@securitychecks/cli 0.2.2 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # @securitychecks/cli
2
2
 
3
- Enforce backend invariants in your codebase. Find authorization gaps, race conditions, and transaction bugs before they ship.
3
+ Verify security invariants in your backend code. Auth enforcement, injection safety, access control, webhook idempotency, and more with evidence.
4
4
 
5
5
  ## Quick Start
6
6
 
@@ -38,7 +38,7 @@ SecurityChecks enforces backend invariants that cause production incidents:
38
38
 
39
39
  ### `scheck run`
40
40
 
41
- Scan your codebase for security invariants.
41
+ Verify your codebase against security invariants.
42
42
 
43
43
  ```bash
44
44
  # Basic scan
@@ -56,6 +56,12 @@ scheck run --json
56
56
  # Generate SARIF report (for GitHub Code Scanning)
57
57
  scheck run --sarif report.sarif
58
58
 
59
+ # Show posture report (invariant-by-invariant pass/fail)
60
+ scheck run --posture
61
+
62
+ # Export JSON proof artifact
63
+ scheck run --posture-report posture.json
64
+
59
65
  # Only check changed files
60
66
  scheck run --changed
61
67
 
@@ -72,6 +78,8 @@ scheck run --watch
72
78
  - `--skip <invariants...>` - Skip specific checks
73
79
  - `--json` - Output as JSON
74
80
  - `--sarif <path>` - Write SARIF report
81
+ - `--posture` - Show invariant-by-invariant posture view
82
+ - `--posture-report <path>` - Write JSON proof artifact
75
83
  - `-v, --verbose` - Verbose output
76
84
  - `-w, --watch` - Watch for changes
77
85