Complete CLI Command Suite
All 17 official commands, options, and syntax examples provided by `@waiyat/devops` v3.0.0.
Always append @latest when invoking via npx (e.g. npx @waiyat/devops@latest sbom) to ensure npx executes the newest v3.0+ CLI binary rather than a cached local version.
devops check
coreRun real-time preflight diagnostics across 6 categories and calculate a weighted 0-100 repository health score.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --json | boolean | — | Output raw machine-readable JSON (ideal for CI pipelines, PR bots, and dashboards). |
| --verbose, -v | boolean | — | Print full details including passed checks and actionable suggestions. |
| --fix | boolean | — | Automatically apply safe fixes during diagnostics check. |
| --pr | boolean | — | CI Pull Request mode (formats GitHub markdown table summary). |
Example Usage
npx @waiyat/devops@latest check --verbosedevops fix
coreAuto-repair repository misconfigurations: creates missing CI workflows, adds .dockerignore, updates .gitignore with .env protections, and injects non-root Docker USER.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --dry-run | boolean | — | Preview changes and diff without modifying any files on disk. |
| --template, -t | string | — | Force a specific workflow template: 'nextjs' | 'node' | 'docker' | 'python' | 'go' | 'rust' | 'full'. |
| --issue | string | — | Limit auto-repair to one category: 'quality' | 'ci' | 'security' | 'docker' | 'environment' | 'observability'. |
Example Usage
npx @waiyat/devops@latest fixdevops doctor
coreInteractive diagnostic inspection with guided step-by-step auto-remediation for developers.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --verbose, -v | boolean | — | Display verbose diagnostic probe outputs. |
| --yes | boolean | — | Non-interactive doctor run that applies all safe fixes without prompting. |
Example Usage
npx @waiyat/devops@latest doctordevops init
workflowsIntelligently detect project stack and scaffold tailor-made, production-ready CI/CD pipelines.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --template, -t | string | — | Force template (nextjs | node | docker | python | go | rust | full | pro). |
| --output, -o | string | .github/workflows/ci.yml | Target file path for generated workflow. |
| --template pro | string | — | Scaffold the S4 professional (enterprise) pipeline. |
| --force | boolean | — | Overwrite an existing workflow file during scaffolding. |
Example Usage
npx @waiyat/devops@latest init --template nextjsdevops validate
workflowsValidate local GitHub Actions workflow syntax, trigger events, and YAML integrity before pushing to remote.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --verbose, -v | boolean | — | Print full workflow validation tree. |
Example Usage
npx @waiyat/devops@latest validatedevops security
securityPerform deep-dive DevSecOps audit, secret leak detection, and permission checks.
Example Usage
npx @waiyat/devops@latest securitydevops audit
securityFail-on-vulnerabilities dependency audit across package ecosystems (npm, pnpm, yarn, bun).
Example Usage
npx @waiyat/devops@latest auditdevops secrets
securityScan the repository for committed secrets and credential leaks.
Example Usage
npx @waiyat/devops@latest secretsdevops policy
governanceEvaluate repository policy compliance (branch protection, licensing, hygiene).
Example Usage
npx @waiyat/devops@latest policydevops docker check
containersAudit Dockerfiles for non-root users, multi-stage builds, and healthchecks.
Example Usage
npx @waiyat/devops@latest docker checkdevops docker init
containersScaffold a hardened, production-grade Dockerfile.
Example Usage
npx @waiyat/devops@latest docker initdevops sbom
governanceGenerate a CycloneDX v1.5 software bill of materials for the project.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --json | boolean | — | Output raw JSON for programmatic consumption. |
Example Usage
npx @waiyat/devops@latest sbom --jsondevops env
coreValidate environment variable parity between `.env` and `.env.example`.
Example Usage
npx @waiyat/devops@latest envdevops list
workflowsBrowse modular, reusable enterprise workflow recipes available in @waiyat/devops.
Example Usage
npx @waiyat/devops@latest listdevops add
workflowsScaffold a specific modular recipe into your project (e.g. `security/dependency-scan`, `docker/build-push`).
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --force | boolean | — | Overwrite existing workflow without prompt. |
Example Usage
npx @waiyat/devops@latest add security/dependency-scandevops clean
maintenanceClean local build outputs (.next, dist, coverage), stale dependency caches, and reclaim disk space.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --dry-run | boolean | — | Preview files to be deleted without deleting. |
Example Usage
npx @waiyat/devops@latest cleandevops release
governanceAutomate semantic versioning bumps, conventional changelog generation, and git release tags.
Options & Flags
| Option Flag | Type | Default | Description |
|---|---|---|---|
| --dry-run | boolean | — | Preview version bump without committing. |
Example Usage
npx @waiyat/devops@latest release