@gawlo/cli
v0.1.0
Published
Gawlo CLI — AI-native application security testing
Maintainers
Readme
@gawlo/cli
Command-line client for Gawlo: start scans, list endpoints and findings, and fetch remediations from your terminal or a CI pipeline.
Gawlo is in invite-only beta. You need an account on gawlo.dev and an API key from your organisation's settings.
Install
npm install -g @gawlo/cliNode.js 20 or later. The package installs two names for the same program: gawlo and aegis.
Use
gawlo login --key <your-api-key>
gawlo scan https://your-app.example.com --fail-on high
gawlo findings <scan-id>
gawlo config showRun gawlo --help or gawlo <command> --help for every option.
Configuration
| Variable | Purpose | Default |
| --------------- | ----------------------------------------- | ----------------------- |
| AEGIS_API_KEY | API key; overrides the one login stored | none |
| AEGIS_API_URL | API base URL | https://gawlo.dev/api |
Exit codes
| Code | Meaning |
| ---- | ---------------------------------------------------------------------- |
| 0 | Finished, nothing at or above the --fail-on threshold |
| 1 | Finished with a finding at or above the --fail-on threshold |
| 2 | Error: bad input, rejected API key, or the scan did not finish cleanly |
