@rtidx/cli

rtidx

Scan a repository for supply-chain and secrets risk from the terminal — the CLI companion to RTIdx.

Install

npm install -g @rtidx/cli

Requires Node.js >= 20.

Usage

rtidx login                                    # sign in via your browser
rtidx logout                                   # sign out on this machine
rtidx check <repo-url> --context <context>     # scan a repository

<repo-url> must be a public GitHub or Bitbucket repository URL.

--context is required and must be one of: recruiter, client, unsolicited, dependency, self.

check options

Flag	Default	Description
--context <value>	(required)	Why you're scanning this repo
--json	false	Print machine-readable JSON instead of a human-readable report
--fail-on <band>	high_risk	Minimum risk band that causes a non-zero exit code (low_risk, suspicious, high_risk, malicious)
--wait <minutes>	10	How long to wait for the scan to finish before timing out

Exit codes

Code	Meaning
0	Scan completed, risk band below --fail-on
1	Scan completed, risk band at or above --fail-on
2	Usage error (bad arguments, not signed in)
3	Authentication error — run rtidx login
4	Rate limited
5	Network error, or timed out waiting for the scan

License

MIT