Complete CLI Command Suite

Run real-time preflight diagnostics across 6 categories and calculate a weighted 0-100 repository health score.

Auto-repair repository misconfigurations: creates missing CI workflows, adds .dockerignore, updates .gitignore with .env protections, and injects non-root Docker USER.

Interactive diagnostic inspection with guided step-by-step auto-remediation for developers.

Intelligently detect project stack and scaffold tailor-made, production-ready CI/CD pipelines.

Validate local GitHub Actions workflow syntax, trigger events, and YAML integrity before pushing to remote.

Perform deep-dive DevSecOps audit, secret leak detection, and workflow least-privilege permission checks.

Discover environment variables and API tokens used across source code and generate required GitHub Secrets manifest.

Live dependency vulnerability and CVE inspection against global vulnerability advisories.

Audit Dockerfiles for non-root users, multi-stage build caching, healthcheck probes, and .dockerignore parity.

Validate environment variable parity between active `.env` files and public `.env.example` templates.

Generate real Software Bill of Materials (SBOM) in CycloneDX v1.5 JSON standard with package purl identifiers.

Evaluate repository against enterprise compliance rules (POL001: lockfiles, POL003: non-root, POL005: score >= 80).

Detect configuration drift between local repository workflows and central upstream reusable recipes.

Browse modular, reusable enterprise workflow recipes available in @waiyat/devops.

Scaffold a specific modular recipe into your project (e.g. `security/dependency-scan`, `docker/build-push`).

Clean local build outputs (.next, dist, coverage), stale dependency caches, and reclaim disk space.

Automate semantic versioning bumps, conventional changelog generation, and git release tags.