CLI Finder

3 registry tools

Security CLI Tools for AI Agents

Scan code, dependencies, images, and secrets into reviewable structured findings.

securitysastvulnerabilitysecretscan

All Security CLI Tools

Describe the exact task, then narrow the registry by agent, maximum risk, output format, and evidence. Every result keeps readiness, risk, and checked date visible.

Filter results

3 matching tools

Need CLI, MCP, or API guidance?
Trivy
Scan repositories, filesystems, images, and infrastructure configuration into JSON or SARIF reports.
R0
Agent readiness
x
Evidence: docs-verifiedStructured output
Default risk
R0–R1
Evidence
2026-07-10
View tool
Gitleaks
Find hard-coded secrets in repositories and changesets with JSON, SARIF, or CSV evidence.
R0
Agent readiness
x
Evidence: docs-verifiedStructured output
Default risk
R0–R1
Evidence
2026-07-10
View tool
Semgrep
Scan source code with structured findings before separately reviewing any autofix or rule change.
R0
Agent readiness
x
Evidence: docs-verifiedStructured output
Default risk
R0–R2
Evidence
2026-07-10
View tool

What to Compare in This CLI Category

Machine output
Prefer JSON, YAML, CSV, or stable field controls. Do not make an agent depend on terminal formatting that can change between versions.
Authentication boundary
Confirm the credential account, project, and environment and grant only the permissions required for the task.
Command risk
Separate read-only inspection from commands that change remote state and keep human approval around every R2 or R3 operation.

Start from a concrete task

Review GitHub pull requestsAudit Kubernetes read-onlyQuery PostgreSQLDebug an HTTP API