalone = [
    "--all-projects", "--all-sub-projects", "--detection-depth",
    "--dev", "--fail-on", "--help", "--json", "--print-deps",
    "--prune-repeated-subdependencies", "--sarif",
    "--scan-all-unmanaged", "--severity-threshold",
    "--strict-out-of-sync",
    "-h",
]
valued = [
    "--command", "--configuration-attributes", "--configuration-matching",
    "--exclude", "--file", "--org", "--package-manager",
    "--packages-folder", "--project-name", "--reachable",
    "--reachable-timeout", "--severity-threshold",
    "--sub-project", "--target-reference",
]

[[command.sub]]
name = "code"
[[command.sub.sub]]
name = "test"
level = "SafeRead"
tolerate_unknown_short = true
standalone = ["--help", "--json", "--sarif", "--severity-threshold", "-h"]
valued = ["--org"]

[[command.sub]]
name = "iac"
[[command.sub.sub]]
name = "test"
level = "SafeRead"
tolerate_unknown_short = true
standalone = ["--help", "--json", "--sarif", "--scan", "--severity-threshold", "-h"]
valued = ["--detection-depth", "--org", "--rules", "--target-name"]

[[command.sub]]
name = "container"
[[command.sub.sub]]
name = "test"
level = "SafeRead"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "--json", "--severity-threshold", "-h"]
valued = ["--exclude-base-image-vulns", "--file", "--org", "--platform"]

[[command.sub]]
name = "version"
standalone = ["--help", "-h"]
