otty / apps
All apps/Poutine

Poutine

poutine

Supply-chain vulnerability scanner for build pipelines.

Runs as poutine|macOS, Linux, Windows|github.com
Open form in Otty otty.toml

Command form

ai-draft · 2 tasks · 10 fields

Analyze a local repository, a remote repository or an organization for CI/CD supply-chain issues. Rule skipping beyond --skip and config-file options are left out.

Opens the form; the finished command lands at your prompt, unrun
Run in Otty
otty gui poutine

poutine analyze_local

Analyze a local repository
Analyze a local repositoryExample values, fixed in this page — nothing here reaches a terminal
Basic
Repository path*
directory
Output format
3 choicesenum
Fail on violation
--fail-on-violation
TasksEach one presets the form for one job
Scan current directory
pathformatfail_on_violation
ParametersOnly these flags are editable in the form
Repository path
path · positional 0
Output format
enum
--formatprettyjsonsarif
Config file
path
--config
Skip rules
string · repeatable
--skip
Fail on violation
boolean
--fail-on-violation

poutine analyze_repo

Analyze a remote repository
Analyze a remote repositoryExample values, fixed in this page — nothing here reaches a terminal
Basic
Repository*
string
Access token
string
Output format
3 choicesenum
TasksEach one presets the form for one job
Scan a GitHub repository
repotokenformat
ParametersOnly these flags are editable in the form
Repository
org/repo
string · positional 0
Access token
Prefer the GH_TOKEN environment variable over typing a token here.
string
--token
SCM platform
enum
--scmgithubgitlab
SCM base URL
url
--scm-base-url
Output format
enum
--formatprettyjsonsarif
SourcesEvery flag above is checked against these
readme
poutine analyze_local . poutine analyze_local . --config my-config.yml --format Output format (default: pretty, json, sarif) --config Path to the configuration file (default: .poutine.yml in the working directory, or .github/poutine.yml) --skip Add rules to the skip list for the current run (can be specified multiple tim…
manual2026-10-27

github.com

readme
poutine analyze_repo org/repo --token "$GH_TOKEN" poutine analyze_org my-org/project --token "$GL_TOKEN" --scm gitlab --scm-base-url https://gitlab.example.com --token SCM access token (required for the commands analyze_repo, analyze_org) (env: GH_TOKEN) --format Output format (default: pretty, json, sarif) --scm SCM p…
manual2026-10-27

github.com

Before it fills your prompt, Otty checks the installed poutine against its version. A form that does not match your version is not offered.