id = "lacework-cli"
name = "Lacework CLI"
homepage = "https://github.com/lacework/go-sdk"
description = "The Lacework Command Line Interface is a tool that helps you manage the Lacework cloud security platform."
executables = ["lacework"]

[dotfiles]

# The upstream CLI README documents `lacework configure` creating
# $HOME/.lacework.toml, with account, api_key and api_secret fields in named
# profiles: https://pkg.go.dev/github.com/lacework/go-sdk/cli#section-readme
paths = ["~/.lacework.toml"]
exclude = []
secret = []

[[dotfiles.secret_paths]]
file = "~/.lacework.toml"
match = { key_path = ["*.api_key", "*.api_secret"] }

[commands]
format = 1
label = "Lacework CLI"
description = "List container vulnerability assessments. Other lacework commands are left out."
quality = "ai-draft"
parser = { end_of_options = "--", interleave = "permute", long_equals = true, short_attached = true, short_bundles = false }

[[commands.subcommand]]
path = ["vulnerability", "container", "list-assessments"]
label = "List container assessments"
description = "Lists assessments for the last 24 hours unless a time range is given."

[[commands.subcommand.source]]
id = "docs"
kind = "manual"
url = "https://raw.githubusercontent.com/lacework/go-sdk/main/cli/docs/lacework_vulnerability_container_list-assessments.md"
revision = "main 2026-10-27"
evidence = """
lacework vulnerability container list-assessments [flags]
      --active               only show vulnerabilities of packages actively running in your environment
      --csv                  output vulnerability assessment in CSV format
      --end string           end of the time range (default "now")
      --fixable              only show fixable vulnerabilities
      --range string         natural time range for query
      --registry strings     filter assessments for specific registries
  -r, --repository strings   filter assessments for specific repositories
      --start string         start of the time range (default "-24h")
      --json                switch commands output from human-readable to json format
  -p, --profile string      switch between profiles configured at ~/.lacework.toml
"""

[[commands.subcommand.field]]
id = "fixable"
label = "Only fixable"
type = "boolean"
option = ["--fixable"]
sources = ["docs"]

[[commands.subcommand.field]]
id = "active"
label = "Only actively running packages"
type = "boolean"
option = ["--active"]
sources = ["docs"]

[[commands.subcommand.field]]
id = "range"
label = "Time range"
type = "string"
option = ["--range"]
suggestions = [{ value = "yesterday", label = "Yesterday" }]
sources = ["docs"]

[[commands.subcommand.field]]
id = "start"
label = "Start"
type = "string"
option = ["--start"]
sources = ["docs"]

[[commands.subcommand.field]]
id = "end"
label = "End"
type = "string"
option = ["--end"]
sources = ["docs"]

[[commands.subcommand.field]]
id = "registry"
label = "Registry"
type = "string"
option = ["--registry"]
multiple = true
sources = ["docs"]

[[commands.subcommand.field]]
id = "repository"
label = "Repository"
type = "string"
option = ["--repository", "-r"]
multiple = true
sources = ["docs"]

[[commands.subcommand.field]]
id = "csv"
label = "CSV output"
type = "boolean"
option = ["--csv"]
sources = ["docs"]

[[commands.subcommand.field]]
id = "json"
label = "JSON output"
type = "boolean"
option = ["--json"]
sources = ["docs"]

[[commands.subcommand.field]]
id = "profile"
label = "Profile"
type = "string"
option = ["--profile", "-p"]
sources = ["docs"]

[[commands.subcommand.task]]
id = "fixable"
label = "Fixable, running packages"
set = { fixable = [true], active = [true] }
fields = ["fixable", "active"]

[[commands.subcommand.group]]
id = "basic"
label = "Basic"
fields = ["fixable", "active", "range", "registry", "repository", "profile"]

[[commands.subcommand.group]]
id = "advanced"
label = "Advanced"
fields = ["start", "end", "csv", "json"]