CLI Reference

Commands

sandtrace scan

Run a one-time scan of your environment.

sandtrace scan [OPTIONS] [PATH]

Options:

• --config <PATH> — Path to config file
• --format <FORMAT> — Output format: text (default), json, sarif
• --severity <LEVEL> — Minimum severity: info, warning, critical
• --module <MODULE> — Run specific module only
• --limit <N> — Maximum findings to report (default: 100)
• --quiet — Suppress non-finding output

sandtrace watch

Start continuous file system monitoring.

sandtrace watch [OPTIONS]

Options:

• --config <PATH> — Path to config file
• --debounce <MS> — Debounce interval in milliseconds

sandtrace version

Print version information.

sandtrace version