Commands

The Ingrain CLI is a single binary with a handful of subcommands. Run ingrain --help at any time to see the full list.

Command	Purpose
config	Print the path to the Ingrain CLI conf.toml.
context	Search your organization’s recorded security rules.
install	Install the Ingrain CLI binary, PATH entry, and config file.
record	Sync a security assessment — its design analysis, then its verification.
uninstall	Remove the installed Ingrain CLI binary and PATH entry.
upgrade	Upgrade the Ingrain CLI binary to the latest published release.
validate	Check a security assessment file offline, with no credentials.

Global options

Flag	Description
--help, -h	Show the help message for any command.
--version	Print the Ingrain CLI version and exit.